diff --git a/appinfo/info.xml b/appinfo/info.xml
index aa70380b6..895cb48bc 100644
--- a/appinfo/info.xml
+++ b/appinfo/info.xml
@@ -50,7 +50,7 @@ Vrij en open source onder de EUPL-licentie.
 
 **Ondersteuning:** Voor ondersteuning, neem contact op via support@conduction.nl. Voor een Service Level Agreement (SLA), neem contact op via sales@conduction.nl.
     ]]></description>
-    <version>0.2.4-unstable.20261001120000</version>
+    <version>0.2.5-unstable.20261008120000</version>
     <licence>EUPL-1.2</licence>
     <author mail="info@conduction.nl" homepage="https://www.conduction.nl/">Conduction</author>
     <namespace>Stackiq</namespace>
@@ -122,6 +122,15 @@ Vrij en open source onder de EUPL-licentie.
 			-->
 			<step>OCA\Stackiq\Repair\MigrateAppConfigKeys</step>
 			<step>OCA\Stackiq\Repair\MigrateUserPreferences</step>
+			<!--
+				WIDGET-ID RESTORE (#1261). Stable 0.1.148 to 0.2.0 and beta shipped the
+				concept organisations widget under the renamed id; restoring the frozen
+				id dropped it from every dashboard that chose it in that window. The
+				Dashboard app keeps that choice in `oc_preferences` under its own app id,
+				so this rewrites the renamed id to the frozen one for every seen user.
+				Upgrade-only: a fresh install has no dashboards to repair.
+			-->
+			<step>OCA\Stackiq\Repair\RepointDashboardWidgetId</step>
 			<!--
 				`oc_jobs` stores the background job's CLASS NAME as a string. The
 				namespace rename orphans all four rows: the class no longer exists,
diff --git a/composer.json b/composer.json
index c1bcee448..82718f974 100644
--- a/composer.json
+++ b/composer.json
@@ -83,7 +83,7 @@
         "conduction/hydra-gates": "^1.8.2",
         "cyclonedx/cyclonedx-php-composer": "^6.2",
         "edgedesign/phpqa": "^1.27",
-        "guzzlehttp/guzzle": "^7.8",
+        "guzzlehttp/guzzle": "^8.2",
         "nextcloud/ocp": "^35.0",
         "phpcsstandards/phpcsextra": "^1.4",
         "phpmd/phpmd": "^2.15",
diff --git a/composer.lock b/composer.lock
index 6e692867d..b046bd3af 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "a391ad10f944770d775e3219238670b6",
+    "content-hash": "bcff2a5dd5dacf3fcc7a22fef731e2ab",
     "packages": [
         {
             "name": "adbario/php-dot-notation",
@@ -3915,26 +3915,27 @@
         },
         {
             "name": "guzzlehttp/guzzle",
-            "version": "7.15.2",
+            "version": "8.2.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/guzzle.git",
-                "reference": "744101956d78b7c1384d0cbf379db13e859167bf"
+                "reference": "93939470950a9b11e2e84204166ef5e048c55fe4"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/744101956d78b7c1384d0cbf379db13e859167bf",
-                "reference": "744101956d78b7c1384d0cbf379db13e859167bf",
+                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/93939470950a9b11e2e84204166ef5e048c55fe4",
+                "reference": "93939470950a9b11e2e84204166ef5e048c55fe4",
                 "shasum": ""
             },
             "require": {
                 "ext-json": "*",
-                "guzzlehttp/promises": "^2.5.1",
-                "guzzlehttp/psr7": "^2.13",
-                "php": "^7.2.5 || ^8.0",
+                "guzzlehttp/promises": "^3.0.2",
+                "guzzlehttp/psr7": "^3.1",
+                "php": "^7.4 || ^8.0",
                 "psr/http-client": "^1.0",
-                "symfony/deprecation-contracts": "^2.5 || ^3.0",
-                "symfony/polyfill-php80": "^1.25"
+                "psr/http-factory": "^1.0",
+                "symfony/polyfill-php80": "^1.25",
+                "symfony/polyfill-php82": "^1.27"
             },
             "provide": {
                 "psr/http-client-implementation": "1.0"
@@ -3942,10 +3943,10 @@
             "require-dev": {
                 "bamarni/composer-bin-plugin": "^1.8.2",
                 "ext-curl": "*",
-                "guzzle/client-integration-tests": "3.0.3",
-                "guzzlehttp/test-server": "^0.7",
+                "guzzle/client-integration-tests": "4.0.1",
+                "guzzlehttp/test-server": "^1.0.1",
                 "php-http/message-factory": "^1.1",
-                "phpunit/phpunit": "^8.5.52 || ^9.6.34",
+                "phpunit/phpunit": "^9.6.34",
                 "psr/log": "^1.1 || ^2.0 || ^3.0"
             },
             "suggest": {
@@ -3961,9 +3962,6 @@
                 }
             },
             "autoload": {
-                "files": [
-                    "src/functions_include.php"
-                ],
                 "psr-4": {
                     "GuzzleHttp\\": "src/"
                 }
@@ -4023,7 +4021,7 @@
             ],
             "support": {
                 "issues": "https://github.com/guzzle/guzzle/issues",
-                "source": "https://github.com/guzzle/guzzle/tree/7.15.2"
+                "source": "https://github.com/guzzle/guzzle/tree/8.2.0"
             },
             "funding": [
                 {
@@ -4039,29 +4037,28 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-07-26T23:23:20+00:00"
+            "time": "2026-09-06T13:55:09+00:00"
         },
         {
             "name": "guzzlehttp/promises",
-            "version": "2.5.1",
+            "version": "3.0.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/promises.git",
-                "reference": "9ad1e4fc607446a055b95870c7f668e93b5cff29"
+                "reference": "42118e66a53c492effaf92bc357e931985d5c6f9"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/promises/zipball/9ad1e4fc607446a055b95870c7f668e93b5cff29",
-                "reference": "9ad1e4fc607446a055b95870c7f668e93b5cff29",
+                "url": "https://api.github.com/repos/guzzle/promises/zipball/42118e66a53c492effaf92bc357e931985d5c6f9",
+                "reference": "42118e66a53c492effaf92bc357e931985d5c6f9",
                 "shasum": ""
             },
             "require": {
-                "php": "^7.2.5 || ^8.0",
-                "symfony/deprecation-contracts": "^2.5 || ^3.0"
+                "php": "^7.4 || ^8.0"
             },
             "require-dev": {
                 "bamarni/composer-bin-plugin": "^1.8.2",
-                "phpunit/phpunit": "^8.5.52 || ^9.6.34"
+                "phpunit/phpunit": "^9.6.34"
             },
             "type": "library",
             "extra": {
@@ -4107,7 +4104,7 @@
             ],
             "support": {
                 "issues": "https://github.com/guzzle/promises/issues",
-                "source": "https://github.com/guzzle/promises/tree/2.5.1"
+                "source": "https://github.com/guzzle/promises/tree/3.0.2"
             },
             "funding": [
                 {
@@ -4123,39 +4120,39 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-07-08T15:48:39+00:00"
+            "time": "2026-08-24T10:00:26+00:00"
         },
         {
             "name": "guzzlehttp/psr7",
-            "version": "2.13.0",
+            "version": "3.1.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/psr7.git",
-                "reference": "dad89620b7a6edb60c15858442eb2e408b45d8f4"
+                "reference": "a3059ba1a84c9139c4ae03cf0f45bea276c97c74"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/psr7/zipball/dad89620b7a6edb60c15858442eb2e408b45d8f4",
-                "reference": "dad89620b7a6edb60c15858442eb2e408b45d8f4",
+                "url": "https://api.github.com/repos/guzzle/psr7/zipball/a3059ba1a84c9139c4ae03cf0f45bea276c97c74",
+                "reference": "a3059ba1a84c9139c4ae03cf0f45bea276c97c74",
                 "shasum": ""
             },
             "require": {
-                "php": "^7.2.5 || ^8.0",
-                "psr/http-factory": "^1.0",
-                "psr/http-message": "^1.1 || ^2.0",
-                "ralouphie/getallheaders": "^3.0",
-                "symfony/deprecation-contracts": "^2.5 || ^3.0",
-                "symfony/polyfill-php80": "^1.25"
+                "php": "^7.4 || ^8.0",
+                "psr/http-factory": "^1.1",
+                "psr/http-message": "^2.0",
+                "symfony/polyfill-php80": "^1.25",
+                "symfony/polyfill-php82": "^1.27"
             },
             "provide": {
-                "psr/http-factory-implementation": "1.0",
-                "psr/http-message-implementation": "1.0"
+                "psr/http-factory-implementation": "1.1",
+                "psr/http-message-implementation": "2.0"
             },
             "require-dev": {
                 "bamarni/composer-bin-plugin": "^1.8.2",
                 "http-interop/http-factory-tests": "1.1.0",
                 "jshttp/mime-db": "1.54.0.1",
-                "phpunit/phpunit": "^8.5.52 || ^9.6.34"
+                "php-http/psr7-integration-tests": "^1.5.1",
+                "phpunit/phpunit": "^9.6.34"
             },
             "suggest": {
                 "laminas/laminas-httphandlerrunner": "Emit PSR-7 responses"
@@ -4226,7 +4223,7 @@
             ],
             "support": {
                 "issues": "https://github.com/guzzle/psr7/issues",
-                "source": "https://github.com/guzzle/psr7/tree/2.13.0"
+                "source": "https://github.com/guzzle/psr7/tree/3.1.0"
             },
             "funding": [
                 {
@@ -4242,7 +4239,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-07-16T22:23:49+00:00"
+            "time": "2026-08-24T11:02:13+00:00"
         },
         {
             "name": "kubawerlos/php-cs-fixer-custom-fixers",
@@ -6535,50 +6532,6 @@
             },
             "time": "2023-04-04T09:54:51+00:00"
         },
-        {
-            "name": "ralouphie/getallheaders",
-            "version": "3.0.3",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/ralouphie/getallheaders.git",
-                "reference": "120b605dfeb996808c31b6477290a714d356e822"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822",
-                "reference": "120b605dfeb996808c31b6477290a714d356e822",
-                "shasum": ""
-            },
-            "require": {
-                "php": ">=5.6"
-            },
-            "require-dev": {
-                "php-coveralls/php-coveralls": "^2.1",
-                "phpunit/phpunit": "^5 || ^6.5"
-            },
-            "type": "library",
-            "autoload": {
-                "files": [
-                    "src/getallheaders.php"
-                ]
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Ralph Khattar",
-                    "email": "ralph.khattar@gmail.com"
-                }
-            ],
-            "description": "A polyfill for getallheaders.",
-            "support": {
-                "issues": "https://github.com/ralouphie/getallheaders/issues",
-                "source": "https://github.com/ralouphie/getallheaders/tree/develop"
-            },
-            "time": "2019-03-08T08:55:37+00:00"
-        },
         {
             "name": "roave/security-advisories",
             "version": "dev-latest",
@@ -9294,16 +9247,16 @@
         },
         {
             "name": "symfony/polyfill-php80",
-            "version": "v1.37.0",
+            "version": "v1.43.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/symfony/polyfill-php80.git",
-                "reference": "dfb55726c3a76ea3b6459fcfda1ec2d80a682411"
+                "reference": "9c6a5d6b01ca51d486c813e9a9c0ed55f208bb74"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/symfony/polyfill-php80/zipball/dfb55726c3a76ea3b6459fcfda1ec2d80a682411",
-                "reference": "dfb55726c3a76ea3b6459fcfda1ec2d80a682411",
+                "url": "https://api.github.com/repos/symfony/polyfill-php80/zipball/9c6a5d6b01ca51d486c813e9a9c0ed55f208bb74",
+                "reference": "9c6a5d6b01ca51d486c813e9a9c0ed55f208bb74",
                 "shasum": ""
             },
             "require": {
@@ -9354,7 +9307,7 @@
                 "shim"
             ],
             "support": {
-                "source": "https://github.com/symfony/polyfill-php80/tree/v1.37.0"
+                "source": "https://github.com/symfony/polyfill-php80/tree/v1.43.0"
             },
             "funding": [
                 {
@@ -9374,7 +9327,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-04-10T16:19:22+00:00"
+            "time": "2026-09-25T15:50:05+00:00"
         },
         {
             "name": "symfony/polyfill-php81",
@@ -9456,6 +9409,86 @@
             ],
             "time": "2026-05-26T12:45:58+00:00"
         },
+        {
+            "name": "symfony/polyfill-php82",
+            "version": "v1.43.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/polyfill-php82.git",
+                "reference": "843bbe8b2a7934307b749751eede0f111f5d1cfc"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/polyfill-php82/zipball/843bbe8b2a7934307b749751eede0f111f5d1cfc",
+                "reference": "843bbe8b2a7934307b749751eede0f111f5d1cfc",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.2"
+            },
+            "type": "library",
+            "extra": {
+                "thanks": {
+                    "url": "https://github.com/symfony/polyfill",
+                    "name": "symfony/polyfill"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "bootstrap.php"
+                ],
+                "psr-4": {
+                    "Symfony\\Polyfill\\Php82\\": ""
+                },
+                "classmap": [
+                    "Resources/stubs"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Nicolas Grekas",
+                    "email": "p@tchwork.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Symfony polyfill backporting some PHP 8.2+ features to lower PHP versions",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "compatibility",
+                "polyfill",
+                "portable",
+                "shim"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/polyfill-php82/tree/v1.43.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-09-25T15:50:05+00:00"
+        },
         {
             "name": "symfony/polyfill-php84",
             "version": "v1.43.0",
diff --git a/l10n/en.js b/l10n/en.js
index 70c3bfcef..8dd84a2f4 100644
--- a/l10n/en.js
+++ b/l10n/en.js
@@ -1130,7 +1130,9 @@ OC.L10N.register(
         "The part {part} of the workbook is too large to import: unpacked it is {size}, and the import reads at most {limit} of one part.": "The part {part} of the workbook is too large to import: unpacked it is {size}, and the import reads at most {limit} of one part.",
         "Delete the sheets the import does not read from a copy of the export (it reads only \"{first}\" and \"{second}\"), and import that copy.": "Delete the sheets the import does not read from a copy of the export (it reads only \"{first}\" and \"{second}\"), and import that copy.",
         "The workbook holds more than {count} different texts, the most the import reads.": "The workbook holds more than {count} different texts, the most the import reads.",
-        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads."
