diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..3390c9e54
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    cooldown:
+      default-days: 1
+      include:
+        - "*"
+      exclude:
+        - "@conduction/*"
diff --git a/.github/workflows/app-downloads.yml b/.github/workflows/app-downloads.yml
deleted file mode 100644
index 63672312e..000000000
--- a/.github/workflows/app-downloads.yml
+++ /dev/null
@@ -1,40 +0,0 @@
-name: App Downloads
-
-# Refreshes data/app-downloads.json with GitHub release-asset download counts
-# and Nextcloud app store metadata for every ConductionNL app.
-# Cron is UTC; 07:00 UTC = 09:00 Amsterdam (CEST) / 08:00 (CET).
-
-on:
-  schedule:
-    - cron: '0 7 * * 1-5'
-  workflow_dispatch:
-
-permissions:
-  contents: write
-
-jobs:
-  collect:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.11'
-
-      - name: Collect download stats
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: python .github/scripts/app_downloads.py
-
-      - name: Commit if changed
-        run: |
-          git config user.name  "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git add data/app-downloads.json
-          if git diff --cached --quiet; then
-            echo "No changes."
-          else
-            git commit -m "chore: update app download stats"
-            git push
-          fi
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index 126555915..81cf271c6 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -5,6 +5,15 @@ on:
     branches: [development, documentation]
   pull_request:
     branches: [development, documentation]
+  # Nightly rebuild so app-downloads.json (regenerated by the npm
+  # prebuild step) reflects fresh GitHub release-asset counts. 07:00
+  # UTC = 09:00 Amsterdam (CEST) / 08:00 (CET). Replaces the old
+  # app-downloads.yml that committed the JSON to development; the
+  # PR-required ruleset blocked the bot push. Build-time fetch
+  # sidesteps the bot-push problem entirely.
+  schedule:
+    - cron: '0 7 * * *'
+  workflow_dispatch:
 
 jobs:
   deploy:
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..3942d3489
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,5 @@
+# Supply-chain hardening: reject any npm package published less than
+# 24h ago. Compromised first-party-Conduction packages are excluded via
+# Dependabot cooldown (.github/dependabot.yml); for fresh @conduction/*
+# releases, override per-install with `npm install --min-release-age=0`.
+min-release-age=1
diff --git a/README.md b/README.md
index c5aa7ca98..fc0bac8cf 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,9 @@
 
 The Docusaurus 3 site for [conduction.nl](https://conduction.nl). Built on `@conduction/docusaurus-preset` for brand defaults; site-specific config lives in [docusaurus.config.js](docusaurus.config.js).
 
-It also serves the `connext.conduction.nl` and `commonground.conduction.nl` vanity entry points (Cloudflare 301-redirects to `/connext` and `/commonground` paths on this site, with locale awareness via `Accept-Language`).
+It also serves the `connext.conduction.nl` and `commonground.conduction.nl` vanity entry points (a Cloudflare worker — configured in the dashboard, not in this repo — 301-redirects to the `/connext` and `/commonground` paths on this site, with locale awareness via `Accept-Language`).
+
+> **Vanity-domain redirect target:** the worker must redirect to `https://www.conduction.nl/connext/` — with the `www.` and the **trailing slash**. The site is built with `url: https://www.conduction.nl` (matching `static/CNAME`) and `trailingSlash: true`. Targeting the bare apex (`conduction.nl`) or the slash-less path (`/connext`) stacks extra GitHub Pages 301s on every request and, if the worker route also matches `www`, can produce a redirect loop. If you see a redirect loop on `connext.conduction.nl`, also check Cloudflare's SSL/TLS mode is **Full** (not "Flexible") — Flexible + GitHub Pages "Enforce HTTPS" is the classic infinite HTTP↔HTTPS loop.
 
 ## Local development
 
diff --git a/academy/2026-05-07-nextcloud-lokaal-draaien/index.mdx b/academy/2026-05-07-nextcloud-lokaal-draaien/index.mdx
index a910022f4..07395d416 100644
--- a/academy/2026-05-07-nextcloud-lokaal-draaien/index.mdx
+++ b/academy/2026-05-07-nextcloud-lokaal-draaien/index.mdx
@@ -17,7 +17,7 @@ Voor elke andere tutorial in deze academy heb je een werkende Nextcloud nodig. D
 
 <Outcomes title="Wat je leert">
   <Outcome>Een werkende Nextcloud op <code>http://localhost:8080</code> opzetten met Docker.</Outcome>
-  <Outcome>Postgres voor data, Redis voor cache en Nextcloud voor het werk in één compose-bestand combineren.</Outcome>
+  <Outcome>Postgres voor data, Redis voor cache, Nextcloud voor het werk en <code>notify_push</code> voor realtime updates in één compose-bestand combineren.</Outcome>
   <Outcome>Een admin-account aanmaken waar je naar believen Conduction-apps op installeert.</Outcome>
   <Outcome>Met één commando de hele stack weer opruimen.</Outcome>
 </Outcomes>
@@ -90,12 +90,25 @@ services:
       REDIS_HOST: redis
       NEXTCLOUD_TRUSTED_DOMAINS: "localhost"
 
+  notify_push:
+    image: icewind1991/notify_push:latest
+    restart: unless-stopped
+    depends_on: [nextcloud, db, redis]
+    ports:
+      - "7867:7867"
+    volumes:
+      - nextcloud:/nextcloud:ro
+    environment:
+      NEXTCLOUD_URL: http://nextcloud
+      DATABASE_URL: postgres://nextcloud:nextcloud@db/nextcloud
+      REDIS_URL: redis://redis:6379
+
 volumes:
   db:
   nextcloud:
 ```
 
-Drie services, allemaal officiële images, geen custom build. De `./apps`-bind-mount is optioneel: handig als je een Conduction-app als zip naast de installatie wilt zetten in plaats van via de app store.
+Vier services, allemaal officiële images, geen custom build. De `./apps`-bind-mount is optioneel: handig als je een Conduction-app als zip naast de installatie wilt zetten in plaats van via de app store. `notify_push` is de WebSocket push-server die Conduction-apps gebruiken voor realtime updates — meer daarover in stap 5.
 
 ## Stap 2: Start de stack
 
@@ -133,6 +146,32 @@ Klik je avatar rechtsboven en kies **Apps**. De Conduction-apps staan onder **In
 
 Na elke install draait de schema-bootstrap automatisch. Voorbeelddata is binnen seconden zichtbaar.
 
+Installeer ook de `notify_push`-app (onder **Integration**). Die is de Nextcloud-zijde van de WebSocket push-server die je in stap 1 al hebt gestart — je hoeft hem alleen te enabelen, geen verdere config nodig.
+
+## Stap 5: Koppel `notify_push` aan de push-server
+
+`notify_push` heeft één eenmalige setup-stap zodat de Nextcloud-app weet waar de Rust-binary draait. Voer in de werkmap uit:
+
+```bash
+docker compose exec --user www-data nextcloud php occ config:system:set redis host --value redis
+docker compose exec --user www-data nextcloud php occ config:system:set redis port --value 6379 --type integer
+docker compose exec --user www-data nextcloud php occ config:system:set memcache.distributed --value '\OC\Memcache\Redis'
+docker compose exec --user www-data nextcloud php occ config:system:set trusted_proxies 0 --value 172.16.0.0/12
+docker compose exec --user www-data nextcloud php occ notify_push:setup http://notify_push:7867
+```
+
+De eerste drie regels vertellen Nextcloud dat Redis de gedeelde cache is — `notify_push` luistert daarop voor change-events. De vierde regel markeert het Docker-netwerk als trusted zodat de push-server bij Nextcloud terugmag bellen voor authenticatie. De laatste regel registreert de URL bij de Nextcloud-app.
+
+Verifieer dat alles werkt:
+
+```bash
+docker compose exec --user www-data nextcloud php occ notify_push:self-test
+```
+
+Je krijgt een lijstje vinkjes — `redis is configured`, `push server is receiving redis messages`, `push server can connect to the Nextcloud server`, et cetera. De waarschuwing over `unencrypted http` is voor lokaal werk normaal; in productie zit `notify_push` achter dezelfde reverse proxy als Nextcloud, dus dan is dat geen issue.
+
+Vanaf nu krijgen apps die op `notify_push` luisteren — zoals OpenRegister's live-update-integratie via `@conduction/nextcloud-vue` — direct doorduwingen op object-wijzigingen, zonder dat de browser hoeft te pollen.
+
 ## Wat je krijgt
 
 | Eigenschap | Waarde |
@@ -170,6 +209,10 @@ Na `down -v` is je laptop weer schoon. Twee minuten later kun je opnieuw beginne
 
 **App-store install werkt niet:** controleer of Nextcloud naar buiten kan. In een corporate netwerk soms blokkade op `apps.nextcloud.com`. Een proxy via `HTTP_PROXY`-env-variabelen lost dit op.
 
+**`notify_push` self-test faalt op `is not trusted as a reverse proxy`:** het Docker-netwerk-bereik in jouw setup wijkt af van `172.16.0.0/12`. Bekijk het bereik met `docker network inspect $(docker network ls --filter name=conduction-demo -q) --format '{{range .IPAM.Config}}{{.Subnet}}{{end}}'` en pas de `trusted_proxies`-regel uit stap 5 aan met die subnet.
+
+**`notify_push` blijft restarten na `docker compose up -d`:** kijk in de logs (`docker compose logs notify_push`) of je `× No redis server is configured` ziet. Dat betekent dat Nextcloud's `memcache.distributed`-config nog niet op Redis staat — voer de eerste drie `occ config:system:set`-commando's uit stap 5 uit, en herstart dan met `docker compose up -d notify_push`.
+
 ## Volgende stap
 
 Een werkende Nextcloud is de aanleiding voor de andere tutorials in deze serie:
diff --git a/academy/2026-05-10-deskdesk-tutorial-1-scaffold/index.mdx b/academy/2026-05-10-deskdesk-tutorial-1-scaffold/index.mdx
new file mode 100644
index 000000000..50889b464
--- /dev/null
+++ b/academy/2026-05-10-deskdesk-tutorial-1-scaffold/index.mdx
@@ -0,0 +1,216 @@
+---
+slug: deskdesk-tutorial-1-scaffold
+title: "Build a Nextcloud app on the Conduction stack — Part 1: Scaffold"
+contentType: tutorial
+authors: [conduction]
+date: 2026-05-10
+summary: Clone the Conduction app template, rename it to DeskDesk, build, enable, and see the canonical app chassis. The first of four parts that build a working desk-booking app on the full Conduction stack.
+tags: [App development, Nextcloud, OpenRegister, nextcloud-vue, Tutorial series]
+apps: [openregister]
+durationMinutes: 20
+series: deskdesk-tutorial
+partNumber: 1
+---
+
+import {
+  Outcomes,
+  Outcome,
+  Prerequisites,
+  PrerequisiteItem,
+  AtomZones,
+  NextSteps,
+  NextStep,
+  HexCard,
+} from '@conduction/docusaurus-preset/components';
+
+This is **Part 1 of a four-part tutorial** that builds **DeskDesk**, a flexible desk-booking app for an open-office environment, on the full Conduction Nextcloud stack. The end product: pick a desk on a floor, book a slot, see your booking in your Nextcloud Calendar, and surface zone-specific knowledge articles from xWiki right next to the booking. Every piece reuses what `@conduction/nextcloud-vue` and OpenRegister already give you for free.
+
+In Part 1 you scaffold the app, rename it, build it, and see the canonical app chassis on screen. No data, no integrations yet. We get the bones right first.
+
+{/* truncate */}
+
+<Outcomes title="What you'll have at the end of Part 1">
+  <Outcome>A working <strong>DeskDesk</strong> app installed in your local Nextcloud, navigable from the app shelf.</Outcome>
+  <Outcome>A clear mental model of the canonical Conduction app <strong>chassis</strong>: topbar, left navigation, main column, page header, sidebar.</Outcome>
+  <Outcome>Confidence with the <strong>nextcloud-app-template</strong> rename ritual: <code>id</code>, namespace, the few files you have to touch, the rest you can leave for later.</Outcome>
+  <Outcome>A clean foundation for Part 2, where the chassis starts holding real data.</Outcome>
+</Outcomes>
+
+## What we're building, across all four parts
+
+| Part | Title | Adds |
+|---|---|---|
+| 1 | Scaffold (you're here) | Empty app shell, chassis visible, navigable |
+| 2 | Schemas + manifest | Desk and booking schemas, full CRUD, dashboard |
+| 3 | Schema-driven integrations | Bookings appear in NC Calendar via the OpenRegister calendar provider |
+| 4 | External knowledge + ship | xWiki source via OpenConnector, sidebar tab, package, publish |
+
+Same shape, two repos:
+
+- **App source:** [`ConductionNL/deskdesk`](https://github.com/ConductionNL/deskdesk) — the actual Nextcloud app you're forking from the template.
+- **Tutorial source:** [`ConductionNL/conduction-website`](https://github.com/ConductionNL/conduction-website) — the post you're reading right now.
+
+<Prerequisites title="What you need">
+  <PrerequisiteItem>A running Nextcloud (28+) with admin access. If you don't have one, follow <a href="/academy/nextcloud-lokaal-draaien">Nextcloud lokaal draaien met Docker</a> first.</PrerequisiteItem>
+  <PrerequisiteItem><strong>OpenRegister</strong> installed and enabled in that Nextcloud (Apps → search "OpenRegister" → Download).</PrerequisiteItem>
+  <PrerequisiteItem>Node.js 20+ and PHP 8.1+ on your host, plus Composer and the GitHub CLI (<code>gh</code>) — the template ships with PHPCS, Psalm, PHPStan, and ESLint configs ready to go.</PrerequisiteItem>
+  <PrerequisiteItem>A GitHub account so you can fork the template into your own org (or <code>ConductionNL</code> if you have access).</PrerequisiteItem>
+</Prerequisites>
+
+## Step 1: Use the template
+
+[`ConductionNL/nextcloud-app-template`](https://github.com/ConductionNL/nextcloud-app-template) is a GitHub *repository template*. The "Use this template" button gives you a fresh repo with the full starter kit: Vue 2 + Pinia frontend, PHP backend, OpenRegister wiring, quality pipeline, OpenSpec scaffolding, GitHub Actions.
+
+```bash title="Pick a name. We're calling ours deskdesk."
+gh repo create ConductionNL/deskdesk \
+  --template ConductionNL/nextcloud-app-template \
+  --public \
+  --description "Flexible desk booking for open-office environments"
+```
+
+Then clone it next to your other Nextcloud apps. Most workspaces keep them in a single `apps-extra/` directory the dev container mounts.
+
+```bash
+cd /path/to/your/nextcloud/workspace/apps-extra
+git clone https://github.com/ConductionNL/deskdesk.git
+cd deskdesk
+```
+
+You now have a directory with the full template content under the new name. Nothing inside has been renamed yet — the directory is `deskdesk/`, but every file still says `app-template`, `AppTemplate`, `OCA\AppTemplate`. Step 2 fixes that.
+
+## Step 2: Rename the app
+
+Nextcloud requires three identifiers to line up:
+
+- The directory name (`deskdesk/`) ✅ already
+- The `<id>` in `appinfo/info.xml`
+- The PHP namespace (`OCA\AppTemplate` → `OCA\DeskDesk`)
+
+Plus a handful of supporting files reference the old id. The full list is small enough to do by hand, and doing it by hand is the right move. Project memory: **never use `sed` or scripted edits on code files** — use a real editor with project-aware refactoring, or just read each file once before you change it.
+
+### 2a. The boot-critical files
+
+These are the ones that prevent Nextcloud from booting the app at all. Edit each with `Find & replace all` in your editor — `AppTemplate` → `DeskDesk` and `app-template` → `deskdesk`:
+
+| File | Replace |
+|---|---|
+| `appinfo/info.xml` | `<id>`, `<name>`, `<namespace>`, `<navigation>`, `<settings>` paths |
+| `composer.json` | `name`, `description`, the `psr-4` autoload prefix |
+| `package.json` | `name` |
+| `webpack.config.js` | the `appId` constant |
+| `templates/index.php` and `templates/settings/admin.php` | `OCA\AppTemplate` → `OCA\DeskDesk`, the `data-*` element id |
+| `lib/AppInfo/Application.php` | namespace, `APP_ID` constant, docblock |
+| Every other PHP file in `lib/` | `namespace OCA\AppTemplate\…` → `namespace OCA\DeskDesk\…`, every `use OCA\AppTemplate\…` import, every docblock |
+| `appinfo/routes.php` | docblock only |
+| Every Vue file in `src/` | the `t('app-template', '…')` translation namespace becomes `t('deskdesk', '…')` |
+| `src/router/index.js` | `generateUrl('/apps/app-template')` → `generateUrl('/apps/deskdesk')` |
+| `src/store/store.js`, `src/store/modules/settings.js` | `'/apps/app-template/api/settings'` → `'/apps/deskdesk/api/settings'`, fallback register slug |
+| `src/settings.js` | `loadTranslations('app-template', …)` and the `#app-template-settings` mount selector |
+| `lib/Settings/app_template_register.json` | rename to `lib/Settings/deskdesk_register.json` (and the `app` field inside it) |
+
+### 2b. The "you can do later" files
+
+Tests (`tests/Unit/AppTemplateTest.php`, the integration Postman collection), `phpcs.xml` / `phpmd.xml` / `REUSE.toml` headers, and the `.github/` workflow inputs. They reference the template id in metadata only; the app boots fine without them touched. Fix them when you set up CI.
+
+### 2c. One Nextcloud-version compatibility nip
+
+The template's `lib/AppInfo/Application.php` registers a repair step at runtime:
+
+```php title="Original — fails on some Nextcloud builds"
+$context->registerRepairStep(InitializeSettings::class);
+```
+
+`registerRepairStep()` is missing from `IRegistrationContext` on a few Nextcloud builds (you'll see `Call to undefined method` in `nextcloud.log`). Move it to `appinfo/info.xml` instead — same effect, more portable:
+
+```xml title="appinfo/info.xml — append after the <settings> block"
+<repair-steps>
+    <install>
+        <step>OCA\DeskDesk\Repair\InitializeSettings</step>
+    </install>
+    <post-migration>
+        <step>OCA\DeskDesk\Repair\InitializeSettings</step>
+    </post-migration>
+</repair-steps>
+```
+
+Then drop the `registerRepairStep()` line and the `use OCA\DeskDesk\Repair\InitializeSettings;` import from `lib/AppInfo/Application.php`.
+
+## Step 3: Build and enable
+
+The template ships its build output uncommitted. So the first thing to do in a fresh clone is install dependencies and build the JS bundles, otherwise the app UI is just a blank `<div id="content">`.
+
+```bash
+composer install --no-dev
+composer dump-autoload
+npm install --legacy-peer-deps
+npm run build
+```
+
+Then make sure your Nextcloud container can see the directory. In a typical Docker setup the `apps-extra/` host directory is mounted at `/var/www/html/custom_apps/` in the container; if your compose file uses one bind mount per app, add a line for `deskdesk` and restart. Otherwise:
+
+```bash title="Quick path: copy + chown for a one-shot install"
+docker cp ./deskdesk nextcloud:/var/www/html/custom_apps/
+docker exec -u root nextcloud chown -R www-data:www-data /var/www/html/custom_apps/deskdesk
+```
+
+Now enable:
+
+```bash
+docker exec nextcloud php occ app:enable deskdesk
+```
+
+You should see:
+
+```
+deskdesk 0.1.0 enabled
+```
+
+Open `http://localhost:8080/apps/deskdesk/` and log in. You see a placeholder dashboard with sample KPI cards, two empty panels, three nav items (Dashboard / Items / Documentation) and a Settings entry pinned to the bottom of the rail. That's the chassis.
+
+## The chassis: the whole point of Part 1
+
+Every Conduction app — DeskDesk, OpenRegister, OpenCatalogi, Procest, MyDash, the dozen others — looks the same way on first sight. Same five structural pieces, same place, same behaviour. That recognisability is what `@conduction/nextcloud-vue` enforces: a user who learnt one app navigates the next one without docs.
+
+The chassis is **one shape, five atoms**. Each card below focuses on one atom: the focused zone is at full opacity with a KNVB-orange outline, the rest fades to 25% so you see *where* the atom sits.
+
+<AtomZones />
+
+In Part 2, you'll learn how `manifest.json` plus a JSON schema fills these atoms with real data. The placeholder `Items` nav entry, the empty dashboard, and the "article" schema you saw on screen will all become **desks**, **bookings**, and a real occupancy dashboard — without you laying out a single atom by hand.
+
+## Troubleshooting
+
+<HexCard title="App UI is a blank rectangle">
+  The <code>js/</code> build output is not committed. Run <code>npm run build</code> before you enable the app, or after every frontend change. The blank-rectangle symptom always means "the bundle is missing".
+</HexCard>
+
+<HexCard title="`Could not download app deskdesk` when running occ app:enable">
+  Nextcloud requires the directory name to exactly match the <code>&lt;id&gt;</code> in <code>appinfo/info.xml</code>. If you cloned the repo under a different name, either rename the directory or add a relative symlink: <code>ln -s your-clone-name ../deskdesk</code>.
+</HexCard>
+
+<HexCard title="`Call to undefined method ...registerRepairStep()` in nextcloud.log">
+  Step 2c covers this. The fix is to move the repair-step registration from <code>lib/AppInfo/Application.php</code> into <code>appinfo/info.xml</code>'s <code>&lt;repair-steps&gt;</code> block.
+</HexCard>
+
+<HexCard title="`Class not found` after the rename">
+  Run <code>composer dump-autoload</code> from the app directory. PHP's classmap caches the old <code>OCA\AppTemplate</code> map until you regenerate it.
+</HexCard>
+
+## What's next
+
+<NextSteps>
+  <NextStep
+    title="Part 2 — Schemas + manifest"
+    href="/academy/deskdesk-tutorial-2-schemas-manifest"
+    description="Define the desk, booking, and floor schemas in OpenRegister. Wire them into a manifest.json that CnAppRoot reads. Watch CnIndexPage / CnDetailPage / CnDashboardPage render full CRUD with no glue code."
+  />
+  <NextStep
+    title="The component reference"
+    href="https://nextcloud-vue.conduction.nl/docs/components/"
+    description="Browse every Cn* component the library ships. Live playgrounds, prop tables, slot reference."
+  />
+  <NextStep
+    title="App design principles"
+    href="https://nextcloud-vue.conduction.nl/docs/architecture/app-design-principles/"
+    description="Read the architecture story behind the chassis and the five atoms — the same visual you saw above, with the full design rationale."
+  />
+</NextSteps>
diff --git a/academy/2026-05-13-deskdesk-tutorial-2-schemas-manifest/index.mdx b/academy/2026-05-13-deskdesk-tutorial-2-schemas-manifest/index.mdx
new file mode 100644
index 000000000..fc54a3439
--- /dev/null
+++ b/academy/2026-05-13-deskdesk-tutorial-2-schemas-manifest/index.mdx
@@ -0,0 +1,303 @@
+---
+slug: deskdesk-tutorial-2-schemas-manifest
+title: "Build a Nextcloud app on the Conduction stack — Part 2: Schemas + manifest"
+contentType: tutorial
+authors: [conduction]
+date: 2026-05-13
+summary: Define the desk, booking, and floor schemas in OpenRegister, declare them in a manifest.json, and watch CnAppRoot replace ~200 lines of hand-rolled Vue with three lines of config.
+tags: [App development, OpenRegister, Schemas, Manifest, nextcloud-vue]
+apps: [openregister]
+durationMinutes: 25
+series: deskdesk-tutorial
+partNumber: 2
+---
+
+import {
+  Outcomes,
+  Outcome,
+  Prerequisites,
+  PrerequisiteItem,
+  NextSteps,
+  NextStep,
+  HexCard,
+} from '@conduction/docusaurus-preset/components';
+
+This is **Part 2 of the four-part DeskDesk tutorial**. Part 1 left you with an empty app shell — a chassis, no data. Part 2 fills the chassis: three schemas, a manifest, and the same five Cn* pages drive every list, every detail view, every dashboard with the schema as the single source of truth.
+
+The shape we keep saying "this saves you code" finally has numbers behind it: ~200 lines of hand-rolled Vue collapse to three.
+
+{/* truncate */}
+
+<Outcomes title="What you'll have at the end of Part 2">
+  <Outcome>Three OpenRegister schemas — <code>floor</code>, <code>desk</code>, <code>booking</code> — installed and seeded with realistic demo data on first boot.</Outcome>
+  <Outcome>A <code>src/manifest.json</code> that declares the navigation, the routes, and the configuration for every page. CnAppRoot reads it; CnPageRenderer dispatches.</Outcome>
+  <Outcome>An <code>App.vue</code> of ~10 lines and a <code>router/index.js</code> that generates routes from the manifest. <strong>navigation/MainMenu.vue is gone</strong>. So is <code>views/Dashboard.vue</code>, <code>views/items/*</code>, and the user-settings shells. The manifest renderer replaces them.</Outcome>
+  <Outcome>Index pages, detail pages, and CRUD dialogs that the schema generates — sortable, filterable, searchable — without you writing a column definition.</Outcome>
+</Outcomes>
+
+<Prerequisites title="Where you should be">
+  <PrerequisiteItem>Part 1 done: DeskDesk installed, the chassis renders at <code>http://localhost:8080/apps/deskdesk/</code>.</PrerequisiteItem>
+  <PrerequisiteItem>OpenRegister installed, enabled, and at version 0.2.10 or newer (the <code>importFromFilePath</code> ConfigurationService method is required).</PrerequisiteItem>
+  <PrerequisiteItem>The local clone of <a href="https://github.com/ConductionNL/deskdesk">ConductionNL/deskdesk</a> on your filesystem and a working <code>npm run build</code>.</PrerequisiteItem>
+</Prerequisites>
+
+## Step 1: Define the three schemas
+
+Open `lib/Settings/deskdesk_register.json` and replace the placeholder `article` schema with the real three. Each schema is a JSON Schema with a couple of OpenRegister extensions: `slug` for the URL identifier, `icon` for the MDI glyph the UI uses, and `x-openregister-relations` for typed cross-schema links.
+
+```json title="lib/Settings/deskdesk_register.json (excerpt)"
+"floor": {
+  "slug": "floor",
+  "title": "Floor",
+  "description": "A physical floor in a building.",
+  "type": "object",
+  "required": ["label"],
+  "properties": {
+    "label":     { "type": "string", "example": "Floor 3" },
+    "building":  { "type": "string", "example": "Amsterdam HQ" },
+    "planImage": { "type": "string", "format": "uri" }
+  }
+}
+```
+
+The `desk` schema adds the typed relation to floor:
+
+```json title="lib/Settings/deskdesk_register.json (excerpt)"
+"desk": {
+  "slug": "desk",
+  "title": "Desk",
+  "type": "object",
+  "required": ["label", "floor", "zone"],
+  "properties": {
+    "label": { "type": "string", "example": "3-East-12" },
+    "floor": {
+      "type": "string",
+      "x-openregister-relations": {
+        "schema": "floor",
+        "cardinality": "many-to-one"
+      }
+    },
+    "zone": {
+      "type": "string",
+      "enum": ["north", "south", "east", "west", "central"]
+    },
+    "equipment": {
+      "type": "array",
+      "items": { "type": "string", "enum": ["dual-monitor", "standing", "phonebooth-adjacent", "wired-network", "extra-power"] }
+    },
+    "capacity":      { "type": "integer", "minimum": 1, "default": 1 },
+    "accessibility": { "type": "boolean", "default": false },
+    "photo":         { "type": "string", "format": "uri" },
+    "notes":         { "type": "string" }
+  }
+}
+```
+
+Booking is the same shape — a relation, a couple of date-times, an enum status, and an optional RRULE for recurring bookings.
+
+The full file ships in [the deskdesk repo](https://github.com/ConductionNL/deskdesk/blob/main/lib/Settings/deskdesk_register.json), with five seed desks, two floors, and three bookings so the app is browsable on first install.
+
+## Step 2: Declare the register itself
+
+OpenRegister's import handler creates schemas eagerly, but it only creates a **register** when the JSON declares one explicitly. Add a `components.registers` block above your schemas:
+
+```json title="lib/Settings/deskdesk_register.json"
+"components": {
+  "registers": {
+    "deskdesk": {
+      "slug": "deskdesk",
+      "title": "DeskDesk",
+      "description": "Floors, desks, and bookings for the DeskDesk app.",
+      "version": "0.2.0",
+      "schemas": ["floor", "desk", "booking"]
+    }
+  },
+  "schemas": { /* ... */ },
+  "objects": { /* ... */ }
+}
+```
+
+The `schemas` array tells OpenRegister which of the schemas in the same file belong to this register. The `slug` becomes the register's stable identifier.
+
+## Step 3: Trigger the import
+
+Two ways. Either trigger it via the SettingsController (the app exposes `POST /api/settings/load`):
+
+```bash title="From your shell, via curl, with a logged-in cookie jar"
+curl -X POST -b cookies.txt \
+  -H "requesttoken: $REQUESTTOKEN" \
+  http://localhost:8080/index.php/apps/deskdesk/api/settings/load
+```
+
+Or — cleaner during local development — disable + re-enable the app, which fires the `<install>` repair step from `appinfo/info.xml`:
+
+```bash
+docker exec nextcloud php occ app:disable deskdesk
+docker exec nextcloud php occ app:enable deskdesk
+```
+
+Either way, you should see in the OpenRegister registers list:
+
+```
+slug: deskdesk    title: DeskDesk    application: deskdesk    schemas: floor, desk, booking
+```
+
+The matching path the SettingsService takes is **importFromFilePath** with a path resolved relative to `\OC::$SERVERROOT` (which is `/var/www/html` in a default install). The boot-time bug I hit during this tutorial — `Configuration file not found: html/custom_apps/deskdesk/...` — was a relative-path mistake; the fix lands in [the diff](https://github.com/ConductionNL/deskdesk/pull/2/files#diff-lib-Service-SettingsService.php).
+
+## Step 4: The manifest
+
+`src/manifest.json` is the single declarative description of the app shell. Three top-level keys: `dependencies`, `menu`, `pages`.
+
+```json title="src/manifest.json"
+{
+  "$schema": "https://raw.githubusercontent.com/ConductionNL/nextcloud-vue/main/src/schemas/app-manifest.schema.json",
+  "version": "1.0.0",
+  "id": "deskdesk",
+  "title": "DeskDesk",
+  "dependencies": ["openregister"],
+  "menu": [
+    {"id": "desks-index",    "label": "deskdesk.menu.desks",    "icon": "icon-category-organization", "route": "desks-index",    "order": 10},
+    {"id": "bookings-index", "label": "deskdesk.menu.bookings", "icon": "icon-calendar",              "route": "bookings-index", "order": 20},
+    {"id": "floors-index",   "label": "deskdesk.menu.floors",   "icon": "icon-category-monitoring",   "route": "floors-index",   "order": 30}
+  ],
+  "pages": [
+    {"id": "desks-index",  "route": "/",          "type": "index",  "title": "deskdesk.desks.indexTitle",
+     "config": {"register": "deskdesk", "schema": "desk", "columns": ["label","floor","zone","equipment","capacity","accessibility"], "filters": ["floor","zone","equipment","accessibility"], "defaultSort": {"key": "label", "order": "asc"}}},
+    {"id": "desks-detail", "route": "/desks/:id", "type": "detail", "title": "deskdesk.desks.detailTitle",
+     "config": {"register": "deskdesk", "schema": "desk"}}
+    /* bookings + floors pages follow the same pattern */
+  ]
+}
+```
+
+A few rules to note:
+
+- **`page.id` is the vue-router route name.** CnPageRenderer matches `$route.name === page.id` to pick the right page.