+        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.",
+        "In development since": "In development since",
+        "In use since": "In use since"
     },
     "nplurals=2; plural=(n != 1);"
 )
diff --git a/l10n/en.json b/l10n/en.json
index c1996692c..313f968ea 100644
--- a/l10n/en.json
+++ b/l10n/en.json
@@ -1129,6 +1129,8 @@
         "The part {part} of the workbook is too large to import: unpacked it is {size}, and the import reads at most {limit} of one part.": "The part {part} of the workbook is too large to import: unpacked it is {size}, and the import reads at most {limit} of one part.",
         "Delete the sheets the import does not read from a copy of the export (it reads only \"{first}\" and \"{second}\"), and import that copy.": "Delete the sheets the import does not read from a copy of the export (it reads only \"{first}\" and \"{second}\"), and import that copy.",
         "The workbook holds more than {count} different texts, the most the import reads.": "The workbook holds more than {count} different texts, the most the import reads.",
-        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads."
+        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.",
+        "In development since": "In development since",
+        "In use since": "In use since"
     }
 }
diff --git a/l10n/nl.js b/l10n/nl.js
index b2c3a6257..3151813d6 100644
--- a/l10n/nl.js
+++ b/l10n/nl.js
@@ -1198,7 +1198,9 @@ OC.L10N.register(
         "The part {part} of the workbook is too large to import: unpacked it is {size}, and the import reads at most {limit} of one part.": "Het onderdeel {part} van de werkmap is te groot om te importeren: uitgepakt is het {size}, en de import leest van één onderdeel hooguit {limit}.",
         "Delete the sheets the import does not read from a copy of the export (it reads only \"{first}\" and \"{second}\"), and import that copy.": "Verwijder in een kopie van de export de tabbladen die de import niet leest (hij leest alleen \"{first}\" en \"{second}\"), en importeer die kopie.",
         "The workbook holds more than {count} different texts, the most the import reads.": "De werkmap bevat meer dan {count} verschillende teksten, het maximum dat de import leest.",
-        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Samen verwijzen de cellen van de werkmap naar meer dan {size} gedeelde tekst, het maximum dat de import leest."
+        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Samen verwijzen de cellen van de werkmap naar meer dan {size} gedeelde tekst, het maximum dat de import leest.",
+        "In development since": "In ontwikkeling sinds",
+        "In use since": "In gebruik sinds"
     },
     "nplurals=2; plural=(n != 1);"
 )
diff --git a/l10n/nl.json b/l10n/nl.json
index e226a52ca..680f6f853 100644
--- a/l10n/nl.json
+++ b/l10n/nl.json
@@ -1197,6 +1197,8 @@
         "The part {part} of the workbook is too large to import: unpacked it is {size}, and the import reads at most {limit} of one part.": "Het onderdeel {part} van de werkmap is te groot om te importeren: uitgepakt is het {size}, en de import leest van één onderdeel hooguit {limit}.",
         "Delete the sheets the import does not read from a copy of the export (it reads only \"{first}\" and \"{second}\"), and import that copy.": "Verwijder in een kopie van de export de tabbladen die de import niet leest (hij leest alleen \"{first}\" en \"{second}\"), en importeer die kopie.",
         "The workbook holds more than {count} different texts, the most the import reads.": "De werkmap bevat meer dan {count} verschillende teksten, het maximum dat de import leest.",
-        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Samen verwijzen de cellen van de werkmap naar meer dan {size} gedeelde tekst, het maximum dat de import leest."
+        "Together, the cells of the workbook reference more than {size} of shared text, the most the import reads.": "Samen verwijzen de cellen van de werkmap naar meer dan {size} gedeelde tekst, het maximum dat de import leest.",
+        "In development since": "In ontwikkeling sinds",
+        "In use since": "In gebruik sinds"
     }
 }
diff --git a/lib/BackgroundJob/ModuleVersionPublicationJob.php b/lib/BackgroundJob/ModuleVersionPublicationJob.php
index 6c5928563..7c8536883 100644
--- a/lib/BackgroundJob/ModuleVersionPublicationJob.php
+++ b/lib/BackgroundJob/ModuleVersionPublicationJob.php
@@ -19,7 +19,7 @@
  * @version   GIT: <git_id>
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  */
 
 declare(strict_types=1);
@@ -42,7 +42,7 @@
 /**
  * One copy of one module's publication onto its versions.
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  */
 class ModuleVersionPublicationJob extends QueuedJob {
 
@@ -88,7 +88,7 @@ public function __construct(
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	protected function run($argument): void {
 		$moduleUuid = '';
diff --git a/lib/Controller/SetupController.php b/lib/Controller/SetupController.php
index 8686c4501..5a9290477 100644
--- a/lib/Controller/SetupController.php
+++ b/lib/Controller/SetupController.php
@@ -106,7 +106,7 @@ public function __construct(
 	 *
 	 * @return JSONResponse The status document.
 	 *
-	 * @spec openspec/changes/wizard-dataset-card-load/specs/first-time-setup/spec.md
+	 * @spec openspec/specs/first-time-setup/spec.md
 	 */
 	#[AuthorizedAdminSetting(StackiqAdmin::class)]
 	public function status(): JSONResponse {
@@ -142,7 +142,7 @@ public function status(): JSONResponse {
 	 *
 	 * @return JSONResponse `{ success, config }`.
 	 *
-	 * @spec openspec/changes/wizard-dataset-card-load/specs/first-time-setup/spec.md
+	 * @spec openspec/specs/first-time-setup/spec.md
 	 */
 	#[AuthorizedAdminSetting(StackiqAdmin::class)]
 	public function saveConfig(): JSONResponse {
@@ -227,7 +227,7 @@ public function runAction(string $actionId): JSONResponse {
 	 *
 	 * @return JSONResponse `{ success, message }`.
 	 *
-	 * @spec openspec/changes/wizard-dataset-card-load/specs/first-time-setup/spec.md
+	 * @spec openspec/specs/first-time-setup/spec.md
 	 */
 	private function loadDataset(string $actionId): JSONResponse {
 		$picked = $this->appConfig->getValueString(Application::APP_ID, self::DATASET_KEY, '');
@@ -306,7 +306,7 @@ private function loadDataset(string $actionId): JSONResponse {
 	 *
 	 * @return JSONResponse|null The refusal, or null when the dataset is known.
 	 *
-	 * @spec openspec/changes/wizard-dataset-card-load/specs/first-time-setup/spec.md
+	 * @spec openspec/specs/first-time-setup/spec.md
 	 */
 	private function refuseDataset(mixed $value): ?JSONResponse {
 		if (is_scalar($value) === false) {
diff --git a/lib/Dashboard/ConceptOrganisatiesWidget.php b/lib/Dashboard/ConceptOrganisatiesWidget.php
index 8da5c906b..3e40e7279 100644
--- a/lib/Dashboard/ConceptOrganisatiesWidget.php
+++ b/lib/Dashboard/ConceptOrganisatiesWidget.php
@@ -43,10 +43,13 @@ public function __construct(
 	public function getId(): string {
 		// FROZEN across the softwarecatalog -> stackiq rename. The Dashboard app
 		// stores each user's chosen widgets BY WIDGET ID, in its own `dashboard`
-		// appid namespace in `oc_preferences` — data this app's repair steps
-		// cannot reach. Renaming this id therefore does not error: the widget
-		// simply stops matching the stored selection and silently vanishes from
-		// every dashboard that had it.
+		// appid namespace in `oc_preferences`. Renaming this id therefore does
+		// not error: the widget simply stops matching the stored selection and
+		// silently vanishes from every dashboard that had it. Stable 0.1.148 to
+		// 0.2.0 shipped the renamed id anyway, so the repair step
+		// `RepointDashboardWidgetId` rewrites that id back to this one in every
+		// user's `dashboard`/`layout` row — the Dashboard rows are ordinary user
+		// preferences, which `IConfig` reaches like this app's own.
 		return 'softwarecatalog_concept_organisaties_widget';
 	}//end getId()
 
diff --git a/lib/EventListener/ModuleVersionPublicationListener.php b/lib/EventListener/ModuleVersionPublicationListener.php
index 1e143b513..56dc41bd0 100644
--- a/lib/EventListener/ModuleVersionPublicationListener.php
+++ b/lib/EventListener/ModuleVersionPublicationListener.php
@@ -10,7 +10,7 @@
  * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
@@ -32,7 +32,7 @@
 /**
  * Hands every created, updated or deleted object to the publication mirror.
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  *
  * @template-implements IEventListener<Event>
  */
@@ -57,7 +57,7 @@ public function __construct(
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function handle(Event $event): void {
 		try {
diff --git a/lib/Portal/PortalContributionProvider.php b/lib/Portal/PortalContributionProvider.php
index 8d9c7ce63..491ac086d 100644
--- a/lib/Portal/PortalContributionProvider.php
+++ b/lib/Portal/PortalContributionProvider.php
@@ -37,7 +37,7 @@
  *
  * @link https://conduction.nl
  *
- * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+ * @spec openspec/specs/portal-contribution/spec.md
  */
 
 declare(strict_types=1);
@@ -62,7 +62,7 @@
  * the counterparty organisation's contactpersoon so a portal read never leaks
  * another organisation's data.
  *
- * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+ * @spec openspec/specs/portal-contribution/spec.md
  */
 class PortalContributionProvider {
 	/**
@@ -91,7 +91,7 @@ class PortalContributionProvider {
 	 *
 	 * @return array<int, string> The audience identifiers.
 	 *
-	 * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+	 * @spec openspec/specs/portal-contribution/spec.md
 	 */
 	public function getAudiences(): array {
 		return ['vendor-org', 'participant-org'];
@@ -105,7 +105,7 @@ public function getAudiences(): array {
 	 *
 	 * @return string The primary audience identifier.
 	 *
-	 * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+	 * @spec openspec/specs/portal-contribution/spec.md
 	 */
 	public function getAudience(): string {
 		return 'vendor-org';
@@ -125,7 +125,7 @@ public function getAudience(): string {
 	 *
 	 * @return array<string, mixed>|null The manifest, or null when not contributing.
 	 *
-	 * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+	 * @spec openspec/specs/portal-contribution/spec.md
 	 */
 	public function getContribution(array $subject): ?array {
 		$audience = ($subject['audience'] ?? '');
@@ -155,7 +155,7 @@ public function getContribution(array $subject): ?array {
 	 *
 	 * @return array<string, mixed> The vendor-org manifest.
 	 *
-	 * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+	 * @spec openspec/specs/portal-contribution/spec.md
 	 */
 	private function vendorContribution(): array {
 		return [
@@ -258,7 +258,7 @@ private function vendorContribution(): array {
 	 *
 	 * @return array<string, mixed> The participant-org manifest.
 	 *
-	 * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+	 * @spec openspec/specs/portal-contribution/spec.md
 	 */
 	private function participantContribution(): array {
 		return [
diff --git a/lib/Repair/BackfillModuleVersionPublication.php b/lib/Repair/BackfillModuleVersionPublication.php
index 861084554..1613d5c21 100644
--- a/lib/Repair/BackfillModuleVersionPublication.php
+++ b/lib/Repair/BackfillModuleVersionPublication.php
@@ -18,7 +18,7 @@
  * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
@@ -42,7 +42,7 @@
 /**
  * Backfills the mirrored publication on module versions.
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  */
 class BackfillModuleVersionPublication implements IRepairStep {
 
@@ -92,7 +92,7 @@ public function getName(): string {
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function run(IOutput $output): void {
 		if ($this->appConfig->getValueBool(Application::APP_ID, self::DONE_CONFIG_KEY, false) === true) {
diff --git a/lib/Repair/MigrateAppConfigKeys.php b/lib/Repair/MigrateAppConfigKeys.php
index 83e8691eb..5f40d79e5 100644
--- a/lib/Repair/MigrateAppConfigKeys.php
+++ b/lib/Repair/MigrateAppConfigKeys.php
@@ -31,7 +31,7 @@
  * @version   GIT: <git_id>
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
@@ -51,7 +51,7 @@
 /**
  * Copies app config from the legacy `stackiq` app id to `stackiq`.
  *
- * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
  */
 class MigrateAppConfigKeys implements IRepairStep {
 	/**
@@ -92,7 +92,7 @@ public function __construct(
 	 *
 	 * @return string The repair step name.
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
 	 */
 	public function getName(): string {
 		return 'Migrate app config from the stackiq app id to stackiq';
@@ -111,7 +111,7 @@ public function getName(): string {
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
 	 */
 	public function run(IOutput $output): void {
 		try {
@@ -192,7 +192,7 @@ public function run(IOutput $output): void {
 	 *
 	 * @return bool True when a value was written.
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-app-config-survives-the-rename
 	 */
 	protected function copyValue(string $key, mixed $value): bool {
 		if (is_bool($value) === true) {
diff --git a/lib/Repair/MigrateBackgroundJobClasses.php b/lib/Repair/MigrateBackgroundJobClasses.php
index 09e1fc104..f82cda775 100644
--- a/lib/Repair/MigrateBackgroundJobClasses.php
+++ b/lib/Repair/MigrateBackgroundJobClasses.php
@@ -29,7 +29,7 @@
  * @version   GIT: <git_id>
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
@@ -49,7 +49,7 @@
 /**
  * Removes background job registrations left behind by the namespace rename.
  *
- * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
  */
 class MigrateBackgroundJobClasses implements IRepairStep {
 	/**
@@ -84,7 +84,7 @@ public function __construct(
 	 *
 	 * @return string The repair step name.
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
 	 */
 	public function getName(): string {
 		return 'Deregister background jobs orphaned by the OCA\\SoftwareCatalog namespace rename';
@@ -101,7 +101,7 @@ public function getName(): string {
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-background-job-classes-survive-the-rename
 	 */
 	public function run(IOutput $output): void {
 		try {
diff --git a/lib/Repair/MigrateUserPreferences.php b/lib/Repair/MigrateUserPreferences.php
index 96d89639a..efabbac92 100644
--- a/lib/Repair/MigrateUserPreferences.php
+++ b/lib/Repair/MigrateUserPreferences.php
@@ -29,7 +29,7 @@
  * @version   GIT: <git_id>
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
@@ -52,7 +52,7 @@
 /**
  * Copies per-user preferences from the legacy `stackiq` app id to `stackiq`.
  *
- * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
  */
 class MigrateUserPreferences implements IRepairStep {
 	/**
@@ -93,7 +93,7 @@ public function __construct(
 	 *
 	 * @return string The repair step name.
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
 	 */
 	public function getName(): string {
 		return 'Migrate user preferences from the stackiq app id to stackiq';
@@ -111,7 +111,7 @@ public function getName(): string {
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
 	 */
 	public function run(IOutput $output): void {
 		$this->copied = 0;
@@ -156,7 +156,7 @@ function (IUser $user): ?bool {
 	 *
 	 * @return void
 	 *
-	 * @spec openspec/changes/rename-app-id-to-stackiq/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-stored-user-preferences-survive-the-rename
 	 */
 	protected function migrateUser(IUser $user): void {
 		$userId = $user->getUID();
diff --git a/lib/Repair/RepointDashboardWidgetId.php b/lib/Repair/RepointDashboardWidgetId.php
new file mode 100644
index 000000000..718862996
--- /dev/null
+++ b/lib/Repair/RepointDashboardWidgetId.php
@@ -0,0 +1,222 @@
+<?php
+/**
+ * Repair step that re-points dashboards from the renamed widget id to the frozen one.
+ *
+ * `ConceptOrganisatiesWidget::getId()` is frozen at
+ * `softwarecatalog_concept_organisaties_widget`: the Dashboard app stores each
+ * user's chosen widgets BY WIDGET ID, so a renamed id silently drops the widget
+ * from every dashboard that had it. Between stackiq 0.1.148 and 0.2.0 (stable
+ * since 2026-08-30) and on `beta`, the widget nevertheless shipped under the
+ * renamed id `stackiq_concept_organisaties_widget`, and restoring the frozen id
+ * (#1261) dropped it for everyone who added it in that window — the same silent
+ * loss, for the other group of users.
+ *
+ * The Dashboard app keeps the selection in `oc_preferences` under its own app
+ * id `dashboard`, key `layout`, as a comma-separated list of widget ids
+ * (`apps/dashboard/lib/Controller/DashboardApiController.php`). That row is an
+ * ordinary user preference, so `IConfig` reaches it exactly as
+ * `MigrateUserPreferences` reaches this app's own rows. This step rewrites the
+ * renamed id to the frozen one for every seen user, so both groups keep the
+ * widget.
+ *
+ * Non-destructive beyond that one id, and idempotent: a layout without the
+ * renamed id is left alone, and a layout that already holds the frozen id has
+ * the renamed one removed rather than duplicated.
+ *
+ * All OCP service calls use POSITIONAL arguments (named args are FATAL on
+ * `occ upgrade`).
+ *
+ * @category  Repair
+ * @package   OCA\Stackiq\Repair
+ * @author    Conduction b.v. <info@conduction.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ * @version   GIT: <git_id>
+ * @link      https://github.com/ConductionNL/stackiq
+ *
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+ *
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ * SPDX-License-Identifier: EUPL-1.2
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Stackiq\Repair;
+
+use OCA\Stackiq\AppInfo\Application;
+use OCP\IConfig;
+use OCP\IUser;
+use OCP\IUserManager;
+use OCP\Migration\IOutput;
+use OCP\Migration\IRepairStep;
+use Psr\Log\LoggerInterface;
+use Throwable;
+
+/**
+ * Rewrites `stackiq_concept_organisaties_widget` to the frozen widget id in every user's dashboard layout.
+ *
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+ */
+class RepointDashboardWidgetId implements IRepairStep {
+
+	/**
+	 * The app id the Dashboard app stores its per-user layout under.
+	 */
+	public const DASHBOARD_APP_ID = 'dashboard';
+
+	/**
+	 * The preference key holding the comma-separated widget ids.
+	 */
+	public const LAYOUT_KEY = 'layout';
+
+	/**
+	 * The widget id stackiq 0.1.148 through 0.2.0 registered the widget under.
+	 */
+	public const RENAMED_WIDGET_ID = 'stackiq_concept_organisaties_widget';
+
+	/**
+	 * The frozen, pre-rename widget id `ConceptOrganisatiesWidget::getId()` returns.
+	 */
+	public const FROZEN_WIDGET_ID = 'softwarecatalog_concept_organisaties_widget';
+
+	/**
+	 * Number of users whose layout was rewritten during the current run.
+	 *
+	 * @var int
+	 */
+	private int $users = 0;
+
+
+	/**
+	 * Constructor.
+	 *
+	 * @param IConfig         $config      The user config service.
+	 * @param IUserManager    $userManager The user manager.
+	 * @param LoggerInterface $logger      The logger.
+	 */
+	public function __construct(
+		private readonly IConfig $config,
+		private readonly IUserManager $userManager,
+		private readonly LoggerInterface $logger,
+	) {
+	}//end __construct()
+
+
+	/**
+	 * Returns the name of this repair step.
+	 *
+	 * @return string The repair step name.
+	 *
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+	 */
+	public function getName(): string {
+		return 'Re-point dashboards from the renamed concept organisations widget id to the frozen one';
+	}//end getName()
+
+
+	/**
+	 * Rewrite the renamed widget id in every seen user's dashboard layout.
+	 *
+	 * Reads and writes both sit inside the try: a throw escaping a repair
+	 * step aborts `occ upgrade`, and a dashboard row is never worth that.
+	 *
+	 * @param IOutput $output The output interface for progress reporting.
+	 *
+	 * @return void
+	 *
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+	 */
+	public function run(IOutput $output): void {
+		$this->users = 0;
+
+		try {
+			// The callback must return bool|null, not void: IUserManager treats a
+			// `false` return as "stop iterating", so null means "keep going".
+			$this->userManager->callForSeenUsers(
+				function (IUser $user): ?bool {
+					try {
+						$this->repointUser(user: $user);
+					} catch (Throwable $e) {
+						// One unreadable user must not stop the walk for the rest.
+						$this->logger->warning(
+							'Stackiq: could not re-point the dashboard widget id for user ' . $user->getUID() . ': ' . $e->getMessage(),
+							[
+								'app'       => Application::APP_ID,
+								'exception' => $e,
+							]
+						);
+					}
+
+					return null;
+				}
+			);
+
+			$output->info(
+				sprintf(
+					'Stackiq: re-pointed the concept organisations widget from "%s" to "%s" on %d dashboard(s)',
+					self::RENAMED_WIDGET_ID,
+					self::FROZEN_WIDGET_ID,
+					$this->users
+				)
+			);
+		} catch (Throwable $e) {
+			// Swallowed deliberately — see the docblock.
+			$this->logger->error(
+				'Stackiq: failed to re-point the dashboard widget id: ' . $e->getMessage(),
+				[
+					'app'       => Application::APP_ID,
+					'exception' => $e,
+				]
+			);
+			$output->warning(
+				'Stackiq: dashboard widget re-pointing failed; see the log. '
+				. 'Users who added the widget on stackiq 0.1.148 to 0.2.0 may have to add it again.'
+			);
+		}//end try
+	}//end run()
+
+
+	/**
+	 * Rewrite one user's layout when it names the renamed widget id.
+	 *
+	 * @param IUser $user The user whose dashboard layout to check.
+	 *
+	 * @return void
+	 *
+	 * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+	 */
+	protected function repointUser(IUser $user): void {
+		$userId = $user->getUID();
+		$layout = $this->config->getUserValue($userId, self::DASHBOARD_APP_ID, self::LAYOUT_KEY, '');
+		if ($layout === '') {
+			return;
+		}
+
+		$ids = array_values(
+			array_filter(
+				array_map('trim', explode(',', $layout)),
+				static fn (string $id): bool => $id !== ''
+			)
+		);
+		if (in_array(self::RENAMED_WIDGET_ID, $ids, true) === false) {
+			return;
+		}
+
+		// Keep the widget in the position the user gave it; never list the
+		// frozen id twice when the user somehow holds both.
+		$rewritten = [];
+		foreach ($ids as $id) {
+			if ($id === self::RENAMED_WIDGET_ID) {
+				$id = self::FROZEN_WIDGET_ID;
+			}
+
+			if (in_array($id, $rewritten, true) === false) {
+				$rewritten[] = $id;
+			}
+		}
+
+		$this->config->setUserValue($userId, self::DASHBOARD_APP_ID, self::LAYOUT_KEY, implode(',', $rewritten));
+		$this->users++;
+	}//end repointUser()
+}//end class
diff --git a/lib/Service/ModuleVersionPublicationService.php b/lib/Service/ModuleVersionPublicationService.php
index af09b6f8b..f1c8a922b 100644
--- a/lib/Service/ModuleVersionPublicationService.php
+++ b/lib/Service/ModuleVersionPublicationService.php
@@ -24,7 +24,7 @@
  * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
@@ -45,7 +45,7 @@
 /**
  * Copies a module's publication onto its versions.
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  */
 class ModuleVersionPublicationService {
 
@@ -79,7 +79,7 @@ public function __construct(
 	 *
 	 * @return array{modulePublicationDate: string|null, moduleRegisteredBy: string|null}
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public static function mirrorOf(array $module): array {
 		return [
@@ -114,7 +114,7 @@ private static function text(mixed $value): ?string {
 	 *
 	 * @return integer The number of versions written in this request: 0 for a module, whose versions the job writes.
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function objectSaved(ObjectEntityInterface $object, ?ObjectEntityInterface $previous = null): int {
 		$schema = (string) $object->getSchema();
@@ -143,7 +143,7 @@ public function objectSaved(ObjectEntityInterface $object, ?ObjectEntityInterfac
 	 *
 	 * @return integer The number of versions written in this request: always 0, the job writes them.
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function objectDeleted(ObjectEntityInterface $object): int {
 		if ((string) $object->getSchema() !== (string) $this->settingsService->getSchemaIdForObjectType('module')) {
@@ -176,7 +176,7 @@ private function queueVersions(string $moduleUuid, bool $deleted): void {
 	 *
 	 * @return array{written: int, failed: int} The versions written, and the versions or searches that failed.
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function clearVersions(string $moduleUuid): array {
 		return $this->copyOntoVersions(moduleUuid: $moduleUuid, mirror: self::mirrorOf(module: []));
@@ -189,7 +189,7 @@ public function clearVersions(string $moduleUuid): array {
 	 *
 	 * @return array{written: int, failed: int} The versions written, and the versions or searches that failed.
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function backfillModule(ObjectEntityInterface $module): array {
 		return $this->copyOntoVersions(moduleUuid: (string) $module->getUuid(), mirror: self::mirrorOf(module: (array) $module->getObject()));
@@ -323,7 +323,7 @@ private function logFailure(string $message, array $context, bool $depublishes):
 	 *
 	 * @return integer 1 when the version was written, else 0.
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
 	 */
 	public function versionSaved(ObjectEntityInterface $version): int {
 		$objects  = $this->objectService();
diff --git a/lib/Service/SettingsService.php b/lib/Service/SettingsService.php
index b8fa30d18..528f65ebe 100644
--- a/lib/Service/SettingsService.php
+++ b/lib/Service/SettingsService.php
@@ -7363,7 +7363,7 @@ public function setEolSyncStatus(array $status): void {
 	 *
 	 * @return array<string, mixed> The merged register with the highest version per schema.