+- **`page.type` is closed.** `index | detail | dashboard | custom`. Use `custom` with a `component` registry entry for one-off pages.
+- **`page.config` is forwarded as props.** `register`, `schema`, `columns`, `filters`, `defaultSort` map to CnIndexPage props one-to-one.
+
+## Step 5: Replace App.vue and the router
+
+Now the satisfying part. Open `src/App.vue` — the 175-line shell from Part 1 — and replace it with this:
+
+```vue title="src/App.vue"
+<template>
+  <CnAppRoot :app-id="appId" :manifest="manifest" />
+</template>
+
+<script>
+import { CnAppRoot } from '@conduction/nextcloud-vue'
+import manifest from './manifest.json'
+
+export default {
+  name: 'App',
+  components: { CnAppRoot },
+  data: () => ({ appId: 'deskdesk', manifest }),
+}
+</script>
+```
+
+That's it. The `<NcContent>`, the dependency-check empty-state, the loading spinner, the menu, the sidebars, the user-settings dialog — CnAppRoot ships them all and gates them on the manifest's `dependencies` array.
+
+Then `src/router/index.js` becomes a manifest-to-route mapping:
+
+```js title="src/router/index.js"
+import Vue from 'vue'
+import Router from 'vue-router'
+import { generateUrl } from '@nextcloud/router'
+import { CnPageRenderer } from '@conduction/nextcloud-vue'
+import manifest from '../manifest.json'
+
+Vue.use(Router)
+
+const routes = manifest.pages.map((page) => ({
+  name: page.id,
+  path: page.route,
+  component: CnPageRenderer,
+}))
+
+routes.push({ path: '*', redirect: '/' })
+
+export default new Router({
+  mode: 'history',
+  base: generateUrl('/apps/deskdesk'),
+  routes,
+})
+```
+
+Every page in the manifest gets a route. Every route renders CnPageRenderer. CnPageRenderer reads the manifest, finds the matching page entry by route name, and dispatches by `page.type`:
+
+- `type: "index"` → CnIndexPage with the schema's columns + filters
+- `type: "detail"` → CnDetailPage with the schema's properties
+- `type: "dashboard"` → CnDashboardPage with the layout
+- `type: "custom"` → your registered component
+
+## Step 6: Delete the old views
+
+The whole point of Part 2 is that the framework writes the views for you. Delete:
+
+- `src/navigation/MainMenu.vue` — replaced by CnAppNav (auto-mounted by CnAppRoot)
+- `src/views/Dashboard.vue` — placeholder; will return in a richer form when the dashboard page wants it
+- `src/views/items/ItemList.vue`, `src/views/items/ItemDetail.vue` — replaced by CnIndexPage + CnDetailPage
+- `src/views/settings/UserSettings.vue`, `src/views/settings/Settings.vue` — settings live on the admin page (`AdminRoot.vue`) and the in-app dialog ships with CnAppRoot
+
+The before-and-after on disk:
+
+```
+before: 12 .vue files in src/, ~600 lines of hand-rolled component code
+after:   3 .vue files (App.vue, AdminRoot.vue, that's it), ~30 lines
+```
+
+## Step 7: Build, reload, browse
+
+```bash
+npm run build
+docker cp ./js nextcloud:/var/www/html/custom_apps/deskdesk/
+docker exec nextcloud apache2ctl graceful
+```
+
+Open `/apps/deskdesk/`. The left rail now reads **Desks · Bookings · Floors** (the translation keys will look like `deskdesk.menu.desks` until you add the `l10n/` entries — that's a follow-up). The main column shows CnIndexPage with the schema's columns. Click a row, you're on CnDetailPage for that desk. The whole CRUD flow comes for free.
+
+## Why this matters
+
+You wrote three JSON files. The framework reads them and renders the app. There is no `DesksList.vue`, no `DeskForm.vue`, no `useDesks.js`. When you add a `priority` field to the booking schema, every place a booking appears — table column, detail row, filter sidebar, form dialog — picks up the new field automatically.
+
+This is the schema-driven discipline talked about on [nextcloud-vue.conduction.nl](https://nextcloud-vue.conduction.nl/docs/architecture/schemas-and-registers/). Part 3 puts it to work in a way that surprises people the first time: a single JSON block on the booking schema makes every booking appear in the user's Nextcloud Calendar, no controller, no event, no listener.
+
+## Troubleshooting
+
+<HexCard title="Configuration file not found: html/custom_apps/...">
+  The relative path used by ConfigurationService::importFromFilePath is computed against <code>/var/www/html</code> (Nextcloud's <code>SERVERROOT</code>). If your SettingsService strips the wrong prefix you get this error. Use <code>\OC::$SERVERROOT</code> as the anchor when stripping.
+</HexCard>
+
+<HexCard title="Schemas import but the register doesn't appear">
+  Add a <code>components.registers.YOURAPP</code> block to the JSON. Without it, the import handler creates the schemas as orphans. The block needs <code>slug</code>, <code>title</code>, <code>version</code>, and <code>schemas[]</code>.
+</HexCard>
+
+<HexCard title="Index pages render but say 'No items found'">
+  CnIndexPage's store wants the numeric register id, while <code>/api/settings</code> typically returns the register slug. Wire a slug → id resolution in your settings store, or pass the numeric id from the SettingsService directly. Tracked as a follow-up in the Part 2 PR.
+</HexCard>
+
+<HexCard title="Translation keys render literally">
+  The keys (e.g. <code>deskdesk.menu.desks</code>) need entries in <code>l10n/en.json</code> and <code>l10n/nl.json</code>. The library renders the key when no translation is found. Add them whenever you're ready; the app works either way.
+</HexCard>
+
+## What's next
+
+<NextSteps>
+  <NextStep
+    title="Part 3 — Schema-driven integrations (NC Calendar)"
+    href="/academy/deskdesk-tutorial-3-calendar"
+    description="A single calendarProvider block on the booking schema. Bookings appear in the user's Nextcloud Calendar. No controller, no listener, no glue code."
+  />
+  <NextStep
+    title="Schemas and registers reference"
+    href="https://nextcloud-vue.conduction.nl/docs/architecture/schemas-and-registers/"
+    description="The architecture story behind why schemas drive both the OpenRegister backend and the @conduction/nextcloud-vue frontend."
+  />
+  <NextStep
+    title="App manifest reference"
+    href="https://nextcloud-vue.conduction.nl/docs/architecture/manifest/"
+    description="Full manifest spec — page types, slot configuration, custom components, sidebar gating."
+  />
+</NextSteps>
diff --git a/academy/2026-05-15-deskdesk-tutorial-3-calendar/index.mdx b/academy/2026-05-15-deskdesk-tutorial-3-calendar/index.mdx
new file mode 100644
index 000000000..74c7aaee4
--- /dev/null
+++ b/academy/2026-05-15-deskdesk-tutorial-3-calendar/index.mdx
@@ -0,0 +1,184 @@
+---
+slug: deskdesk-tutorial-3-calendar
+title: "Build a Nextcloud app on the Conduction stack — Part 3: Schema-driven integrations"
+contentType: tutorial
+authors: [conduction]
+date: 2026-05-15
+summary: One calendarProvider block on the booking schema. Bookings appear in NC Calendar with no controller, no event listener, no per-app glue.
+tags: [App development, OpenRegister, NC Calendar, CalDAV, Schema integrations]
+apps: [openregister]
+durationMinutes: 15
+series: deskdesk-tutorial
+partNumber: 3
+---
+
+import {
+  Outcomes,
+  Outcome,
+  Prerequisites,
+  PrerequisiteItem,
+  NextSteps,
+  NextStep,
+  HexCard,
+} from '@conduction/docusaurus-preset/components';
+
+This is **Part 3 of the four-part DeskDesk tutorial**. Part 2 wired the desk and booking schemas. Part 3 makes those bookings appear in every user's Nextcloud Calendar — *without writing a controller, an event listener, or any per-app calendar glue*.
+
+The trick: OpenRegister already ships an `ICalendarProvider` (`RegisterCalendarProvider`) that exposes any schema with a `calendarProvider` block as a virtual calendar. You declare the block on the booking schema. NC Calendar shows the events. That's the whole story.
+
+{/* truncate */}
+
+<Outcomes title="What you'll have at the end of Part 3">
+  <Outcome>Every <code>booking</code> object in DeskDesk shows up as a read-only event in the Nextcloud Calendar app, with the desk label + user in the title and the cobalt brand colour.</Outcome>
+  <Outcome>A working understanding of OpenRegister's <strong>schema-driven integration providers</strong>: the same approach unlocks Activity, Mail Smart Picker, Contacts matching, and File actions — all without per-app code.</Outcome>
+  <Outcome>A pattern you can reuse on any future schema. Add a date field + a <code>calendarProvider</code> block. Done.</Outcome>
+</Outcomes>
+
+<Prerequisites title="Where you should be">
+  <PrerequisiteItem>Part 2 done: <code>floor</code>, <code>desk</code>, and <code>booking</code> schemas live in OpenRegister and the app shows desks at <code>/apps/deskdesk/</code>.</PrerequisiteItem>
+  <PrerequisiteItem>NC Calendar enabled (Apps → search "Calendar" → Download). Out of the box it'll pick up new ICalendarProviders automatically — no extra wiring on your end.</PrerequisiteItem>
+</Prerequisites>
+
+## Why not OpenConnector or a custom listener?
+
+When you first hear "sync DeskDesk bookings to Nextcloud Calendar" your instinct is probably one of:
+
+1. **Write an OpenConnector flow** that listens to `BookingCreatedEvent` and POSTs to the CalDAV endpoint
+2. **Subclass `IEventListener<BookingCreatedEvent>`** in PHP and create a CalDAV event by hand
+3. **Have the frontend `POST /remote.php/dav/...`** when the user clicks Save
+
+All three work. All three are wrong for this case, because they treat NC Calendar as a *destination* you push to. OpenRegister already exposes every schema as a calendar — you're not pushing anywhere; you're declaring that the booking schema *is* a calendar source.
+
+The same pattern applies to:
+
+| Integration | Schema annotation | What you get |
+|---|---|---|
+| **NC Calendar** | `calendarProvider` block | Read-only virtual calendar per schema |
+| **NC Activity** | (automatic, free) | CRUD events in the activity stream + dashboard widget + email digest |
+| **NC Mail Smart Picker** | `linkedTypes: ["email"]` | Paste a desk URL into NC Mail and get a rich preview |
+| **NC Contacts** | `linkedTypes: ["contact"]` | `/api/contacts/match` returns matching desk users |
+
+Anti-pattern: hand-coding `<App>CalendarSync.vue`, `<App>NotesService`, `<App>MailSidebar.vue`. Use the providers.
+
+## Step 1: Add the calendarProvider block
+
+Open `lib/Settings/deskdesk_register.json` and add a `configuration` block to the `booking` schema:
+
+```json title="lib/Settings/deskdesk_register.json (excerpt) — booking schema"
+"booking": {
+  "slug": "booking",
+  "title": "Booking",
+  /* ... existing properties ... */
+
+  "configuration": {
+    "calendarProvider": {
+      "enabled": true,
+      "dtstart": "start",
+      "dtend": "end",
+      "titleTemplate": "Desk {desk} · {user}",
+      "color": "#003a8c"
+    }
+  }
+}
+```
+
+The five fields:
+
+- `enabled` — `true` exposes the schema as a virtual calendar.
+- `dtstart` — name of the property that holds the event start. We use the `start` property already on every booking.
+- `dtend` — same, but for the end. Optional — when missing, OpenRegister falls back to a sensible default (next-hour for date-time, end-of-day for date-only).
+- `titleTemplate` — string template for the event summary. Tokens in `{braces}` are resolved against the object's properties. We use `Desk {desk} · {user}`. To resolve relations (the `desk` property is a uuid pointing at a `desk` object), include `_extend=relations` when the calendar provider fetches — see the OpenRegister side.
+- `color` — hex colour of the calendar. We use cobalt-blue (`--c-blue-cobalt`).
+
+That's the whole change. No other file needs to be touched.
+
+## Step 2: Re-import the configuration
+
+Schemas in OpenRegister have a version. Bumping the schema version + re-running the import is the canonical way to update them in place. Bump the file's `info.version` (`0.2.0` → `0.3.0`) and the booking schema's `version`:
+
+```json
+"info":  { "version": "0.3.0" },
+"booking": { "version": "0.3.0", /* ... */ }
+```
+
+Then trigger the import the same way as Part 2:
+
+```bash
+docker exec nextcloud php occ app:disable deskdesk
+docker exec nextcloud php occ app:enable deskdesk
+```
+
+(Or hit `POST /api/settings/load` if you've wired admin settings yet.)
+
+## Step 3: Verify in NC Calendar
+
+Open `/apps/calendar/`. You should see a new entry in the calendar list:
+
+- **Booking** — cobalt-blue colour, read-only badge, owned by your user
+
+Click it. The seed bookings from Part 2 (the Monday focus-work session, the Tuesday sprint-planning meeting, the tentative quiet morning) appear as events. Click one. The popover shows the desk + user title + the start/end times.
+
+If you don't see the calendar:
+
+- Confirm OpenRegister registered its provider: `docker exec nextcloud php occ config:list | grep openregister`
+- Make sure your `booking` schema has `configuration.calendarProvider.enabled: true` after the re-import
+- Check `nextcloud.log` for `RegisterCalendarProvider` messages
+
+## How it works under the hood
+
+OpenRegister's `RegisterCalendarProvider` implements Nextcloud's `ICalendarProvider` interface. On every Calendar API request, it:
+
+1. Lists every schema with `configuration.calendarProvider.enabled === true`
+2. For each, returns a `RegisterCalendar` (a lightweight `ICalendar` implementation)
+3. When the user opens that calendar, queries OpenRegister for objects where `dtstart` is in the requested range
+4. Transforms each object into an iCalendar VEVENT via `CalendarEventTransformer`, applying the `titleTemplate`
+
+Per-object ACLs gate event content. The provider bypasses multi-tenancy when listing schemas (so cross-tenant calendars work), but every individual event is still gated by RBAC.
+
+The same pattern is followed by [the spec](https://github.com/ConductionNL/openregister/blob/main/openspec/specs/calendar-provider/spec.md).
+
+## What you've now bought yourself
+
+Activity (`NC Activity`) is already wired. Browse `/apps/activity/` and you'll see your booking creates / updates. The dashboard activity widget + email digest both show DeskDesk events. Zero code on your end.
+
+Mail Smart Picker too: in NC Mail, paste a desk URL (`/apps/deskdesk/desks/desk-3-east-12`) and the picker resolves it into a rich preview card with the desk label + zone + equipment.
+
+You've effectively integrated DeskDesk into four Nextcloud apps with one JSON block. That's the schema-driven discipline paying off.
+
+## Troubleshooting
+
+<HexCard title="The Booking calendar doesn't appear">
+  Confirm the booking schema's <code>configuration.calendarProvider.enabled</code> is <code>true</code> after the re-import. Browse <code>/index.php/apps/openregister/api/schemas/booking</code> and look for the configuration block in the response. If it's missing, the re-import didn't pick up the change — bump the version and try again.
+</HexCard>
+
+<HexCard title="Events show but the title is the raw uuid, not the desk label">
+  The titleTemplate doesn't resolve relations by default. Add a <code>_extend=relations</code> via the schema's calendarProvider extras, or use the desk's slug instead of its uuid in the template (<code>"titleTemplate": "Desk &lbrace;deskSlug&rbrace;"</code> when you've stored the slug as a property).
+</HexCard>
+
+<HexCard title="Events appear at the wrong time">
+  Check the timezone on the booking's <code>start</code> / <code>end</code> values. They must be ISO 8601 with timezone info (e.g. <code>2026-05-12T09:00:00+02:00</code>). Naive datetimes are interpreted as UTC and may render shifted.
+</HexCard>
+
+<HexCard title="`Call to undefined method ...registerCalendarProvider()`">
+  The provider needs OpenRegister 0.2.x or newer. Older versions don't ship RegisterCalendarProvider. Upgrade OpenRegister via the app store.
+</HexCard>
+
+## What's next
+
+<NextSteps>
+  <NextStep
+    title="Part 4 — External knowledge + ship"
+    href="/academy/deskdesk-tutorial-4-knowledge-and-ship"
+    description="Author the desk-zone knowledge articles in xWiki, wire OpenConnector to surface them per desk in CnObjectSidebar, package the app, publish to apps.conduction.nl."
+  />
+  <NextStep
+    title="OpenRegister platform capabilities"
+    href="https://openregister.conduction.nl/docs/platform-capabilities/"
+    description="The full integration matrix: Activity, Calendar, Contacts, Mail Smart Picker, File actions, Profile actions — and which are implemented vs deferred."
+  />
+  <NextStep
+    title="Schema annotations reference"
+    href="https://openregister.conduction.nl/docs/schema-annotations/"
+    description="Every x-openregister-* extension that lives on the schema: relations, lifecycle, aggregations, calculations, calendar."
+  />
+</NextSteps>
diff --git a/academy/2026-05-17-deskdesk-tutorial-4-knowledge-and-ship/index.mdx b/academy/2026-05-17-deskdesk-tutorial-4-knowledge-and-ship/index.mdx
new file mode 100644
index 000000000..be21af33e
--- /dev/null
+++ b/academy/2026-05-17-deskdesk-tutorial-4-knowledge-and-ship/index.mdx
@@ -0,0 +1,443 @@
+---
+slug: deskdesk-tutorial-4-knowledge-and-ship
+title: "Build a Nextcloud app on the Conduction stack — Part 4: Knowledge + ship"
+contentType: tutorial
+authors: [conduction]
+date: 2026-05-17
+summary: Spin up xWiki locally, author zone-specific knowledge articles, surface them per-desk via an OpenRegister knowledge_article schema, package the app, publish to the Conduction app store.
+tags: [App development, OpenConnector, xWiki, Knowledge management, Release]
+apps: [openconnector, openregister]
+durationMinutes: 35
+series: deskdesk-tutorial
+partNumber: 4
+---
+
+import {
+  Outcomes,
+  Outcome,
+  Prerequisites,
+  PrerequisiteItem,
+  NextSteps,
+  NextStep,
+  HexCard,
+} from '@conduction/docusaurus-preset/components';
+
+The final part of the four-part DeskDesk tutorial. Part 3 made bookings appear in NC Calendar with one schema annotation. Part 4 brings external knowledge — zone-specific etiquette, equipment notes, troubleshooting — from xWiki into the desk detail sidebar via a `knowledge_article` OpenRegister schema. Then we package the app and ship it.
+
+External knowledge integration is the canonical case for OpenConnector: pull data from a system you don't own (xWiki here, but the same applies to Confluence, Notion, SharePoint, Decos, Mendix), surface it inside Nextcloud-native UI without making the user context-switch.
+
+{/* truncate */}
+
+<Outcomes title="What you'll have at the end of Part 4">
+  <Outcome>A running xWiki instance on <code>http://localhost:8086</code>, on the same Docker network as Nextcloud, sharing the existing Postgres.</Outcome>
+  <Outcome>Three xWiki articles you author yourself, scoped by zone (<code>DeskDeskKnowledge.East.Etiquette</code>, <code>.Central.MeetingDesks</code>, <code>.West.QuietRules</code>).</Outcome>
+  <Outcome>A new <code>knowledge_article</code> OpenRegister schema in DeskDesk, with seed data matching what xWiki holds.</Outcome>
+  <Outcome>A "Knowledge" tab on every desk's detail page that lists the articles whose <code>zone</code> matches the desk's zone, without leaving DeskDesk.</Outcome>
+  <Outcome>A versioned, packaged DeskDesk release on the Conduction app store, installable from any Nextcloud's app browser.</Outcome>
+</Outcomes>
+
+<Prerequisites title="Where you should be">
+  <PrerequisiteItem>Parts 1–3 done: DeskDesk shell, schemas + manifest, calendar integration all working.</PrerequisiteItem>
+  <PrerequisiteItem>A local Nextcloud + OpenRegister stack you can <code>docker exec</code> into. The reference stack at <a href="/academy/nextcloud-lokaal-draaien">Nextcloud lokaal draaien met Docker</a> is what we test against; it already ships the xWiki service we'll start in Step 0.</PrerequisiteItem>
+  <PrerequisiteItem><strong>OpenConnector</strong> installed and enabled, for when you switch from seed data to a live xWiki sync later in the tutorial.</PrerequisiteItem>
+</Prerequisites>
+
+## Step 0: Spin up xWiki
+
+The Conduction dev stack already declares an xWiki service under the `xwiki` profile of `apps-extra/openregister/docker-compose.yml`:
+
+```yaml title="openregister/docker-compose.yml (excerpt)"
+  xwiki:
+    profiles: [xwiki, integrations]
+    image: xwiki:lts-postgres-tomcat
+    container_name: openregister-xwiki
+    ports: ["8086:8080"]
+    volumes: ["xwiki-data:/usr/local/xwiki"]
+    environment:
+      DB_USER: nextcloud
+      DB_PASSWORD: "!ChangeMe!"
+      DB_HOST: db
+      DB_DATABASE: xwiki
+    depends_on: [db]
+```
+
+xWiki shares the Postgres container with Nextcloud + OpenRegister, but uses a separate database called `xwiki`. Create it once:
+
+```bash
+docker exec openregister-postgres psql -U nextcloud -d postgres -c "CREATE DATABASE xwiki;"
+```
+
+Now start xWiki with the profile:
+
+```bash
+cd apps-extra/openregister
+docker compose --profile xwiki up -d xwiki
+```
+
+The first boot takes about a minute — xWiki initialises its schema in the empty Postgres database and unpacks bundled webapps. Wait for the health check to flip to healthy:
+
+```bash
+docker ps --filter name=openregister-xwiki --format '{{.Status}}'
+# Up 22 seconds (health: starting)   <- still booting
+# Up 1 minute (healthy)              <- ready
+```
+
+Open `http://localhost:8086`. xWiki redirects to its **Distribution Wizard** because the empty database has no admin user and no flavor.
+
+## Step 0a: Walk the Distribution Wizard
+
+1. **Continue** past the welcome screen.
+2. **Step 1 - Admin user.** Fill in:
+   ```
+   First Name:  Desk
+   Last Name:   Admin
+   Username:    admin
+   Password:    admin1234     (any 8+ chars works)
+   Confirm:     admin1234
+   Email:       admin@deskdesk.local
+   ```
+   Click **Register and login**. You're now signed in as `admin`.
+3. **Step 2 - Flavor.** Click **Let the wiki be empty** (the bundled Standard Flavor is a ~150 MB download we don't need for this tutorial). Confirm.
+4. **Step 5 - Report** lists the pages created (just `Home` and `XWiki`). Click **Continue** to land on the Main page.
+
+The wiki is now bootstrapped. Sanity-check the REST endpoint:
+
+```bash
+curl -u admin:admin1234 -H 'Accept: application/json' \
+  http://localhost:8086/rest/wikis/xwiki/spaces | head -c 200
+# {"links":[],"spaces":[{"links":[...,"id":"xwiki:XWiki", ...}]}
+```
+
+Two things to note about the URL: the REST API lives at `/rest`, **not** `/xwiki/rest` (the latter is the human view path), and basic auth is the default.
+
+## Step 1: Author the knowledge articles
+
+For tutorial purposes we use a dedicated parent space **DeskDeskKnowledge** with one subspace per zone. The folder layout matches the desk's `zone` enum (`east`, `central`, `west`, `north`, `south`) so each desk maps cleanly to its zone's articles.
+
+You can author the articles via xWiki's UI (Create Page → set parent space → write content). Faster path: drive xWiki's REST API directly. The same payload shape works from cURL, OpenConnector, or any HTTP client.
+
+```bash title="Three short articles, one PUT each"
+put() {
+  curl -s -u admin:admin1234 -X PUT \
+    -H "Content-Type: application/xml" \
+    -d "<page xmlns=\"http://www.xwiki.org\"><title>$3</title><syntax>xwiki/2.1</syntax><content>$4</content></page>" \
+    "http://localhost:8086/rest/wikis/xwiki/spaces/DeskDeskKnowledge/spaces/$1/pages/$2" \
+    -o /dev/null -w "%{http_code} $1/$2\n"
+}
+put East    Etiquette     "East zone etiquette" \
+    "The east windows get direct sun 14:00 to 17:00 in summer. Bring a curtain clip from the supplies cabinet on floor 3. Phone calls are fine in this zone, phonebooths are a 30-second walk away."
+put Central MeetingDesks  "Central zone meeting desks" \
+    "Central desks 11 to 14 seat four. The cabling channel under each desk has two HDMI ports and USB-C 100W power. Camera and mic in the ceiling are wired into the in-room Jitsi instance. See the QR code on the desk."
+put West    QuietRules    "West zone quiet rules" \
+    "The west zone is the designated quiet zone. No calls, no meetings. Keep notifications muted. The kitchen is on the opposite side of the floor for a reason."
+```
+
+Each call returns `201`. Browse to `http://localhost:8086/xwiki/bin/view/DeskDeskKnowledge/East/Etiquette` to see the East article in xWiki's standard view. The same content is also fetchable via REST:
+
+```bash
+curl -u admin:admin1234 \
+  http://localhost:8086/rest/wikis/xwiki/spaces/DeskDeskKnowledge/spaces/East/pages
+```
+
+Three short articles. Realistic enough that you'd actually write them in production. The key piece is the **subspace name**: that's what we'll pivot on from DeskDesk's side.
+
+Why the tutorial walks you through authoring instead of seeding programmatically: in real teams, the wiki articles are *organic* — written by whoever notices the etiquette gap, edited by the next person, archived when the floorplan changes. The integration we build makes them findable from where the user already is, not the other way around.
+
+## Step 2: Add a knowledge_article schema to DeskDesk
+
+Before we sync from xWiki, give OpenRegister a place to put the articles. Add a fourth schema to `lib/Settings/deskdesk_register.json`:
+
+```json title="lib/Settings/deskdesk_register.json (excerpt)"
+"knowledge_article": {
+  "slug": "knowledge_article",
+  "icon": "BookOpenVariantOutline",
+  "version": "0.1.0",
+  "title": "Knowledge article",
+  "description": "An external knowledge article surfaced in DeskDesk via OpenConnector. Read-only — canonical source lives in xWiki.",
+  "type": "object",
+  "required": ["name", "zone"],
+  "properties": {
+    "name":       { "type": "string" },
+    "zone":       { "type": "string", "enum": ["north", "south", "east", "west", "central"] },
+    "body":       { "type": "string" },
+    "url":        { "type": "string", "format": "uri" },
+    "externalId": { "type": "string" }
+  }
+}
+```
+
+Important: the **JSON key** and the **`slug` field must match** (`knowledge_article` on both sides). OpenRegister builds the REST endpoint from the slug, so a mismatch yields `Schema not found: 'knowledge_article'` at fetch time.
+
+While you're in there, bump the register's `info.version` to `0.3.0` so the import handler picks the new schema up on next run:
+
+```json title="lib/Settings/deskdesk_register.json (info block)"
+"info": {
+  "title": "DeskDesk Register",
+  "description": "Floors, desks, bookings, and knowledge articles.",
+  "version": "0.3.0"
+}
+```
+
+Also seed three articles matching the xWiki content. The seeds make the app demo-able before you wire the sync, and serve as a reference shape for the OpenConnector mapping you'll build in Step 3.
+
+```json title="components.objects (excerpt)"
+"knowledge-east-etiquette": {
+  "@self": { "register": "deskdesk", "schema": "knowledge_article", "slug": "knowledge-east-etiquette" },
+  "name": "East zone etiquette",
+  "zone": "east",
+  "body": "The east windows get direct sun 14:00 to 17:00 in summer...",
+  "url": "http://localhost:8086/xwiki/bin/view/DeskDeskKnowledge/East/Etiquette",
+  "externalId": "xwiki:DeskDeskKnowledge.East.Etiquette"
+}
+```
+
+Add the `knowledge_article` slug to the small list `SettingsService::SCHEMA_SLUGS` in [lib/Service/SettingsService.php](https://github.com/ConductionNL/deskdesk/blob/main/lib/Service/SettingsService.php) so `/api/settings` exposes its numeric id alongside the other schemas. Same in `src/store/store.js`:
+
+```js title="src/store/store.js"
+const SCHEMAS = ['floor', 'desk', 'booking', 'knowledge_article']
+```
+
+Reload the configuration so OpenRegister picks up the new schema + seeds:
+
+```bash
+docker exec nextcloud apache2ctl graceful
+# then from your Nextcloud session, POST /apps/deskdesk/api/settings/load
+# (the deskdesk admin page has a Reload button that does this for you)
+```
+
+## Step 3: Create an OpenConnector source for xWiki
+
+The seeds get the UI working immediately. For *live* data — when an article changes in xWiki you want to see the change in DeskDesk on the next sync — you wire OpenConnector.
+
+Go to `/apps/openconnector/sources` and create a new source.
+
+```
+Name:       xWiki Knowledge
+Type:       API
+Location:   http://openregister-xwiki:8080/rest
+            (container-to-container hostname; from the host you use http://localhost:8086/rest)
+Auth:       Basic
+Username:   admin
+Password:   admin1234
+Headers:    Accept: application/json
+Test:       GET /wikis/xwiki/spaces/DeskDeskKnowledge/spaces/East/pages
+```
+
+The Test should return the East article. OpenConnector saves the source with a numeric id; we reference it from the synchronisation in the next step.
+
+## Step 4: Define the synchronisation
+
+Sources surface raw API responses; **synchronisations** map them into OpenRegister objects. Create a synchronisation:
+
+```
+Name:             xWiki articles → OpenRegister
+Source:           xWiki Knowledge (the one you just made)
+Source endpoint:  /wikis/xwiki/spaces/DeskDeskKnowledge/spaces/{zone}/pages
+                  with zone iterated over ['East', 'Central', 'West']
+Target register:  deskdesk
+Target schema:    knowledge_article
+Mapping:
+  title           → name
+  content         → body
+  spaces.last     → zone     (lowercased)
+  id              → externalId
+  xwikiAbsoluteUrl → url
+Schedule:         every 30 minutes
+```
+
+Save and run once. You'll see three `knowledge_article` objects in OpenRegister whose `externalId` field starts with `xwiki:`. Delete the seed objects you added in Step 2 — they're superseded by the synced ones.
+
+## Step 5: Surface articles in CnObjectSidebar
+
+The desk-detail page already mounts CnObjectSidebar. To add a **Knowledge tab** on it, declare a custom tab in the manifest:
+
+```json title="src/manifest.json (excerpt)"
+{
+  "id": "desks-detail",
+  "route": "/desks/:id",
+  "type": "detail",
+  "title": "deskdesk.desks.detailTitle",
+  "config": {
+    "register": "deskdesk",
+    "schema": "desk",
+    "sidebar": {
+      "tabs": [
+        { "id": "data",      "label": "deskdesk.sidebar.data",      "widgets": [{ "type": "data" }] },
+        { "id": "knowledge", "label": "deskdesk.sidebar.knowledge", "component": "knowledge-tab" },
+        { "id": "metadata",  "label": "deskdesk.sidebar.metadata",  "widgets": [{ "type": "metadata" }] }
+      ]
+    }
+  }
+}
+```
+
+The `data` and `metadata` tabs use built-in widget types. The `knowledge` tab points at a custom component `knowledge-tab`, which the App registers via the `customComponents` map.