 	 *
-	 * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-003-a-fragment-never-lowers-a-schema-version
+	 * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-003-a-fragment-never-lowers-a-schema-version
 	 */
 	private static function keepHighestSchemaVersions(array $before, array $after): array {
 		foreach (($after['components']['schemas'] ?? []) as $key => $schema) {
diff --git a/openspec/parity/capabilities.json b/openspec/parity/capabilities.json
index 47603c105..362945e88 100644
--- a/openspec/parity/capabilities.json
+++ b/openspec/parity/capabilities.json
@@ -316,6 +316,477 @@
 			"name_nl": "Discovery en IT-beheer"
 		}
 	],
+	"features": [
+		{
+			"slug": "software-landscape-register",
+			"title": "Software landscape register",
+			"title_nl": "Softwarelandschap-register",
+			"area": "landscape",
+			"overlay": "software-landscape-register",
+			"specs": [
+				"view-enrichment-api",
+				"landscape-application-components",
+				"suite-wizard",
+				"application-page",
+				"application-hosting-model",
+				"landscape-change-entry-type",
+				"landscape-move-between-organisations",
+				"landscape-dependent-field-options",
+				"insight-knowledge-base",
+				"application-usage-pages",
+				"fe-object-modals"
+			]
+		},
+		{
+			"slug": "landscape-import",
+			"title": "Importing an existing landscape",
+			"title_nl": "Een bestaand landschap importeren",
+			"area": "landscape",
+			"overlay": null,
+			"specs": [
+				"cmdb-export-import",
+				"first-time-setup"
+			]
+		},
+		{
+			"slug": "data-quality",
+			"title": "Data quality and completeness",
+			"title_nl": "Datakwaliteit en volledigheid",
+			"area": "landscape",
+			"overlay": null,
+			"specs": [
+				"operations-record-reconciliation",
+				"landscape-owner-attestation",
+				"landscape-completeness-score"
+			]
+		},
+		{
+			"slug": "ai-system-inventory",
+			"title": "AI system inventory and the AI Act",
+			"title_nl": "AI-systemen registreren en de AI-verordening",
+			"area": "landscape",
+			"overlay": null,
+			"specs": [
+				"ai-system-inventory"
+			]
+		},
+		{
+			"slug": "offering-and-usage-listings",
+			"title": "Offering and usage listings",
+			"title_nl": "Aanbod- en gebruikslijsten",
+			"area": "market",
+			"overlay": "offering-and-usage-listings",
+			"specs": [
+				"aanbod-listings",
+				"gemma-faceted-search",
+				"open-data-publishing",
+				"application-page",
+				"aangeboden-gebruik-api"
+			]
+		},
+		{
+			"slug": "application-connections",
+			"title": "Connections between applications",
+			"title_nl": "Koppelingen tussen applicaties",
+			"area": "connections",
+			"overlay": null,
+			"specs": [
+				"connections-api-catalogue",
+				"adopt-connection-registry",
+				"connections-derived-dependencies",
+				"connections-diagram-and-graph-export",
+				"catalogue-connection-pages"
+			]
+		},
+		{
+			"slug": "shared-usage-on-gemma-views",
+			"title": "Shared usage on GEMMA views",
+			"title_nl": "Gedeeld gebruik op GEMMA-views",
+			"area": "market",
+			"overlay": "shared-usage-on-gemma-views",
+			"specs": [
+				"deelnames-gebruik",
+				"architecture-shared-usage-on-views"
+			]
+		},
+		{
+			"slug": "archimate-import-and-export",
+			"title": "ArchiMate import and export",
+			"title_nl": "ArchiMate-import en -export",
+			"area": "architecture",
+			"overlay": "archimate-import-and-export",
+			"specs": [
+				"archimate-export",
+				"archimate-import",
+				"org-archimate-export",
+				"architecture-round-trip-check",
+				"architecture-views-to-office-documents",
+				"archimate-import-progress"
+			]
+		},
+		{
+			"slug": "gemma-alignment",
+			"title": "GEMMA alignment",
+			"title_nl": "GEMMA-uitlijning",
+			"area": "architecture",
+			"overlay": "gemma-alignment",
+			"specs": [
+				"module-overlay-rendering",
+				"softwarecatalog-manifest-v1",
+				"architecture-reference-component-coverage",
+				"gemma-faceted-search",
+				"view-enrichment-api",
+				"architecture-data-model-and-ggm",
+				"insight-supplier-facet"
+			]
+		},
+		{
+			"slug": "architecture-modelling",
+			"title": "Modelling architecture views",
+			"title_nl": "Architectuurplaten modelleren",
+			"area": "architecture",
+			"overlay": null,
+			"specs": [
+				"architecture-views-editor",
+				"architecture-process-mapping",
+				"architecture-future-state-scenarios",
+				"architecture-assistant-drafted-views",
+				"architecture-data-model-and-ggm",
+				"architecture-decision-register"
+			]
+		},
+		{
+			"slug": "standards-compliance",
+			"title": "Standards compliance",
+			"title_nl": "Standaardencompliance",
+			"area": "compliance",
+			"overlay": "standards-compliance",
+			"specs": [
+				"module-compliance-assessment"
+			]
+		},
+		{
+			"slug": "security-and-privacy-assessment",
+			"title": "BIO and privacy assessments",
+			"title_nl": "BIO- en privacybeoordelingen",
+			"area": "compliance",
+			"overlay": null,
+			"specs": [
+				"bio-compliance-assessment",
+				"security-baseline-classification",
+				"sharing-compliance-documents"
+			]
+		},
+		{
+			"slug": "supplier-directory",
+			"title": "Supplier and product directory",
+			"title_nl": "Overzicht van leveranciers en producten",
+			"area": "market",
+			"overlay": null,
+			"specs": [
+				"fe-organizations",
+				"application-page",
+				"vendor-product-master-data"
+			]
+		},
+		{
+			"slug": "reviews",
+			"title": "Reviews",
+			"title_nl": "Reviews",
+			"area": "market",
+			"overlay": "reviews",
+			"specs": [
+				"catalog-ratings"
+			]
+		},
+		{
+			"slug": "maintenance-and-supplier-roadmap",
+			"title": "Maintenance and supplier roadmap",
+			"title_nl": "Onderhoud en leveranciersroadmap",
+			"area": "market",
+			"overlay": "maintenance-and-supplier-roadmap",
+			"specs": [
+				"maintenance-and-supplier-roadmap"
+			]
+		},
+		{
+			"slug": "portfolio-roadmap",
+			"title": "Portfolio roadmap",
+			"title_nl": "Portfolio-roadmap",
+			"area": "lifecycle",
+			"overlay": "portfolio-roadmap",
+			"specs": [
+				"application-lifecycle-tracking"
+			]
+		},
+		{
+			"slug": "lifecycle-and-end-of-support",
+			"title": "Lifecycle and end of support",
+			"title_nl": "Levenscyclus en einde-support",
+			"area": "lifecycle",
+			"overlay": "lifecycle-and-end-of-support",
+			"specs": [
+				"application-lifecycle-tracking",
+				"softwarecatalog-manifest-v1",
+				"eol-feed-integration",
+				"operations-technology-components"
+			]
+		},
+		{
+			"slug": "portfolio-rationalisation",
+			"title": "Portfolio rationalisation",
+			"title_nl": "Portfoliorationalisatie",
+			"area": "lifecycle",
+			"overlay": null,
+			"specs": [
+				"architecture-reference-component-coverage",
+				"application-value-assessment",
+				"portfolio-rationalization-time"
+			]
+		},
+		{
+			"slug": "contract-administration",
+			"title": "Contract administration",
+			"title_nl": "Contractadministratie",
+			"area": "contracts",
+			"overlay": "contract-administration",
+			"specs": [
+				"contract-administration",
+				"contracts-expiry-and-owner",
+				"application-page",
+				"portfolio-rationalization-time",
+				"software-license-posture"
+			]
+		},
+		{
+			"slug": "contract-renewal-approval",
+			"title": "Contract renewal with approval",
+			"title_nl": "Contractverlenging met goedkeuring",
+			"area": "contracts",
+			"overlay": "contract-renewal-approval",
+			"specs": [
+				"contract-decision-delegation"
+			]
+		},
+		{
+			"slug": "license-and-seat-tracking",
+			"title": "License and seat tracking",
+			"title_nl": "Licentie- en seatregistratie",
+			"area": "contracts",
+			"overlay": "license-and-seat-tracking",
+			"specs": [
+				"licence-seats",
+				"software-license-posture"
+			]
+		},
+		{
+			"slug": "vulnerability-management",
+			"title": "Vulnerabilities and SBOMs",
+			"title_nl": "Kwetsbaarheden en SBOM's",
+			"area": "security",
+			"overlay": null,
+			"specs": [
+				"module-vulnerability-tracking",
+				"sbom-import"
+			]
+		},
+		{
+			"slug": "sign-in-and-accounts",
+			"title": "Sign-in and accounts",
+			"title_nl": "Inloggen en accounts",
+			"area": "organisations",
+			"overlay": null,
+			"specs": [
+				"email-delivery"
+			]
+		},
+		{
+			"slug": "organisation-register",
+			"title": "Organisation register",
+			"title_nl": "Organisatieregister",
+			"area": "organisations",
+			"overlay": null,
+			"specs": [
+				"fe-organizations",
+				"organisation-merge"
+			]
+		},
+		{
+			"slug": "self-registration-with-moderation",
+			"title": "Self-registration with moderation",
+			"title_nl": "Zelfregistratie met moderatie",
+			"area": "organisations",
+			"overlay": "self-registration-with-moderation",
+			"specs": [
+				"open-data-publishing"
+			]
+		},
+		{
+			"slug": "automatic-user-provisioning",
+			"title": "Automatic user provisioning",
+			"title_nl": "Automatische gebruikersinrichting",
+			"area": "organisations",
+			"overlay": "automatic-user-provisioning",
+			"specs": [
+				"softwarecatalog-contacts-to-nc",
+				"contactpersoon-sync",
+				"sc-handlers",
+				"operations-sync-status-and-progress",
+				"contactpersonen-api",
+				"organization-sync",
+				"softwarecatalogue-orchestration"
+			]
+		},
+		{
+			"slug": "roles-and-access",
+			"title": "Roles and access rights",
+			"title_nl": "Rollen en toegangsrechten",
+			"area": "organisations",
+			"overlay": null,
+			"specs": [
+				"multi-org-membership",
+				"organisations-role-mapping-and-access-review",
+				"publication-field-rules",
+				"vendor-visibility-rbac"
+			]
+		},
+		{
+			"slug": "open-data-publishing",
+			"title": "Publish as open data",
+			"title_nl": "Open data publiceren",
+			"area": "sharing",
+			"overlay": "open-data-publishing",
+			"specs": [
+				"open-data-publishing"
+			]
+		},
+		{
+			"slug": "federation-between-catalogues",
+			"title": "Federation between catalogues",
+			"title_nl": "Federatie tussen catalogi",
+			"area": "sharing",
+			"overlay": "federation-between-catalogues",
+			"specs": [
+				"federated-catalog-sync"
+			]
+		},
+		{
+			"slug": "api-and-integrations",
+			"title": "API and integrations",
+			"title_nl": "API en koppelingen",
+			"area": "sharing",
+			"overlay": null,
+			"specs": [
+				"sharing-generated-api-docs",
+				"sharing-itsm-exchange",
+				"portal-contribution"
+			]
+		},
+		{
+			"slug": "portfolio-reporting",
+			"title": "Configurable portfolio reporting",
+			"title_nl": "Instelbare portfoliorapportage",
+			"area": "insight",
+			"overlay": "portfolio-reporting",
+			"specs": [
+				"insight-exports-and-custom-reports",
+				"portfolio-rationalization-time"
+			]
+		},
+		{
+			"slug": "dashboard-and-overviews",
+			"title": "Dashboard and live overviews",
+			"title_nl": "Dashboard en actuele overzichten",
+			"area": "insight",
+			"overlay": null,
+			"specs": [
+				"fe-shell-navigation",
+				"concept-organizations-widget",
+				"operations-sync-status-and-progress",
+				"dashboard-views-api",
+				"realtime-updates-ui"
+			]
+		},
+		{
+			"slug": "ai-assistant",
+			"title": "AI assistant for the catalogue",
+			"title_nl": "AI-assistent voor de catalogus",
+			"area": "insight",
+			"overlay": null,
+			"specs": [
+				"mcp-full-action-surface",
+				"insight-assistant-answers-and-action-trail"
+			]
+		},
+		{
+			"slug": "audit-trail-view",
+			"title": "Audit trail view",
+			"title_nl": "Auditspoor-overzicht",
+			"area": "insight",
+			"overlay": "audit-trail-view",
+			"specs": [
+				"softwarecatalog-manifest-v1"
+			]
+		},
+		{
+			"slug": "notifications",
+			"title": "Notifications",
+			"title_nl": "Meldingen",
+			"area": "lifecycle",
+			"overlay": "notifications",
+			"specs": [
+				"softwarecatalog-notifications",
+				"contracts-expiry-warning-fires",
+				"maintenance-and-supplier-roadmap"
+			]
+		},
+		{
+			"slug": "asset-discovery",
+			"title": "Discovering hardware and software",
+			"title_nl": "Hardware en software automatisch ontdekken",
+			"area": "operations",
+			"overlay": null,
+			"specs": [
+				"operations-technology-components"
+			]
+		},
+		{
+			"slug": "service-management",
+			"title": "Incidents, changes and service levels",
+			"title_nl": "Incidenten, wijzigingen en serviceniveaus",
+			"area": "operations",
+			"overlay": null,
+			"specs": []
+		},
+		{
+			"slug": "open-platform",
+			"title": "Self-hosted and adaptable",
+			"title_nl": "Zelf gehost en aanpasbaar",
+			"area": "operations",
+			"overlay": null,
+			"specs": [
+				"fe-settings-ui"
+			]
+		}
+	],
+	"internalSpecs": [
+		"app-id-rename",
+		"beta-alignment",
+		"cronjob-context",
+		"english-vocabulary-migration",
+		"fe-stores",
+		"gebruik-services",
+		"licence-declaration",
+		"method-decomposition",
+		"organisatie-service",
+		"progress-tracking",
+		"repair-init",
+		"settings-admin-controller",
+		"settings-service",
+		"software-catalog",
+		"softwarecatalog-adopt-or-abstractions",
+		"softwarecatalog-store-migration"
+	],
 	"providers": [
 		{
 			"key": "stackiq",
@@ -384,6 +855,13 @@
 				"glpi": "source read at 11.0.9: src/Appliance.php:46 class Appliance is GLPI's application itemtype; install/mysql/glpi-empty.sql:8935 glpi_appliances carries name, comment (description), manufacturers_id and states_id (status); src/Appliance.php:350 search option Status; supplier through the Management tab Infocom (install/mysql/glpi-empty.sql:3263 glpi_infocoms.suppliers_id) and Contract_Item (src/Appliance.php:99); menu src/Html.php:1300 lists Appliance under Management, served by src/Glpi/Kernel/Listener/RequestListener/LegacyItemtypeRouteListener.php:100. Reached on: Management > Appliances (front/appliance.php). Driven on the lab at 11.0.9 (2026-09-26): created the appliance \"Zaaksysteem lab\" with a description through /front/appliance.form.php; it appears in the Appliances list and CSV export.",
 				"topdesk": "https://docs.topdesk.com/en/migrating-objects-to-asset-management.html: \"In the new Asset Management you design your own template for each type of asset you have\" (read 2026-09-26); https://docs.topdesk.com/en/managing-licences-in-asset-management.html: \"Create a new template for software cards\" (read 2026-09-26). Applications are a self-designed asset type, no application model ships. Reached on: Modules > Asset Management > Template Designer / Asset overview > New.",
 				"stackiq": "usage schema (consumer, module, moduleVersion, status with lifecycle plan/goLive/phaseOut/retire) in lib/Settings/softwarecatalogus_register.json; src/manifest.d/usages.json pages Gebruik (/gebruik, Applications in use) and GebruikDetail with lifecycleActions; ModuleDetail md-usages Add to our landscape; OrganisatieDetail org-usages; tests/Unit/Settings/UsageSchemaTest.php, tests/vitest/usages.spec.js"
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkInGebruik"
+				]
 			}
 		},
 		{
@@ -407,7 +885,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "software-landscape-register",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "Stackiq's 'module' is the whole application, so there is no breakdown of one application into modules. The nearest thing is a suite (product) listing its applications, which answers 'which module belongs to which product' but not the decomposition. Specified in openspec/changes/landscape-application-components (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-modeling-guidelines: 'Applications often consist of multiple entities or modules within a common ecosystem or platform', modeled as parent/child hierarchy, e.g. Adobe Photoshop as child of Adobe Creative Cloud (read 2026-09-26). Reached on: Application fact sheet > parent/child relations.",
@@ -416,6 +894,13 @@
 				"vng-softwarecatalogus": "unknown: the docs model a pakket and its pakketversies only, no module level is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Beschrijving%20exportbestanden (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967518-grouping-and-child-objects-in-architecture-views: 'The child objects option allows you to define hierarchical relationships between objects based on the composition relationship type ... breaking down a system into its components' (read 2026-09-26). Reached on: View > object context menu > Child objects.",
 				"glpi": "source read at 11.0.9: src/Appliance_Item.php:45 links an Appliance to member items; src/autoload/CFG_GLPI.php:562 appliance_types includes Software, Appliance, Database and DatabaseInstance, so an application can be split into software and sub-appliances on its Items tab (src/Appliance.php:98). There is no module entity that belongs to a supplier product: grep -i 'module' src/Software.php src/Appliance.php returns no module concept. Reached on: Management > Appliances > Items tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkSuiteWizard"
+				]
 			}
 		},
 		{
@@ -439,7 +924,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "lifecycle-and-end-of-support",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A version is created on the Module versions index with its module and date in use, and opens on its own detail page.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/SoftwareVersion.php:42 SoftwareVersion child of Software, table install/mysql/glpi-empty.sql:6900 glpi_softwareversions with name, states_id, operatingsystems_id but no release or in-use date; the only date is per installation, install/mysql/glpi-empty.sql:1074 glpi_items_softwareversions.date_install. Reached on: Assets > Software > Versions tab (front/softwareversion.form.php).",
@@ -448,6 +933,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier: \"Titel is de naam van uw productversie ... Status geeft aan of uw product in ontwikkeling, in productie, of teruggetrokken is ... startdata van ontwikkeling, test en distributie\" (read 2026-09-26). Versions are recorded per package (pakketversie), not per module. Reached on: Supplier login > Productportfolio > product > plus (versie toevoegen).",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ (267 articles); versions appear only as a field in an example import source (https://help.bluedolphin.io/en/articles/11967767-uploading-a-source), no version records with dates are documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-modeling-guidelines: 'if versioning is relevant ... you can capture it in the Release field of the application fact sheets'; each fact sheet carries lifecycle phase dates, but the guide says 'versioning for applications doesn't add significant value' (read 2026-09-26). Reached on: Application fact sheet > Name and Description > Release."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModuleversie"
 			}
 		},
 		{
@@ -471,7 +960,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "software-landscape-register",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A three-step wizard bundles existing applications into one suite. Caveat: a row click on the Suites list only toggles selection (the library returns before emitting row-click when selectable, SuitesIndexView.vue:35), so SuiteDetail is not opened from the list, and its data widget includes stale field names (src/manifest.json:683 beschrijvingKort, contactpersoon).",
 			"evidence": {
 				"stackiq": "src/dialogs/SuiteWizardDialog.vue:183 onSubmit saves a suite via objectStore.saveObject('suite') with applications[] (src/utils/suiteWizard.js:44 requires at least one); mounted by src/views/suites/SuitesIndexView.vue:46 on manifest page Suites (src/manifest.json:666)",
@@ -480,6 +969,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967518-grouping-and-child-objects-in-architecture-views: child objects by composition and an ArchiMate 'Grouping' object 'to cluster related elements logically'. Modeling structure only, not a product offered to others (read 2026-09-26). Reached on: View > Child objects or Grouping.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-modeling-guidelines: 'Adobe Creative Cloud is a suite that bundles various applications ... It is modeled as the parent entity'; a platform fact sheet can group applications. Modeled for the buyer's own inventory, not as a product offered to others (read 2026-09-26). Reached on: Application fact sheet hierarchy, Platform fact sheet.",
 				"glpi": "source read at 11.0.9: src/autoload/CFG_GLPI.php:562 appliance_types contains Appliance and Software, so an Appliance can bundle existing appliances and software through src/Appliance_Item.php:45 (table install/mysql/glpi-empty.sql:8979 glpi_appliances_items). There is no notion of offering the bundle as a product to others. Reached on: Management > Appliances > Items tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkSuiteWizard"
 			}
 		},
 		{
@@ -503,7 +996,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "offering-and-usage-listings",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A supplier's service over one or more applications is registered on the Services page. There is no 'hosting' service type (technical management is the nearest), and services have no detail page, so a row cannot be opened.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/pakketversies: facet \"Ondersteunde technologie: On-premise, Dienst - Software as a Service (SAAS)\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/30355: \"Onder het tabblad Technologie selecteer je de onderliggende technieken van het pakket. Veelal Saas of on-premise\" (read 2026-09-26). Hosting as SaaS is a property of a package version, no separate service record (hosting, support) is documented. Reached on: Alle pakketversies > filter Ondersteunde technologie.",
@@ -512,6 +1005,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967596-archimate-annotation-translation-en-nl lists ArchiMate object definitions 'Business Service', 'Technology Service' and 'Contract', which can model a hosting or support service; no supplier service register as such is documented (read 2026-09-26). Reached on: Objects > Technology Service object.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/it-component-modeling-guidelines: IT component subtype 'Service : Services refer to the provisioning of services related to IT components (usually provided by a 3rd party) ... Examples: Maintenance/Support Service ... Hosting Service'; linked to providers (read 2026-09-26). Reached on: Inventory > IT Component fact sheet, subtype Service.",
 				"glpi": "source read at 11.0.9: no supplier service itemtype; services are held as contracts, src/ContractType.php:37 admin dropdown of contract types (for example hosting or support), install/mysql/glpi-empty.sql:1550 glpi_contracts_suppliers ties the contract to a Supplier and install/mysql/glpi-empty.sql:1536 glpi_contracts_items ties it to the Appliance or Software it covers. Reached on: Management > Contracts (front/contract.php), Suppliers tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -533,6 +1030,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"note": "A sector schema exists, but no application, service or organisation can be tagged with a sector and no page lists sectors. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: aanvullende-informatie.md:511 lists VNG issue #4 (classify packages on the reference architectures of the relevant sectors, so buyers from several sectors find them) with the analysis \"Classificeren op meerdere sectorale referentiearchitecturen, buiten scope\", and issues/4.md carries the label \"Buiten scope oplevering\" and is closed. Tagging applications with sectors is the entry to that out-of-scope classification. The unused sector schema (lib/Settings/softwarecatalogus_register.json:1036) is what the specified state pointed at; no change directory existed.",
 			"evidence": {
 				"stackiq": "register.json:1034 sector schema (name, description only); no schema property references #/components/schemas/sector (grep found none), no manifest page for sector; only the admin schema mapping in src/views/settings/sections/OpenRegisterIntegration.vue:395",
@@ -564,7 +1062,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "software-landscape-register",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "One contact person per application can be set, but there is no separate business owner and technical owner. ModuleDetail's data widget includes 'contactpersoon', a key the schema no longer has, so the contact may not show there. Specified in openspec/changes/landscape-usage-registration (OpenSpec pass 2026-09-27). Built by openspec/changes/archive/2026-09-29-landscape-usage-registration.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/subscription-roles: 'Define roles that map to your organization's positions, such as application owner', with subscription types 'Responsible, Accountable, Observer' per fact sheet (read 2026-09-26). Reached on: Fact sheet > Subscriptions; Administration > Subscription Roles.",
@@ -573,6 +1071,13 @@
 				"vng-softwarecatalogus": "unknown: the landscape entry fields listed (pakketversie, referentiecomponenten, technologie, status) include no business or technical owner; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/node/30355 (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967633-datacollector-select-tricks: an example import maps '[Application Owner]' into object properties; ownership otherwise is modeled as questionnaire fields or ArchiMate relations. No built in business and technical owner fields are documented (read 2026-09-26). Reached on: Object properties or questionnaire fields.",
 				"glpi": "source read at 11.0.9: install/mysql/glpi-empty.sql:8935 glpi_appliances holds users_id and users_id_tech; src/Appliance.php:186 search option User and src/Appliance.php:195 Group (business side), src/Appliance.php:240 'Technician in charge' and the 'Group in charge' option a few lines below (technical side). Reached on: Management > Appliances, form fields User, Group, Technician in charge, Group in charge. Driven on the lab at 11.0.9 (2026-09-26): the saved appliance holds users_id and users_id_tech (glpi_appliances row 1), shown as User and Technician in charge."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkInGebruik",
+					"SkGebruikDetail"
+				]
 			}
 		},
 		{
@@ -596,6 +1101,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"note": "Stackiq offers no way to add fields. Editing the schema in OpenRegister's own admin UI is possible there, but that is an OpenRegister feature, not a stackiq page. Specified in ConductionNL/openregister openspec/changes/fields-a-user-adds-and-choices-a-record-narrows (openregister lane, OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/fact-sheet-fields: 'Adding a Custom Field ... To add a custom field, follow these steps'; https://help.sap.com/docs/leanix/ea/tags-and-custom-fields: custom fields as text, dates, numbers, set in the meta model configuration by an admin (read 2026-09-26). Reached on: Administration > Meta Model Configuration > Fact Sheet Fields.",
@@ -604,6 +1110,10 @@
 				"topdesk": "https://docs.topdesk.com/en/creating-new-fields.html: \"Whether it is a contact person, a purchase price, or a reminder date ... Use fields in a fieldset or dataset widget to register any useful information about an asset\" (read 2026-09-26). Reached on: Asset Management > Template Designer > Fields.",
 				"vng-softwarecatalogus": "unknown: no user-defined fields are described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967603-manage-object-questionnaires: 'it is possible to add questionnaires to an object type in the Admin module. A questionnaire is a group of fields that add more details to objects' (read 2026-09-26). Reached on: Admin > Object questionnaires."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -626,6 +1136,7 @@
 			"reachedOn": "Modules /modules, Import in the index actions (also every type:index page)",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "landscape-import",
 			"note": "The generic index page offers a file import (CSV per schema, or a register-wide JSON/Excel) that OpenRegister executes. Nothing stackiq-specific maps a spreadsheet's supplier names to organisation references, so relation columns must already hold identifiers.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/importing-fact-sheet-data-through-excel-file and https://help.sap.com/docs/leanix/ea/adding-and-editing-data-in-fact-sheets: 'using the import option, you can update multiple fact sheets in bulk' via Excel export and import (read 2026-09-26). Reached on: Inventory > Import (Excel).",
@@ -634,6 +1145,10 @@
 				"topdesk": "https://docs.topdesk.com/en/generate-import-file.html: \"Importing assets speeds up this task ... export an asset template to XLSX format\" (read 2026-09-26); https://docs.topdesk.com/en/creating-a-new-import.html: \"You can use a file (CSV or XLSX), connect with an MS SQL database or import from Microsoft Intune , or Lansweeper\" (read 2026-09-26). Reached on: Settings > Import settings > Asset Management imports.",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: C19: \"Een import vanuit die tools naar de Softwarecatalogus zodat 2-richtingverkeer mogelijk wordt voor actualisatie, is vooralsnog niet voorhanden\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/19703: inventory goes in a spreadsheet, then \"Kies met de + toets het pakket dat opgevoerd moet worden\", one package at a time (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: core has CSV export only (src/Glpi/Csv/ holds CsvResponse and export classes, no importer) and no spreadsheet import of assets or appliances. Bulk import is the separate datainjection plugin, read at pluginsGLPI/datainjection tag 2.15.11: inc/backendcsv.class.php CSV backend and inc/applianceinjection.class.php:33 PluginDatainjectionApplianceInjection extends Appliance; setup.php:36 requires GLPI 11.0.5 or later. Reached on: plugin Data injection (Tools > Data injection)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -657,7 +1172,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "software-landscape-register",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "One page per application shows its data, versions, usages, compliance claims and the contracts behind it, and opens from the Applications list. Built by openspec/changes/archive/2026-09-29-landscape-application-page.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/pakket/archi: package page shows versions with status and start dates, \"Pakket geschikt voor (GEMMA 2) Ingevuld door (28)\", and per version the mandatory and recommended standards with support, compliancy and testrapport (read 2026-09-26). No contracts on the page. Reached on: Alle pakketten > package name.",
@@ -666,6 +1181,10 @@
 				"topdesk": "https://docs.topdesk.com/en/designing-templates-for-assets.html: twelve widgets incl. \"History\", \"Relationships\", \"Relationship grid\", \"Documents\" (read 2026-09-26); https://docs.topdesk.com/en/linking-assets-to-cards.html: assets linked to calls, changes, services (read 2026-09-26). Versions and compliance are not part of it. Reached on: Asset card.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967521-object-viewer: 'shows all the object properties like title, name, or lifecycle state. Also, you can see the relationships, history, objects being used in other views, or questionnaires' (read 2026-09-26). Reached on: Objects > object properties / Objectviewer.",
 				"glpi": "source read at 11.0.9: src/Appliance.php:98 onwards defineTabs puts Items, Contracts, Documents, Management (Infocom), Certificates, Domains, Knowledge base, Tickets, Problems, Changes and Impact on the one appliance page; versions sit on the separate Software page (src/SoftwareVersion.php:42), and no compliance tab exists (grep -i 'complian' src/Appliance.php returns nothing). Reached on: Management > Appliances > appliance form tabs."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -689,7 +1208,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "open-data-publishing",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "Many entries can be selected and deleted together through the library index page. The mass publish and mass lock dialogs exist but hang off a view modal no page opens, and the publish endpoint (lib/Controller/PublicationController.php, PUT /api/publication/...) has no frontend caller.",
 			"evidence": {
 				"stackiq": "Library CnIndexPage mass delete/copy/export (showMassDelete default true, CnIndexPage.vue:1617; selfModeActions.js:63 handleMassDelete) on index pages; stackiq's MassPublishObjects/MassLockObjects dialogs (src/dialogs/Dialogs.vue:8-14) are only opened from src/modals/object/ViewObject.vue:4865, and ViewObject is only mounted for modals 'viewOrganisatie'/'viewContactpersoon' (src/modals/Modals.vue:7,19) which nothing in src/ sets",
@@ -698,6 +1217,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967533-edit-multiple-objects: 'edit multiple objects at the same time'; the API offers 'Delete multiple objects' (https://help.bluedolphin.io/en/articles/11967756-delete-multiple-objects); no publish or lock action (read 2026-09-26). Reached on: Objects > Edit selected objects.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/adding-and-editing-data-in-fact-sheets: 'switch to table view in the inventory, you can perform inline editing across multiple fact sheets'; https://help.sap.com/docs/leanix/ea/archiving-deleting-and-recovering-fact-sheets: 'Archiving Fact Sheets in Bulk' through an Excel action column. No publish or lock action is documented (read 2026-09-26). Reached on: Inventory > Table view; Excel import with action column.",