+
+Create the tab component itself at `src/views/KnowledgeTab.vue`:
+
+```vue title="src/views/KnowledgeTab.vue"
+<template>
+  <div class="knowledge-tab">
+    <NcLoadingIcon v-if="loading" :size="32" />
+    <NcEmptyContent
+      v-else-if="!articles.length"
+      :name="t('deskdesk', 'No articles for this zone yet')" />
+    <article v-for="article in articles" :key="article.id" class="knowledge-tab__article">
+      <header class="knowledge-tab__head">
+        <h3>{{ article.name }}</h3>
+        <a v-if="article.url" :href="article.url" target="_blank" rel="noopener noreferrer">
+          {{ t('deskdesk', 'Open in wiki') }} ↗
+        </a>
+      </header>
+      <p class="knowledge-tab__body">{{ article.body }}</p>
+    </article>
+  </div>
+</template>
+
+<script>
+import { NcEmptyContent, NcLoadingIcon } from '@nextcloud/vue'
+import { useObjectStore } from '../store/store.js'
+
+export default {
+  name: 'KnowledgeTab',
+  components: { NcEmptyContent, NcLoadingIcon },
+  props: {
+    objectId:   { type: String, required: true },
+    objectType: { type: String, default: 'desk' },
+  },
+  setup() { return { objectStore: useObjectStore() } },
+  data() { return { articles: [], loading: true } },
+  watch: {
+    objectId: {
+      immediate: true,
+      async handler() {
+        this.loading = true
+        try {
+          const desk = await this.objectStore.fetchObject(this.objectType, this.objectId)
+          if (!desk?.zone) { this.articles = []; return }
+          await this.objectStore.fetchCollection('knowledge_article', { zone: desk.zone, _limit: 25 })
+          this.articles = this.objectStore.collections.knowledge_article || []
+        } finally { this.loading = false }
+      },
+    },
+  },
+}
+</script>
+```
+
+Register the component in `src/App.vue` and pass it to `CnAppRoot` via the `:custom-components` prop:
+
+```vue title="src/App.vue (excerpt)"
+<script>
+import KnowledgeTab from './views/KnowledgeTab.vue'
+
+const customComponents = {
+  'knowledge-tab': KnowledgeTab,
+}
+
+export default {
+  /* ... */
+  data() {
+    return { customComponents, /* ... */ }
+  },
+}
+</script>
+
+<template>
+  <CnAppRoot
+    :app-id="appId"
+    :manifest="manifest"
+    :page-types="pageTypes"
+    :custom-components="customComponents">
+    <template #sidebar>
+      <CnObjectSidebar v-if="objectSidebarState.active" ... />
+    </template>
+  </CnAppRoot>
+</template>
+```
+
+(See the [reference repo](https://github.com/ConductionNL/deskdesk/blob/main/src/App.vue) for the complete file — App.vue also provides `objectSidebarState` so CnDetailPage's external-sidebar channel works.)
+
+Build, reload, navigate to a 3-East desk's detail URL. The right sidebar shows three tabs — Data, Knowledge, Metadata. Click **Knowledge**. The "East zone etiquette" article appears, with the body rendered and a link back to the wiki for editing.
+
+Navigate to a 2-West desk: same tab, different article ("West zone quiet rules"). The zone filter does the matching for free; you didn't write per-desk wiring.
+
+## Step 6: Package the app
+
+The release process is mechanical:
+
+1. **Bump the version** in `appinfo/info.xml` (`<version>0.1.0</version>` → `<version>0.4.0</version>`).
+2. **Run the production build:**
+   ```bash
+   composer install --no-dev --optimize-autoloader
+   npm install --legacy-peer-deps
+   npm run build
+   ```
+3. **Strip unwanted files** — vendor dev dependencies, node_modules, tests, openspec changes, .git, .github (your CI is already at the source level). The template ships a `Makefile` target for this; if not, the production tarball pattern is:
+   ```bash
+   tar --exclude=node_modules --exclude=vendor/bin \
+       --exclude=tests --exclude=openspec/changes \
+       --exclude=.git --exclude=.github \
+       -czf deskdesk-0.4.0.tar.gz deskdesk/
+   ```
+4. **Sign the tarball** with the EC key Nextcloud's app store expects (see [the Nextcloud docs](https://nextcloudappstore.readthedocs.io/en/latest/developer.html#publishing-your-app)).
+5. **Push to GitHub** with a tag matching the version (`git tag v0.4.0 && git push origin v0.4.0`). The template ships a `.github/workflows/release.yml` that picks up the tag, builds the tarball, signs it, and publishes the release.
+
+For the **Conduction app store** (`apps.conduction.nl`), the same release pipeline pushes to that endpoint when the secret is configured. See [the .github/workflows/release.yml](https://github.com/ConductionNL/nextcloud-app-template/blob/main/.github/workflows/release.yml) reference.
+
+## Step 7: Submit to apps.nextcloud.com (optional)
+
+If you want DeskDesk in the public Nextcloud app store, register at [apps.nextcloud.com](https://apps.nextcloud.com), upload your signed tarball, fill out the form (description, screenshots, license — EUPL-1.2 is fine — categories `organization`), and wait for review. The cycle is usually 1–3 days for first-time apps.
+
+## What you've built
+
+You started Part 1 with an empty template. Forty-eight steps later, you have:
+
+- A real Nextcloud app with the canonical chassis
+- Four OpenRegister schemas with relations and seed data
+- A manifest-driven shell with two small wrappers (Index, Detail) that go away once the library wires auto-fetch into the default page types
+- Bookings that appear in NC Calendar via a schema annotation
+- Knowledge articles from xWiki that appear in the desk-detail sidebar via OpenConnector
+- A versioned, packaged, publishable release
+
+Total Vue you wrote: **three small files** (`IndexPageWrapper`, `DetailPageWrapper`, `KnowledgeTab`) — about 100 lines together. Total PHP: the rename ritual + a path-resolution fix in SettingsService + the schema-slug list. Everything else is JSON.
+
+That ratio — JSON describing what you want, framework rendering it — is the entire point of the Conduction stack. Schemas drive both backend and frontend. Manifests drive the shell. Schema annotations drive cross-app integrations. You declare; the framework renders.
+
+## Troubleshooting
+
+<HexCard title='"Schema not found: knowledge_article" at fetch time'>
+  The schema's JSON key and the <code>slug</code> field must match. If you used <code>knowledge-article</code> (hyphen) for one and <code>knowledge_article</code> (underscore) for the other, OpenRegister's URL lookup fails. Pick one, use it both places.
+</HexCard>
+
+<HexCard title="Sidebar tabs render but the desk body says 'No data available'">
+  CnPageRenderer forwards <code>page.config</code> and <code>$route.params</code> as raw props. The route param is <code>id</code> but CnDetailPage's prop is <code>objectId</code>. The DetailPageWrapper bridges the names + fetches the object via the store; without the wrapper, CnDetailPage just renders the empty state.
+</HexCard>
+
+<HexCard title="xWiki Distribution Wizard wants to download Flavor and the container has no internet">
+  Pick <strong>Let the wiki be empty</strong> at Step 2. The empty flavor still supports REST + page creation, which is all the tutorial needs.
+</HexCard>
+
+<HexCard title="OpenConnector source 'Test' returns HTML instead of JSON">
+  Set <code>Accept: application/json</code> in the source's Headers section. xWiki defaults to XML for REST responses, but content-negotiates JSON when asked.
+</HexCard>
+
+## Where to next
+
+<NextSteps>
+  <NextStep
+    title="The component reference"
+    href="https://nextcloud-vue.conduction.nl/docs/components/"
+    description="Browse every Cn* component the library ships. Live playgrounds, prop tables, slot reference."
+  />
+  <NextStep
+    title="Conduction app catalogue"
+    href="https://www.conduction.nl/apps"
+    description="See how Procest, OpenCatalogi, MyDash, and the rest compose the same patterns. DeskDesk now joins them."
+  />
+  <NextStep
+    title="Build something else"
+    href="/academy/build-an-app"
+    description="The 30-minute end-to-end overview tutorial. Or fork DeskDesk into your own use case — the template is a snapshot, your app is the journey."
+  />
+</NextSteps>
diff --git a/docusaurus.config.js b/docusaurus.config.js
index 5cf06753b..ae1b9bc7f 100644
--- a/docusaurus.config.js
+++ b/docusaurus.config.js
@@ -20,7 +20,15 @@ const {createConfig} = require('@conduction/docusaurus-preset');
 module.exports = createConfig({
   title: 'Conduction',
   tagline: 'Open-source apps voor de Nextcloud-werkplek.',
-  url: 'https://conduction.nl',
+  /* Must match static/CNAME (www.conduction.nl) — GitHub Pages serves
+     only on the CNAME host and 301-redirects the apex to it. Using the
+     bare apex here made every canonical/og:url/sitemap entry point at
+     conduction.nl, adding an apex→www hop on top of whatever the
+     Cloudflare vanity worker already does — a redirect-loop amplifier
+     on connext./commonground. (trailingSlash is true, set by the
+     preset, so the worker must target https://www.conduction.nl/connext/
+     — with the www and the trailing slash — not /connext.) */
+  url: 'https://www.conduction.nl',
   baseUrl: '/',
 
   organizationName: 'ConductionNL',
diff --git a/package-lock.json b/package-lock.json
index 2a24a7857..a70924d26 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,8 +7,9 @@
     "": {
       "name": "conduction-website",
       "version": "0.0.0",
+      "hasInstallScript": true,
       "dependencies": {
-        "@conduction/docusaurus-preset": "^1.7.0",
+        "@conduction/docusaurus-preset": "^3.3.0",
         "@docusaurus/core": "^3.5.0",
         "@docusaurus/preset-classic": "^3.5.0",
         "@mdx-js/react": "^3.0.0",
@@ -1987,9 +1988,9 @@
       }
     },
     "node_modules/@conduction/docusaurus-preset": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/@conduction/docusaurus-preset/-/docusaurus-preset-1.7.0.tgz",
-      "integrity": "sha512-JH7aXaRGZCvkHZTLTLRh3gDWhj/2zAc8S4eBGS67hCfDIwzP5SK+Uj5BidoqbSi0FEEnekEoya2AVVLXbNv/OQ==",
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/@conduction/docusaurus-preset/-/docusaurus-preset-3.3.0.tgz",
+      "integrity": "sha512-xpNp/Azxwp1TbvnGLN8egxpPk/ZlpUEzdEHfwUDxf7McfpsM4C16JdgXaQ33n6GZAMCHKWrbseKjfSwRSbrmtQ==",
       "license": "EUPL-1.2",
       "peerDependencies": {
         "@docusaurus/core": "^3.0.0",
@@ -2209,19 +2210,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/@csstools/postcss-cascade-layers/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/@csstools/postcss-color-function": {
       "version": "4.0.12",
       "resolved": "https://registry.npmjs.org/@csstools/postcss-color-function/-/postcss-color-function-4.0.12.tgz",
@@ -2608,19 +2596,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/@csstools/postcss-is-pseudo-class/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/@csstools/postcss-light-dark-function": {
       "version": "2.0.11",
       "resolved": "https://registry.npmjs.org/@csstools/postcss-light-dark-function/-/postcss-light-dark-function-2.0.11.tgz",
@@ -3055,19 +3030,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/@csstools/postcss-scope-pseudo-class/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/@csstools/postcss-sign-functions": {
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/@csstools/postcss-sign-functions/-/postcss-sign-functions-1.1.4.tgz",
@@ -7309,19 +7271,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/css-blank-pseudo/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/css-declaration-sorter": {
       "version": "7.4.0",
       "resolved": "https://registry.npmjs.org/css-declaration-sorter/-/css-declaration-sorter-7.4.0.tgz",
@@ -7361,19 +7310,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/css-has-pseudo/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/css-loader": {
       "version": "6.11.0",
       "resolved": "https://registry.npmjs.org/css-loader/-/css-loader-6.11.0.tgz",
@@ -13702,19 +13638,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-attribute-case-insensitive/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-calc": {
       "version": "9.0.1",
       "resolved": "https://registry.npmjs.org/postcss-calc/-/postcss-calc-9.0.1.tgz",
@@ -13731,6 +13654,19 @@
         "postcss": "^8.2.2"
       }
     },
+    "node_modules/postcss-calc/node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/postcss-clamp": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/postcss-clamp/-/postcss-clamp-4.1.0.tgz",
@@ -13946,19 +13882,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-custom-selectors/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-dir-pseudo-class": {
       "version": "9.0.1",
       "resolved": "https://registry.npmjs.org/postcss-dir-pseudo-class/-/postcss-dir-pseudo-class-9.0.1.tgz",
@@ -13984,19 +13907,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-dir-pseudo-class/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-discard-comments": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/postcss-discard-comments/-/postcss-discard-comments-6.0.2.tgz",
@@ -14060,6 +13970,19 @@
         "postcss": "^8.4.31"
       }
     },
+    "node_modules/postcss-discard-unused/node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/postcss-double-position-gradients": {
       "version": "6.0.4",
       "resolved": "https://registry.npmjs.org/postcss-double-position-gradients/-/postcss-double-position-gradients-6.0.4.tgz",
@@ -14112,19 +14035,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-focus-visible/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-focus-within": {
       "version": "9.0.1",
       "resolved": "https://registry.npmjs.org/postcss-focus-within/-/postcss-focus-within-9.0.1.tgz",
@@ -14150,19 +14060,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-focus-within/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-font-variant": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/postcss-font-variant/-/postcss-font-variant-5.0.0.tgz",
@@ -14346,6 +14243,19 @@
         "postcss": "^8.4.31"
       }
     },
+    "node_modules/postcss-merge-rules/node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/postcss-minify-font-values": {
       "version": "6.1.0",
       "resolved": "https://registry.npmjs.org/postcss-minify-font-values/-/postcss-minify-font-values-6.1.0.tgz",
@@ -14410,6 +14320,19 @@
         "postcss": "^8.4.31"
       }
     },
+    "node_modules/postcss-minify-selectors/node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/postcss-modules-extract-imports": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/postcss-modules-extract-imports/-/postcss-modules-extract-imports-3.1.0.tgz",
@@ -14439,19 +14362,6 @@
         "postcss": "^8.1.0"
       }
     },
-    "node_modules/postcss-modules-local-by-default/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-modules-scope": {
       "version": "3.2.1",
       "resolved": "https://registry.npmjs.org/postcss-modules-scope/-/postcss-modules-scope-3.2.1.tgz",
@@ -14467,19 +14377,6 @@
         "postcss": "^8.1.0"
       }
     },
-    "node_modules/postcss-modules-scope/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-modules-values": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/postcss-modules-values/-/postcss-modules-values-4.0.0.tgz",
@@ -14522,19 +14419,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-nesting/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-normalize-charset": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/postcss-normalize-charset/-/postcss-normalize-charset-6.0.2.tgz",
@@ -14885,19 +14769,6 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-pseudo-class-any-link/node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-reduce-idents": {
       "version": "6.0.3",
       "resolved": "https://registry.npmjs.org/postcss-reduce-idents/-/postcss-reduce-idents-6.0.3.tgz",
@@ -14978,7 +14849,7 @@
         "postcss": "^8.4"
       }
     },
-    "node_modules/postcss-selector-not/node_modules/postcss-selector-parser": {
+    "node_modules/postcss-selector-parser": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
       "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
@@ -14991,19 +14862,6 @@
         "node": ">=4"
       }
     },
-    "node_modules/postcss-selector-parser": {
-      "version": "6.1.2",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
-      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-sort-media-queries": {
       "version": "5.2.0",
       "resolved": "https://registry.npmjs.org/postcss-sort-media-queries/-/postcss-sort-media-queries-5.2.0.tgz",
@@ -15050,6 +14908,19 @@
         "postcss": "^8.4.31"
       }
     },
+    "node_modules/postcss-unique-selectors/node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/postcss-value-parser": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz",
@@ -16152,6 +16023,13 @@
         "url": "https://opencollective.com/webpack"
       }
     },
+    "node_modules/search-insights": {
+      "version": "2.17.3",
+      "resolved": "https://registry.npmjs.org/search-insights/-/search-insights-2.17.3.tgz",
+      "integrity": "sha512-RQPdCYTa8A68uM2jwxoY842xDhvx3E5LFL1LxvxCNMev4o5mLuokczhzjAgGwUZBAmOKZknArSxLKmXtIi2AxQ==",
+      "license": "MIT",
+      "peer": true
+    },
     "node_modules/section-matter": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/section-matter/-/section-matter-1.0.0.tgz",
@@ -16911,6 +16789,19 @@
         "postcss": "^8.4.31"
       }
     },
+    "node_modules/stylehacks/node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
     "node_modules/supports-color": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
diff --git a/package.json b/package.json
index 8022a0e75..7ca89dfe8 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,10 @@
   "description": "conduction.nl, the Conduction company hub. Hosts apps, solutions, partners, plus ConNext and Common Ground vanity landings.",
   "scripts": {
     "docusaurus": "docusaurus",
+    "postinstall": "node scripts/sync-app-downloads.js",
+    "prestart": "node scripts/sync-app-downloads.js",
     "start": "docusaurus start",
+    "prebuild": "python3 .github/scripts/app_downloads.py && node scripts/sync-app-downloads.js",
     "build": "docusaurus build",
     "swizzle": "docusaurus swizzle",
     "deploy": "docusaurus deploy",
@@ -16,7 +19,7 @@
     "ci": "npm ci --legacy-peer-deps && npm run build"
   },
   "dependencies": {
-    "@conduction/docusaurus-preset": "^1.7.0",
+    "@conduction/docusaurus-preset": "^3.3.0",
     "@docusaurus/core": "^3.5.0",
     "@docusaurus/preset-classic": "^3.5.0",
     "@mdx-js/react": "^3.0.0",
diff --git a/scripts/sync-app-downloads.js b/scripts/sync-app-downloads.js
new file mode 100644
index 000000000..3b59d9ab2
--- /dev/null
+++ b/scripts/sync-app-downloads.js
@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+/**
+ * Mirrors data/app-downloads.json into node_modules/@conduction/data/ so
+ * @conduction/docusaurus-preset's stats import resolves on a freshly-
+ * installed tree. The preset's src/data/app-downloads.js requires the
+ * file at `../../../data/app-downloads.json` relative to its own
+ * location, which targets node_modules/@conduction/data/ — a path the
+ * npm install layout does not create on its own.
+ *
+ * Hooked into postinstall + prestart + prebuild so the file is in place
+ * for both dev and prod builds. Safe to re-run; idempotent on contents.
+ */
+const fs = require('fs');
+const path = require('path');
+
+const SRC = path.join(__dirname, '..', 'data', 'app-downloads.json');
+const DST_DIR = path.join(__dirname, '..', 'node_modules', '@conduction', 'data');
+const DST = path.join(DST_DIR, 'app-downloads.json');
+
+if (!fs.existsSync(SRC)) {
+  console.warn(`[sync-app-downloads] source missing at ${SRC}; skipping`);
+  process.exit(0);
+}
+
+try {
+  fs.mkdirSync(DST_DIR, { recursive: true });
+  fs.copyFileSync(SRC, DST);
+  console.log(`[sync-app-downloads] copied ${SRC} → ${DST}`);
+} catch (err) {
+  console.warn(`[sync-app-downloads] copy failed: ${err.message}`);
+  process.exit(0);
+}
diff --git a/src/data/apps-catalog.js b/src/data/apps-catalog.js
index b05f6ac96..a048a51f4 100644
--- a/src/data/apps-catalog.js
+++ b/src/data/apps-catalog.js
@@ -68,13 +68,6 @@ const PRESENTATION = {
     categories: ['Dashboards'],
     icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>,
   },
-  openwoo: {
-    name: 'OpenWoo',
-    tagline: 'WOO-compliant publication flow. Active disclosure, queryable archive, citation-stable URLs.',
-    href: '/apps/openwoo',
-    categories: ['Processes'],
-    icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18M12 3a14 14 0 0 0 0 18"/></svg>,
-  },
   zaakafhandelapp: {
     name: 'ZaakAfhandelApp',
     tagline: 'Citizen-facing case-status portal. ZGW APIs, archief koppelvlakken, audit trail.',
@@ -117,6 +110,13 @@ const PRESENTATION = {
     categories: ['Processes'],
     icon: <svg viewBox="0 0 24 24"><path d="M3 12h6l3-7 3 14 3-7h3"/></svg>,
   },
+  scholiq: {
+    name: 'Scholiq',
+    tagline: 'Learning record + LMS. Cursussen, inschrijvingen, certificaten, compliance-training.',
+    href: '/apps/scholiq',
+    categories: ['Processes'],
+    icon: <svg viewBox="0 0 24 24"><path d="M3 9l9-5 9 5-9 5z"/><path d="M7 11v5c0 1 2.2 2 5 2s5-1 5-2v-5"/><path d="M21 9v6"/></svg>,
+  },
   nldesign: {
     name: 'NLDesign',
     tagline: 'Drop-in NLDS theme for Nextcloud, with the Conduction component variants on top.',
@@ -124,11 +124,50 @@ const PRESENTATION = {
     categories: ['Documents'],
     icon: <svg viewBox="0 0 24 24"><path d="M4 4h16v6H4z"/><path d="M4 14h7v6H4z"/><path d="M14 14h6v6h-6z"/></svg>,
   },
+  shillinq: {
+    name: 'Shillinq',
+    tagline: 'Business administration on Nextcloud. Invoices, contracts, procurement on shared registers.',
+    href: '/apps/shillinq',
+    categories: ['Processes'],
+    icon: <svg viewBox="0 0 24 24"><path d="M3 6h18M3 12h18M3 18h12"/><circle cx="19" cy="18" r="2"/></svg>,
+  },
+  openbuilt: {
+    name: 'OpenBuilt',
+    tagline: 'Citizen-developer app builder. Compose Nextcloud apps from registers, connectors, workflows, no PHP.',
+    href: '/apps/openbuilt',
+    categories: ['Processes'],
+    icon: <svg viewBox="0 0 24 24"><path d="M3 12l9-9 9 9-9 9z"/><path d="M9 12h6M12 9v6"/></svg>,
+  },
+  doriath: {
+    name: 'Doriath',
+    tagline: 'Self-hosted password and secrets vault. Per-user, per-team, audited. In development.',
+    href: '/apps/doriath',
+    categories: ['Connectors'],
+    icon: <svg viewBox="0 0 24 24"><rect x="4" y="10" width="16" height="11" rx="2"/><path d="M8 10V7a4 4 0 0 1 8 0v3"/></svg>,
+  },
+  'app-versions': {
+    name: 'App Versions',
+    tagline: 'Pin and roll back any Nextcloud app version. Multi-source picker, audit-trailed. In development.',
+    href: '/apps/app-versions',
+    categories: ['Data'],
+    icon: <svg viewBox="0 0 24 24"><path d="M3 6h18v4H3zM3 14h12v4H3z"/><circle cx="19" cy="16" r="2"/></svg>,
+  },
 };
 
 /* Categories the website filters by, in the order the chips render. */
 export const APP_CATEGORIES = ['All', 'Data', 'Processes', 'Connectors', 'Documents', 'AI', 'Dashboards'];
 
+/* Site-wide app-count constants — the single source of truth for "we ship N apps".
+   APP_COUNT is the size of the PRESENTATION map (every Conduction app, including
+   in-development ones). Use this in copy instead of hardcoding a digit or word,
+   so the headline number stays in sync with the registry. INTEGRATED_COUNT is the
+   number of third-party tools we surface in the External-tools shelf on /connext;
+   ECOSYSTEM_COUNT is the headline "apps in the diagram" total used as the page
+   title. Update INTEGRATED_COUNT whenever the shelf changes. */
+export const APP_COUNT = Object.keys(PRESENTATION).length;
+export const INTEGRATED_COUNT = 14;
+export const ECOSYSTEM_COUNT = APP_COUNT + INTEGRATED_COUNT;
+
 /* Pick a status label from the version string. The Nextcloud app
    store leaves the latest_version as-is, so "0.7.9-beta.8" reads as
    beta and "1.6.0" reads as stable. Falls back to GitHub's tag when
@@ -192,7 +231,7 @@ export function getApps() {
   return out;
 }
 
-/* Convenience: the totals strip ("12 apps in the store · 22,400 installs"). */
+/* Convenience: the totals strip ("N apps in the store · M installs"). */
 export function getCatalogTotals() {
   const apps = getApps();
   const installs = apps.reduce((n, a) => n + (a.downloads || 0), 0);
diff --git a/src/data/partners-catalog.js b/src/data/partners-catalog.js
index 3e6285084..7ab3cd025 100644
--- a/src/data/partners-catalog.js
+++ b/src/data/partners-catalog.js
@@ -9,9 +9,23 @@
  * apps. Add href when a /partners/<slug> detail page exists. Add
  * logo when we have permission to display it.
  *
- * tier values: 'partner' | 'certified' | 'strategic'.
+ * Tier slugs (low → high):
+ *   - host       Hosts our open-source apps for their customers. May
+ *                resell Nextcloud-supported variants through their
+ *                own channels. No SLA with Conduction. No direct line
+ *                to our support, no input on the roadmap, not eligible
+ *                to respond to public tenders with our products.
+ *   - service    Has an SLA with Conduction. Their team can call us
+ *                directly for third-line support, named contacts,
+ *                input on bug priority and feature requests.
+ *   - certified  Trained and certified by Conduction. Joint roadmap.
+ *                Eligible to respond to public tenders alongside us.
+ *
  * apps:        free-form list of app or service names the partner
  *              ships, used as a facet on /partners.
+ * solutions:   free-form list of solution slugs (matching
+ *              /solutions/<slug>) the partner delivers, used both as
+ *              a facet on /partners and for the reverse lookup below.
  *
  * Summaries stay in Dutch when the partner's market is Dutch — the
  * audience that filters by an MKB hosting partner is the same audience
@@ -22,96 +36,107 @@
 import React from 'react';
 
 export const PARTNERS = [
+  // --------------------------------------------------------------
+  // Certified — top tier, joint roadmap, tender-eligible
+  // --------------------------------------------------------------
   {
     href: '/partners/acato',
-    tier: 'strategic',
+    tier: 'certified',
     name: 'Acato',
-    logo: '/img/partners/acato.png',
-    summary: <>Nederlandse open-source specialist uit Almere. Bouwt en host <span className="next-blue">Nextcloud</span>-omgevingen voor gemeenten en zorginstellingen, met focus op AVG-compliance en NLDS. Strategisch partner op hosting, stack-implementatie en gezamenlijke roadmap.</>,
-    apps: ['OpenRegister', 'OpenCatalogi', 'DocuDesk'],
-    solutions: ['woo', 'archief', 'software-catalog'],
+    logo: '/img/partners/acato.svg',
+    summary: <>Digital agency uit Almere. Bouwt toegankelijke websites en webapplicaties voor gemeenten en overheidsorganisaties, met focus op WCAG 2.2 AA en NLDS. Levert de Conduction Woo-solution op OpenCatalogi, OpenRegister en OpenConnector.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
   },
+
+  // --------------------------------------------------------------
+  // Service — SLA with Conduction, third-line support
+  // --------------------------------------------------------------
   {
-    tier: 'certified',
+    tier: 'service',
+    name: 'Shift2',
+    logo: '/img/partners/shift2.png',
+    summary: <>Nederlandse softwarebouwer voor gemeenten, waterschappen en provincies, onderdeel van de Conxillium-groep. Levert CMS, burgerzaken en formulieren, en daarnaast de Conduction Woo-solution op OpenCatalogi, OpenRegister en OpenConnector.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
+  },
+
+  // --------------------------------------------------------------
+  // Host — ships our apps, no SLA with Conduction
+  // --------------------------------------------------------------
+  {
+    tier: 'host',
     name: 'Centric',
     logo: '/img/partners/centric.png',
-    summary: <>Eén van Nederlands grootste software-leveranciers voor de publieke sector. Officieel <span className="next-blue">Nextcloud</span>-distributeur. Centric-klanten krijgen Conduction-apps geïntegreerd in hun bestaande Centric-omgeving.</>,
-    apps: ['Nextcloud', 'OpenZaak', 'OpenRegister', 'DocuDesk'],
-    solutions: ['zaakafhandeling', 'archief'],
+    summary: <>Een van Nederlands grootste IT-leveranciers voor gemeenten en de publieke sector. Werkt samen met <span className="next-blue">Nextcloud</span> aan soevereine werkplekken en host DocuDesk binnen dat traject.</>,
+    apps: ['Nextcloud', 'DocuDesk'],
+    solutions: [],
   },
   {
     href: '/partners/procolix',
-    tier: 'certified',
+    tier: 'host',
     name: 'Procolix',
     logo: '/img/partners/procolix.png',
-    summary: <>Nederlandse hoster en leverancier van proces- en zaakmanagement-software. Officieel <span className="next-blue">Nextcloud</span>-distributeur. Certified op DocuDesk en OpenConnector voor procesintegraties bij gemeenten en uitvoeringsorganisaties.</>,
-    apps: ['Nextcloud', 'DocuDesk', 'OpenConnector'],
-    solutions: ['zaakafhandeling', 'archief', 'legacy-erp'],
+    summary: <>Nederlandse managed-<span className="next-blue">Nextcloud</span>-hoster uit Dordrecht. Levert beheerde Nextcloud-omgevingen op eigen EU-infrastructuur, open-source als uitgangspunt.</>,
+    apps: ['Nextcloud'],
+    solutions: [],
   },
   {
-    tier: 'certified',
+    tier: 'host',
     name: 'The Goodcloud',
     logo: '/img/partners/goodcloud.png',
-    summary: <>Nederlandse <span className="next-blue">Nextcloud</span>-hoster voor MKB en non-profits. Officieel Nextcloud-distributeur. Levert beheerde omgevingen met Conduction-apps pre-installed, privacy-eerst hosting in NL.</>,
-    apps: ['Nextcloud', 'OpenRegister', 'MyDash'],
-    solutions: ['mkb-workspace'],
+    summary: <>Nederlandse managed-<span className="next-blue">Nextcloud</span>-hoster. Privacy-eerst, geen tracking, data in Nederland. Voor MKB, non-profits en privacybewuste organisaties.</>,
+    apps: ['Nextcloud'],
+    solutions: [],
   },
   {
-    tier: 'partner',
+    tier: 'host',
     name: 'BCT',
     logo: '/img/partners/bct.png',
-    summary: <>Nederlandse leverancier van document- en zaaksysteem-software voor de overheid. BCT-implementaties praten via OpenConnector met de Conduction-registers.</>,
-    apps: ['OpenConnector', 'DocuDesk', 'OpenZaak'],
-    solutions: ['zaakafhandeling', 'archief', 'legacy-erp'],
+    summary: <>Nederlandse leverancier van informatie- en documentmanagement-software (Corsa, Verix). Levert de Conduction Woo-solution aan organisaties die hun informatie-governance op orde willen krijgen.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
   },
   {
-    tier: 'partner',
+    tier: 'host',
     name: 'Open Gemeenten',
     logo: '/img/partners/open-gemeenten.png',
-    summary: <>Coöperatieve community van gemeenten die samen open-source software ontwikkelen en delen. Levert OpenZaak-implementaties bij aangesloten gemeenten en draagt patches terug naar upstream.</>,
-    apps: ['OpenZaak', 'OpenRegister', 'OpenCatalogi'],
-    solutions: ['zaakafhandeling', 'software-catalog'],
+    summary: <>Open-source platform voor gemeentelijke websites. Bedient ruim 30 gemeenten met toegankelijke sites (WCAG, internet.nl). Levert daarnaast de Conduction Woo-solution.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
   },
   {
-    tier: 'partner',
-    name: 'Exxellence',
+    tier: 'host',
+    name: 'xxllnc',
     logo: '/img/partners/exxellence.png',
-    summary: <>Nederlandse softwarebouwer gespecialiseerd in zaakafhandeling en burger-portaal-toepassingen. Reference-deploys op OpenZaak v4.x bij meerdere middelgrote gemeenten.</>,
-    apps: ['OpenZaak', 'DocuDesk'],
-    solutions: ['zaakafhandeling'],
+    summary: <>Nederlandse leverancier van zaakgericht-werken-software voor gemeenten (xxllnc Zaken, plus apps voor belastingen en het sociaal domein). Levert daarnaast de Conduction Woo-solution.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
   },
   {
     href: '/partners/yard',
-    tier: 'partner',
+    tier: 'host',
     name: 'YARD',
     logo: '/img/partners/yard.png',
-    summary: <>Digital design- en development-bureau uit Utrecht. Ontwerpt en bouwt klantgerichte digitale producten op <span className="next-blue">Nextcloud</span> voor gemeenten en publieke organisaties.</>,
-    apps: ['MyDash', 'OpenCatalogi'],
-    solutions: ['software-catalog', 'mkb-workspace'],
+    summary: <>Digital agency uit Utrecht voor gemeenten, zorg en kennisorganisaties. Open-source-georiënteerd, ruim 80 projecten. Levert de Conduction Woo-solution.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
   },
   {
-    tier: 'partner',
+    tier: 'host',
     name: 'iO',
     logo: '/img/partners/io.webp',
-    summary: <>Internationaal digital agency met Nederlandse vestiging in Amsterdam. Integreert Conduction-apps in bredere klantreis-trajecten voor publieke en semi-publieke organisaties.</>,
-    apps: ['OpenConnector', 'MyDash'],
-    solutions: ['legacy-erp', 'mkb-workspace'],
-  },
-  {
-    tier: 'partner',
-    name: 'Shift2',
-    logo: '/img/partners/shift2.png',
-    summary: <>Nederlands development-bureau gespecialiseerd in <span className="next-blue">Nextcloud</span> en open source. Implementeert Conduction-stacks bij MKB-klanten en gemeenten in midden-Nederland.</>,
-    apps: ['OpenRegister', 'MyDash'],
-    solutions: ['mkb-workspace'],
+    summary: <>Belgisch-Nederlands digital agency met kantoren in Amsterdam en Rotterdam. Bouwt klantgerichte digitale platforms en levert de Conduction Woo-solution aan publieke en semi-publieke organisaties.</>,
+    apps: ['OpenCatalogi', 'OpenRegister', 'OpenConnector'],
+    solutions: ['woo'],
   },
   {
-    tier: 'partner',
+    tier: 'host',
     name: 'Sendent',
     logo: '/img/partners/sendent.png',
-    summary: <>Nederlandse leverancier die Microsoft Outlook en Teams koppelt aan <span className="next-blue">Nextcloud</span>. Levert support op MyDash voor klanten die hun e-mail- en bestandsstroom binnen de eigen Nextcloud-omgeving willen houden.</>,
+    summary: <>Nederlandse leverancier die Microsoft Outlook en Teams koppelt aan <span className="next-blue">Nextcloud</span>. Levert support op MyDash voor klanten die hun mail- en bestandsstroom binnen de eigen Nextcloud-omgeving willen houden.</>,
     apps: ['MyDash'],
-    solutions: ['mkb-workspace'],
+    solutions: [],
   },
 ];
 
@@ -131,6 +156,6 @@ export const BECOME_PARTNER = {
   href: '/support#become-a-partner',
   eyebrow: 'Become a partner',
   title: 'Ship Conduction to your customers.',
-  body: 'Join as Partner, Certified, or Strategic. Conduction trains your team, you handle the rollouts. The apps stay open source, the relationship stays direct.',
+  body: 'Three tiers: Host (ship our apps), Service (SLA + third-line support), Certified (trained, joint roadmap, tender-eligible). The apps stay open source, the relationship stays direct.',
   ctaLabel: 'Apply through Support',
 };
diff --git a/src/data/sidecars-catalog.js b/src/data/sidecars-catalog.js
new file mode 100644
index 000000000..be1341c7f
--- /dev/null
+++ b/src/data/sidecars-catalog.js
@@ -0,0 +1,130 @@
+/**
+ * sidecars-catalog.js
+ * -------------------
+ * Hand-curated display metadata for ExApp sidecars. Mirrors the shape
+ * of apps-catalog.js but lives in its own file so the /apps grid
+ * stays focused on apps we build, not apps we wrap.