 				"glpi": "source read at 11.0.9: every search list offers massive actions, src/MassiveAction.php:666 Update (any field, for example status), src/MassiveAction.php:698 Put in trashbin, src/MassiveAction.php:652 Delete permanently, src/MassiveAction.php:656 Restore. There is no publish state; locking applies to inventory fields only. Reached on: any list, for example Management > Appliances, Actions button. Driven on the lab at 11.0.9 (2026-09-26): the Appliances list carries the massive actions control."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -720,6 +1243,7 @@
 			"reachedOn": "OrganisatieDetail /organisaties/:id, Merge panel (admins only)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "data-quality",
 			"note": "Only organisations can be merged, with a dry run first, and only by a Nextcloud admin. Applications, services and other entries have no merge. Specified in openspec/changes/operations-record-reconciliation (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "src/components/organisations/OrganisationMergePanel.vue:46 (admin-only controls) mounted as OrganisatieDetail bodyWidget org-merge (src/manifest.json:430); lib/Controller/MergeController.php:106 execute with isAdmin check at :142; generic src/modals/object/MergeObject.vue only mounted for modal 'mergeOrganisatie' which nothing sets",
@@ -728,6 +1252,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; imports merge source records that share a key into one object (https://help.bluedolphin.io/en/articles/11967635-four-things-you-need-to-know-before-you-start-importing-sources), but merging two existing entries by a user is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea (all 663 EA pages grepped for merge); duplicates are handled by archiving (https://help.sap.com/docs/leanix/ea/archiving-deleting-and-recovering-fact-sheets 'removing outdated or duplicate fact sheets'), no merge of two fact sheets is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: src/Software.php:109 'Merging' tab on a recursive software, src/Software.php:926 showMergeCandidates lists same named software, src/Software.php:997 massive action Merge, src/Software.php:1011 private function merge moves versions and licences into the kept entry; dropdowns get Replace, src/CommonDropdown.php:680. Reached on: Assets > Software > Merging tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDatakwaliteit",
+					"SkOrganisatie"
+				]
 			}
 		},
 		{
@@ -750,6 +1281,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "data-quality",
 			"note": "Nothing asks owners to confirm or correct their entries. Specified in openspec/changes/landscape-owner-attestation (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/reviewing-responses: 'Review and approve survey responses before they are saved to fact sheets'; https://help.sap.com/docs/leanix/ea/application-modernization-collect-data: 'Create a new survey to get key information from application or business owners' (read 2026-09-26). Reached on: Surveys.",
@@ -758,6 +1290,10 @@
 				"topdesk": "unknown: Survey Management runs general surveys (and \"will reach end of life ... November 2026\"), not confirmation of entries by owners; searched the full-text search index of docs.topdesk.com (https://docs.topdesk.com/en/js/fuzzydata.js, 987 pages) (read 2026-09-26)",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: C7: \"Leveranciers krijgen ook periodiek notificatiemails met een aantal automatische controles en de Te corrigeren fouten staan ook op het dashboard van ingelogde leveranciers\" (read 2026-09-26); https://www.softwarecatalogus.nl/suggesties_overnemen: suppliers send suggestions that municipalities accept or decline (read 2026-09-26). No survey to application owners.",
 				"glpi": "source read at 11.0.9: the native form builder (src/Glpi/Form/Form.php:92) only has ITIL destinations, src/Glpi/Form/Destination/ holds FormDestinationTicket, FormDestinationChange and FormDestinationProblem, so a form answer opens a ticket but never confirms or updates an appliance record; the only 'survey' in core is ticket satisfaction (src/Central.php:220). No owner review campaign exists."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkDatakwaliteit"
 			}
 		},
 		{
@@ -780,6 +1316,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "data-quality",
 			"note": "No page scores how complete or current an entry is. Specified in openspec/changes/landscape-completeness-score (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "No completeness or data-quality score in lib/ or src/ (searched completeness/volledigheid/score outside reviews)",
@@ -788,6 +1325,13 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967713-governance-insights: governance report 'Object completeness : Lists all objects and the completeness score of each object' (read 2026-09-26). Reached on: Insights > Governance reports > Object completeness.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/fact-sheet-completeness: 'The fact sheet completion score measures how much of the required data has been filled out for a fact sheet ... You can view the fact sheet completion score in the fact sheet's header' (read 2026-09-26). Reached on: Fact sheet header > completion score.",
 				"glpi": "source read at 11.0.9: grep -ril 'completeness' over src/ templates/ locales/glpi.pot returns nothing; no score of how filled in an item is exists in core. The item form tabs (src/Appliance.php:98 onwards) show no score."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkDatakwaliteit"
+				]
 			}
 		},
 		{
@@ -811,6 +1355,7 @@
 			"reachedOn": "First-run setup wizard (admin), step 'Load example data'",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "landscape-import",
 			"note": "An admin picks the demo dataset in the setup wizard and it is imported through OpenRegister. Admin-only, which suits an installation task.",
 			"evidence": {
 				"stackiq": "src/manifest.json:3 setup wizard step load-demo-data (:24); lib/Controller/SetupController.php:202 runAction load-demo-data (AuthorizedAdminSetting); lib/Service/DemoDataService.php:202 install() imports lib/Settings/stackiq_mock_register.json (120 objects, 6 per schema) through OpenRegister ConfigurationService::importFromApp",
@@ -819,6 +1364,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967592-download-and-update-the-templates-in-the-library: 'A quick way of getting started with BlueDolphin and discovering its possibilities is by downloading a standard template'; standard templates are 'Preconfigured BlueDolphin sites that can contain objects, views, questionnaires' (https://help.bluedolphin.io/en/articles/11967590-introduction-to-templates) (read 2026-09-26). Reached on: Admin > Templates > Library > Standard templates.",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; demo and sandbox workspaces are mentioned (https://help.sap.com/docs/leanix/ea/automations 'Demo and sandbox workspaces allow up to 10,000 automations per month') but loading an example data set into a workspace is not described (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: on a clean install dashboards render placeholder figures from src/Glpi/Dashboard/FakeProvider.php:65 FakeProvider, with the banner 'You are viewing demonstration data.' and a 'Disable demonstration' button (src/Glpi/Dashboard/Grid.php:427, :428, :448); CHANGELOG.md 11.0.0 lists it. No example records (applications, contracts, suppliers) are loaded; the console entry point src/Glpi/Console/Application.php:66 has no demo data command. Reached on: Home > Dashboard on a fresh install. Driven on the lab at 11.0.9 (2026-09-26): glpi_configs.is_demo_dashboards is 1 on the fresh install, so the dashboard cards come from FakeProvider until an administrator disables the demonstration."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -841,6 +1390,7 @@
 			"reachedOn": "Suites /suites, New suite wizard only",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"note": "Only suites get a step-by-step wizard. Applications and services are added through a plain form, and connections have no page at all.",
 			"evidence": {
 				"stackiq": "src/dialogs/SuiteWizardDialog.vue (3 steps) is the only wizard, opened from src/views/suites/SuitesIndexView.vue:46; applications, services and connections use the bare CnIndexPage form (FacetedCatalogIndexView.vue:108) or nothing",
@@ -849,6 +1399,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; creating an object is a form (https://help.bluedolphin.io/en/articles/11967530-create-a-new-object), and the survey setup has three steps, but a step by step wizard for adding an application is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: https://help.sap.com/docs/leanix/ea/creating-fact-sheets describes creating a fact sheet in the inventory with reference catalog suggestions and duplicate hints, not a step by step wizard; wizards are documented only for KPI and integration mapping configuration (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -ril 'wizard' over src/ templates/ locales/glpi.pot returns nothing for item creation; appliances are added through the plain form only (install/mysql/glpi-empty.sql:8935 glpi_appliances has no is_template column)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkSuiteWizard"
 			}
 		},
 		{
@@ -871,6 +1425,7 @@
 			"reachedOn": "ModuleversieDetail /moduleversies/:id, sidebar tab Components",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "A module version's page lists the third-party components imported from its SBOM.",
 			"evidence": {
 				"stackiq": "src/components/sbom/SbomComponentsPanel.vue lists sbomComponent rows (name/version/purl/licenses) as the ModuleversieDetail 'Components' sidebar tab (src/manifest.json:961); register.json:7920 sbomComponent schema",
@@ -879,6 +1434,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for SBOM and bill of materials, no hits (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/uploading-sboms-from-fact-sheets: 'Upload SBOM files directly from a microservice fact sheet'; https://help.sap.com/docs/leanix/ea/tech-stack-discovery-from-sboms: 'the system automatically analyzes the SBOM components and builds a structured view of your technology stack'. Part of SAP LeanIX Technology Risk and Compliance (read 2026-09-26). Reached on: Microservice fact sheet > SBOM (Technology Risk and Compliance).",
 				"glpi": "source read at 11.0.9: grep -ril 'sbom\\|cyclonedx\\|spdx' over src/ templates/ locales/glpi.pot returns nothing; software versions carry no component list (install/mysql/glpi-empty.sql:6900 glpi_softwareversions)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModuleversie"
 			}
 		},
 		{
@@ -902,7 +1461,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "software-landscape-register",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The application form records on-premises, IaaS, PaaS or SaaS plus hosting location and jurisdiction. There is no field naming the hosting party itself.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/applications-in-reference-catalog lists application fields 'Hosting Type' and 'Hosting Description'; https://help.sap.com/docs/leanix/ea/configuring-kpis filters applications on 'Hosting Type = \"Cloud\"'; IT component subtypes SaaS, IaaS, PaaS, Hardware (read 2026-09-26). Reached on: Application fact sheet > Hosting Type.",
@@ -911,6 +1470,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/30355: \"Indien een leverancier zowel SaaS als On premise ondersteunt, kan je aangeven welke van deze twee varianten gebruikt wordt binnen de gemeente\" (read 2026-09-26). Reached on: Mijn softwarecatalogus > Pakketten > toevoegen > tabblad Technologie.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967633-datacollector-select-tricks: an example import carries '[Hosting Type]' into object properties; hosting is otherwise modeled with ArchiMate technology objects. No built in hosting field is documented (read 2026-09-26). Reached on: Object properties or questionnaire field.",
 				"glpi": "source read at 11.0.9: no hosting model field; the closest holders are the admin editable Environment dropdown on an appliance, src/Appliance.php:277 ApplianceEnvironment search option (install/mysql/glpi-empty.sql:8945 applianceenvironments_id), plus locations_id and the Appliance type dropdown. grep -i 'saas' over src/ finds nothing; 'On-premise' in locales/glpi.pot:12997 is only an icon label. Reached on: Management > Appliances, Environment field."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -933,8 +1496,8 @@
 			"reachedOn": "API only: OpenRegister objects API",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "software-landscape-register",
-			"featureConfidence": "low",
+			"feature": "application-connections",
+			"featureConfidence": "medium",
 			"note": "The field for a national provision exists on the connection schema, but with no connection page nobody can fill it in stackiq. Specified in openspec/changes/connections-catalogue-pages (OpenSpec pass 2026-09-27). The provision picker now finds the GEMMA provisions, and the connection page shows and edits the field (built by openspec/changes/archive/2026-09-29-connections-catalogue-pages).",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Opvoeren%20koppeling%20iJw%20en%20iWmo: \"De richting van het berichtenverkeer, de landelijke voorziening waarmee gekoppeld is/wordt, in dit geval GGK\" (read 2026-09-26); https://www.softwarecatalogus.nl/hoe-werkt-de-catalogus: \"kunnen koppelingen tussen applicaties onderling en met Landelijke Voorzieningen vastgelegd worden\" (read 2026-09-26). Reached on: Mijn softwarecatalogus > Koppelingen > koppeling toevoegen.",
@@ -943,6 +1506,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; connections are generic ArchiMate relationships between objects (https://help.bluedolphin.io/en/articles/11967550-working-with-object-relationships), national provisions such as basisregistraties are not mentioned (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-modeling-guidelines: 'Modeling External Applications ... applications of business partners, service providers, authorities', linked 'through an interface to analyze dependencies'. Generic external application modeling, no catalogue of national provisions such as basisregistraties (read 2026-09-26). Reached on: Application fact sheet (external) + Interface fact sheet.",
 				"glpi": "source read at 11.0.9: no national provision concept (grep -ril 'basisregistratie' src/ locales/glpi.pot returns nothing); a provision can be held as another Appliance and linked through an impact relation, install/mysql/glpi-empty.sql:1247 glpi_impactrelations (source item, impacted item, name), with Appliance enabled for impact at src/autoload/CFG_GLPI.php:649. Reached on: Appliance > Impact analysis tab, Add relation."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKoppelingen"
 			}
 		},
 		{
@@ -965,7 +1532,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "software-landscape-register",
+			"feature": "application-connections",
 			"featureConfidence": "medium",
 			"note": "Connections have a list under Applications, Connections, and a page per connection with its lifecycle actions. Built by openspec/changes/archive/2026-09-29-connections-catalogue-pages.",
 			"evidence": {
@@ -975,6 +1542,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967713-governance-insights: governance report 'Objects and relationships : Lists all relations between two objects with relevant information like relation definition, related object title', with clickable object titles. A report, not a dedicated connections page (read 2026-09-26). Reached on: Insights > Governance reports > Objects and relationships.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/interface-modeling-guidelines: 'Interfaces are connections between applications that illustrate how data exchange occurs', each a fact sheet listed in the inventory by fact sheet type (read 2026-09-26). Reached on: Inventory > filter fact sheet type Interface.",
 				"glpi": "source read at 11.0.9: src/ImpactRelation.php:39 ImpactRelation has only prepareInputForAdd and getIDFromInput (src/ImpactRelation.php:47, :107), no search options and no list page; relations are only seen per item in the Impact analysis tab (src/Impact.php:91). Driven on the lab at 11.0.9 (2026-09-26): /front/impactrelation.php opens by URL only (no menu entry) as a generic list whose only criterion and column is ID, so relations cannot be browsed by endpoint; rating unchanged."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKoppelingen"
 			}
 		},
 		{
@@ -997,8 +1568,8 @@
 			"reachedOn": "ModuleDetail /modules/:id, Related panel (untyped); API /api/koppelingen-gebruik/{uuid}",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "software-landscape-register",
-			"featureConfidence": "low",
+			"feature": "application-connections",
+			"featureConfidence": "medium",
 			"note": "The application page lists the connections that start at the application and the ones that end there, each opening the connection. Built by openspec/changes/archive/2026-09-29-connections-catalogue-pages.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/13683: \"Mijn pakketoverzicht ... Onder het eerste tabblad zitten de pakketten en onder het tweede tabblad de koppelingen\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/30890: \"Door op een applicatienaam in het Models venster te klikken, zie je in de Visualiser alle koppelingen tussen die applicatie met andere applicaties\" (in Archi after export) (read 2026-09-26). No per-application connection view inside the catalogue is described. Reached on: Mijn softwarecatalogus > Koppelingen.",
@@ -1007,6 +1578,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967550-working-with-object-relationships: 'select the Objects and go to the Relationships tab ... View the current relationships of an object' (read 2026-09-26). Reached on: Objects > object > Relationships tab.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/circle-map-report: the Interface Circle Map 'helps you track changes and updates in application dependencies', and https://help.sap.com/docs/leanix/ea/adding-and-editing-data-in-fact-sheets: relations incl. interfaces shown on the fact sheet and in the Relations Explorer (read 2026-09-26). Reached on: Application fact sheet > Relations (Provided and Consumed Interfaces).",
 				"glpi": "source read at 11.0.9: src/Impact.php:91 getTabNameForItem adds the 'Impact analysis' tab (src/Impact.php:80) to every impact enabled itemtype, Appliance and Software included (src/autoload/CFG_GLPI.php:649 and :663), with a list view src/Impact.php:270 displayListView of every related item in both directions. Reached on: Management > Appliances > Impact analysis tab. Driven on the lab at 11.0.9 (2026-09-26): the appliance page carries an Impact analysis tab with Add assets for every impact enabled item type."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -1029,8 +1604,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "archimate-import-and-export",
-			"featureConfidence": "low",
+			"feature": "application-connections",
+			"featureConfidence": "medium",
 			"note": "No page draws connections. The ArchiMate export can be opened in Archi, but it carries GEMMA views and usages, not the catalogue's connections. Specified in openspec/changes/connections-diagram-and-graph-export (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/data-flow: data flow diagrams help 'understand how applications are connected, identify dependencies, and trace data movement between systems' (read 2026-09-26). Reached on: Diagrams > Data Flow Diagram.",
@@ -1039,6 +1614,10 @@
 				"stackiq": "No diagram rendering in src/ (no graph library; src/store/modules/view.js GET /api/views has no importer outside itself); lib/Service/ArchiMateExportService.php exports GEMMA views as ArchiMate XML without koppeling objects (no 'koppeling' in lib/Service/ArchiMate*)",
 				"topdesk": "https://docs.topdesk.com/en/linking-assets-to-other-assets.html: \"After you define the relationship between assets, you can use the graphical overview to see a visual representation of their relationship\" (read 2026-09-26). Reached on: Asset card > graphical overview.",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/30890: \"Tekenen van een view met koppelingen ... Een koppeling is gemodelleerd als een Archimate flow relatie\" (read 2026-09-26). Diagrams are drawn in Archi after an AMEFF export, not in the catalogue."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKoppelingen"
 			}
 		},
 		{
@@ -1061,6 +1640,7 @@
 			"reachedOn": "ModuleDetail /modules/:id, Related panel",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "application-connections",
 			"note": "The only way to see what depends on an application is the generic list of objects that reference it, which OpenRegister's relation index fills. There is no impact view or retirement check. Specified in ConductionNL/openregister openspec/changes/relations-that-travel-and-what-they-expose (openregister lane, OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967472-welcome-to-bluedolphin: 'overlapping application functions are quickly made visible, and their impact analyses are available in no time'; spider tool shows derived relationships (https://help.bluedolphin.io/en/articles/11967545-spider-tool) (read 2026-09-26). Reached on: Views > spider tool.",
@@ -1069,6 +1649,10 @@
 				"stackiq": "src/manifest.json:502 ModuleDetail md-related (library CnRelatedObjectsWidget: /used lists every object that references this module: usages, connections, suites, services, vulnerabilities); no dependency or impact computation in lib/ or src/",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Releasebrief%20GEMMA%20Softwarecatalogus%20versie%204.1: \"Pakketversies die niet meer in gebruik zijn, kunnen verwijderd worden waarbij feedback gegeven wordt over de koppelingen die ook automatisch verwijderd zullen worden\" (read 2026-09-26). Only on delete, no dependency analysis.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/meta-model: 'These relations are the basis for all the reports and allow you to analyze impact of changes, dependencies, risks, redundancies'; https://help.sap.com/docs/leanix/ea/data-flow: 'directional interface mapping, dependency analysis' (read 2026-09-26). Reached on: Reports and Data Flow Diagrams."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -1091,6 +1675,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "application-connections",
 			"note": "The connections list filters on type, status and direction from its filter menu, and on status from quick filters. Built by openspec/changes/archive/2026-09-29-connections-catalogue-pages.",
 			"evidence": {
 				"stackiq": "src/manifest.d/connections.json Koppelingen filterMenu: true over the enum columns; lib/Settings/softwarecatalogus_register.json connection type, status and dataExchangeDirection facetable (register 2.5.2, connection 0.3.3); tests/Unit/Settings/ConnectionSchemaTest.php",
@@ -1099,6 +1684,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967713-governance-insights: 'Objects and Relationships (with metadata): Select a source object definition, a relationship type, and a target object definition'; relationship types follow ArchiMate definitions, not API or file exchange categories (read 2026-09-26). Reached on: Insights > Objects and Relationships (with metadata).",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/interface-modeling-guidelines: interface subtypes 'Logical interface, API, MCP server' and 'You can capture data flow directions, type of transfer, and frequency with the interface fact sheet'; subtypes and fields are filterable in the inventory (read 2026-09-26). Reached on: Inventory > Interface > filter by subtype or transfer type.",
 				"glpi": "source read at 11.0.9: install/mysql/glpi-empty.sql:1247 glpi_impactrelations has only a free name besides the two endpoints, no connection type (API, file, message), so there is nothing to filter on; the graph settings (src/Impact.php:1167 impact_settings) cover depth and direction."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKoppelingen"
 			}
 		},
 		{
@@ -1121,6 +1710,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "application-connections",
 			"note": "Stackiq has no record for an API an application exposes. Specified in openspec/changes/connections-api-catalogue (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/interface-modeling-guidelines: interface subtype 'API ... APIs provide functionalities accessible to external applications ... Examples: Metrics API, Import API', related to the providing application (read 2026-09-26). Reached on: Inventory > Interface fact sheet, subtype API.",
@@ -1129,6 +1719,10 @@
 				"vng-softwarecatalogus": "unknown: no register of APIs an application exposes is described; standards are declared instead; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967596-archimate-annotation-translation-en-nl lists the ArchiMate object definition 'Application Interface' (Applicatie-interface), which can hold an application's APIs as related objects; no API catalogue feature is documented (read 2026-09-26). Reached on: Objects > Application Interface object.",
 				"glpi": "source read at 11.0.9: no API entity in core, grep -ril 'openapi' src/*.php finds no itemtype for exposed APIs; an admin can define an 'API' custom asset type (src/Html.php:1330 Setup > Asset definitions, src/Glpi/Asset/AssetDefinition.php) and attach it to the application as an Appliance item (src/Appliance_Item.php:45) or impact relation (install/mysql/glpi-empty.sql:1247). Reached on: Setup > Asset definitions, then Appliance > Items tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -1151,8 +1745,8 @@
 			"reachedOn": "nothing reaches it (nearest: admin settings ArchiMate organisation export)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "archimate-import-and-export",
-			"featureConfidence": "low",
+			"feature": "application-connections",
+			"featureConfidence": "medium",
 			"note": "The organisation ArchiMate export carries modules and usages but not connections, so an application's link graph cannot be exported. Specified in openspec/changes/connections-diagram-and-graph-export (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: front/impactcsv.php streams Glpi\\Csv\\ImpactCsvExport for an item, linked from the impact list view at src/Impact.php:393; the graph Download button src/Impact.php:1165 calls js/impact.js:2528 download, which writes PNG (js/impact.js:2539) or JPEG (js/impact.js:2546). Reached on: Appliance > Impact analysis tab, Download and CSV export.",
@@ -1161,6 +1755,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Handleiding%20koppeling%20architectuurtools: \"Pakketten én koppelingen worden in 1 model geëxporteerd ... AMEFF-export\" (read 2026-09-26); https://www.softwarecatalogus.nl/Beschikbare%20downloads: \"Mijn koppelingen: Knop [Exporteren] op tabblad Koppelingen\" (read 2026-09-26). Reached on: Mijn softwarecatalogus > Pakketten or Koppelingen > Exporteren > AMEFF-export.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967514-download-a-view: a view downloads as 'PNG, SVG, PDF, and AMEFF format ... You can use AMEFF files to exchange Architecture views between different applications that support ArchiMate'. The graph is exported per drawn view (read 2026-09-26). Reached on: View > Download > AMEFF.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/importing-and-exporting-diagrams: diagrams export 'in the following formats: PDF, SVG, PNG, HTML embed code, and XML' and open in draw.io; https://help.sap.com/docs/leanix/ea/exporting-fact-sheet-data-as-excel-file exports fact sheet data. No export of an application's relation graph as data is documented as such (read 2026-09-26). Reached on: Diagrams > Export (XML, draw.io); Inventory > Export."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKoppelingen"
 			}
 		},
 		{
@@ -1183,6 +1781,7 @@
 			"reachedOn": "Integrations /settings/integrations (settings menu, admin, only when app id 'integriq' is installed)",
 			"provider": "integriq",
 			"providerHow": "read-from-code",
+			"feature": "application-connections",
 			"note": "With integriq installed, an admin sees stackiq's three integrations and their checked status on one page, and Add integration opens integriq. Without integriq the page is hidden, and the checking is integriq's. Building: ConductionNL/integriq openspec/changes/connection-registry, an existing open change, covers it (integriq lane, OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "src/manifest.d/connection-registry.json:23 Integrations page (register integriq, schema app_connection) with visibleIf appInstalled 'integriq' (:17) and permission admin (:15,:27); Add integration handler leaves for integriq (src/services/connectionRegistry.js:43); rows synced from lib/Settings/connections.json (email, federation, eol-feed); status worked out by integriq",
@@ -1191,6 +1790,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967779-add-an-integration-in-bluedolphin: 'Click Add integration in the bottom right corner of the Marketplace page' for TOPdesk, ServiceNow and JIRA; 'Marketplace (Integration) is a paid add-on' (read 2026-09-26). Reached on: System settings > Marketplace > Add integration.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/discovering-ai-agents-using-api: 'Go to the Integrations section in the administration area. Choose Add Integration'; https://help.sap.com/docs/leanix/ea/collibra-data-catalog-integration: 'Administration > Integrations > Sync Log' to check each integration (read 2026-09-26). Reached on: Administration > Integrations (Add Integration, Sync Log).",
 				"glpi": "source read at 11.0.9: outside integrations are set up on separate Setup pages, not one overview: src/Html.php:1331 Webhook, src/Html.php:1333 OAuthClient and MailCollector, Auth (LDAP, SSO) on src/Html.php:1332; src/Webhook.php:64 Webhook and src/OAuthClient.php:45 OAuthClient each have their own list. Reached on: Setup > Webhooks, Setup > OAuth clients, Setup > Authentication."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
 			}
 		},
 		{
@@ -1223,6 +1826,10 @@
 				"vng-softwarecatalogus": "unknown: only export to AMEFF is documented; importing an ArchiMate file into the catalogue is not described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Handleiding%20koppeling%20architectuurtools (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea (all EA pages grepped for ArchiMate and exchange format); diagram import supports '.drawio, Lucidchart, .vsdx, PNG, SVG, JPEG' only (https://help.sap.com/docs/leanix/ea/importing-and-exporting-diagrams), ArchiMate appears only as a shape template (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -ril 'archimate\\|gemma\\|togaf' over src/ templates/ locales/glpi.pot returns nothing; no model import exists. Import paths in core are inventory (src/Glpi/Inventory/Inventory.php:106) and form import (src/Glpi/Controller/Form/Import/), neither for models."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -1255,6 +1862,10 @@
 				"topdesk": "unknown: ArchiMate is not mentioned anywhere in the documentation (0 hits); searched the full-text search index of docs.topdesk.com (https://docs.topdesk.com/en/js/fuzzydata.js, 987 pages) (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; exports are PDF, SVG, PNG, HTML and draw.io XML (https://help.sap.com/docs/leanix/ea/importing-and-exporting-diagrams); no ArchiMate exchange format export is documented, ArchiMate 3.2 is only a visual template (https://help.sap.com/docs/leanix/ea/styles-and-patterns) (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -ril 'archimate' over src/ templates/ locales/glpi.pot returns nothing; exports are CSV, PDF and spreadsheet search output (src/Glpi/Csv/) only. Export formats are src/Glpi/Search/Output/Csv.php:38 and src/Glpi/Search/Output/Pdf.php:43 and the spreadsheet siblings."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -1287,6 +1898,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for GEMMA, no hits; views export to AMEFF (https://help.bluedolphin.io/en/articles/11967514-download-a-view), but an organisation's landscape plotted on GEMMA is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no GEMMA content and no ArchiMate file export are documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -ril 'archimate\\|gemma' over src/ templates/ locales/glpi.pot returns nothing; no GEMMA plotting or per entity model export. Export formats are src/Glpi/Search/Output/Csv.php:38 and src/Glpi/Search/Output/Pdf.php:43, no model file."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -1310,7 +1925,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "archimate-import-and-export",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "There is an endpoint, but its comparison is broken (a missing key against a placeholder string) and no page calls it. The compare_archimate.py/.php scripts in the repo root are developer tools, not a user capability. Specified in openspec/changes/architecture-round-trip-check (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "appinfo/routes.php:107 POST /api/archimate/test-round-trip -> lib/Controller/SettingsController.php:2886 (@NoAdminRequired, any logged-in user) -> lib/Service/ArchiMateService.php:1496 testRoundTrip: reads $importResult['imported_count'] (:1528), a key no import path sets, and compares it to exportToArchiMate's 'exported_count' which is the literal string 'calculated_in_export_service' (:271), so it can never report success; it also imports a test model into the live register",