+ *
+ * Keys are the GitHub repo slug (matches `apps[].id` in
+ * `data/app-downloads.json`). URLs are mirrored in the sidecars-
+ * registry shipped from `@conduction/docusaurus-preset/data/sidecars-
+ * registry`; when you add or rename a sidecar update both.
+ *
+ * Adding a new sidecar: drop a row into PRESENTATION below plus a
+ * product page at `src/pages/sidecars/<slug>.mdx`.
+ */
+
+import React from 'react';
+import downloadsJson from '../../data/app-downloads.json';
+
+const PRESENTATION = {
+  openklant: {
+    name: 'OpenKlant',
+    tagline: 'Sidecar that wraps the OpenKlant citizen-contact register. ZGW-compatible, installed from Nextcloud.',
+    href: '/sidecars/openklant',
+    categories: ['Registers'],
+    icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M4 21a8 8 0 0 1 16 0"/></svg>,
+  },
+  openzaak: {
+    name: 'OpenZaak',
+    tagline: 'Sidecar for the OpenZaak case-management API. Koppelvlakken voor ZGW, vanuit Nextcloud.',
+    href: '/sidecars/openzaak',
+    categories: ['Registers'],
+    icon: <svg viewBox="0 0 24 24"><rect x="4" y="4" width="16" height="16" rx="2"/><path d="M9 9h6v6H9z"/></svg>,
+  },
+  valtimo: {
+    name: 'Valtimo',
+    tagline: 'Sidecar for the Valtimo BPMN engine. Workflow orchestration alongside the registers.',
+    href: '/sidecars/valtimo',
+    categories: ['Workflow'],
+    icon: <svg viewBox="0 0 24 24"><circle cx="6" cy="6" r="3"/><circle cx="18" cy="18" r="3"/><path d="M6 9v6a3 3 0 0 0 3 3h6"/></svg>,
+  },
+  'n8n-nextcloud': {
+    name: 'n8n',
+    tagline: 'Sidecar for n8n. Visual workflow automation, installed as a Nextcloud app.',
+    href: '/sidecars/n8n',
+    categories: ['Workflow'],
+    icon: <svg viewBox="0 0 24 24"><circle cx="5" cy="12" r="2"/><circle cx="12" cy="5" r="2"/><circle cx="12" cy="19" r="2"/><circle cx="19" cy="12" r="2"/><path d="M7 12h3M14 12h3M12 7v3M12 14v3"/></svg>,
+  },
+  keycloak: {
+    name: 'Keycloak',
+    tagline: 'Sidecar for Keycloak. Self-hosted identity and single sign-on next to Nextcloud.',
+    href: '/sidecars/keycloak',
+    categories: ['Identity'],
+    icon: <svg viewBox="0 0 24 24"><circle cx="9" cy="12" r="4"/><path d="M13 12h8M17 12v4M21 12v3"/></svg>,
+  },
+  ollama: {
+    name: 'Ollama',
+    tagline: 'Sidecar for Ollama. Local LLM inference served from the Nextcloud workspace.',
+    href: '/sidecars/ollama',
+    categories: ['AI'],
+    icon: <svg viewBox="0 0 24 24"><path d="M12 3l9 5v8l-9 5-9-5V8z"/><circle cx="12" cy="12" r="2"/></svg>,
+  },
+  'open-webui': {
+    name: 'Open WebUI',
+    tagline: 'Sidecar for Open WebUI. Chat-style UI for local models, inside Nextcloud.',
+    href: '/sidecars/open-webui',
+    categories: ['AI'],
+    icon: <svg viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="14" rx="2"/><path d="M7 9h2M7 13h6"/></svg>,
+  },
+  opentalk: {
+    name: 'OpenTalk',
+    tagline: 'Sidecar for OpenTalk. GDPR-compliant video conferencing, end-to-end encrypted, packaged as a Nextcloud ExApp.',
+    href: '/sidecars/opentalk',
+    categories: ['Workflow'],
+    icon: <svg viewBox="0 0 24 24"><path d="M21 11.5a8.4 8.4 0 0 1-9 8.4 8.4 8.4 0 0 1-3.4-.7L3 21l1.5-5.4A8.4 8.4 0 1 1 21 11.5z"/></svg>,
+  },
+};
+
+export const SIDECAR_CATEGORIES = ['All', 'Registers', 'Workflow', 'Identity', 'AI'];
+
+function statusFor(record) {
+  const ver = (record.store && record.store.latest_version) || (record.github && record.github.latest_release) || '';
+  const v = ver.toLowerCase();
+  if (!ver) return 'COMING SOON';
+  if (v.includes('beta') || v.includes('alpha') || v.includes('rc')) return 'BETA';
+  if (v.startsWith('0.') || v.startsWith('v0.')) return 'BETA';
+  return 'STABLE';
+}
+
+function versionLabel(record) {
+  const raw = (record.store && record.store.latest_version) || (record.github && record.github.latest_release) || '';
+  const stripped = raw.replace(/^v/, '').replace(/-(beta|alpha|rc).*$/i, '');
+  const short = stripped.split('.').slice(0, 2).join('.');
+  const dl = record.github && record.github.downloads;
+  const dlLabel = dl && dl > 0 ? `${dl.toLocaleString('en-US')} installs` : null;
+  return [short && `v${short}`, dlLabel].filter(Boolean).join(' · ');
+}
+
+export function getSidecars() {
+  const seen = new Set();
+  const out = [];
+  for (const record of downloadsJson.apps) {
+    const meta = PRESENTATION[record.id];
+    if (!meta) continue;
+    if (seen.has(record.id)) continue;
+    seen.add(record.id);
+    out.push({
+      ...meta,
+      status: statusFor(record),
+      version: versionLabel(record),
+      downloads: (record.github && record.github.downloads) || 0,
+    });
+  }
+  for (const id of Object.keys(PRESENTATION)) {
+    if (seen.has(id)) continue;
+    out.push({
+      ...PRESENTATION[id],
+      status: 'COMING SOON',
+      version: '',
+      downloads: 0,
+    });
+  }
+  const statusRank = {STABLE: 0, BETA: 1, 'COMING SOON': 2};
+  out.sort((a, b) => {
+    const r = (statusRank[a.status] ?? 9) - (statusRank[b.status] ?? 9);
+    if (r !== 0) return r;
+    return (b.downloads || 0) - (a.downloads || 0);
+  });
+  return out;
+}
diff --git a/src/data/sidecars-registry.js b/src/data/sidecars-registry.js
new file mode 100644
index 000000000..f5fa43c9e
--- /dev/null
+++ b/src/data/sidecars-registry.js
@@ -0,0 +1,46 @@
+/**
+ * @conduction/docusaurus-preset/data/sidecars-registry
+ *
+ * URL-only registry of every public Conduction ExApp sidecar.
+ * Sidecars are Nextcloud-installable wrappers around an existing
+ * third-party service (n8n, Keycloak, Ollama, the Common Ground
+ * registers). They live next to the apps-registry, not inside it,
+ * because they are not apps we build, they are apps we wrap.
+ *
+ * The shape mirrors apps-registry so cross-link components can treat
+ * a sidecar and an app uniformly:
+ *
+ *   1. /sidecars/<slug>                product detail page
+ *   2. https://docs.conduction.nl/<slug>    documentation site
+ *   3. /academy?app=<slug>             academy posts filtered by app
+ *
+ * Adding a new sidecar: add an entry here plus a product page at
+ *   conduction-website/src/pages/sidecars/<slug>.mdx
+ */
+
+export const SIDECARS_REGISTRY = {
+  openklant:       {slug: 'openklant',       name: 'OpenKlant',       productHref: '/sidecars/openklant',       docsHref: 'https://docs.conduction.nl/openklant',       academyHref: '/academy?app=openklant'},
+  openzaak:        {slug: 'openzaak',        name: 'OpenZaak',        productHref: '/sidecars/openzaak',        docsHref: 'https://docs.conduction.nl/openzaak',        academyHref: '/academy?app=openzaak'},
+  valtimo:         {slug: 'valtimo',         name: 'Valtimo',         productHref: '/sidecars/valtimo',         docsHref: 'https://docs.conduction.nl/valtimo',         academyHref: '/academy?app=valtimo'},
+  'n8n-nextcloud': {slug: 'n8n-nextcloud',   name: 'n8n',             productHref: '/sidecars/n8n',             docsHref: 'https://docs.conduction.nl/n8n',             academyHref: '/academy?app=n8n'},
+  keycloak:        {slug: 'keycloak',        name: 'Keycloak',        productHref: '/sidecars/keycloak',        docsHref: 'https://docs.conduction.nl/keycloak',        academyHref: '/academy?app=keycloak'},
+  ollama:          {slug: 'ollama',          name: 'Ollama',          productHref: '/sidecars/ollama',          docsHref: 'https://docs.conduction.nl/ollama',          academyHref: '/academy?app=ollama'},
+  'open-webui':    {slug: 'open-webui',      name: 'Open WebUI',      productHref: '/sidecars/open-webui',      docsHref: 'https://docs.conduction.nl/open-webui',      academyHref: '/academy?app=open-webui'},
+};
+
+export const SIDECAR_SLUGS = Object.keys(SIDECARS_REGISTRY);
+
+export const SIDECAR_LABELS = SIDECAR_SLUGS.reduce((acc, slug) => {
+  acc[slug] = SIDECARS_REGISTRY[slug].name;
+  return acc;
+}, {});
+
+/** Resolve a slug to its sidecar registry entry; returns undefined for unknown slugs. */
+export function getSidecar(slug) {
+  return SIDECARS_REGISTRY[slug];
+}
+
+/** Resolve an array of slugs, dropping any that aren't in the registry. */
+export function getSidecars(slugs = []) {
+  return slugs.map(getSidecar).filter(Boolean);
+}
diff --git a/src/pages/about.mdx b/src/pages/about.mdx
index 59870923b..a135ab914 100644
--- a/src/pages/about.mdx
+++ b/src/pages/about.mdx
@@ -1,6 +1,6 @@
 ---
 title: About, Conduction
-description: Conduction is a small Dutch open-source product company. Twelve apps, one workspace, one team in Amsterdam.
+description: Conduction is a small Dutch open-source product company. A workspace of open-source apps for Nextcloud, one team in Amsterdam.
 hide_table_of_contents: true
 ---
 
diff --git a/src/pages/apps/app-versions.mdx b/src/pages/apps/app-versions.mdx
new file mode 100644
index 000000000..75bcd7dfe
--- /dev/null
+++ b/src/pages/apps/app-versions.mdx
@@ -0,0 +1,72 @@
+---
+title: App Versions, Conduction
+description: Pin and roll back any Nextcloud app version. Multi-source picker, audit-trailed. In development.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="app-versions"
+  crumb={[{label: 'Apps', href: '/apps'}, 'App Versions']}
+  status={{label: 'In development', color: 'var(--c-cobalt-400)'}}
+  version="v0.x"
+  locales="NL · EN"
+  title="App Versions"
+  tagline={<>Pin and roll back any <span className="next-blue">Nextcloud</span> app version. Multi-source picker over the app store, GitHub releases, and private registries. Audit-trailed, admin-only, a safety net for fleet upgrades.</>}
+  secondaryCta={{label: 'Read the docs', href: 'https://app-versions.conduction.nl/'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/app-versions'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><path d="M3 6h18v4H3zM3 14h12v4H3z"/><circle cx="19" cy="16" r="2"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it does"
+    title="A version picker for the apps you actually run."
+    align="stack"
+    lede="Nextcloud's built-in updater jumps to the latest. App Versions adds the missing knob: pick any release, from any configured source, and pin or roll back without leaving the admin UI. The change is recorded, so when something breaks two days later you know who downgraded what."
+  />
+  <FeatureList>
+    <FeatureItem
+      icon={<svg viewBox="0 0 24 24"><path d="M3 6h18M3 12h18M3 18h12"/><circle cx="19" cy="18" r="2"/></svg>}
+      title="Per-app version table."
+    >
+      For every installed app: current version, available versions per source, last upgrade, rollback target. One screen, no command line.
+    </FeatureItem>
+    <FeatureItem
+      icon={<svg viewBox="0 0 24 24"><path d="M10 13a5 5 0 0 0 7 0l3-3a5 5 0 0 0-7-7l-1 1"/><path d="M14 11a5 5 0 0 0-7 0l-3 3a5 5 0 0 0 7 7l1-1"/></svg>}
+      title="Multiple sources."
+    >
+      Nextcloud app store, GitHub releases, private registries. A token per source if needed; private GitHub releases work the same as public ones.
+    </FeatureItem>
+    <FeatureItem
+      icon={<svg viewBox="0 0 24 24"><path d="M3 12a9 9 0 0 1 15-6.7L21 8"/><path d="M21 4v4h-4"/><path d="M21 12a9 9 0 0 1-15 6.7L3 16"/><path d="M3 20v-4h4"/></svg>}
+      title="Rollback or pin."
+    >
+      One click to revert to a known-good release. Or pin a version so a future auto-update can't move it. Per app, not fleet-wide.
+    </FeatureItem>
+    <FeatureItem
+      icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6M9 13l2 2 4-4"/></svg>}
+      title="Audit trail."
+    >
+      Every version change recorded: who, when, from what to what, why. Visible to the admin team, exportable for compliance.
+    </FeatureItem>
+  </FeatureList>
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Status"
+    title="Where it stands today."
+    align="stack"
+    lede="The four canonical specs — version-management, external-sources, pat-management, and import — are in place. Admin UI for the picker is in active development. Follow the repository on GitHub for releases, or read the spec-anchored docs for the design rationale."
+  />
+</Section>
+
+<CtaBanner
+  title="A safety net for the next upgrade cycle."
+  lede={<>App Versions is the difference between 'roll forward and hope' and 'roll back if it bites'. Open-source, admin-only, no extra service to run.</>}
+  primaryCta={{label: 'Read the docs', href: 'https://app-versions.conduction.nl/'}}
+  secondaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/app-versions'}}
+/>
diff --git a/src/pages/apps/decidesk.mdx b/src/pages/apps/decidesk.mdx
index d3979aae9..e8f777986 100644
--- a/src/pages/apps/decidesk.mdx
+++ b/src/pages/apps/decidesk.mdx
@@ -4,7 +4,7 @@ description: Decision-support and board management on Nextcloud. Agenda, dossier
 hide_table_of_contents: true
 ---
 
-import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, AppMock, RotatingCards, WidgetShelf, Showcase, AppCrossLinks} from '@conduction/docusaurus-preset/components';
+import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, AppMock, RotatingCards, WidgetShelf, Showcase, AgentTrace, McpToolShelf, AppCrossLinks} from '@conduction/docusaurus-preset/components';
 
 <DetailHero
   appId="decidesk"
@@ -206,6 +206,62 @@ import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, Pai
   ]}
 />
 
+<McpToolShelf
+  eyebrow="AI chat tools"
+  title="What DeciDesk adds to the workspace AI."
+  lede="Install DeciDesk and the workspace chat gets five governance tools. The AI can list your open action items, browse meetings, open a dossier, start a meeting from a calendar event, or capture a follow-up, all under the caller's own role and auth."
+  tools={[
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M4 6h16M4 12h16M4 18h10"/><circle cx="20" cy="18" r="2"/></svg>,
+      name: 'List open action items',
+      id: 'decidesk.listOpenActionItems',
+      description: 'Incomplete action items assigned to the caller, or all visible items. Scope mine / all, capped at 50.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="16" rx="2"/><path d="M3 9h18M9 4v16"/></svg>,
+      name: 'List recent meetings',
+      id: 'decidesk.listRecentMeetings',
+      description: "Recent meetings for the caller, newest first. Optional status filter: scheduled, in-progress, or closed.",
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M5 4h14v6H5zM5 14h14v6H5zM9 4v16"/></svg>,
+      name: 'Get meeting details',
+      id: 'decidesk.getMeetingDetails',
+      description: 'Full dossier for one meeting: agenda, participants, action items, decisions, attached files.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M10 8l6 4-6 4z"/></svg>,
+      name: 'Start meeting',
+      id: 'decidesk.startMeeting',
+      description: 'Move a scheduled meeting into in-progress. Requires chair or admin role; logged in the audit trail.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M9 11l3 3 8-8"/><path d="M20 12v6a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h9"/></svg>,
+      name: 'Add action item',
+      id: 'decidesk.addActionItem',
+      description: 'Create a new action item under a meeting, assigned to a participant, with optional due date.',
+      status: 'stable',
+    },
+  ]}
+  showIds={false}
+  trace={<AgentTrace
+    lines={[
+      {kind: 'tool', text: 'decidesk - listOpenActionItems (MCP)(scope: "mine", limit: 20)'},
+      {kind: 'note', bullet: 'done', text: 'Returned 7 open action items across 4 meetings'},
+      {kind: 'tool', text: 'decidesk - addActionItem (MCP)(meetingId: "m-2026-118",'},
+      {kind: 'continuation', text: 'assignee: "j.devries", title: "Send draft contract", dueDate: "2026-05-24")'},
+      {kind: 'note', bullet: 'done', text: 'Action item created, participant notified'},
+      {kind: 'status', text: 'Synthesising follow-up'},
+    ]}
+    cursor
+    mode="audit log on (every call recorded)"
+  />}
+/>
+
 <Section spacing="default" background="tinted">
   <SectionHead
     eyebrow="Pairs well with"
diff --git a/src/pages/apps/doriath.mdx b/src/pages/apps/doriath.mdx
new file mode 100644
index 000000000..19f61a442
--- /dev/null
+++ b/src/pages/apps/doriath.mdx
@@ -0,0 +1,46 @@
+---
+title: Doriath, Conduction
+description: Self-hosted password and secrets vault for Nextcloud. In development.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="doriath"
+  crumb={[{label: 'Apps', href: '/apps'}, 'Doriath']}
+  status={{label: 'In development', color: 'var(--c-cobalt-400)'}}
+  version="v0.x"
+  locales="NL · EN"
+  title="Doriath"
+  tagline={<>A self-hosted password and secrets vault for <span className="next-blue">Nextcloud</span>. Per-user vaults, team-shared secrets, an audit trail. In active development. Public beta later in 2026.</>}
+  secondaryCta={{label: 'Follow progress', href: 'https://github.com/ConductionNL/doriath'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/doriath'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><rect x="4" y="10" width="16" height="11" rx="2"/><path d="M8 10V7a4 4 0 0 1 8 0v3"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="In development"
+    title="What we're building."
+    align="stack"
+    lede="Doriath puts password and secret management inside your own Nextcloud instance. Each user gets a personal vault. Teams share scoped secrets with revocation. An admin sees a tamper-evident audit log. The cryptographic suite is pluggable and the central CA is rotatable."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Status"
+    title="Where it stands today."
+    align="stack"
+    lede="Encryption suites, secret storage, user sharing, and secret-request flows are in design and implementation. Dashboard, admin policy, and user settings are next. The app is not yet in the Nextcloud app store. Follow the repository on GitHub for releases."
+  />
+</Section>
+
+<CtaBanner
+  title="Want to use Doriath when it ships?"
+  lede={<>Doriath is in active development. Reach out and we'll keep you in the loop on the first public beta.</>}
+  primaryCta={{label: 'Talk to a partner', href: '/partners'}}
+  secondaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/doriath'}}
+/>
diff --git a/src/pages/apps/openbuilt.mdx b/src/pages/apps/openbuilt.mdx
new file mode 100644
index 000000000..6d932570c
--- /dev/null
+++ b/src/pages/apps/openbuilt.mdx
@@ -0,0 +1,173 @@
+---
+title: OpenBuilt, Conduction
+description: Citizen-developer app builder for Nextcloud. Compose apps from registers, connectors, workflows, no PHP.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, AgentTrace, McpToolShelf, AppCrossLinks} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="openbuilt"
+  crumb={[{label: 'Apps', href: '/apps'}, 'OpenBuilt']}
+  status={{label: 'Beta', color: 'var(--c-orange-knvb)'}}
+  version="v0.x"
+  locales="NL · EN"
+  title="OpenBuilt"
+  tagline={<>An app builder for citizen developers on <span className="next-blue">Nextcloud</span>. Compose your own app from OpenRegister schemas, OpenConnector APIs, Procest workflows, and DocuDesk documents. No PHP, no scaffolding.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/openbuilt'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/openbuilt'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><path d="M3 12l9-9 9 9-9 9z"/><path d="M9 12h6M12 9v6"/></svg>}
+/>
+
+<Section spacing="default">
+  <div style={{display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) 320px', gap: 'var(--space-8)', alignItems: 'start'}}>
+    <div style={{minWidth: 0}}>
+      <SectionHead
+        eyebrow="What it does"
+        title="Bouw je eigen app, zonder code."
+        align="stack"
+        lede="OpenBuilt laat niet-technische gebruikers eigen apps samenstellen uit de bouwstenen van het Conduction-ecosysteem. Schema's uit OpenRegister, integraties uit OpenConnector, workflows uit Procest, documenten uit DocuDesk. Alles draait als virtuele app in OpenBuilt; export naar een echte Nextcloud-app volgt in fase 2."
+      />
+      <FeatureList>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="16" rx="2"/><path d="M3 10h18M9 4v16"/></svg>}
+          title="Visuele app-designer."
+        >
+          Kies een register, voeg pagina's toe, koppel formulieren aan schema's. Een manifest beschrijft de app; OpenBuilt rendert hem.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M3 12h6l3-7 3 14 3-7h3"/></svg>}
+          title="Workflows declaratief, geen service-code."
+        >
+          State machines, aggregaties, notificaties en berekeningen leef in de schema-metadata. Geen PHP-service per app, conform ADR-031.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M5 12l5 5L20 7"/></svg>}
+          title="Virtuele apps eerst, echte app als optie."
+        >
+          Virtuele apps draaien in de OpenBuilt-shell. Klaar voor productie? Exporteer naar een echte Nextcloud-app met eigen ID en namespace.
+        </FeatureItem>
+      </FeatureList>
+    </div>
+    <AppCrossLinks
+      variant="rail"
+      apps={['openbuilt']}
+      surface="product"
+    />
+  </div>
+</Section>
+
+<McpToolShelf
+  eyebrow="AI chat tools"
+  title="Wat OpenBuilt aan de workspace-AI toevoegt."
+  lede="Installeer OpenBuilt en de chat krijgt acht tools waarmee de AI virtuele apps bouwt: een app aanmaken, een schema toevoegen, een pagina opzetten, een widget plaatsen, een versie promoveren. Elke aanroep loopt onder de eigen rol van de gebruiker en wordt geaudit."
+  tools={[
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M4 6h16M4 12h16M4 18h10"/></svg>,
+      name: 'Virtuele apps opsommen',
+      id: 'openbuilt.listApps',
+      description: 'Toon de virtuele apps in je organisatie met hun status en versie.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M5 4h14v6H5zM5 14h14v6H5zM9 4v16"/></svg>,
+      name: 'App-manifest ophalen',
+      id: 'openbuilt.getAppManifest',
+      description: 'Haal het runtime-manifest van één gepubliceerde virtuele app op via de slug.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M12 5v14M5 12h14"/></svg>,
+      name: 'Nieuwe app aanmaken',
+      id: 'openbuilt.createApp',
+      description: 'Maak een nieuwe virtuele app met een eerste draft-versie. Kies het versie-pad: single, dev-prod of dev-staging-prod.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M5 12h14M12 5l7 7-7 7"/></svg>,
+      name: 'Versie promoveren',
+      id: 'openbuilt.promoteVersion',
+      description: 'Promoveer een virtuele app van bijvoorbeeld development naar productie. Default-strategie laat de doelversie leeg.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M3 7h18M6 12h12M9 17h6"/></svg>,
+      name: 'Schema toevoegen of bijwerken',
+      id: 'openbuilt.upsertSchema',
+      description: 'Voeg een JSON Schema toe of werk het bij. De slug krijgt automatisch app- en versie-prefix.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="16" rx="2"/><path d="M3 9h18"/></svg>,
+      name: 'Pagina toevoegen of bijwerken',
+      id: 'openbuilt.upsertPage',
+      description: 'Maak of werk een pagina bij in het draft-manifest. Type is dashboard, index, detail of form.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>,
+      name: 'Widget plaatsen',
+      id: 'openbuilt.addWidget',
+      description: 'Voeg een widget toe aan een pagina: stat-counter, grafiek, lijst of een ander type uit de catalogus.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M4 6h16M4 12h16M4 18h16"/></svg>,
+      name: 'Menu-item toevoegen of bijwerken',
+      id: 'openbuilt.upsertMenuItem',
+      description: 'Maak of werk een top-level menu-item bij in het draft-manifest. Route, volgorde en icoon stel je per item in.',
+      status: 'stable',
+    },
+  ]}
+  showIds={false}
+  trace={<AgentTrace
+    lines={[
+      {kind: 'tool', text: 'openbuilt - createApp (MCP)(name: "Subsidie-aanvraag",'},
+      {kind: 'continuation', text: 'preset: "dev-prod", description: "Aanvragen + behandeling")'},
+      {kind: 'note', bullet: 'done', text: 'App aangemaakt, draft v0.1 klaar'},
+      {kind: 'tool', text: 'openbuilt - upsertSchema (MCP)(appSlug: "subsidie-aanvraag",'},
+      {kind: 'continuation', text: 'slug: "aanvraag", properties: { naam, bedrag, status }, required: ["naam"])'},
+      {kind: 'note', bullet: 'done', text: 'Schema toegevoegd aan development-versie'},
+      {kind: 'status', text: 'Pagina opbouwen'},
+    ]}
+    cursor
+    mode="audit log on (elke aanroep wordt vastgelegd)"
+  />}
+/>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Pairs well with"
+    title="De apps die OpenBuilt aan elkaar knoopt."
+    align="stack"
+  />
+  <PairRow>
+    <PairCard
+      href="/apps/openregister"
+      icon={<svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/></svg>}
+      name="OpenRegister"
+      why="Elk virtueel app-manifest en alle objecten zijn OpenRegister-rijen."
+    />
+    <PairCard
+      href="/apps/openconnector"
+      icon={<svg viewBox="0 0 24 24"><circle cx="6" cy="12" r="3"/><circle cx="18" cy="6" r="3"/><circle cx="18" cy="18" r="3"/><path d="M9 12h9M9 12l9-6M9 12l9 6"/></svg>}
+      name="OpenConnector"
+      why="Externe API's en bestand-bronnen koppelen zonder code."
+    />
+    <PairCard
+      href="/apps/procest"
+      icon={<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M12 7v5l3 3"/></svg>}
+      name="Procest"
+      why="Workflows en goedkeurings-stappen voor virtual-app processen."
+    />
+  </PairRow>
+</Section>
+
+<CtaBanner
+  title="Citizen-developer apps, in één Nextcloud."
+  lede={<>OpenBuilt geeft niet-technische gebruikers de bouwblokken om eigen apps samen te stellen. Schema's, koppelvlakken, workflows, allemaal in handen van wie het probleem kent.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/apps/openregister.mdx b/src/pages/apps/openregister.mdx
index c8b4ecfa2..3685bf35a 100644
--- a/src/pages/apps/openregister.mdx
+++ b/src/pages/apps/openregister.mdx
@@ -4,7 +4,7 @@ description: Schema-driven object store with audit trail. The data foundation un
 hide_table_of_contents: true
 ---
 
-import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, FeatureGrid, PairRow, PairCard, CtaBanner, AppMock, RotatingCards, WidgetShelf, Showcase, AgentTrace, AppCrossLinks} from '@conduction/docusaurus-preset/components';
+import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, FeatureGrid, PairRow, PairCard, CtaBanner, AppMock, RotatingCards, WidgetShelf, Showcase, AgentTrace, McpToolShelf, AppCrossLinks} from '@conduction/docusaurus-preset/components';
 
 <DetailHero
   appId="openregister"
@@ -170,10 +170,11 @@ import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, FeatureGrid,
   ]}
 />
 
+<div id="integrations" />
 <Showcase
   eyebrow="How OpenRegister plugs into the workspace"
   title="Typed data, surfaced everywhere."
-  lede="Three integration paths that turn registers into the system of record across Mail, Files, workflow tools, and AI assistants."
+  lede="Five integration paths that turn registers into the system of record across Mail, Files, workflow tools, knowledge bases, and AI assistants."
   layout="side"
   defaultOpen="mail-files"
   items={[
@@ -187,14 +188,21 @@ import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, FeatureGrid,
     {
       id: 'windmill-n8n',
       title: 'Windmill and n8n',
-      summary: 'Trigger workflows on register events. New row, schema change, validation failure, archive transition — each one fires a webhook your Windmill or n8n flow can consume. Outcomes write back to the row.',
+      summary: 'Trigger workflows on register events. New row, schema change, validation failure, archive transition: each one fires a webhook your Windmill or n8n flow can consume. Outcomes write back to the row.',
       cta: {label: 'See the workflow examples', href: 'https://docs.conduction.nl/openregister/windmill-n8n'},
       panel: <AppMock app="openconnector" />,
     },
+    {
+      id: 'xwiki',
+      title: 'XWiki',
+      summary: 'Embed a live register query into any XWiki page through OpenConnector. Procedure docs stay current automatically. The article and the data live one click apart.',
+      cta: {label: 'See the XWiki integration', href: 'https://docs.conduction.nl/openregister/xwiki'},
+      panel: <AppMock app="opencatalogi" />,
+    },
     {
       id: 'llms',
       title: 'LLMs (Claude, Mistral, Ollama)',
-      summary: 'Plain-language search across every register. The LLM rewrites your question into a structured query, OpenRegister returns typed rows with citation-stable IDs. Every call audits.',
+      summary: 'Plain-language search across every register. The LLM rewrites your question into a structured query, OpenRegister returns typed rows with citation-stable IDs. Claude and Mistral run as cloud adapters through OpenConnector; Ollama runs as a sidecar on your own hardware. Every call audits.',
       cta: {label: 'See the semantic-search adapter', href: 'https://docs.conduction.nl/openregister/llm-search'},
       panel: <AgentTrace
         lines={[
@@ -209,7 +217,106 @@ import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, FeatureGrid,
         mode="audit log on (every query recorded)"
       />,
     },
+    {
+      id: 'presidio',
+      title: 'Presidio (PII redaction)',
+      summary: 'Microsoft Presidio detects personal data in any register row or attached document. DocuDesk runs it before publication; OpenConnector runs it before forwarding to a cloud LLM. The register keeps the source, the outside world only sees the redacted version.',
+      cta: {label: 'See the redaction pipeline', href: 'https://docs.conduction.nl/openregister/presidio'},
+      panel: <AppMock app="docudesk" />,
+    },
+  ]}
+/>
+
+<Section id="leaves" anchor="leaves">
+  <SectionHead
+    eyebrow="The 24 workspace leaves"
+    title="One sidebar tab per Nextcloud app you already run."
+    lede="OpenRegister surfaces every linked entity from the surrounding Nextcloud workspace on the object's detail page. Six built-ins ship with the install; the other 18 light up when you enable the underlying app. Each leaf is documented end-to-end in the product docs."
+  />
+
+  <FeatureGrid
+    legend
+    items={[
+      {group: 'Core (ships with every install)'},
+      {label: 'Files', tip: "Files attached to the object's auto-created folder. Drag-drop in Nextcloud Files, list them inline on the object detail page.", href: 'https://openregister.conduction.nl/docs/Integrations/leaf-system', status: 'stable'},
+      {label: 'Notes', tip: 'Free-form notes the team writes against the record. Markdown, signed by the author, scoped to the object.', href: 'https://openregister.conduction.nl/docs/Integrations/leaf-system', status: 'stable'},
+      {label: 'Tags', tip: 'System tags applied to the object. Same tag pool as files, cross-references the workspace taxonomy.', href: 'https://openregister.conduction.nl/docs/Integrations/leaf-system', status: 'stable'},
+      {label: 'Tasks', tip: "CalDAV VTODO tasks linked to the record. Due dates and assignees live in the user's own task app.", href: 'https://openregister.conduction.nl/docs/Integrations/leaf-system', status: 'stable'},
+      {label: 'Audit trail', tip: 'Every read, write, and schema change leaves a signed, citation-stable entry. WOO and BIO compliance evidence ships with the install.', href: 'https://openregister.conduction.nl/docs/Integrations/leaf-system', status: 'stable'},
+      {label: 'Shares', tip: "Nextcloud shares created against the object's files. Surfaces who has access, when, and why.", href: 'https://openregister.conduction.nl/docs/Integrations/leaf-system', status: 'stable'},
+
+      {group: 'Communication (lights up with NC Calendar / Contacts / Mail / Talk)'},
+      {label: 'Calendar', tip: "CalDAV events linked to the record. Meet-about-this-case in one click, agenda stays in the user's own calendar.", href: 'https://openregister.conduction.nl/docs/Integrations/calendar', status: 'stable'},
+      {label: 'Contacts', tip: 'CardDAV contacts associated with the record. Customer, vendor, citizen, every party lives in NC Contacts.', href: 'https://openregister.conduction.nl/docs/Integrations/contacts', status: 'stable'},
+      {label: 'Email', tip: 'Mail messages linked to the record. Subject, sender, date. Click through to NC Mail to reply.', href: 'https://openregister.conduction.nl/docs/Integrations/email', status: 'stable'},
+      {label: 'Talk', tip: "NC Talk conversations carrying the record's discussions. Calls, chat history, screen-shares, all in NC Talk, surfaced on the record.", href: 'https://openregister.conduction.nl/docs/Integrations/talk', status: 'stable'},
+
+      {group: 'Knowledge & documents (NC Bookmarks / Collectives / Maps / Photos)'},
+      {label: 'Bookmarks', tip: 'NC Bookmarks tagged with the record. Reference URLs, regulatory sources, partner sites, all one tag away from the case.', href: 'https://openregister.conduction.nl/docs/Integrations/bookmarks', status: 'stable'},
+      {label: 'Collectives', tip: 'NC Collectives pages, the team wiki for the case. Markdown, versioned, with a marker in the slug.', href: 'https://openregister.conduction.nl/docs/Integrations/collectives', status: 'stable'},
+      {label: 'Maps', tip: "NC Maps favorites with the record's coordinates. Site visits, asset locations, on-the-ground evidence.", href: 'https://openregister.conduction.nl/docs/Integrations/maps', status: 'stable'},
+      {label: 'Photos', tip: 'NC Photos albums tied to the record. Photo evidence, signed timestamps, geo-tagged.', href: 'https://openregister.conduction.nl/docs/Integrations/photos', status: 'stable'},
+
+      {group: 'Workflow (NC Activity / Analytics / Cospend / Deck / Flow / Forms / Polls / TimeManager)'},
+      {label: 'Activity', tip: 'Nextcloud activity stream filtered to the record. Who touched the file, who shared what, when.', href: 'https://openregister.conduction.nl/docs/Integrations/activity', status: 'stable'},
+      {label: 'Analytics', tip: 'NC Analytics reports linked to the record. Charts and KPIs that reference the same data the case is built on.', href: 'https://openregister.conduction.nl/docs/Integrations/analytics', status: 'stable'},
+      {label: 'Cospend', tip: 'NC Cospend projects, budget and expense tracking attached to the case.', href: 'https://openregister.conduction.nl/docs/Integrations/cospend', status: 'stable'},
+      {label: 'Deck', tip: 'NC Deck cards linked to the record. Per-case kanban without leaving the case.', href: 'https://openregister.conduction.nl/docs/Integrations/deck', status: 'stable'},
+      {label: 'Flow', tip: "NC Workflow Engine rules referencing the record's schema. Automate notifications, retention, escalations.", href: 'https://openregister.conduction.nl/docs/Integrations/flow', status: 'stable'},
+      {label: 'Forms', tip: 'NC Forms responses linked to the record. Citizen submissions, survey results, intake forms.', href: 'https://openregister.conduction.nl/docs/Integrations/forms', status: 'stable'},
+      {label: 'Polls', tip: 'NC Polls scheduled around the record. Stakeholder check-ins, decision tracking.', href: 'https://openregister.conduction.nl/docs/Integrations/polls', status: 'stable'},
+      {label: 'Time tracker', tip: 'NC TimeManager projects with hours logged against the record. Billable evidence per case.', href: 'https://openregister.conduction.nl/docs/Integrations/time-tracker', status: 'stable'},
+
+      {group: 'External (via OpenConnector)'},
+      {label: 'XWiki', tip: 'XWiki pages linked through OpenConnector. Knowledge-base articles, runbooks, procedure docs from outside Nextcloud, surfaced inside it.', href: 'https://openregister.conduction.nl/docs/Integrations/xwiki', status: 'stable'},
+      {label: 'OpenProject', tip: 'OpenProject work packages linked through OpenConnector. Project-management workflows from outside the workspace, surfaced on the record.', href: 'https://openregister.conduction.nl/docs/Integrations/openproject', status: 'stable'},
+    ]}
+  />
+
+  <div style={{textAlign: 'center', marginTop: 'var(--space-6)', color: 'var(--color-text-muted)', fontSize: '0.95em'}}>
+    All 24 leaves use the same <a href="https://openregister.conduction.nl/docs/Integrations/pluggable-integration-registry">pluggable integration registry</a>. Add your own with the leaf-scaffold script and it appears on every register the moment you install your app.
+  </div>
+</Section>
+
+<McpToolShelf
+  eyebrow="AI chat tools"
+  title="What OpenRegister adds to the workspace AI."
+  lede="Install OpenRegister and the workspace chat gets three tools that cover the full register surface. The AI can read or write registers, schemas, and objects under the caller's own session, with every call validated against the schema and recorded in the signed audit log."
+  tools={[
+    {
+      icon: <svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/></svg>,
+      name: 'Manage registers',
+      id: 'openregister.registers',
+      description: 'List, fetch, create, update, or delete registers. Registers group schemas and the objects written against them.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M5 4h14v6H5zM5 14h14v6H5zM9 4v16"/></svg>,
+      name: 'Manage schemas',
+      id: 'openregister.schemas',
+      description: 'List, fetch, create, update, or delete schemas. A schema is the JSON Schema that defines an object type inside a register.',
+      status: 'stable',
+    },
+    {
+      icon: <svg viewBox="0 0 24 24"><path d="M3 7h18M6 12h12M9 17h6"/></svg>,
+      name: 'Manage objects',
+      id: 'openregister.objects',
+      description: 'List, fetch, create, update, or delete objects. Every write is validated against the schema and recorded in the signed audit log.',
+      status: 'stable',
+    },
   ]}
+  showIds={false}
+  trace={<AgentTrace
+    lines={[
+      {kind: 'tool', text: 'openregister - objects (MCP)(action: "list", register: "woo",'},
+      {kind: 'continuation', text: 'schema: "verzoek", filter: {status: "open", deadline_before: "2026-04-01"})'},
+      {kind: 'note', bullet: 'info', text: 'Rewriting natural language to a typed query', muted: '(claude-sonnet-4-6)'},
+      {kind: 'note', bullet: 'done', text: 'Returned 14 objects with citation IDs'},
+      {kind: 'status', text: 'Synthesising answer'},
+    ]}
+    cursor
+    mode="audit log on (every call recorded)"
+  />}
 />
 
 <Section spacing="default" background="tinted">
diff --git a/src/pages/apps/openwoo.mdx b/src/pages/apps/openwoo.mdx
deleted file mode 100644
index 10bfe8a8e..000000000
--- a/src/pages/apps/openwoo.mdx
+++ /dev/null
@@ -1,252 +0,0 @@
----
-title: OpenWoo, Conduction
-description: WOO-compliant publication flow on Nextcloud. Active disclosure, queryable archive, citation-stable URLs.
-hide_table_of_contents: true
----
-
-import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, AppMock, RotatingCards, WidgetShelf, Showcase, AgentTrace, AppCrossLinks} from '@conduction/docusaurus-preset/components';
-
-<DetailHero
-  appId="openwoo"
-  crumb={[{label: 'Apps', href: '/apps'}, 'OpenWoo']}
-  status={{label: 'Stable', color: 'var(--c-mint-500)'}}
-  version="v1.4"
-  locales="NL · EN"
-  title="OpenWoo"
-  tagline={<>Wet open overheid (Woo)-compliant publication flow on your <span className="next-blue">Nextcloud</span>. Eleven categories, audit log, citation-stable URLs, federation to data.overheid.nl. Citizens find what they need without filing a Woo request.</>}
-  primaryCta={{label: 'Install from app store', href: '/install'}}
-  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/openwoo'}}
-  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/OpenWooApp'}}
-  iconColor="var(--c-blue-cobalt)"
-  icon={<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18M12 3a14 14 0 0 0 0 18"/></svg>}
-  illustration={<AppMock app="openwoo" />}
-/>
-
-<Section spacing="default">
-  <div style={{display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) 320px', gap: 'var(--space-8)', alignItems: 'start'}}>
-    <div style={{minWidth: 0}}>
-      <SectionHead
-        eyebrow="What it does"
-        title="Active disclosure, by category."
-        align="stack"
-        lede="OpenWoo wraps OpenRegister, OpenCatalogi, and DocuDesk in a Woo-specific configuration. The eleven categories are pre-defined, the audit log covers every publication, retention runs automatically per your archive policy."
-      />
-      <FeatureList>
-    <FeatureItem
-      icon={<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18M12 3a14 14 0 0 0 0 18"/></svg>}
-      title="Eleven Woo categories, pre-configured."
-    >
-      Laws and binding regulations, organisation and working methods, council documents, agreements, annual plans and reports, subsidies, complaints, investigations, decisions, datasets, meeting documents. All as typed registers, all in citizen-search.
-    </FeatureItem>
-    <FeatureItem
-      icon={<svg viewBox="0 0 24 24"><path d="M3 7l9-4 9 4-9 4-9-4z"/></svg>}
-      title="Federation to data.overheid.nl."
-    >
-      Every published Woo record is automatically indexed on data.overheid.nl. DCAT-AP-NL metadata out of the box.
-    </FeatureItem>
-    <FeatureItem
-      icon={<svg viewBox="0 0 24 24"><path d="M12 2l3 6 6 1-4.5 4.5 1 6-5.5-3-5.5 3 1-6L3 9l6-1z"/></svg>}
-      title="Citation-stable URLs."
-    >
-      Every Woo record gets a permanent identifier the moment it is first published. Parliamentary questions, legal dossiers, and journalistic articles keep working after a reorganisation or platform migration.
-    </FeatureItem>
-    <FeatureItem
-      icon={<svg viewBox="0 0 24 24"><path d="M12 2v4M12 18v4M2 12h4M18 12h4M5 5l3 3M16 16l3 3M5 19l3-3M16 8l3-3"/></svg>}
-      title="Audit trail per publication."
-    >
-      Every disclosure, edit, withdrawal, and access leaves a tamper-evident trail. The evidence pack you need for an audit, complaint, or appeal is ready.
-    </FeatureItem>
-    <FeatureItem
-      icon={<svg viewBox="0 0 24 24"><path d="M21 11.5a8.4 8.4 0 0 1-9 8.4 8.4 8.4 0 0 1-3.4-.7L3 21l1.5-5.4A8.4 8.4 0 1 1 21 11.5z"/></svg>}
-      title="Anonymisation upfront via DocuDesk."
-    >
-      DocuDesk strips PII from inbound documents before they are published. Microsoft Presidio under the hood, tuned for Dutch personal terminology.
-    </FeatureItem>
-  </FeatureList>
-    </div>
-    <AppCrossLinks
-      variant="rail"
-      apps={['openwoo']}
-      surface="product"
-    />
-  </div>
-</Section>
-
-<RotatingCards
-  eyebrow="Three ways OpenWoo earns its place"
-  title="Eleven categories, citation-stable, citizen-search ready."
-  lede="Scroll the cards. Each pins as you reach it; the next slides up to cover."
-  cards={[
-    {
-      tone: 'forest',
-      eyebrow: 'Pre-configured',
-      title: 'The eleven Woo categories, day one.',
-      summary: 'Laws, organisation, council documents, agreements, plans, reports, subsidies, complaints, investigations, decisions, datasets, meeting documents. Each as a typed register, all in citizen-search.',
-      cta: {label: 'See OpenWoo', href: '/apps/openwoo'},
-      panel: <AppMock app="openwoo" />,
-    },
-    {
-      tone: 'lavender',
-      eyebrow: 'Citation-stable',
-      title: 'URLs that survive a reorganisation.',
-      summary: 'Every Woo record gets a permanent identifier the moment it is first published. Parliamentary questions, legal dossiers, journalistic articles keep working after platform migrations.',
-      cta: {label: 'See OpenRegister', href: '/apps/openregister'},
-      panel: <AppMock app="openregister" />,
-    },
-    {
-      tone: 'workspace',
-      eyebrow: 'Federated',
-      title: 'Indexed on data.overheid.nl automatically.',
-      summary: 'Every published record becomes a DCAT-AP-NL entry on data.overheid.nl. Citizens find it without filing a Woo request, journalists query it without scraping.',
-      cta: {label: 'See OpenCatalogi', href: '/apps/opencatalogi'},
-      panel: <AppMock app="opencatalogi" />,
-    },
-  ]}
-/>
-
-<WidgetShelf
-  eyebrow="Widgets we ship"
-  title="The Woo team's morning view."
-  lede="Install OpenWoo and these widgets show up on the Woo-coordinator's dashboard. Pending requests up top, deadlines in the middle, recently published below."
-  widgets={[
-    {
-      title: 'Pending Woo requests',
-      desc: 'Inbound requests from citizens and journalists. Sorted by deadline, redaction status visible at a glance.',
-      panel: (
-        <div style={{display: 'flex', flexDirection: 'column', gap: 6, fontFamily: 'var(--conduction-typography-font-family-body)'}}>
-          {[
-            {tone: 'var(--c-orange-knvb)', l1: '70%', l2: '50%', stage: 'redacting'},
-            {tone: 'var(--c-lavender-300)', l1: '60%', l2: '45%', stage: 'review'},
-            {tone: 'var(--c-red-vermillion)', l1: '65%', l2: '40%', stage: 'overdue'},
-            {tone: 'var(--c-mint-500)', l1: '75%', l2: '50%', stage: 'ready'},
-            {tone: 'var(--c-cobalt-300)', l1: '55%', l2: '35%', stage: 'intake'},
-          ].map((row, i) => (
-            <div key={i} style={{display: 'flex', alignItems: 'center', gap: 8}}>
-              <span style={{width: 14, height: 16, clipPath: 'var(--hex-pointy-top)', background: row.tone, flexShrink: 0}}></span>
-              <div style={{flex: 1, display: 'flex', flexDirection: 'column', gap: 3}}>
-                <div style={{height: 5, width: row.l1, background: 'var(--c-cobalt-700)', borderRadius: 1}}></div>
-                <div style={{height: 3, width: row.l2, background: 'var(--c-cobalt-200)', borderRadius: 1}}></div>
-              </div>
-              <div style={{fontFamily: 'var(--conduction-typography-font-family-code)', fontSize: 8, letterSpacing: '0.05em', textTransform: 'uppercase', color: 'var(--c-cobalt-500)'}}>{row.stage}</div>
-            </div>
-          ))}
-        </div>
-      ),
-    },
-    {
-      title: 'Deadlines this week',
-      desc: 'Statutory four-week response window. Pre-warning before the day, escalation after.',
-      panel: (
-        <div style={{display: 'flex', flexDirection: 'column', gap: 6}}>
-          <div style={{display: 'flex', alignItems: 'baseline', gap: 6, marginBottom: 4}}>
-            <div style={{fontFamily: 'var(--conduction-typography-font-family-code)', fontSize: 28, fontWeight: 700, color: 'var(--c-orange-knvb)'}}>4</div>
-            <div style={{fontFamily: 'var(--conduction-typography-font-family-code)', fontSize: 11, letterSpacing: '0.06em', textTransform: 'uppercase', color: 'var(--c-cobalt-400)'}}>this week</div>
-          </div>
-          {[{w: '70%', accent: true}, {w: '60%'}, {w: '55%'}, {w: '50%'}].map((row, i) => (
-            <div key={i} style={{display: 'flex', alignItems: 'center', gap: 6}}>
-              <span style={{width: 8, height: 9, clipPath: 'var(--hex-pointy-top)', background: row.accent ? 'var(--c-orange-knvb)' : 'var(--c-cobalt-300)'}}></span>
-              <div style={{flex: 1, height: 4, background: 'var(--c-cobalt-200)', borderRadius: 1, width: row.w}}></div>
-              <div style={{height: 4, width: 30, background: 'var(--c-cobalt-100)', borderRadius: 1}}></div>
-            </div>
-          ))}
-        </div>
-      ),
-    },
-    {
-      title: 'Recently published',
-      desc: 'Last disclosures pushed live, with category and citation ID. One click back to the published record.',
-      panel: (
-        <div style={{display: 'flex', flexDirection: 'column', gap: 6}}>
-          {['Convenanten · 2026-Q1', 'Raadsstukken · maart', 'Onderzoeken · TUI', 'Beschikkingen · subsidie'].map((_, i) => (
-            <div key={i} style={{display: 'flex', alignItems: 'center', gap: 8, padding: '4px 0', borderBottom: i < 3 ? '1px solid var(--c-cobalt-50)' : 'none'}}>
-              <span style={{width: 10, height: 11, clipPath: 'var(--hex-pointy-top)', background: 'var(--c-mint-500)'}}></span>
-              <div style={{flex: 1, display: 'flex', flexDirection: 'column', gap: 2}}>
-                <div style={{height: 4, width: '70%', background: 'var(--c-cobalt-700)', borderRadius: 1}}></div>
-                <div style={{height: 3, width: '50%', background: 'var(--c-cobalt-200)', borderRadius: 1}}></div>
-              </div>
-              <div style={{fontFamily: 'var(--conduction-typography-font-family-code)', fontSize: 8, color: 'var(--c-cobalt-400)'}}>WOO-2026-{120 + i}</div>
-            </div>
-          ))}
-        </div>
-      ),
-    },
-  ]}
-/>
-
-<Showcase
-  eyebrow="How OpenWoo plugs into the workspace"
-  title="From inbound request to published record."
-  lede="Three integration paths that move a Woo request from inbox to data.overheid.nl, mostly through the Nextcloud apps you already use."
-  layout="side"
-  defaultOpen="mail-files"
-  items={[
-    {
-      id: 'mail-files',
-      title: 'Mail and Files',
-      summary: 'Citizens and journalists email a Woo request. The mail lands on the case automatically; attachments file themselves under the request dossier; the coordinator sees the new request in the case timeline without leaving Mail.',
-      cta: {label: 'See the integration guide', href: 'https://docs.conduction.nl/openwoo/mail-files'},
-      panel: <AppMock app="openwoo" />,
-    },
-    {
-      id: 'docudesk-redact',
-      title: 'DocuDesk redaction',
-      summary: 'Inbound documents pass through Presidio plus an LLM second pass before publication. PII gets stripped, the cleaned version goes to the public register, the original stays sealed in archive with a tamper-evident link.',
-      cta: {label: 'See the privacy pipeline', href: 'https://docs.conduction.nl/openwoo/redaction'},
-      panel: <AgentTrace
-        lines={[
-          {kind: 'note',  bullet: 'done', text: 'Document parsed (PDF, 8 pages)'},
-          {kind: 'tool',  text: 'docudesk - redact_pii (MCP)(file: woo-2026-118.pdf,'},
-          {kind: 'continuation', text: 'mode: "strict", locales: ["nl-NL"])'},
-          {kind: 'note',  bullet: 'info', text: 'PII scan: 23 matches', muted: '(BSN, addresses, phone numbers)'},
-          {kind: 'tool',  text: 'docudesk - llm_review (MCP)(model: "claude-sonnet-4-6",'},
-          {kind: 'continuation', text: 'context_window: 8)'},
-          {kind: 'status', text: 'Sealing original, publishing cleaned version'},
-        ]}
-        cursor
-        mode="audit log on (every redaction recorded)"
-      />,
-    },
-    {
-      id: 'data-overheid',
-      title: 'Federation to data.overheid.nl',
-      summary: 'Every published record becomes a DCAT-AP-NL entry on data.overheid.nl. OpenConnector handles the OAI-PMH push; citizens find the disclosure through the national portal without filing a separate Woo request.',
-      cta: {label: 'See the federation guide', href: 'https://docs.conduction.nl/openwoo/federation'},
-      panel: <AppMock app="openconnector" />,
-    },
-  ]}
-/>
-
-<Section spacing="default" background="tinted">
-  <SectionHead
-    eyebrow="Pairs well with"
-    title="Three apps that build the Woo stack."
-    align="stack"
-  />
-  <PairRow>
-    <PairCard
-      href="/apps/openregister"
-      icon={<svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/></svg>}
-      name="OpenRegister"
-      why="Each Woo category becomes a typed register. Audit log, citation-stable IDs, retention."
-    />
-    <PairCard
-      href="/apps/opencatalogi"
-      icon={<svg viewBox="0 0 24 24"><path d="M3 7l9-4 9 4-9 4-9-4z"/><path d="M3 12l9 4 9-4M3 17l9 4 9-4"/></svg>}
-      name="OpenCatalogi"
-      why="The searchable publication layer. Citizens land at jouwgemeente.nl/woo."
-    />
-    <PairCard
-      href="/apps/docudesk"
-      icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>}
-      name="DocuDesk"
-      why="Anonymises documents before publication. Generates decisions per NLDS templates."
-    />
-  </PairRow>
-</Section>
-
-<CtaBanner
-  title="Wet open overheid, ready to publish."
-  lede={<>Drop three apps into your <span className="next-blue">Nextcloud</span>, configure the eleven categories, and your publication flow runs the same afternoon.</>}
-  primaryCta={{label: 'Install from app store', href: '/install'}}
-  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
-/>
diff --git a/src/pages/apps/scholiq.mdx b/src/pages/apps/scholiq.mdx
new file mode 100644
index 000000000..38f1acd5e
--- /dev/null
+++ b/src/pages/apps/scholiq.mdx
@@ -0,0 +1,101 @@
+---
+title: Scholiq, Conduction
+description: Learning record + LMS on Nextcloud. Cohorts, courses, attendance, grading, certificates, compliance training.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, AppCrossLinks} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="scholiq"
+  crumb={[{label: 'Apps', href: '/apps'}, 'Scholiq']}
+  status={{label: 'Beta', color: 'var(--c-orange-knvb)'}}
+  version="v0.x"
+  locales="NL · EN"
+  title="Scholiq"
+  tagline={<>Leerlingvolgsysteem en LMS op <span className="next-blue">Nextcloud</span>. Cursussen, inschrijvingen, aanwezigheid, nakijken, certificaten. Voor scholen, opleiders en compliance-teams die hun leerproces niet bij een externe SaaS willen parkeren.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://scholiq.conduction.nl/'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/scholiq'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><path d="M3 9l9-5 9 5-9 5z"/><path d="M7 11v5c0 1 2.2 2 5 2s5-1 5-2v-5"/><path d="M21 9v6"/></svg>}
+/>
+
+<Section spacing="default">
+  <div style={{display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) 320px', gap: 'var(--space-8)', alignItems: 'start'}}>
+    <div style={{minWidth: 0}}>
+      <SectionHead
+        eyebrow="What it does"
+        title="Eén leeromgeving voor cursussen, cohorten en certificeringen."
+        align="stack"
+        lede="Scholiq pakt het hele leerproces: cursussen opzetten, deelnemers inschrijven, aanwezigheid en voortgang volgen, opdrachten verzamelen en nakijken, certificaten uitreiken. Alles op typed registers in OpenRegister, dus de cijfers in MyDash en de rapportages voor de inspectie blijven kloppen."
+      />
+      <FeatureList>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M4 6h16v12H4z"/><path d="M4 10h16M9 6v12"/></svg>}
+          title="Cursussen en inschrijvingen."
+        >
+          Bouw een cursus uit modules, koppel lesmateriaal en data, schrijf deelnemers of hele cohorten in. Voor doorlopend onderwijs én voor één-daagse trainingen.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6M9 13l2 2 4-4"/></svg>}
+          title="Opdrachten en nakijken."
+        >
+          Stel een opdracht uit, deelnemers leveren in, jij geeft feedback en een cijfer. De volledige geschiedenis blijft per leerling beschikbaar in zijn dossier.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M12 7v5l3 2"/></svg>}
+          title="Aanwezigheid en voortgang."
+        >
+          Wie was er, wie heeft de module afgerond, wie staat waar in zijn leerplan. Zonder losse Excel-lijsten, zonder schaduw-administratie.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M12 2l3 6 6 .9-4.5 4.2 1.1 6L12 16l-5.6 3.1 1.1-6L3 8.9 9 8z"/></svg>}
+          title="Certificaten en compliance-training."
+        >
+          Reik certificaten uit met geldigheid en hercertificering. Voor BHV, AVG, integriteits-trainingen of de jaarlijkse cybersecurity-cursus: het systeem herinnert je vanzelf wie weer aan de beurt is.
+        </FeatureItem>
+      </FeatureList>
+    </div>
+    <AppCrossLinks
+      variant="rail"
+      apps={['scholiq']}
+      surface="product"
+    />
+  </div>
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Pairs well with"
+    title="De apps waarop Scholiq leunt."
+    align="stack"
+  />
+  <PairRow>
+    <PairCard
+      href="/apps/openregister"
+      icon={<svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/></svg>}
+      name="OpenRegister"
+      why="Deelnemers, cursussen, inschrijvingen, cijfers en certificaten als typed registers."
+    />
+    <PairCard
+      href="/apps/docudesk"
+      icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>}
+      name="DocuDesk"
+      why="Genereert certificaten, cursusverslagen en deelnemerslijsten uit sjablonen."
+    />
+    <PairCard
+      href="/apps/mydash"
+      icon={<svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>}
+      name="MyDash"
+      why="Mijn cursussen, na te kijken werk, en hercertificeringen op het dashboard."
+    />
+  </PairRow>
+</Section>
+
+<CtaBanner
+  title="Leren bij je eigen organisatie, niet bij een externe leverancier."
+  lede={<>Scholiq houdt het leerproces — van cursusinschrijving tot certificering — op je eigen Nextcloud. Open-source, op je eigen data, klaar voor inspectie en compliance.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/apps/shillinq.mdx b/src/pages/apps/shillinq.mdx
new file mode 100644
index 000000000..45a64ea12
--- /dev/null
+++ b/src/pages/apps/shillinq.mdx
@@ -0,0 +1,95 @@
+---
+title: Shillinq, Conduction
+description: Business administration on Nextcloud. Invoices, contracts, procurement on shared registers.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, AppCrossLinks} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="shillinq"
+  crumb={[{label: 'Apps', href: '/apps'}, 'Shillinq']}
+  status={{label: 'Beta', color: 'var(--c-orange-knvb)'}}
+  version="v0.x"
+  locales="NL · EN"
+  title="Shillinq"
+  tagline={<>Business administration on <span className="next-blue">Nextcloud</span>. Invoices, contracts, procurement on shared registers. Built for the MKB that already runs Nextcloud and wants its finance, sales, and procurement in the same workspace.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/shillinq'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/shillinq'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><path d="M3 6h18M3 12h18M3 18h12"/><circle cx="19" cy="18" r="2"/></svg>}
+/>
+
+<Section spacing="default">
+  <div style={{display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) 320px', gap: 'var(--space-8)', alignItems: 'start'}}>
+    <div style={{minWidth: 0}}>
+      <SectionHead
+        eyebrow="What it does"
+        title="Een complete bedrijfsadministratie op Nextcloud."
+        align="stack"
+        lede="Shillinq pakt facturatie, contracten en inkoop in één app. Geen aparte boekhoudsoftware, geen aparte CRM, geen los inkoopportaal. Alles staat in OpenRegister, dus de cijfers in MyDash en de rapportages in OpenCatalogi lopen synchroon."
+      />
+      <FeatureList>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>}
+          title="Facturatie en debiteuren."
+        >
+          Genereer facturen uit sjablonen. Stuur ze direct uit Nextcloud Mail. Volg openstaande bedragen in MyDash.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M9 12l2 2 4-4"/><circle cx="12" cy="12" r="9"/></svg>}
+          title="Contracten met audit trail."
+        >
+          Versioned contracten in OpenRegister. Zie wie wat heeft getekend, wanneer een verlenging vervalt, welke voorwaarden gelden.
+        </FeatureItem>
+        <FeatureItem
+          icon={<svg viewBox="0 0 24 24"><path d="M3 7h18l-2 12H5z"/><path d="M9 7V4h6v3"/></svg>}
+          title="Inkoop met goedkeurings-flow."
+        >
+          PO-aanvragen, goedkeuring per drempelbedrag, leveranciersregister. Voor de bestelling de hand op de knip houden, achteraf de factuur erbij.
+        </FeatureItem>
+      </FeatureList>
+    </div>
+    <AppCrossLinks
+      variant="rail"
+      apps={['shillinq']}
+      surface="product"
+    />
+  </div>
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Pairs well with"
+    title="De apps waarop Shillinq leunt."
+    align="stack"
+  />
+  <PairRow>
+    <PairCard
+      href="/apps/openregister"
+      icon={<svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/></svg>}
+      name="OpenRegister"
+      why="Facturen, contracten, inkooporders als typed registers."
+    />
+    <PairCard
+      href="/apps/docudesk"
+      icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>}
+      name="DocuDesk"
+      why="Genereert facturen, offertes en contracten uit sjablonen."
+    />
+    <PairCard
+      href="/apps/mydash"
+      icon={<svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>}
+      name="MyDash"
+      why="Cash-flow, omzet, top-debiteuren als widgets op het dashboard."
+    />
+  </PairRow>
+</Section>
+
+<CtaBanner
+  title="Bedrijfsadministratie, één werkplek."
+  lede={<>Shillinq vervangt losse boekhoudpakketten en CRM-tools door één bedrijfsadministratie op Nextcloud. Open-source, op je eigen data.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/commonground.mdx b/src/pages/commonground.mdx
index 7402bad57..7bcd64e05 100644
--- a/src/pages/commonground.mdx
+++ b/src/pages/commonground.mdx
@@ -5,6 +5,7 @@ hide_table_of_contents: true
 ---
 
 import {Hero, StatsStrip, Section, SectionHead, AppsPreview, PairRow, PairCard, CtaBanner, Pill, Showcase, AppMock, CommonGroundPlus, ManagedCommonGround} from '@conduction/docusaurus-preset/components';
+import {APP_COUNT} from '@site/src/data/apps-catalog';
 import {totalDownloads, formatDownloads} from '@conduction/docusaurus-preset/data';
 import {totalPartners} from '@site/src/data/partners-catalog';
 
@@ -18,7 +19,7 @@ import {totalPartners} from '@site/src/data/partners-catalog';
 />
 
 <StatsStrip stats={[
-  { value: '12', label: <>apps in the ecosystem,<br/>all open-source</> },
+  { value: String(APP_COUNT), label: <>apps in the ecosystem,<br/>all open-source</> },
   { value: '2 min', label: <>from app store install<br/>to working solution</> },
   { value: '€0', label: <>for the apps,<br/>support is optional</> },
   { value: totalPartners, label: <>certified and partner<br/>implementers</> },
@@ -31,12 +32,12 @@ import {totalPartners} from '@site/src/data/partners-catalog';
   lede={<>Start with what your WOO coordinator, GGU contact, or procurement committee is asking for today. All open-source, GDPR-compliant, free to install from the <span className="next-blue">Nextcloud</span> app store.</>}
   apps={[
     {
-      name: 'OpenWoo',
-      tagline: 'WOO publication flow. Active disclosure, queryable archive, automatic redaction of personal data.',
+      name: 'DocuDesk',
+      tagline: 'Auto-classify, anonymise, sign, and template documents. Powers the WOO publication flow end to end.',
       status: 'STABLE',
-      version: 'v1.4 · NL',
-      href: '/apps/openwoo',
-      icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18M12 3a14 14 0 0 0 0 18"/></svg>,
+      version: 'v1.x · NL · EN',
+      href: '/apps/docudesk',
+      icon: <svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>,
     },
     {
       name: 'OpenCatalogi',
@@ -58,6 +59,35 @@ import {totalPartners} from '@site/src/data/partners-catalog';
   seeAll={{label: 'Browse all apps', href: '/apps'}}
 />
 
+<Section spacing="default" id="openwoo">
+  <SectionHead
+    eyebrow="Solution"
+    title="OpenWoo, Woo-publicatie als gecomponeerde solution."
+    align="stack"
+    lede={<>OpenWoo is geen aparte app, het is een solution die OpenRegister, OpenCatalogi en DocuDesk samenbrengt voor de Wet open overheid. Eén Woo-categorieenboom op typed registers, automatische redactie van persoonsgegevens, federatie naar jouwgemeente.nl/openwoo. Geen procurement-traject, geen consultancy-uren, één installatie.</>}
+  />
+  <PairRow>
+    <PairCard
+      href="/apps/openregister"
+      icon={<svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/></svg>}
+      name="OpenRegister"
+      why="Woo-categorieen, publicaties, retentie-termijnen als typed registers."
+    />
+    <PairCard
+      href="/apps/opencatalogi"
+      icon={<svg viewBox="0 0 24 24"><path d="M3 7l9-4 9 4-9 4-9-4z"/><path d="M3 12l9 4 9-4M3 17l9 4 9-4"/></svg>}
+      name="OpenCatalogi"
+      why="Publiceert het archief naar jouwgemeente.nl/openwoo met federation."
+    />
+    <PairCard
+      href="/apps/docudesk"
+      icon={<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>}
+      name="DocuDesk"
+      why="Auto-redactie van persoonsgegevens voor publicatie. Audit trail per document."
+    />
+  </PairRow>
+</Section>
+
 <Section spacing="default">
 
 <Showcase
diff --git a/src/pages/connext.mdx b/src/pages/connext.mdx
index f678e6b16..85a92428d 100644
--- a/src/pages/connext.mdx
+++ b/src/pages/connext.mdx
@@ -1,12 +1,13 @@
 ---
 title: ConNext, open-source apps for Nextcloud
-description: Twelve open-source apps that plug into Nextcloud. Catalogs, registers, integrations, document handling, pick what you need from the app store and you're working today.
+description: Open-source apps that plug into Nextcloud. Catalogs, registers, integrations, document handling, pick what you need from the app store and you're working today.
 hide_table_of_contents: true
 ---
 
 import {Hero, StatsStrip, PlatformOverview, PlatformDiagram, HexRain, AppsPreview, CtaBanner, Showcase, AppMock, AgentTrace, ExternalAppShelf, Section, SectionHead, PairRow, PairCard} from '@conduction/docusaurus-preset/components';
 import {totalDownloads, formatDownloads} from '@conduction/docusaurus-preset/data';
 import {totalPartners} from '@site/src/data/partners-catalog';
+import {APP_COUNT, ECOSYSTEM_COUNT} from '@site/src/data/apps-catalog';
 
 {/* All runtime assets are now wrapped in real React components:
     HexRain (hero mini-game), PlatformDiagram (platform overview),
@@ -14,9 +15,9 @@ import {totalPartners} from '@site/src/data/partners-catalog';
     CSS/JS via Head. No top-level Head boilerplate needed here. */}
 
 <Hero
-  eyebrow={<>Twelve open-source apps · one <span className="next-blue">Nextcloud</span></>}
+  eyebrow={<>{APP_COUNT} open-source apps · one <span className="next-blue">Nextcloud</span></>}
   title={<>Install your stack.<br/>In two minutes.</>}
-  lede={<>Twelve open-source apps that plug into <span className="next-blue">Nextcloud</span>. Catalogs, registers, integrations, document handling, pick what you need from the app store and you're working today. No methodology workshop. No lock-in.</>}
+  lede={<>{APP_COUNT} open-source apps that plug into <span className="next-blue">Nextcloud</span>. Catalogs, registers, integrations, document handling, pick what you need from the app store and you're working today. No methodology workshop. No lock-in.</>}
   primaryCta={{label: <>Install from <span className="next-blue">Nextcloud</span> app store</>, href: '/apps'}}
   secondaryCta={{label: 'Run a local demo', href: '/demo'}}
   tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL'}}
@@ -25,7 +26,7 @@ import {totalPartners} from '@site/src/data/partners-catalog';
 </Hero>
 
 <StatsStrip stats={[
-  { value: '12', label: <>apps in the ecosystem,<br/>all open-source</> },
+  { value: String(APP_COUNT), label: <>apps in the ecosystem,<br/>all open-source</> },
   { value: '2 min', label: <>from app store install<br/>to working solution</> },
   { value: '€0', label: <>for the apps,<br/>support is optional</> },
   { value: totalPartners, label: <>certified and partner<br/>implementers</> },
@@ -34,7 +35,7 @@ import {totalPartners} from '@site/src/data/partners-catalog';
 
 <PlatformOverview
   eyebrow="The platform"
-  title={<>Five components.<br/>Twenty-four apps. One <span className="next-blue">Nextcloud</span> workspace.</>}
+  title={<>Five components.<br/>{ECOSYSTEM_COUNT} apps. One <span className="next-blue">Nextcloud</span> workspace.</>}
   lede={<>Every ConNext app plugs into one of five categories around the <span className="next-blue">Nextcloud</span> workspace, files, mail, calendar, talk, office. All of them run on the platform your team already trusts. Hover any app to see what it does.</>}
 >
   <PlatformDiagram
@@ -52,28 +53,30 @@ import {totalPartners} from '@site/src/data/partners-catalog';
         {name: 'Deck', meta: 'Boards', desc: 'Kanban boards for projects, sprints, and personal task flows.', icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="18" height="18" rx="2"/><path d="M9 3v18M15 8v10"/></svg>},
       ]},
       {position: 'top-left', family: 'core', label: 'Technical\nCore', items: [
-        {name: 'OpenRegister', meta: 'Data', desc: 'Schema-driven object store with audit trail. The data foundation underneath every workspace app.', icon: <svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/><path d="M4 12c0 1.7 3.6 3 8 3s8-1.3 8-3"/></svg>},
-        {name: 'OpenCatalogi', meta: 'Catalog', desc: 'Federated data catalogue. Datasets, APIs, software inventory.', icon: <svg viewBox="0 0 24 24"><path d="M3 7l9-4 9 4-9 4-9-4z"/><path d="M3 12l9 4 9-4M3 17l9 4 9-4"/></svg>},
-        {name: 'OpenConnector', meta: 'Integrate', desc: 'API gateway, REST, SOAP, GraphQL, webhooks.', icon: <svg viewBox="0 0 24 24"><path d="M10 13a5 5 0 0 0 7 0l3-3a5 5 0 0 0-7-7l-1 1"/><path d="M14 11a5 5 0 0 0-7 0l-3 3a5 5 0 0 0 7 7l1-1"/></svg>},
-        {name: 'DocuDesk', meta: 'Docs', desc: 'Generate, anonymise, sign, and template documents.', icon: <svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>},
-        {name: 'NLDesign Theme', meta: 'Theme', desc: 'NL Design System tokens applied across every Conduction app.', icon: <svg viewBox="0 0 24 24"><circle cx="13.5" cy="6.5" r="2.5"/><circle cx="17.5" cy="10.5" r="2.5"/><circle cx="8.5" cy="7.5" r="2.5"/><circle cx="6.5" cy="12.5" r="2.5"/><path d="M14 14l-3-3-7 7v3h3l7-7"/></svg>},
-        {name: 'MyDash', meta: 'Dashboard', desc: 'Dashboard builder with role-based access.', icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>},
+        {name: 'OpenRegister', meta: 'Data', href: '/apps/openregister', desc: 'Schema-driven object store with audit trail. The data foundation underneath every workspace app.', icon: <svg viewBox="0 0 24 24"><ellipse cx="12" cy="6" rx="8" ry="3"/><path d="M4 6v12c0 1.7 3.6 3 8 3s8-1.3 8-3V6"/><path d="M4 12c0 1.7 3.6 3 8 3s8-1.3 8-3"/></svg>},
+        {name: 'OpenCatalogi', meta: 'Catalog', href: '/apps/opencatalogi', desc: 'Federated data catalogue. Datasets, APIs, software inventory.', icon: <svg viewBox="0 0 24 24"><path d="M3 7l9-4 9 4-9 4-9-4z"/><path d="M3 12l9 4 9-4M3 17l9 4 9-4"/></svg>},
+        {name: 'OpenConnector', meta: 'Integrate', href: '/apps/openconnector', desc: 'API gateway, REST, SOAP, GraphQL, webhooks.', icon: <svg viewBox="0 0 24 24"><path d="M10 13a5 5 0 0 0 7 0l3-3a5 5 0 0 0-7-7l-1 1"/><path d="M14 11a5 5 0 0 0-7 0l-3 3a5 5 0 0 0 7 7l1-1"/></svg>},
+        {name: 'DocuDesk', meta: 'Docs', href: '/apps/docudesk', desc: 'Generate, anonymise, sign, and template documents.', icon: <svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><path d="M14 2v6h6"/></svg>},
+        {name: 'NLDesign Theme', meta: 'Theme', href: '/apps/nldesign', desc: 'NL Design System tokens applied across every Conduction app.', icon: <svg viewBox="0 0 24 24"><circle cx="13.5" cy="6.5" r="2.5"/><circle cx="17.5" cy="10.5" r="2.5"/><circle cx="8.5" cy="7.5" r="2.5"/><circle cx="6.5" cy="12.5" r="2.5"/><path d="M14 14l-3-3-7 7v3h3l7-7"/></svg>},
+        {name: 'MyDash', meta: 'Dashboard', href: '/apps/mydash', desc: 'Dashboard builder with role-based access.', icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>},
+        {name: 'App Versions', meta: 'Versions', href: '/apps/app-versions', desc: 'Pin and roll back any Nextcloud app version. Safety net for fleet upgrades.', icon: <svg viewBox="0 0 24 24"><path d="M3 6h18v4H3zM3 14h12v4H3z"/><circle cx="19" cy="16" r="2"/></svg>},
       ]},
       {position: 'top-right', family: 'solutions', label: 'Solutions', items: [
-        {name: 'OpenWoo', meta: 'WOO', desc: 'WOO-compliant publication flow. Active disclosure, queryable archive.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18M12 3a14 14 0 0 0 0 18"/></svg>},
-        {name: 'ZaakAfhandelApp', meta: 'Zaken', desc: 'Citizen-facing case-status portal.', icon: <svg viewBox="0 0 24 24"><rect x="4" y="4" width="16" height="16" rx="2"/><path d="M9 9h6v6H9z"/></svg>},
-        {name: 'Anonimiseren', meta: 'Privacy', desc: 'Privacy-by-design pipeline. Auto-redact PII before publication.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M5 21v-2a4 4 0 0 1 4-4h6a4 4 0 0 1 4 4v2"/><path d="M9 8h6"/></svg>},
+        {name: 'OpenWoo', meta: 'WOO', href: '/commonground#openwoo', desc: 'WOO-compliant publication flow. Active disclosure, queryable archive. Solution built on OpenRegister + OpenCatalogi + DocuDesk.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18M12 3a14 14 0 0 0 0 18"/></svg>},
+        {name: 'ZaakAfhandelApp', meta: 'Zaken', href: '/apps/zaakafhandelapp', desc: 'Citizen-facing case-status portal.', icon: <svg viewBox="0 0 24 24"><rect x="4" y="4" width="16" height="16" rx="2"/><path d="M9 9h6v6H9z"/></svg>},
+        {name: 'Anonimiseren', meta: 'Privacy', href: '/apps/docudesk', desc: 'Privacy-by-design pipeline. Auto-redact PII before publication.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M5 21v-2a4 4 0 0 1 4-4h6a4 4 0 0 1 4 4v2"/><path d="M9 8h6"/></svg>},
+        {name: 'Doriath', meta: 'Vault', href: '/apps/doriath', desc: 'Self-hosted password and secrets vault. Per-user, per-team, audited.', icon: <svg viewBox="0 0 24 24"><rect x="4" y="10" width="16" height="11" rx="2"/><path d="M8 10V7a4 4 0 0 1 8 0v3"/></svg>},
       ]},
       {position: 'bottom-left', family: 'workspace', label: 'Workspace\nApps', items: [
-        {name: 'PipelinQ', meta: 'CRM', desc: 'CRM with quotes, contacts, and deal-flow.', icon: <svg viewBox="0 0 24 24"><path d="M3 12h4l3-9 4 18 3-9h4"/></svg>},
-        {name: 'Procest', meta: 'Cases', desc: 'Case-management for VTH and citizen processes.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M12 7v5l3 3"/></svg>},
-        {name: 'DeciDesk', meta: 'Boards', desc: 'Decision-support and board management.', icon: <svg viewBox="0 0 24 24"><path d="M9 11l3 3 8-8"/><path d="M20 12v6a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h9"/></svg>},
-        {name: 'ShillinQ', meta: 'ERP', desc: 'Bookkeeping, invoicing, expense tracking.', icon: <svg viewBox="0 0 24 24"><path d="M12 1v22M17 5H9.5a3.5 3.5 0 0 0 0 7h5a3.5 3.5 0 0 1 0 7H6"/></svg>},
-        {name: 'LarpingApp', meta: 'Larp', desc: 'Worldbuilding and campaign-management.', icon: <svg viewBox="0 0 24 24"><path d="M14 4l-4 6 4 6"/><path d="M10 4l4 6-4 6"/><circle cx="12" cy="20" r="2"/></svg>},
-        {name: 'SoftwareCatalog', meta: 'Assets', desc: 'IT-asset management, software inventory, licenses, contracts.', icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>},
+        {name: 'PipelinQ', meta: 'CRM', href: '/apps/pipelinq', desc: 'CRM with quotes, contacts, and deal-flow.', icon: <svg viewBox="0 0 24 24"><path d="M3 12h4l3-9 4 18 3-9h4"/></svg>},
+        {name: 'Procest', meta: 'Cases', href: '/apps/procest', desc: 'Case-management for VTH and citizen processes.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M12 7v5l3 3"/></svg>},
+        {name: 'DeciDesk', meta: 'Boards', href: '/apps/decidesk', desc: 'Decision-support and board management.', icon: <svg viewBox="0 0 24 24"><path d="M9 11l3 3 8-8"/><path d="M20 12v6a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h9"/></svg>},
+        {name: 'ShillinQ', meta: 'ERP', href: '/apps/shillinq', desc: 'Bookkeeping, invoicing, expense tracking.', icon: <svg viewBox="0 0 24 24"><path d="M12 1v22M17 5H9.5a3.5 3.5 0 0 0 0 7h5a3.5 3.5 0 0 1 0 7H6"/></svg>},
+        {name: 'LarpingApp', meta: 'Larp', href: '/apps/larpingapp', desc: 'Worldbuilding and campaign-management.', icon: <svg viewBox="0 0 24 24"><path d="M14 4l-4 6 4 6"/><path d="M10 4l4 6-4 6"/><circle cx="12" cy="20" r="2"/></svg>},
+        {name: 'SoftwareCatalog', meta: 'Assets', href: '/apps/softwarecatalog', desc: 'IT-asset management, software inventory, licenses, contracts.', icon: <svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="9"/><rect x="14" y="3" width="7" height="5"/><rect x="14" y="12" width="7" height="9"/><rect x="3" y="16" width="7" height="5"/></svg>},
+        {name: 'Scholiq', meta: 'LMS', href: '/apps/scholiq', desc: 'Learning record + LMS. Courses, enrolment, certificates, compliance-training.', icon: <svg viewBox="0 0 24 24"><path d="M3 9l9-5 9 5-9 5z"/><path d="M7 11v5c0 1 2.2 2 5 2s5-1 5-2v-5"/><path d="M21 9v6"/></svg>},
       ]},
       {position: 'bottom-right', family: 'integrate', label: 'Integrated\nApps', columns: 2, items: [
-        {name: 'OpenTalk', meta: 'Video', brandColor: '#00485C', desc: 'Open-source video conferencing.', icon: <svg viewBox="0 0 24 24"><circle cx="11" cy="12.5" r="7" fill="none" stroke="currentColor" strokeWidth="2.5"/><circle cx="18.5" cy="6.5" r="2.5" style={{fill: '#D2E245'}}/></svg>},
         {name: 'Matrix', meta: 'Chat', brandColor: '#000000', desc: 'Federated chat protocol. End-to-end encrypted.', icon: <svg viewBox="0 0 24 24"><path d="M.632.55v22.9H2.28V24H0V0h2.28v.55zm7.043 7.26v1.157h.033c.309-.443.683-.784 1.117-1.024.433-.245.936-.365 1.5-.365.54 0 1.033.107 1.481.314.448.208.785.582 1.02 1.108.254-.374.6-.706 1.034-.992.434-.287.95-.43 1.546-.43.453 0 .872.056 1.26.167.388.11.716.286.993.53.276.245.489.559.646.951.152.392.23.863.23 1.417v5.728h-2.349V11.52c0-.286-.01-.559-.032-.812a1.755 1.755 0 0 0-.18-.66 1.106 1.106 0 0 0-.438-.448c-.194-.11-.457-.166-.785-.166-.332 0-.6.064-.803.189a1.38 1.38 0 0 0-.48.499 1.946 1.946 0 0 0-.231.696 5.56 5.56 0 0 0-.06.785v4.768h-2.35v-4.8c0-.254-.004-.503-.018-.752a2.074 2.074 0 0 0-.143-.688 1.052 1.052 0 0 0-.415-.503c-.194-.125-.476-.19-.854-.19-.111 0-.259.024-.439.074-.18.051-.36.143-.53.282-.171.138-.319.337-.439.595-.12.259-.18.6-.18 1.02v4.966H5.46V7.81zm15.693 15.64V.55H21.72V0H24v24h-2.28v-.55z"/></svg>},
         {name: 'n8n', meta: 'Flows', brandColor: '#EA4B71', desc: 'Workflow automation, no-code flows.', icon: <svg viewBox="0 0 24 24"><path d="M21.4737 5.6842c-1.1772 0-2.1663.8051-2.4468 1.8947h-2.8955c-1.235 0-2.289.893-2.492 2.111l-.1038.623a1.263 1.263 0 0 1-1.246 1.0555H11.289c-.2805-1.0896-1.2696-1.8947-2.4468-1.8947s-2.1663.8051-2.4467 1.8947H4.973c-.2805-1.0896-1.2696-1.8947-2.4468-1.8947C1.1311 9.4737 0 10.6047 0 12s1.131 2.5263 2.5263 2.5263c1.1772 0 2.1663-.8051 2.4468-1.8947h1.4223c.2804 1.0896 1.2696 1.8947 2.4467 1.8947 1.1772 0 2.1663-.8051 2.4468-1.8947h1.0008a1.263 1.263 0 0 1 1.2459 1.0555l.1038.623c.203 1.218 1.257 2.111 2.492 2.111h.3692c.2804 1.0895 1.2696 1.8947 2.4468 1.8947 1.3952 0 2.5263-1.131 2.5263-2.5263s-1.131-2.5263-2.5263-2.5263c-1.1772 0-2.1664.805-2.4468 1.8947h-.3692a1.263 1.263 0 0 1-1.246-1.0555l-.1037-.623A2.52 2.52 0 0 0 13.9607 12a2.52 2.52 0 0 0 .821-1.4794l.1038-.623a1.263 1.263 0 0 1 1.2459-1.0555h2.8955c.2805 1.0896 1.2696 1.8947 2.4468 1.8947 1.3952 0 2.5263-1.131 2.5263-2.5263s-1.131-2.5263-2.5263-2.5263m0 1.2632a1.263 1.263 0 0 1 1.2631 1.2631 1.263 1.263 0 0 1-1.2631 1.2632 1.263 1.263 0 0 1-1.2632-1.2632 1.263 1.263 0 0 1 1.2632-1.2631M2.5263 10.7368A1.263 1.263 0 0 1 3.7895 12a1.263 1.263 0 0 1-1.2632 1.2632A1.263 1.263 0 0 1 1.2632 12a1.263 1.263 0 0 1 1.2631-1.2632m6.3158 0A1.263 1.263 0 0 1 10.1053 12a1.263 1.263 0 0 1-1.2632 1.2632A1.263 1.263 0 0 1 7.579 12a1.263 1.263 0 0 1 1.2632-1.2632m10.1053 3.7895a1.263 1.263 0 0 1 1.2631 1.2632 1.263 1.263 0 0 1-1.2631 1.2631 1.263 1.263 0 0 1-1.2632-1.2631 1.263 1.263 0 0 1 1.2632-1.2632"/></svg>},
         {name: 'Windmill', meta: 'Flow', brandColor: '#DC2A1F', desc: 'Developer-focused workflow engine. Python, TypeScript, Go, Bash.', icon: <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="2"/><path d="M12 12L17 5L19 8L14 12zM12 12L19 17L16 19L12 14zM12 12L7 19L5 16L10 12zM12 12L5 7L8 5L12 10z"/><path d="M11 14h2v8h-2z"/></svg>},
@@ -87,10 +90,8 @@ import {totalPartners} from '@site/src/data/partners-catalog';
         {name: 'Presidio', meta: 'PII', brandColor: '#0078D4', desc: 'Microsoft PII detection. Anonymise text before publication, GDPR-ready.', icon: <svg viewBox="0 0 24 24"><path d="M12 2L4 5v7c0 5 3.5 9 8 10 4.5-1 8-5 8-10V5z"/><circle cx="12" cy="11" r="2.2" fill="#fff"/><path d="M9 16h6" stroke="#fff" strokeWidth="1.6"/></svg>},
         {name: 'Keycloak', meta: 'SSO', brandColor: '#DB3327', desc: 'Open-source identity and access management. SSO, OIDC, SAML, social login.', icon: <svg viewBox="0 0 24 24"><circle cx="9" cy="12" r="4"/><circle cx="9" cy="12" r="1.4" fill="#fff"/><path d="M13 12h8M17 12v3M21 12v3"/></svg>},
       ]},
-      {position: 'bottom-center', family: 'builder', label: 'App\nBuilder', badge: 'COMING SOON', items: [
-        {name: 'Build your own apps', desc: 'Compose Nextcloud apps from the Technical Core.', icon: <svg viewBox="0 0 24 24"><path d="M14.7 6.3a4 4 0 1 0-5.4 5.4l-7 7v3h3l7-7a4 4 0 0 0 5.4-5.4z"/><path d="M5 19l3-3"/></svg>},
-        {name: 'Customise ConNext apps', desc: 'Fork-free customisation of any ConNext app.', icon: <svg viewBox="0 0 24 24"><circle cx="13.5" cy="6.5" r="2.5"/><circle cx="17.5" cy="10.5" r="2.5"/><circle cx="8.5" cy="7.5" r="2.5"/><circle cx="6.5" cy="12.5" r="2.5"/><path d="M14 14l-3-3-7 7v3h3l7-7"/></svg>},
-        {name: 'No code, just configure', desc: 'Configuration-only changes survive upgrades.', icon: <svg viewBox="0 0 24 24"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>},
+      {position: 'bottom-center', family: 'builder', label: 'App\nBuilder', items: [
+        {name: 'OpenBuilt', meta: 'Builder', href: '/apps/openbuilt', desc: 'Compose Nextcloud apps from the Technical Core. Fork-free customisation. Configuration over code, so changes survive upgrades.', icon: <svg viewBox="0 0 24 24"><path d="M3 12l9-9 9 9-9 9z"/><path d="M9 12h6M12 9v6"/></svg>},
       ]},
     ]}
     flows={[
@@ -182,7 +183,7 @@ import {totalPartners} from '@site/src/data/partners-catalog';
 <Section spacing="default" background="tinted">
   <div style={{display: 'grid', gridTemplateColumns: '1.4fr 1fr', gap: 'var(--space-10)', alignItems: 'start', marginBottom: 'var(--space-8)'}}>
     <SectionHead
-      eyebrow="External tools we plug in"
+      eyebrow="External tools we integrate"
       title="Open source we use, not own."
       align="stack"
       lede={<>Most Conduction integrations are with the standard <span className="next-blue">Nextcloud</span> apps already on the home screen, Mail, Files, Calendar, Contacts, Notes, Deck. The set below is different. These are external open-source projects we did not build. We host them next to <span className="next-blue">Nextcloud</span> as ExApps (separate processes the workspace runs and exposes through its UI), or call them through OpenConnector adapters. Reusing them is cheaper than rewriting them, and it keeps the credit where it belongs.</>}
@@ -192,28 +193,27 @@ import {totalPartners} from '@site/src/data/partners-catalog';
         Why through the app store?
       </div>
       <div style={{fontSize: 14, lineHeight: 1.5, color: 'var(--c-cobalt-700)', marginTop: '4px'}}>
-        Each ExApp is packaged for the <span className="next-blue">Nextcloud</span> app store, so installing one feels the same as installing any other Nextcloud app. We ship the option because sovereignty without choice is just a slogan. Like <span className="next-blue">Nextcloud</span> Talk with its tight workspace fit? Use it. Prefer OpenTalk on the Matrix protocol? Use that instead. Same login, same workspace, your call on the engine.
+        Each ExApp is packaged for the <span className="next-blue">Nextcloud</span> app store, so installing one feels the same as installing any other Nextcloud app. We ship the option because sovereignty without choice is just a slogan. Like <span className="next-blue">Nextcloud</span> Talk with its tight workspace fit? Use it. Prefer a federated chat like Matrix? Use that instead. Same login, same workspace, your call on the engine.
       </div>
     </aside>
   </div>
 
   <ExternalAppShelf
     apps={[
-      {name: 'OpenTalk',    meta: 'ExApp · Video',     brandColor: '#00485C', desc: 'Open-source video conferencing. Self-hosted alternative to commercial meeting tools.', href: 'https://opentalk.eu/', icon: <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2"><circle cx="11" cy="12.5" r="7"/><circle cx="18.5" cy="6.5" r="2.5" fill="#D2E245" stroke="none"/></svg>},
-      {name: 'Matrix',      meta: 'ExApp · Chat',      brandColor: '#000000', desc: 'Federated chat protocol. End-to-end encrypted, runs on your own server.', href: 'https://matrix.org/', icon: <svg viewBox="0 0 24 24" fill="currentColor" stroke="none"><path d="M.632.55v22.9H2.28V24H0V0h2.28v.55zm7.043 7.26v1.157h.033c.309-.443.683-.784 1.117-1.024.433-.245.936-.365 1.5-.365.54 0 1.033.107 1.481.314.448.208.785.582 1.02 1.108.254-.374.6-.706 1.034-.992.434-.287.95-.43 1.546-.43.453 0 .872.056 1.26.167.388.11.716.286.993.53.276.245.489.559.646.951.152.392.23.863.23 1.417v5.728h-2.349V11.52c0-.286-.01-.559-.032-.812a1.755 1.755 0 0 0-.18-.66 1.106 1.106 0 0 0-.438-.448c-.194-.11-.457-.166-.785-.166-.332 0-.6.064-.803.189a1.38 1.38 0 0 0-.48.499 1.946 1.946 0 0 0-.231.696 5.56 5.56 0 0 0-.06.785v4.768h-2.35v-4.8c0-.254-.004-.503-.018-.752a2.074 2.074 0 0 0-.143-.688 1.052 1.052 0 0 0-.415-.503c-.194-.125-.476-.19-.854-.19-.111 0-.259.024-.439.074-.18.051-.36.143-.53.282-.171.138-.319.337-.439.595-.12.259-.18.6-.18 1.02v4.966H5.46V7.81zm15.693 15.64V.55H21.72V0H24v24h-2.28v-.55z"/></svg>},
-      {name: 'Mattermost',  meta: 'ExApp · Chat',      brandColor: '#0058CC', desc: 'Self-hosted Slack alternative. Threads, integrations, and on-prem data.', href: 'https://mattermost.com/', icon: <svg viewBox="0 0 24 24" fill="currentColor" stroke="none"><path d="M12.081 0C7.048-.034 2.339 3.125.637 8.153c-2.125 6.276 1.24 13.086 7.516 15.21 6.276 2.125 13.086-1.24 15.21-7.516 1.727-5.1-.172-10.552-4.311-13.557l.126 2.547c2.065 2.282 2.88 5.512 1.852 8.549-1.534 4.532-6.594 6.915-11.3 5.321-4.708-1.593-7.28-6.559-5.745-11.092 1.031-3.046 3.655-5.121 6.694-5.67l1.642-1.94A4.87 4.87 0 0 0 12.08 0z"/></svg>},
-      {name: 'OpenExchange',meta: 'ExApp · Mail',      brandColor: '#005A9B', desc: 'Open-source mail and groupware suite. Drop-in alternative to Microsoft Exchange, with App Suite for the inbox.', href: 'https://www.open-xchange.com/', icon: <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2.2"><circle cx="8.5" cy="12" r="5"/><path d="M14.5 7l6 10M14.5 17l6-10"/></svg>},
-      {name: 'Windmill',    meta: 'ExApp · Workflow',  brandColor: '#DC2A1F', desc: 'Developer-focused workflow engine. Python, TypeScript, Go, Bash. Triggered by Conduction events.', href: 'https://windmill.dev/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><circle cx="12" cy="12" r="2"/><path d="M12 12L17 5L19 8L14 12zM12 12L19 17L16 19L12 14zM12 12L5 7L8 5L12 10z"/><path d="M11 14h2v8h-2z"/></svg>},
-      {name: 'n8n',         meta: 'ExApp · Workflow',  brandColor: '#EA4B71', desc: 'Low-code automation flows. Drag-drop builder, hundreds of node types, fits next to OpenConnector.', href: 'https://n8n.io/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><circle cx="6" cy="12" r="2.5"/><circle cx="18" cy="6" r="2.5"/><circle cx="18" cy="18" r="2.5"/><path d="M9 12h6M9 12l9-6M9 12l9 6" stroke="currentColor" strokeWidth="2" fill="none"/></svg>},
-      {name: 'OpenProject', meta: 'ExApp · PM',        brandColor: '#0770B8', desc: 'Project management. Gantt, agile boards, work packages mapped to Conduction cases.', href: 'https://www.openproject.org/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M19.35.37h-1.86a4.628 4.628 0 0 0-4.652 4.624v5.609H4.652A4.628 4.628 0 0 0 0 15.23v3.721c0 2.569 2.083 4.679 4.652 4.679h1.86c2.57 0 4.652-2.11 4.652-4.679v-3.72h-2.791v3.88c0 1.026-.835 1.886-1.861 1.886h-1.86c-1.027 0-1.861-.864-1.861-1.886V15.23a1.839 1.839 0 0 1 1.86-1.833h14.697c2.57 0 4.652-2.11 4.652-4.679V4.997A4.628 4.628 0 0 0 19.35.37z"/></svg>},
-      {name: 'XWiki',       meta: 'ExApp · Wiki',      brandColor: '#1E4FB6', desc: 'Structured wiki and knowledge base. Pages, macros, query language. Embed register data inline.', href: 'https://www.xwiki.org/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M3 3h4l3 5 3-5h4l-5 8 5 8h-4l-3-5-3 5H3l5-8z"/></svg>},
-      {name: 'GitLab',      meta: 'ExApp · Code',      brandColor: '#FC6D26', desc: 'Git hosting, CI/CD, issue tracking. The other half of every developer team.', href: 'https://gitlab.com/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="m23.6 9.59-.034-.086L20.3.98a.85.85 0 0 0-1.336.04l-.29.44-2.205 6.748H7.537L5.332 1.46a.857.857 0 0 0-.29-.441A.875.875 0 0 0 4.043 1.06a.86.86 0 0 0-.336.405L.433 9.501l-.033.086a6.066 6.066 0 0 0 2.012 7.011l.011.008.03.022 4.976 3.726 2.462 1.864 1.5 1.132c.36.272.86.272 1.22 0l1.5-1.132 2.46-1.864 5.006-3.749.013-.01a6.068 6.068 0 0 0 2.01-7.003z"/></svg>},
-      {name: 'Keycloak',    meta: 'ExApp · SSO',       brandColor: '#DB3327', desc: 'Open-source identity. SSO, OIDC, SAML, social login. Stand-in for the gemeentelijke IdP.', href: 'https://www.keycloak.org/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><circle cx="9" cy="12" r="4"/><circle cx="9" cy="12" r="1.4" fill="#fff"/><path d="M13 12h8M17 12v3M21 12v3" stroke="currentColor" strokeWidth="2" fill="none"/></svg>},
-      {name: 'Claude',      meta: 'Adapter · LLM',     brandColor: '#D97757', desc: 'Anthropic frontier LLM. Long context, strong agents, called via the OpenConnector adapter.', href: 'https://www.anthropic.com/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M17.3 3.5h-3.67l6.7 16.92H24Zm-10.61 0L0 20.42h3.74l1.37-3.55h7.01l1.37 3.55h3.74L10.54 3.5Zm-.37 10.22 2.29-5.94 2.29 5.94Z"/></svg>},
-      {name: 'OpenAI',      meta: 'Adapter · LLM',     brandColor: '#10A37F', desc: 'GPT family. Drop-in adapter through OpenConnector when policy allows external LLMs.', href: 'https://openai.com/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M22.28 9.82a5.99 5.99 0 0 0-.52-4.92 6.06 6.06 0 0 0-6.51-2.91A6.07 6.07 0 0 0 4.81 4.18a5.99 5.99 0 0 0-4 2.91 6.06 6.06 0 0 0 .75 7.1 5.98 5.98 0 0 0 .51 4.91 6.07 6.07 0 0 0 6.52 2.91A5.98 5.98 0 0 0 13.06 24a6.06 6.06 0 0 0 5.78-4.21 5.99 5.99 0 0 0 4-2.9 6.06 6.06 0 0 0-.76-7.07Z"/></svg>},
-      {name: 'Mistral',     meta: 'Adapter · LLM',     brandColor: '#FA500F', desc: 'EU-hosted open-weight LLM. Strong reasoning, GDPR-friendly, the default for compliance-heavy installs.', href: 'https://mistral.ai/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><rect x="3" y="3" width="3" height="3"/><rect x="9" y="3" width="3" height="3"/><rect x="15" y="3" width="3" height="3"/><rect x="3" y="9" width="3" height="3"/><rect x="9" y="9" width="3" height="3"/><rect x="15" y="9" width="3" height="3"/><rect x="3" y="15" width="3" height="3"/><rect x="9" y="15" width="3" height="3"/><rect x="15" y="15" width="3" height="3"/></svg>},
-      {name: 'Ollama',      meta: 'Adapter · LLM',     brandColor: '#000000', desc: 'Self-hosted LLM runtime. Run Mistral, Llama, and more on your own GPU. No data leaves the server.', href: 'https://ollama.com/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M8 3c-2 0-3 1.5-3 3.5 0 1 .3 1.8.7 2.5C4.7 9.5 4 10.7 4 12s.7 2.5 1.7 3c-.4.7-.7 1.5-.7 2.5 0 2 1 3.5 3 3.5 1 0 2-.5 2.5-1.2.5.7 1.5 1.2 2.5 1.2 2 0 3-1.5 3-3.5 0-1-.3-1.8-.7-2.5 1-.5 1.7-1.7 1.7-3s-.7-2.5-1.7-3c.4-.7.7-1.5.7-2.5 0-2-1-3.5-3-3.5-1 0-2 .5-2.5 1.2C10 3.5 9 3 8 3z"/><circle cx="9.5" cy="11" r="1" fill="#fff"/><circle cx="14.5" cy="11" r="1" fill="#fff"/></svg>},
-      {name: 'Presidio',    meta: 'Adapter · PII',     brandColor: '#0078D4', desc: 'Microsoft\'s PII detection library. Anonymises text before publication. Powers DocuDesk\'s redact_pii tool.', href: 'https://microsoft.github.io/presidio/', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M12 2L4 5v7c0 5 3.5 9 8 10 4.5-1 8-5 8-10V5z"/><circle cx="12" cy="11" r="2.2" fill="#fff"/><path d="M9 16h6" stroke="#fff" strokeWidth="1.6" fill="none"/></svg>},
+      {name: 'Matrix',      meta: 'ExApp · Chat',      brandColor: '#000000', desc: 'Federated chat protocol. End-to-end encrypted, runs on your own server.', href: 'https://apps.nextcloud.com/apps/integration_matrix', icon: <svg viewBox="0 0 24 24" fill="currentColor" stroke="none"><path d="M.632.55v22.9H2.28V24H0V0h2.28v.55zm7.043 7.26v1.157h.033c.309-.443.683-.784 1.117-1.024.433-.245.936-.365 1.5-.365.54 0 1.033.107 1.481.314.448.208.785.582 1.02 1.108.254-.374.6-.706 1.034-.992.434-.287.95-.43 1.546-.43.453 0 .872.056 1.26.167.388.11.716.286.993.53.276.245.489.559.646.951.152.392.23.863.23 1.417v5.728h-2.349V11.52c0-.286-.01-.559-.032-.812a1.755 1.755 0 0 0-.18-.66 1.106 1.106 0 0 0-.438-.448c-.194-.11-.457-.166-.785-.166-.332 0-.6.064-.803.189a1.38 1.38 0 0 0-.48.499 1.946 1.946 0 0 0-.231.696 5.56 5.56 0 0 0-.06.785v4.768h-2.35v-4.8c0-.254-.004-.503-.018-.752a2.074 2.074 0 0 0-.143-.688 1.052 1.052 0 0 0-.415-.503c-.194-.125-.476-.19-.854-.19-.111 0-.259.024-.439.074-.18.051-.36.143-.53.282-.171.138-.319.337-.439.595-.12.259-.18.6-.18 1.02v4.966H5.46V7.81zm15.693 15.64V.55H21.72V0H24v24h-2.28v-.55z"/></svg>},
+      {name: 'Mattermost',  meta: 'ExApp · Chat',      brandColor: '#0058CC', desc: 'Self-hosted Slack alternative. Threads, integrations, and on-prem data.', href: 'https://apps.nextcloud.com/apps/integration_mattermost', icon: <svg viewBox="0 0 24 24" fill="currentColor" stroke="none"><path d="M12.081 0C7.048-.034 2.339 3.125.637 8.153c-2.125 6.276 1.24 13.086 7.516 15.21 6.276 2.125 13.086-1.24 15.21-7.516 1.727-5.1-.172-10.552-4.311-13.557l.126 2.547c2.065 2.282 2.88 5.512 1.852 8.549-1.534 4.532-6.594 6.915-11.3 5.321-4.708-1.593-7.28-6.559-5.745-11.092 1.031-3.046 3.655-5.121 6.694-5.67l1.642-1.94A4.87 4.87 0 0 0 12.08 0z"/></svg>},
+      {name: 'OpenExchange',meta: 'ExApp · Mail',      brandColor: '#005A9B', desc: 'Open-source mail and groupware suite. Drop-in alternative to Microsoft Exchange, with App Suite for the inbox.', href: 'https://nextcloud.com/partners/', icon: <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2.2"><circle cx="8.5" cy="12" r="5"/><path d="M14.5 7l6 10M14.5 17l6-10"/></svg>},
+      {name: 'Windmill',    meta: 'ExApp · Workflow',  brandColor: '#DC2A1F', desc: 'Developer-focused workflow engine. Python, TypeScript, Go, Bash. Triggered by Conduction events.', href: 'https://apps.nextcloud.com/apps/integration_windmill', icon: <svg viewBox="0 0 24 24" fill="currentColor"><circle cx="12" cy="12" r="2"/><path d="M12 12L17 5L19 8L14 12zM12 12L19 17L16 19L12 14zM12 12L5 7L8 5L12 10z"/><path d="M11 14h2v8h-2z"/></svg>},
+      {name: 'n8n',         meta: 'ExApp · Workflow',  brandColor: '#EA4B71', desc: 'Low-code automation flows. Drag-drop builder, hundreds of node types, fits next to OpenConnector.', href: '/sidecars/n8n', icon: <svg viewBox="0 0 24 24" fill="currentColor"><circle cx="6" cy="12" r="2.5"/><circle cx="18" cy="6" r="2.5"/><circle cx="18" cy="18" r="2.5"/><path d="M9 12h6M9 12l9-6M9 12l9 6" stroke="currentColor" strokeWidth="2" fill="none"/></svg>},
+      {name: 'OpenProject', meta: 'ExApp · PM',        brandColor: '#0770B8', desc: 'Project management. Gantt, agile boards, work packages mapped to Conduction cases.', href: 'https://apps.nextcloud.com/apps/integration_openproject', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M19.35.37h-1.86a4.628 4.628 0 0 0-4.652 4.624v5.609H4.652A4.628 4.628 0 0 0 0 15.23v3.721c0 2.569 2.083 4.679 4.652 4.679h1.86c2.57 0 4.652-2.11 4.652-4.679v-3.72h-2.791v3.88c0 1.026-.835 1.886-1.861 1.886h-1.86c-1.027 0-1.861-.864-1.861-1.886V15.23a1.839 1.839 0 0 1 1.86-1.833h14.697c2.57 0 4.652-2.11 4.652-4.679V4.997A4.628 4.628 0 0 0 19.35.37z"/></svg>},
+      {name: 'XWiki',       meta: 'ExApp · Wiki',      brandColor: '#1E4FB6', desc: 'Structured wiki and knowledge base. Pages, macros, query language. Embed register data inline.', href: '/apps/openregister#integrations', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M3 3h4l3 5 3-5h4l-5 8 5 8h-4l-3-5-3 5H3l5-8z"/></svg>},
+      {name: 'GitLab',      meta: 'ExApp · Code',      brandColor: '#FC6D26', desc: 'Git hosting, CI/CD, issue tracking. The other half of every developer team.', href: 'https://apps.nextcloud.com/apps/integration_gitlab', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="m23.6 9.59-.034-.086L20.3.98a.85.85 0 0 0-1.336.04l-.29.44-2.205 6.748H7.537L5.332 1.46a.857.857 0 0 0-.29-.441A.875.875 0 0 0 4.043 1.06a.86.86 0 0 0-.336.405L.433 9.501l-.033.086a6.066 6.066 0 0 0 2.012 7.011l.011.008.03.022 4.976 3.726 2.462 1.864 1.5 1.132c.36.272.86.272 1.22 0l1.5-1.132 2.46-1.864 5.006-3.749.013-.01a6.068 6.068 0 0 0 2.01-7.003z"/></svg>},
+      {name: 'Keycloak',    meta: 'ExApp · SSO',       brandColor: '#DB3327', desc: 'Open-source identity. SSO, OIDC, SAML, social login. Stand-in for the gemeentelijke IdP.', href: '/sidecars/keycloak', icon: <svg viewBox="0 0 24 24" fill="currentColor"><circle cx="9" cy="12" r="4"/><circle cx="9" cy="12" r="1.4" fill="#fff"/><path d="M13 12h8M17 12v3M21 12v3" stroke="currentColor" strokeWidth="2" fill="none"/></svg>},
+      {name: 'Claude',      meta: 'Adapter · LLM',     brandColor: '#D97757', desc: 'Anthropic frontier LLM. Long context, strong agents, called via the OpenConnector adapter.', href: '/apps/openregister#integrations', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M17.3 3.5h-3.67l6.7 16.92H24Zm-10.61 0L0 20.42h3.74l1.37-3.55h7.01l1.37 3.55h3.74L10.54 3.5Zm-.37 10.22 2.29-5.94 2.29 5.94Z"/></svg>},
+      {name: 'OpenAI',      meta: 'Adapter · LLM',     brandColor: '#10A37F', desc: 'GPT family. Drop-in adapter through OpenConnector when policy allows external LLMs.', href: 'https://apps.nextcloud.com/apps/integration_openai', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M22.28 9.82a5.99 5.99 0 0 0-.52-4.92 6.06 6.06 0 0 0-6.51-2.91A6.07 6.07 0 0 0 4.81 4.18a5.99 5.99 0 0 0-4 2.91 6.06 6.06 0 0 0 .75 7.1 5.98 5.98 0 0 0 .51 4.91 6.07 6.07 0 0 0 6.52 2.91A5.98 5.98 0 0 0 13.06 24a6.06 6.06 0 0 0 5.78-4.21 5.99 5.99 0 0 0 4-2.9 6.06 6.06 0 0 0-.76-7.07Z"/></svg>},
+      {name: 'Mistral',     meta: 'Adapter · LLM',     brandColor: '#FA500F', desc: 'EU-hosted open-weight LLM. Strong reasoning, GDPR-friendly, the default for compliance-heavy installs.', href: '/apps/openregister#integrations', icon: <svg viewBox="0 0 24 24" fill="currentColor"><rect x="3" y="3" width="3" height="3"/><rect x="9" y="3" width="3" height="3"/><rect x="15" y="3" width="3" height="3"/><rect x="3" y="9" width="3" height="3"/><rect x="9" y="9" width="3" height="3"/><rect x="15" y="9" width="3" height="3"/><rect x="3" y="15" width="3" height="3"/><rect x="9" y="15" width="3" height="3"/><rect x="15" y="15" width="3" height="3"/></svg>},
+      {name: 'Ollama',      meta: 'Adapter · LLM',     brandColor: '#000000', desc: 'Self-hosted LLM runtime. Run Mistral, Llama, and more on your own GPU. No data leaves the server.', href: '/sidecars/ollama', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M8 3c-2 0-3 1.5-3 3.5 0 1 .3 1.8.7 2.5C4.7 9.5 4 10.7 4 12s.7 2.5 1.7 3c-.4.7-.7 1.5-.7 2.5 0 2 1 3.5 3 3.5 1 0 2-.5 2.5-1.2.5.7 1.5 1.2 2.5 1.2 2 0 3-1.5 3-3.5 0-1-.3-1.8-.7-2.5 1-.5 1.7-1.7 1.7-3s-.7-2.5-1.7-3c.4-.7.7-1.5.7-2.5 0-2-1-3.5-3-3.5-1 0-2 .5-2.5 1.2C10 3.5 9 3 8 3z"/><circle cx="9.5" cy="11" r="1" fill="#fff"/><circle cx="14.5" cy="11" r="1" fill="#fff"/></svg>},
+      {name: 'Presidio',    meta: 'Adapter · PII',     brandColor: '#0078D4', desc: 'Microsoft\'s PII detection library. Anonymises text before publication. Powers DocuDesk\'s redact_pii tool.', href: '/apps/openregister#integrations', icon: <svg viewBox="0 0 24 24" fill="currentColor"><path d="M12 2L4 5v7c0 5 3.5 9 8 10 4.5-1 8-5 8-10V5z"/><circle cx="12" cy="11" r="2.2" fill="#fff"/><path d="M9 16h6" stroke="#fff" strokeWidth="1.6" fill="none"/></svg>},
     ]}
   />
 </Section>
diff --git a/src/pages/demo.mdx b/src/pages/demo.mdx
index 56e80602a..68de1b7d7 100644
--- a/src/pages/demo.mdx
+++ b/src/pages/demo.mdx
@@ -5,6 +5,7 @@ hide_table_of_contents: true
 ---
 
 import {Section, SectionHead, HowSteps, HowStep, FeatureList, FeatureItem, PairRow, PairCard, CtaBanner, Button, ComposeBlock} from '@conduction/docusaurus-preset/components';
+import {APP_COUNT} from '@site/src/data/apps-catalog';
 
 <Section spacing="default">
   <SectionHead
@@ -126,7 +127,7 @@ docker compose down -v`}</ComposeBlock>
       href="/apps/openconnector"
       icon={<svg viewBox="0 0 24 24"><circle cx="6" cy="12" r="3"/><circle cx="18" cy="6" r="3"/><circle cx="18" cy="18" r="3"/><path d="M9 12h9M9 12l9-6M9 12l9 6"/></svg>}
       name="OpenConnector"
-      why="Trekt voorbeelddata binnen via REST/SOAP/file drops. Alle 12 apps profiteren."
+      why={<>Trekt voorbeelddata binnen via REST/SOAP/file drops. Alle {APP_COUNT} apps profiteren.</>}
     />
   </PairRow>
 </Section>
diff --git a/src/pages/index.mdx b/src/pages/index.mdx
index c35934655..96cb3d9d0 100644
--- a/src/pages/index.mdx
+++ b/src/pages/index.mdx
@@ -7,6 +7,7 @@ hide_table_of_contents: true
 import {Hero, StatsStrip, AppsPreview, CtaBanner, PairRow, PairCard, Section, SectionHead, Clients, DEFAULT_CLIENTS, PartnerDirectory, CommonGroundPlus, HexRain} from '@conduction/docusaurus-preset/components';
 import {totalDownloads, formatDownloads} from '@conduction/docusaurus-preset/data';
 import {PARTNERS, BECOME_PARTNER, totalPartners} from '@site/src/data/partners-catalog';
+import {APP_COUNT} from '@site/src/data/apps-catalog';
 
 {/* Conduction main landing. Public Tech framing: tech to serve people.
     Three doors out: install an app yourself, get it as managed SaaS, or
@@ -17,7 +18,7 @@ import {PARTNERS, BECOME_PARTNER, totalPartners} from '@site/src/data/partners-c
 
 <Hero
   eyebrow={<>Public Tech · open-source apps for <span className="next-blue">Nextcloud</span></>}
-  title={<>Tech to serve people.<br/>One workspace.<br/>Twelve apps.</>}
+  title={<>Tech to serve people.<br/>One workspace.<br/>{APP_COUNT} apps.</>}
   lede={<>We are Conduction. We build open-source apps that plug into <span className="next-blue">Nextcloud</span>. Catalogs, registers, document handling, integrations. Install yourself, host with us as SaaS, or bring in a partner. Same code, same licence, no procurement track required.</>}
   primaryCta={{label: <>Install from <span className="next-blue">Nextcloud</span> app store</>, href: '/apps'}}
   secondaryCta={{label: 'Run a local demo', href: '/demo'}}
@@ -27,7 +28,7 @@ import {PARTNERS, BECOME_PARTNER, totalPartners} from '@site/src/data/partners-c
 </Hero>
 
 <StatsStrip stats={[
-  { value: '12', label: <>apps in the ecosystem,<br/>all open-source</> },
+  { value: String(APP_COUNT), label: <>apps in the ecosystem,<br/>all open-source</> },
   { value: '2 min', label: <>from app store install<br/>to working solution</> },
   { value: '€0', label: <>for the apps,<br/>support is optional</> },
   { value: totalPartners, label: <>certified and partner<br/>implementers</> },
diff --git a/src/pages/partners/acato.mdx b/src/pages/partners/acato.mdx
index 8ac7898fa..ea8fa9a19 100644
--- a/src/pages/partners/acato.mdx
+++ b/src/pages/partners/acato.mdx
@@ -1,5 +1,5 @@
 ---
-title: Acato, Strategic partner, Conduction
+title: Acato, Certified partner, Conduction
 description: Nederlandse open-source specialist uit Almere. Bouwt en host Nextcloud-omgevingen voor gemeenten en zorginstellingen.
 hide_table_of_contents: true
 ---
@@ -13,7 +13,7 @@ export const ACATO_SOLUTIONS = solutionsBySlugs(ACATO.solutions);
 
 <DetailHero
   crumb={[{label: 'Partners', href: '/partners'}, 'Acato']}
-  status={{label: 'Strategic partner', color: 'var(--c-blue-cobalt)'}}
+  status={{label: 'Certified partner', color: 'var(--c-blue-cobalt)'}}
   version="Founded 2008"
   locales="Almere, NL · 24 employees"
   title="Acato."
@@ -103,18 +103,18 @@ export const ACATO_SOLUTIONS = solutionsBySlugs(ACATO.solutions);
     <PartnerCard
       variant="other"
       href="/partners/yard"
-      tier="partner"
+      tier="host"
       name="YARD"
       logo="/img/partners/yard.png"
-      why="Digital design + development bureau in Utrecht. Strong on MyDash and OpenCatalogi for citizen-facing surfaces."
+      why="Digital agency uit Utrecht voor gemeenten en zorg. Levert de Conduction Woo-solution."
     />
     <PartnerCard
       variant="other"
       href="/partners/procolix"
-      tier="certified"
+      tier="host"
       name="Procolix"
       logo="/img/partners/procolix.png"
-      why="Officieel Nextcloud-distributeur, certified op DocuDesk en OpenConnector. Procesintegraties bij gemeenten."
+      why="Managed Nextcloud-hosting op eigen EU-infrastructuur, open source als uitgangspunt."
     />
   </div>
 </Section>
diff --git a/src/pages/partners/procolix.mdx b/src/pages/partners/procolix.mdx
index 16740f265..edb188477 100644
--- a/src/pages/partners/procolix.mdx
+++ b/src/pages/partners/procolix.mdx
@@ -1,6 +1,6 @@
 ---
-title: Procolix, Certified partner, Conduction
-description: Officieel Nextcloud-distributeur. Certified op DocuDesk en OpenConnector voor procesintegraties bij gemeenten en uitvoeringsorganisaties.
+title: Procolix, Host partner, Conduction
+description: Nederlandse managed-Nextcloud-hoster uit Dordrecht. Levert beheerde Nextcloud-omgevingen op eigen EU-infrastructuur, open source als uitgangspunt.
 hide_table_of_contents: true
 ---
 
@@ -13,11 +13,11 @@ export const PROCOLIX_SOLUTIONS = solutionsBySlugs(PROCOLIX.solutions);
 
 <DetailHero
   crumb={[{label: 'Partners', href: '/partners'}, 'Procolix']}
-  status={{label: 'Certified partner', color: 'var(--c-gold-500)'}}
+  status={{label: 'Host partner', color: 'var(--c-cobalt-100)'}}
   version="Founded 2007"
   locales="Hilversum, NL · 35 employees"
   title="Procolix."
-  tagline={<>Nederlandse hoster en leverancier van proces- en zaakmanagement-software. Officieel <span className="next-blue">Nextcloud</span>-distributeur. Certified op DocuDesk en OpenConnector voor procesintegraties bij gemeenten en uitvoeringsorganisaties.</>}
+  tagline={<>Nederlandse managed-<span className="next-blue">Nextcloud</span>-hoster uit Dordrecht. Levert beheerde Nextcloud-omgevingen op eigen EU-infrastructuur, open source als uitgangspunt. Conduction-apps draaien daar bovenop voor klanten die hosting + apps bij één leverancier willen.</>}
   primaryCta={{label: 'Talk to Procolix', href: 'mailto:hello@procolix.com'}}
   secondaryCta={{label: 'Visit procolix.com', href: 'https://procolix.com'}}
   tertiaryCta={{label: 'All partners', href: '/partners'}}
@@ -101,18 +101,18 @@ export const PROCOLIX_SOLUTIONS = solutionsBySlugs(PROCOLIX.solutions);
     <PartnerCard
       variant="other"
       href="/partners/acato"
-      tier="strategic"
+      tier="certified"
       name="Acato"
       logo="/img/partners/acato.png"
-      why="Strategic partner. Technical Core implementations, gezamenlijke roadmap."
+      why="Certified partner. Joint roadmap, tender-eligible op de Conduction Woo-solution."
     />
     <PartnerCard
       variant="other"
       href="/partners/yard"
-      tier="partner"
+      tier="host"
       name="YARD"
       logo="/img/partners/yard.png"
-      why="Partner. Citizen-facing surfaces, NLDS-conforme front-end op de Conduction-stack."
+      why="Host partner. Digital agency uit Utrecht voor gemeenten en zorg, ship op de Woo-stack."
     />
   </div>
 </Section>
diff --git a/src/pages/partners/yard.mdx b/src/pages/partners/yard.mdx
index 61fc9261d..5156f55a0 100644
--- a/src/pages/partners/yard.mdx
+++ b/src/pages/partners/yard.mdx
@@ -1,5 +1,5 @@
 ---
-title: YARD, Partner, Conduction
+title: YARD, Host partner, Conduction
 description: Digital design- en development-bureau uit Utrecht. Strong on MyDash and OpenCatalogi for citizen-facing surfaces.
 hide_table_of_contents: true
 ---
@@ -13,7 +13,7 @@ export const YARD_SOLUTIONS = solutionsBySlugs(YARD.solutions);
 
 <DetailHero
   crumb={[{label: 'Partners', href: '/partners'}, 'YARD']}
-  status={{label: 'Partner', color: 'var(--c-cobalt-700)'}}
+  status={{label: 'Host partner', color: 'var(--c-cobalt-100)'}}
   version="Founded 2014"
   locales="Utrecht, NL · 12 employees"
   title="YARD."
@@ -101,18 +101,18 @@ export const YARD_SOLUTIONS = solutionsBySlugs(YARD.solutions);
     <PartnerCard
       variant="other"
       href="/partners/acato"
-      tier="strategic"
+      tier="certified"
       name="Acato"
       logo="/img/partners/acato.png"
-      why="Strategic partner. Technical Core implementations, hosting, lange-termijn beheer."
+      why="Certified partner. Joint roadmap, tender-eligible op de Conduction Woo-solution."
     />
     <PartnerCard
       variant="other"
       href="/partners/procolix"
-      tier="certified"
+      tier="host"
       name="Procolix"
       logo="/img/partners/procolix.png"
-      why="Certified partner. Officieel Nextcloud-distributeur, sterk op DocuDesk en OpenConnector."
+      why="Host partner. Managed Nextcloud-hosting op eigen EU-infrastructuur."
     />
   </div>
 </Section>
diff --git a/src/pages/sidecars.mdx b/src/pages/sidecars.mdx
new file mode 100644
index 000000000..bf93e7a0d
--- /dev/null
+++ b/src/pages/sidecars.mdx
@@ -0,0 +1,80 @@
+---
+title: Sidecars, Conduction
+description: Nextcloud-installable wrappers around third-party open-source services. Same upstream, less DevOps.
+hide_table_of_contents: true
+---
+
+import React, {useState, useMemo} from 'react';
+import {Section, SectionHead, FacetedFilters, AppCard} from '@conduction/docusaurus-preset/components';
+import {getSidecars, SIDECAR_CATEGORIES} from '@site/src/data/sidecars-catalog';
+
+export const sidecars = getSidecars();
+
+export const STATUS_LABELS = {STABLE: 'Stable', BETA: 'Beta', 'COMING SOON': 'Coming soon'};
+
+export function FilterableSidecars() {
+  const [selected, setSelected] = useState({});
+
+  const facets = useMemo(() => {
+    const cats = SIDECAR_CATEGORIES.filter(c => c !== 'All');
+    return [
+      {key: 'category', label: 'Category', items: cats.map(c => ({
+        value: c, label: c,
+        count: sidecars.filter(a => Array.isArray(a.categories) && a.categories.includes(c)).length,
+      })).filter(item => item.count > 0)},
+      {key: 'status', label: 'Status', items: ['STABLE', 'BETA', 'COMING SOON'].map(s => ({
+        value: s, label: STATUS_LABELS[s],
+        count: sidecars.filter(a => a.status === s).length,
+      })).filter(item => item.count > 0)},
+    ];
+  }, []);
+
+  const filtered = useMemo(() => {
+    return sidecars.filter(a => {
+      for (const [key, values] of Object.entries(selected)) {
+        if (!values || values.length === 0) continue;
+        if (key === 'category') {
+          const cats = a.categories || [];
+          if (!values.some(v => cats.includes(v))) return false;
+        } else if (key === 'status') {
+          if (!values.includes(a.status)) return false;
+        }
+      }
+      return true;
+    });
+  }, [selected]);
+
+  const totalSelected = Object.values(selected).reduce(
+    (n, v) => n + (Array.isArray(v) ? v.length : 0), 0
+  );
+
+  return (
+    <div style={{display: 'grid', gridTemplateColumns: '240px 1fr', gap: 56, alignItems: 'start'}}>
+      <FacetedFilters facets={facets} selected={selected} onChange={setSelected} />
+      <div>
+        <div style={{display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 24, paddingBottom: 16, borderBottom: '1px solid var(--c-cobalt-100)', fontSize: 14, color: 'var(--c-cobalt-700)'}}>
+          <div>
+            <strong style={{color: 'var(--c-cobalt-900)'}}>{filtered.length}</strong> of {sidecars.length} sidecars
+            {totalSelected > 0 && <span style={{color: 'var(--c-cobalt-400)'}}> · {sidecars.length - filtered.length} hidden by filters</span>}
+          </div>
+        </div>
+        <div style={{display: 'grid', gridTemplateColumns: 'repeat(auto-fill, minmax(280px, 1fr))', gap: 24}}>
+          {filtered.map((app, i) => <AppCard key={i} app={app} />)}
+        </div>
+        {filtered.length === 0 && (
+          <p style={{textAlign: 'center', color: 'var(--c-cobalt-500)', padding: 'var(--space-8) 0'}}>No sidecars match this filter.</p>
+        )}
+      </div>
+    </div>
+  );
+}
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="Sidecars"
+    title={<>Third-party services, installed like an app.</>}
+    lede={<>Sidecars are <span className="next-blue">Nextcloud</span>-installable wrappers around proven open-source services. n8n, Keycloak, OpenZaak, Ollama and others, packaged so you install them from the app store instead of operating a separate cluster. We do not fork the upstream; the sidecar tracks releases and handles the koppelvlak to Nextcloud.</>}
+  />
+
+  <FilterableSidecars />
+</Section>
diff --git a/src/pages/sidecars/keycloak.mdx b/src/pages/sidecars/keycloak.mdx
new file mode 100644
index 000000000..c78ce646d
--- /dev/null
+++ b/src/pages/sidecars/keycloak.mdx
@@ -0,0 +1,47 @@
+---
+title: Keycloak sidecar, Conduction
+description: Nextcloud sidecar wrapping Keycloak for self-hosted identity and SSO.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="keycloak"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'Keycloak']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL · EN"
+  title="Keycloak"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps Keycloak. Run the open-source identity broker inside your workspace, installed from the app store, SSO across all your apps from day one.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/keycloak'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/keycloak-nextcloud'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><circle cx="9" cy="12" r="4"/><path d="M13 12h8M17 12v4M21 12v3"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="Keycloak as a Nextcloud app."
+    align="stack"
+    lede="Keycloak is the open-source identity-and-access platform from Red Hat. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and the SAML, OIDC, and OAuth flows are reachable from every other app in the workspace. Same upstream, less DevOps."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork Keycloak. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the SSO koppelvlak to Nextcloud. Your identity records stay in the upstream service. Conduction is responsible for the integration, not for upstream Keycloak."
+  />
+</Section>
+
+<CtaBanner
+  title="Run Keycloak inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Configure SSO for every Conduction app and every third-party sidecar in one place.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/n8n.mdx b/src/pages/sidecars/n8n.mdx
new file mode 100644
index 000000000..8a1cf4d51
--- /dev/null
+++ b/src/pages/sidecars/n8n.mdx
@@ -0,0 +1,47 @@
+---
+title: n8n sidecar, Conduction
+description: Nextcloud sidecar wrapping n8n for workflow automation.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="n8n"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'n8n']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL · EN"
+  title="n8n"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps n8n. Run the popular visual workflow-automation engine inside your workspace, installed from the Nextcloud app store, no separate hosting.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/n8n'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/n8n-nextcloud'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><circle cx="5" cy="12" r="2"/><circle cx="12" cy="5" r="2"/><circle cx="12" cy="19" r="2"/><circle cx="19" cy="12" r="2"/><path d="M7 12h3M14 12h3M12 7v3M12 14v3"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="n8n as a Nextcloud app."
+    align="stack"
+    lede="n8n is a visual workflow automation tool with hundreds of pre-built integrations. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and workflows talk to your registers and connectors directly. Same upstream, less DevOps."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork n8n. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Your workflows stay in the upstream service. Conduction is responsible for the integration, not for upstream n8n."
+  />
+</Section>
+
+<CtaBanner
+  title="Run n8n inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Connect to OpenRegister rows. Trigger workflows from OpenConnector events. Surface results in MyDash.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/ollama.mdx b/src/pages/sidecars/ollama.mdx
new file mode 100644
index 000000000..9d825fe6e
--- /dev/null
+++ b/src/pages/sidecars/ollama.mdx
@@ -0,0 +1,47 @@
+---
+title: Ollama sidecar, Conduction
+description: Nextcloud sidecar wrapping Ollama for local LLM inference.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="ollama"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'Ollama']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL · EN"
+  title="Ollama"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps Ollama. Run local large-language models inside your workspace, install from the app store, keep your prompts on your own hardware.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/ollama'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/ollama-nextcloud'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><path d="M12 3l9 5v8l-9 5-9-5V8z"/><circle cx="12" cy="12" r="2"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="Ollama as a Nextcloud app."
+    align="stack"
+    lede="Ollama runs open-weight LLMs locally with a clean HTTP API. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and any app in the workspace can call the inference endpoint. Same upstream, less DevOps. Data never leaves the instance."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork Ollama. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Models stay on the instance. Conduction is responsible for the integration, not for upstream Ollama."
+  />
+</Section>
+
+<CtaBanner
+  title="Run Ollama inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Wire local models into AI Companion. Drive summarisation flows from OpenConnector. Keep every prompt on your own hardware.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/open-webui.mdx b/src/pages/sidecars/open-webui.mdx
new file mode 100644
index 000000000..358c35a5b
--- /dev/null
+++ b/src/pages/sidecars/open-webui.mdx
@@ -0,0 +1,47 @@
+---
+title: Open WebUI sidecar, Conduction
+description: Nextcloud sidecar wrapping Open WebUI for a chat interface over local LLMs.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="open-webui"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'Open WebUI']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL · EN"
+  title="Open WebUI"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps Open WebUI. A ChatGPT-style interface for your local LLMs, installed from the app store, all running on your own hardware.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/open-webui'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/open-webui-nextcloud'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="14" rx="2"/><path d="M7 9h2M7 13h6"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="Open WebUI as a Nextcloud app."
+    align="stack"
+    lede="Open WebUI is a polished chat front-end for local LLM runtimes. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and users get a familiar chat experience tied to your own models. Same upstream, less DevOps. Conversations never leave the instance."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork Open WebUI. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Conversations and uploads stay on the instance. Conduction is responsible for the integration, not for upstream Open WebUI."
+  />
+</Section>
+
+<CtaBanner
+  title="Run Open WebUI inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Pair with the Ollama sidecar for the model. SSO comes from the Keycloak sidecar. One workspace, no cloud round-trip.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/openklant.mdx b/src/pages/sidecars/openklant.mdx
new file mode 100644
index 000000000..93d273491
--- /dev/null
+++ b/src/pages/sidecars/openklant.mdx
@@ -0,0 +1,47 @@
+---
+title: OpenKlant sidecar, Conduction
+description: Nextcloud sidecar wrapping the OpenKlant citizen-contact register. ZGW-compatible, installed from the app store.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="openklant"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'OpenKlant']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL"
+  title="OpenKlant"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps OpenKlant. Run the official citizen-contact register next to your workspace, install from the Nextcloud app store, no separate cluster.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/openklant'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/openklant'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M4 21a8 8 0 0 1 16 0"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="OpenKlant as a Nextcloud app."
+    align="stack"
+    lede="OpenKlant is the Common Ground citizen-contact register. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and the ZGW APIs are reachable from OpenConnector. Same upstream, less DevOps."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork OpenKlant. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Your data stays in the upstream service. Conduction is responsible for the integration, not for upstream OpenKlant."
+  />
+</Section>
+
+<CtaBanner
+  title="Run OpenKlant inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Pair with OpenConnector to route ZGW calls. Pair with Procest to drive workflows on citizen-contact events.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/opentalk.mdx b/src/pages/sidecars/opentalk.mdx
new file mode 100644
index 000000000..381ddbaba
--- /dev/null
+++ b/src/pages/sidecars/opentalk.mdx
@@ -0,0 +1,47 @@
+---
+title: OpenTalk sidecar, Conduction
+description: Nextcloud sidecar wrapping the OpenTalk video-conferencing controller. GDPR-compliant meetings, end-to-end encryption, screen sharing.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="opentalk"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'OpenTalk']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL · EN"
+  title="OpenTalk"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps OpenTalk. GDPR-compliant video conferencing, end-to-end encrypted, screen-sharing included. Installed through the AppAPI, run as an ExApp next to the workspace.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the upstream docs', href: 'https://opentalk.eu/'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/opentalk'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><path d="M21 11.5a8.4 8.4 0 0 1-9 8.4 8.4 8.4 0 0 1-3.4-.7L3 21l1.5-5.4A8.4 8.4 0 1 1 21 11.5z"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="OpenTalk as a Nextcloud ExApp."
+    align="stack"
+    lede="OpenTalk is a GDPR-compliant video-conferencing controller from heinlein-group. We package it as a Nextcloud-installable ExApp through the AppAPI. Install the app, the upstream controller runs alongside Nextcloud, and meeting links appear right next to your Files, Mail, and Calendar."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork OpenTalk. The sidecar tracks the upstream container releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Meeting data stays in the upstream service, hosted where you host it. Conduction is responsible for the integration, not for upstream OpenTalk."
+  />
+</Section>
+
+<CtaBanner
+  title="Run OpenTalk meetings inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. GDPR-compliant, end-to-end encrypted, hosted next to the workspace your team already uses.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/openzaak.mdx b/src/pages/sidecars/openzaak.mdx
new file mode 100644
index 000000000..01d7181e2
--- /dev/null
+++ b/src/pages/sidecars/openzaak.mdx
@@ -0,0 +1,47 @@
+---
+title: OpenZaak sidecar, Conduction
+description: Nextcloud sidecar wrapping the OpenZaak case-management API.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="openzaak"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'OpenZaak']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL"
+  title="OpenZaak"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps OpenZaak. Run the official Common Ground case-management API next to your workspace. ZGW-koppelvlakken, vanuit Nextcloud.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/openzaak'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/openzaak'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><rect x="4" y="4" width="16" height="16" rx="2"/><path d="M9 9h6v6H9z"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="OpenZaak as a Nextcloud app."
+    align="stack"
+    lede="OpenZaak is the Common Ground case-management API. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and the ZGW endpoints are reachable from OpenConnector. Same upstream, less DevOps."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork OpenZaak. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Your case data stays in the upstream service. Conduction is responsible for the integration, not for upstream OpenZaak."
+  />
+</Section>
+
+<CtaBanner
+  title="Run OpenZaak inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Route ZGW calls through OpenConnector. Drive cases through Procest workflows.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/sidecars/valtimo.mdx b/src/pages/sidecars/valtimo.mdx
new file mode 100644
index 000000000..7d753034b
--- /dev/null
+++ b/src/pages/sidecars/valtimo.mdx
@@ -0,0 +1,47 @@
+---
+title: Valtimo sidecar, Conduction
+description: Nextcloud sidecar wrapping the Valtimo BPMN workflow engine.
+hide_table_of_contents: true
+---
+
+import {DetailHero, Section, SectionHead, CtaBanner} from '@conduction/docusaurus-preset/components';
+
+<DetailHero
+  appId="valtimo"
+  crumb={[{label: 'Sidecars', href: '/sidecars'}, 'Valtimo']}
+  status={{label: 'Sidecar', color: 'var(--c-cobalt-400)'}}
+  version="upstream"
+  locales="NL · EN"
+  title="Valtimo"
+  tagline={<>A <span className="next-blue">Nextcloud</span> sidecar that wraps Valtimo. Run the open-source BPMN workflow engine inside your workspace, install from the app store, no separate cluster to operate.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Read the docs', href: 'https://docs.conduction.nl/valtimo'}}
+  tertiaryCta={{label: 'View on GitHub', href: 'https://github.com/ConductionNL/valtimo'}}
+  iconColor="var(--c-blue-cobalt)"
+  icon={<svg viewBox="0 0 24 24"><circle cx="6" cy="6" r="3"/><circle cx="18" cy="18" r="3"/><path d="M6 9v6a3 3 0 0 0 3 3h6"/></svg>}
+/>
+
+<Section spacing="default">
+  <SectionHead
+    eyebrow="What it is"
+    title="Valtimo as a Nextcloud app."
+    align="stack"
+    lede="Valtimo is an open-source BPMN workflow platform. We package it as a Nextcloud-installable sidecar. You install the app, the upstream container runs alongside Nextcloud, and Valtimo processes are reachable from OpenConnector and Procest. Same upstream, less DevOps."
+  />
+</Section>
+
+<Section spacing="default" background="tinted">
+  <SectionHead
+    eyebrow="Why a sidecar"
+    title="A sidecar is not a fork."
+    align="stack"
+    lede="We do not fork Valtimo. The sidecar tracks upstream releases. The wrapper handles install, lifecycle, and the koppelvlak to Nextcloud. Your process state stays in the upstream service. Conduction is responsible for the integration, not for upstream Valtimo."
+  />
+</Section>
+
+<CtaBanner
+  title="Run Valtimo inside your Nextcloud."
+  lede={<>Install from the Nextcloud app store. Trigger workflows from Procest. Surface task lists in MyDash. Route inputs through OpenConnector.</>}
+  primaryCta={{label: 'Install from app store', href: '/install'}}
+  secondaryCta={{label: 'Talk to a partner', href: '/partners'}}
+/>
diff --git a/src/pages/support.mdx b/src/pages/support.mdx
index 25c3ed6fc..babe37315 100644
--- a/src/pages/support.mdx
+++ b/src/pages/support.mdx
@@ -8,11 +8,11 @@ import {Section, SectionHead, HowSteps, HowStep, Card, Pill, HexBullet, HexNetwo
 import {PARTNERS, BECOME_PARTNER} from '@site/src/data/partners-catalog';
 
 export const TIER_PILL = {
-  partner:   {background: 'var(--c-cobalt-50)', color: 'var(--c-cobalt-700)'},
-  certified: {background: 'var(--c-gold-500)',  color: 'var(--c-cobalt-900)'},
-  strategic: {background: 'white',              color: 'var(--c-blue-cobalt)'},
+  host:      {background: 'var(--c-cobalt-50)', color: 'var(--c-cobalt-700)'},
+  service:   {background: 'var(--c-gold-500)',  color: 'var(--c-cobalt-900)'},
+  certified: {background: 'white',              color: 'var(--c-blue-cobalt)'},
 };
-export const TIER_CARD_STRATEGIC = {
+export const TIER_CARD_CERTIFIED = {
   background: 'var(--c-blue-cobalt)',
   borderColor: 'var(--c-blue-cobalt)',
   color: 'white',
@@ -54,17 +54,17 @@ export const TIER_PILL_BASE = {
     eyebrow="How support works"
     title="Three paths, picked by what you need."
     align="stack"
-    lede="Most teams never need anything beyond the docs. When you do, find a partner. For mission-critical or regulated rollouts, ask for a strategic engagement."
+    lede="Most teams never need anything beyond the docs. When you do, find a partner. For tenders or mission-critical rollouts, work with a Certified partner."
   />
   <HowSteps>
     <HowStep title="Try it yourself.">
       Install from the app store. Read the docs. Ask in the public GitHub Issues or community Discord. Most MKB and pilot users never need anything else, and that stays free, forever.
     </HowStep>
     <HowStep title="Find a partner.">
-      Running Conduction apps in production, or planning to? A partner deploys, configures, and supports the stack for you. Hourly, retainer, or project-based, whatever your contracting team prefers.
+      Running Conduction apps in production, or planning to? A Host or Service partner deploys, configures, and supports the stack for you. Hourly, retainer, or project-based.
     </HowStep>
-    <HowStep title="Strategic engagement.">
-      Mission-critical workloads, multi-app rollouts, or government tenders go through Strategic partners, co-developing with Conduction engineers and shaping the roadmap.
+    <HowStep title="Certified engagement.">
+      Public tenders, multi-app rollouts, and joint roadmap work go through Certified partners. They are trained and audited by us, and may co-respond to tenders with our products.
     </HowStep>
   </HowSteps>
 </Section>
@@ -78,9 +78,9 @@ export const TIER_PILL_BASE = {
   />
   <div style={{display: 'grid', gridTemplateColumns: 'repeat(3, 1fr)', gap: 24}}>
     <Card padding="lg">
-      <span style={{...TIER_PILL_BASE, ...TIER_PILL.partner}}>Partner</span>
-      <h3 style={{fontSize: 22, fontWeight: 700, margin: '18px 0 12px', color: 'var(--c-cobalt-900)'}}>Implementation, on demand.</h3>
-      <div style={{fontSize: 14, color: 'var(--c-cobalt-700)', lineHeight: 1.6, margin: '0 0 20px'}}>Self-certified on the apps. Installs and configures for one or two clients in a region or sector.</div>
+      <span style={{...TIER_PILL_BASE, ...TIER_PILL.host}}>Host</span>
+      <h3 style={{fontSize: 22, fontWeight: 700, margin: '18px 0 12px', color: 'var(--c-cobalt-900)'}}>Ships our apps to their customers.</h3>
+      <div style={{fontSize: 14, color: 'var(--c-cobalt-700)', lineHeight: 1.6, margin: '0 0 20px'}}>Hosts and resells the open-source apps through their own channels. May offer Nextcloud-supported variants. No SLA with Conduction.</div>
       <ul style={{listStyle: 'none', padding: 0, margin: 0, display: 'flex', flexDirection: 'column', gap: 8, fontSize: 13, color: 'var(--c-cobalt-800)'}}>
         <li><HexBullet size="sm" color="var(--c-mint-500)" /> Public listing in the directory</li>
         <li><HexBullet size="sm" color="var(--c-mint-500)" /> Community Slack access</li>
@@ -88,25 +88,26 @@ export const TIER_PILL_BASE = {
       </ul>
     </Card>
     <Card padding="lg">
-      <span style={{...TIER_PILL_BASE, ...TIER_PILL.certified}}>Certified</span>
-      <h3 style={{fontSize: 22, fontWeight: 700, margin: '18px 0 12px', color: 'var(--c-cobalt-900)'}}>Certified on the apps you ship.</h3>
-      <div style={{fontSize: 14, color: 'var(--c-cobalt-700)', lineHeight: 1.6, margin: '0 0 20px'}}>Conduction-certified per app. Joint go-to-market on tenders. Higher SLA on shared customers.</div>
+      <span style={{...TIER_PILL_BASE, ...TIER_PILL.service}}>Service</span>
+      <h3 style={{fontSize: 22, fontWeight: 700, margin: '18px 0 12px', color: 'var(--c-cobalt-900)'}}>SLA, third-line, named contacts.</h3>
+      <div style={{fontSize: 14, color: 'var(--c-cobalt-700)', lineHeight: 1.6, margin: '0 0 20px'}}>Hosts and ships our apps with an SLA from Conduction. Third-line support from our engineers, named contacts, input on bug priority and feature requests.</div>
       <ul style={{listStyle: 'none', padding: 0, margin: 0, display: 'flex', flexDirection: 'column', gap: 8, fontSize: 13, color: 'var(--c-cobalt-800)'}}>
-        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Everything in Partner</li>
-        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Certified gold avatar</li>
-        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Co-branded case-study slot</li>
-        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Pre-release access (one minor)</li>
+        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Everything in Host</li>
+        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Official Nextcloud partner</li>
+        <li><HexBullet size="sm" color="var(--c-mint-500)" /> SLA contract with Conduction</li>
+        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Direct line to third-line support</li>
+        <li><HexBullet size="sm" color="var(--c-mint-500)" /> Roadmap and bug-priority input</li>
       </ul>
     </Card>
-    <Card padding="lg" style={TIER_CARD_STRATEGIC}>
-      <span style={{...TIER_PILL_BASE, ...TIER_PILL.strategic}}>Strategic</span>
-      <h3 style={{fontSize: 22, fontWeight: 700, margin: '18px 0 12px', color: 'white'}}>Shared roadmap, shared release.</h3>
-      <div style={{fontSize: 14, color: 'rgba(255,255,255,0.78)', lineHeight: 1.6, margin: '0 0 20px'}}>Conduction's deepest partners. Joint roadmap commitments and shared engineering, by invitation only.</div>
+    <Card padding="lg" style={TIER_CARD_CERTIFIED}>
+      <span style={{...TIER_PILL_BASE, ...TIER_PILL.certified}}>Certified</span>
+      <h3 style={{fontSize: 22, fontWeight: 700, margin: '18px 0 12px', color: 'white'}}>Trained, audited, tender-eligible.</h3>
+      <div style={{fontSize: 14, color: 'rgba(255,255,255,0.78)', lineHeight: 1.6, margin: '0 0 20px'}}>Trained by Conduction, audited annually, on the joint roadmap. Eligible to co-respond to public tenders alongside us.</div>
       <ul style={{listStyle: 'none', padding: 0, margin: 0, display: 'flex', flexDirection: 'column', gap: 8, fontSize: 13, color: 'rgba(255,255,255,0.92)'}}>
-        <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Everything in Certified</li>
+        <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Everything in Service</li>
+        <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Trained + audited certification</li>
         <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Joint roadmap planning</li>
-        <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Engineering hours from Conduction</li>
-        <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Co-sale on government tenders</li>
+        <li><HexBullet size="sm" color="var(--c-orange-knvb)" /> Tender-eligible with our products</li>
       </ul>
     </Card>
   </div>
@@ -251,9 +252,9 @@ export const TIER_PILL_BASE = {
         <label style={{display: 'block'}}>
           <span style={{display: 'block', fontFamily: 'var(--conduction-typography-font-family-code)', fontSize: 11, letterSpacing: '0.06em', textTransform: 'uppercase', color: 'rgba(255,255,255,0.55)', marginBottom: 6}}>Tier you're applying for</span>
           <select name="tier" style={{width: '100%', boxSizing: 'border-box', fontFamily: 'inherit', fontSize: 14, padding: '11px 14px', border: '1px solid rgba(255,255,255,0.18)', borderRadius: 'var(--radius-md)', background: 'rgba(255,255,255,0.08)', color: 'white'}}>
-            <option>Partner</option>
-            <option>Certified</option>
-            <option>Strategic (by invitation)</option>
+            <option>Host</option>
+            <option>Service</option>
+            <option>Certified (by invitation)</option>
           </select>
         </label>
       </div>
diff --git a/static/img/brand/avatar-conduction-gold.svg b/static/img/brand/avatar-conduction-gold.svg
new file mode 100644
index 000000000..a9d53c4e2
--- /dev/null
+++ b/static/img/brand/avatar-conduction-gold.svg
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 300" role="img" aria-label="Conduction avatar — gold on transparent (certified partners)">
+  <title>Conduction avatar — gold gradient on transparent · reserved for certified partners</title>
+  <defs>
+    <linearGradient id="gold" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#E5C447"/>
+      <stop offset="45%" stop-color="#C9A227"/>
+      <stop offset="100%" stop-color="#8B6914"/>
+    </linearGradient>
+  </defs>
+  <g fill="url(#gold)">
+    <path d="M149.7,28L38,92.5v129l111.7,64.5,111.7-64.5V92.5L149.7,28ZM233,205.1l-83.2,48.1-83.2-48.1v-96.1l83.2-48.1,83.2,48.1v96.1Z"></path>
+    <polygon points="149.4 124.5 175.6 139.6 206.1 122 149.4 89.4 90.9 123.2 90.9 190.8 149.4 224.6 206.1 192 175.6 174.4 149.4 189.5 121.3 173.2 121.3 140.8 149.4 124.5"></polygon>
+  </g>
+</svg>
diff --git a/static/img/partners/acato.svg b/static/img/partners/acato.svg
new file mode 100644
index 000000000..d74ee51eb
--- /dev/null
+++ b/static/img/partners/acato.svg
@@ -0,0 +1,9 @@
+<svg width="90" height="32" viewBox="0 0 90 32" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M76.1529 12.7902C76.0125 10.5576 77.6968 8.60413 79.9426 8.39483C81.9778 8.25529 83.8727 9.65064 84.2938 11.6041C84.5745 13.7669 82.9604 15.7902 80.7848 16.0692C78.6092 16.4181 76.574 15.0227 76.1529 12.8599M70.6788 13.6274C71.5912 18.7902 76.574 22.2785 81.7673 21.3716C86.7501 20.5344 90.1889 15.9995 89.6275 10.9762C88.9257 6.0925 84.1534 2.6739 78.8899 3.44134C73.6966 4.13901 69.977 8.6739 70.6788 13.6274Z" fill="#0F0F12"/>
+<path d="M26.9547 22.2087C26.2529 21.6506 25.7617 20.8134 25.6213 19.9064C25.481 18.9994 25.7617 18.0227 26.2529 17.325C26.9547 16.5576 27.8671 16.139 28.8496 15.9994L33.8324 15.3018L33.0604 10.2087L28.218 10.9064C25.7617 11.2553 23.4457 12.5111 21.9018 14.3948C20.428 16.2087 19.7262 18.5111 20.0069 20.8134C20.428 23.1157 21.6912 25.139 23.6563 26.4646C25.6915 27.8599 28.218 28.4878 30.6743 28.139L35.5167 27.4413L34.7447 21.9994L29.6918 22.6971C28.7794 22.9064 27.7267 22.6971 26.9547 22.2087Z" fill="#0F0F12"/>
+<path d="M66.6765 17.6041C64.571 18.0227 62.5358 16.6971 62.1147 14.6041C62.1147 14.5343 62.1147 14.4646 62.0446 14.3948L61.6235 11.3948L66.0448 10.7669L65.343 5.67387L60.9217 6.30178L60.1497 0.929688L54.6756 1.69713L56.5705 15.1622C56.5705 15.1622 57.8338 24.3715 67.4484 23.046L70.396 22.6274L69.624 17.1855L66.6765 17.6041Z" fill="#0F0F12"/>
+<path d="M7.72569 13.4181C2.81308 14.1158 -0.555569 18.5809 0.0760521 23.4646C0.707674 28.3483 5.26938 31.6971 10.182 31.0692L19.0949 29.8134L17.8316 21.0227C17.1298 16.0692 12.5681 12.7204 7.72569 13.4181ZM13.3401 25.4878L9.4802 26.046C7.37479 26.3251 5.40975 24.8599 5.12903 22.7669C4.8483 20.6739 6.32209 18.7204 8.42749 18.4413C10.5329 18.1623 12.4979 19.6274 12.7787 21.7204L13.3401 25.4878Z" fill="#0F0F12"/>
+<path d="M44.078 8.32504C39.1654 9.02271 35.7968 13.4878 36.4284 18.3715C37.1302 23.2553 41.6217 26.6041 46.5343 25.9762L55.377 24.7204L54.184 15.8599C53.4822 11.046 48.9907 7.62736 44.078 8.32504ZM49.6925 20.3948L45.8325 20.9529C43.7271 21.232 41.7621 19.7669 41.4814 17.6739C41.2007 15.5808 42.6744 13.6274 44.7798 13.3483C46.8852 13.0692 48.8503 14.5343 49.131 16.6274L49.6925 20.3948Z" fill="#0F0F12"/>
+<path d="M29.4815 22.8366C27.5867 23.1157 25.8322 21.7901 25.5515 19.9064C25.2707 18.0227 26.6042 16.2785 28.499 16.0692L33.7625 15.3018L33.0607 10.2087L27.5165 10.9762C22.7442 11.6739 19.3756 16.0692 20.0774 20.8134C20.7792 25.5576 25.2005 28.9064 29.9728 28.2087L35.517 27.4413L34.7451 21.9994L29.4815 22.8366Z" fill="#0F0F12"/>
+<path d="M66.4659 17.6739C64.3605 17.9529 62.3955 16.4878 62.1147 14.3948L61.6937 11.3948L66.115 10.7669L65.4132 5.67387L60.9919 6.30178L60.2199 0.929688L54.6756 1.69713L56.6407 15.7204C57.3425 20.4646 61.7638 23.8134 66.5361 23.1855L70.3258 22.6274L69.5538 17.1855L66.4659 17.6739Z" fill="#0F0F12"/>
+</svg>