@@ -1319,6 +1934,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; AMEFF import and per view AMEFF export exist (https://help.bluedolphin.io/en/articles/11967637-import-ameff-files, https://help.bluedolphin.io/en/articles/11967514-download-a-view), but a check that a model survives the round trip is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no model file import and export pair (ArchiMate or similar) is documented, so no round trip check exists in the docs (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: there is no model import or export to round trip, grep -ril 'archimate' over src/ templates/ locales/glpi.pot returns nothing. Export formats are src/Glpi/Search/Output/Csv.php:38 and src/Glpi/Search/Output/Pdf.php:43, no model file."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -1342,7 +1961,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "archimate-import-and-export",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The import records its phase and the objects saved so far, the settings page follows it every two seconds, and a cancel stops it before its next save batch, keeping what was already saved. Built by openspec/changes/archive/2026-09-29-architecture-import-progress-and-cancel.",
 			"evidence": {
 				"stackiq": "lib/Service/ArchiMateImportService.php startTracking() and saveSchemaGroups() record the phase and saved count in ProgressTracker under the page-named operation id and stop before the next schema group on a cancel; lib/Service/ArchiMateService.php cancelArchiMateImport() sets the cancel flag (the method was missing); src/views/settings/sections/ArchiMateImportExport.vue polls /api/progress/{id} every two seconds and shows the phase, a progress bar and a Cancel import button (tests/Unit/Service/ArchiMateImportProgressTest.php, ArchiMateServiceCancelTest.php, src/utils/archiMateImportProgress.spec.js)",
@@ -1351,6 +1970,10 @@
 				"bluedolphin": "unknown: https://help.bluedolphin.io/en/articles/11967637-import-ameff-files says only 'When BlueDolphin has completed the action, a checkmark will appear'; progress while running and cancelling are not documented (read 2026-09-26)",
 				"sap-leanix": "https://updates.leanix.net/announcements/product-update-march-2026: 'The new asynchronous import process runs entirely in the background ... A real-time progress widget in the inventory side-panel keeps you informed of import status'. This is the Excel import, not a model import, and cancelling is not described (read 2026-09-26). Reached on: Inventory side panel > import progress widget.",
 				"glpi": "source read at 11.0.9: no model import exists (grep -ril 'archimate' src/ returns nothing), so there is no import to follow; the generic progress endpoint src/Glpi/Controller/ProgressController.php serves other long operations. The progress route is src/Glpi/Controller/ProgressController.php:50 /progress/check/{key}, used by the installer (src/Glpi/Controller/InstallController.php:57)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -1374,7 +1997,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "You can open a standard's page and read its definition, but reference components and other GEMMA terms have no page and there is no inline definition where they appear.",
 			"evidence": {
 				"stackiq": "src/manifest.json StandaardDetail /standaarden/:id st-data widget shows all element fields (documentation, gemmaNotes) of a standard; FacetedCatalogIndexView.vue:150 shows reference components by name only",
@@ -1383,6 +2006,14 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for GEMMA, no hits; object definitions follow ArchiMate (https://help.bluedolphin.io/en/articles/11967599-object-definitions) but in place definitions of GEMMA terms are not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no GEMMA terms and no in-place glossary of reference architecture terms are documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -ril 'gemma\\|glossary' over src/ templates/ locales/glpi.pot returns nothing; no reference term definitions ship in core. The knowledge base (src/KnowbaseItem.php:57) is the only place definitions could be written by hand."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkGemmaPlaat",
+					"SkStandaarden"
+				]
 			}
 		},
 		{
@@ -1406,7 +2037,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The mapping to GEMMA reference components exists, but there is no map view in stackiq; you only see it as a facet list or in Archi after an admin export. Specified in openspec/changes/architecture-reference-component-coverage (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/meta-model: 'A business capability is supported by an application'; https://help.sap.com/docs/leanix/ea/application-portfolio-assessment lists a 'Business capability map' (read 2026-09-26). Reached on: Reports > Landscape Report on Business Capabilities.",
@@ -1415,6 +2046,10 @@
 				"topdesk": "unknown: no capability or function map is described; searched the full-text search index of docs.topdesk.com (https://docs.topdesk.com/en/js/fuzzydata.js, 987 pages) (read 2026-09-26)",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Hoe%20print%20ik%20een%20kaart%3F: \"de pakketten die getoond worden in het pakketoverzicht te plotten op een GEMMA architectuurkaart ... [Toon kaart]\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/30890: view \"RD02 Bedrijfsfuncties ruimtelijk domein met referentiecomponenten\" with the municipality's packages plotted (read 2026-09-26). Mapping runs through fixed GEMMA reference components and business functions, not the organisation's own capability model. Reached on: Mijn softwarecatalogus > Pakketten > kaart kiezen > Toon kaart.",
 				"glpi": "source read at 11.0.9: grep -rli 'business capabilit\\|business process' over src/ and locales/glpi.pot returns nothing; 'Capacity' in src/Glpi/Asset/Capacity.php is a feature toggle for custom assets, not a business capability. src/Glpi/Asset/Capacity.php:39 is the custom asset capacity class."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
 			}
 		},
 		{
@@ -1437,6 +2072,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"note": "Models are imported and exported as ArchiMate files; nothing lets a user draw or edit a model inside stackiq. Specified in openspec/changes/architecture-views-editor (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/importing-and-exporting-diagrams and https://help.sap.com/docs/leanix/ea/working-with-fact-sheets-in-diagrams: free draw and data flow diagrams edited in the diagram editor, with an ArchiMate 3.2 shape template (https://help.sap.com/docs/leanix/ea/styles-and-patterns) (read 2026-09-26). Reached on: Diagrams > New Diagram (diagram editor).",
@@ -1445,6 +2081,10 @@
 				"topdesk": "unknown: no architecture modelling is described; searched the full-text search index of docs.topdesk.com (https://docs.topdesk.com/en/js/fuzzydata.js, 987 pages) (read 2026-09-26)",
 				"vng-softwarecatalogus": "unknown: the docs send users to Archi or other tools for modelling; drawing inside the catalogue is not described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/node/30890 (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: the impact graph is an editable diagram, src/Impact.php:1160 add asset, add relation and add group tools, groups stored in install/mysql/glpi-empty.sql:1264 glpi_impactcompounds and node positions in install/mysql/glpi-empty.sql:1276 glpi_impactitems; it draws dependency graphs only, with no architecture notation or views. Reached on: Appliance > Impact analysis tab, graph edit mode."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
 			}
 		},
 		{
@@ -1467,6 +2107,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"note": "Business processes are not modelled; the only link applications have is to GEMMA reference components. Specified in openspec/changes/architecture-process-mapping (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967673-process-linked-to-ea-perspectives: 'The Create BPMN diagram button allows you to create a diagram directly from a business process'; https://help.bluedolphin.io/en/articles/11967500-getting-started-with-process-publication-portal: 'For each application, you will find different processes in which the selected application is involved' (read 2026-09-26). Reached on: Processes > Process browser.",
@@ -1475,6 +2116,10 @@
 				"vng-softwarecatalogus": "unknown: no process modelling is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/business-context-modeling-guidelines: business context subtype 'Process : Processes show the different steps and interactions', related to applications; SAP Signavio integration documented under Discovery and Integrations (read 2026-09-26). Reached on: Business Context fact sheet, subtype Process.",
 				"glpi": "source read at 11.0.9: grep -rli 'business process' over src/ and locales/glpi.pot returns nothing; no process itemtype to link to applications. Appliance tabs (src/Appliance.php:98 onwards) link no process."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
 			}
 		},
 		{
@@ -1497,6 +2142,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"note": "Planned usage and planned replacements exist per record, but there is no future-state model and no comparison with today. Specified in openspec/changes/architecture-future-state-scenarios (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/sap-leanix-architecture-and-road-map-planning: 'plan your target architecture and monitor initiative progress', transformation templates and impacts; https://updates.leanix.net/announcements/plan-with-consistent-future-architecture-data-introducing-the-committed-future (2026-09-24): 'Understanding your architecture across the past, present, and future ... introducing the committed future'. In the Architecture and Road Map Planning add on (read 2026-09-26). Reached on: Architecture and Road Map Planning > Transformations, target architecture diagrams.",
@@ -1505,6 +2151,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/19703: \"geplande harmonisaties ... met een status gepland met bijbehorende datum. Zo kan ook het uiteindelijke doel-landschap in 1 overzicht inzichtelijk worden gemaakt\" (read 2026-09-26). No side-by-side comparison of today and target. Reached on: Mijn softwarecatalogus (samenwerking) > Pakketten > status Gepland.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967531-object-lifecycle-state: 'Objects can be either Current (default) or Future state. Select the Future option to reflect how the object will look in the future', shown distinctly on views; https://bluedolphin.io/capability-based-planning/: 'Map current and future state capabilities' (read 2026-09-26). Reached on: Objects and views with Current and Future lifecycle state.",
 				"glpi": "source read at 11.0.9: grep -rli 'future state\\|what-if\\|scenario' over src/*.php returns nothing; the impact graph (src/Impact.php:49) shows only the current relations, with no plateau or target landscape."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
 			}
 		},
 		{
@@ -1527,6 +2177,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "gemma-alignment",
 			"note": "No report or view lists reference components that no application in your landscape covers. Specified in openspec/changes/architecture-reference-component-coverage (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"bluedolphin": "https://bluedolphin.io/capability-based-planning/: 'Run gap analyses to define a clear roadmap' and 'Identify capability gaps'. Gaps are found on the customer's own capability map; no reference architecture such as GEMMA is documented (read 2026-09-26). Reached on: Capability maps.",
@@ -1535,6 +2186,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Releasebrief%20GEMMA%20Softwarecatalogus%20versie%204.1: dashboard tile \"Pakketten met meer mogelijkheden: U heeft in uw pakketoverzicht pakketten die geschikt zijn voor referentiecomponenten waarbij u nog geen pakket heeft opgevoerd\" (read 2026-09-26). It lists uncovered components only where an owned package could fill them. Reached on: Dashboard tile Pakketten met meer mogelijkheden.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/report-types: Matrix Report 'Displays relations between fact sheets in a two-dimensional matrix' for 'Coverage gap analysis'. Gaps are business capabilities without supporting applications; no reference architecture such as GEMMA is shipped (read 2026-09-26). Reached on: Reports > Matrix Report.",
 				"glpi": "source read at 11.0.9: no reference component model to compare against, grep -ril 'gemma\\|reference component' over src/ locales/glpi.pot returns nothing; appliances are typed only by the free Appliance type dropdown (install/mysql/glpi-empty.sql:8941)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
 			}
 		},
 		{
@@ -1557,6 +2212,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"note": "Nothing drafts diagrams. Specified in openspec/changes/architecture-assistant-drafted-views (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/12528662-ai-capabilities-of-bluedolphin: 'Modelling Assistant or BPMN Generator instantly creates BPMN 2.0-compliant process diagrams from a simple prompt or by uploading existing documentation' (read 2026-09-26). Reached on: Processes > Modeling Assistant.",
@@ -1565,6 +2221,10 @@
 				"vng-softwarecatalogus": "unknown: no assistant is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"sap-leanix": "https://updates.leanix.net/announcements/build-and-edit-architecture-diagrams-with-ai-agents (2026-09-15): 'AI agents connected to your workspace via the MCP server can now create, populate, and edit diagrams ... You describe what you want to see, and the agent adds fact sheets to a canvas' (read 2026-09-26). Reached on: MCP server with an AI agent > diagrams.",
 				"glpi": "source read at 11.0.9: grep -rli 'openai\\|llm\\|mistral\\|chatgpt\\|artificial intelligence' over src/ templates/ returns nothing; diagrams are drawn by hand in the impact graph (src/Impact.php:1160)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
 			}
 		},
 		{
@@ -1597,6 +2257,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no register of standards applications must support is documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/technology-standards-management-capabilities: Technology Risk and Compliance helps 'establish technology standards' for frameworks and languages. These are technology standards for components, not interoperability standards an application must support (read 2026-09-26). Reached on: Technology Risk and Compliance > technology standards.",
 				"glpi": "source read at 11.0.9: no standards itemtype, grep -ril 'standaard\\|forum standaardisatie' src/ locales/glpi.pot returns nothing and the word standard in src/Appliance.php occurs only in addStandardTab (src/Appliance.php:100)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkStandaarden"
 			}
 		},
 		{
@@ -1629,6 +2293,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967535-object-attachments: 'You can enrich your Blue Dolphin objects with additional information from saved files'. Files attach to the object, not to a specific compliance claim (read 2026-09-26). Reached on: Object > General tab > attachments.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/collaborating-and-managing-data-in-fact-sheets: 'The Resources tab ... You can upload files up to 10 MB' and links on any fact sheet. Files attach to the fact sheet, not to a specific compliance claim (read 2026-09-26). Reached on: Fact sheet > Resources tab.",
 				"glpi": "source read at 11.0.9: any document can be attached to an appliance through the Documents tab, src/Appliance.php:100 Document_Item tab and src/Document_Item.php:46, stored in install/mysql/glpi-empty.sql:2585 glpi_documents; there is no compliance claim to attach it to. Reached on: Management > Appliances > Documents tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkComplianceMatrix"
 			}
 		},
 		{
@@ -1661,6 +2329,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no distinction between verified and asserted compliance claims is documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; a quality seal approves fact sheet data as a whole (https://help.sap.com/docs/leanix/ea/updating-lifecycle-phase-and-approving-quality-seal) but no distinction between verified and supplier asserted compliance claims is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no compliance claim model, grep -rli 'complian' over src/Appliance.php src/Software.php returns nothing; nothing to mark verified or claimed (src/Appliance.php:46 fields are inventory and management fields only)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkComplianceMatrix"
 			}
 		},
 		{
@@ -1693,6 +2365,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; heat maps by conditional layout and a Power BI relations cross-table exist (https://help.bluedolphin.io/en/articles/11967711-power-bi-for-bluedolphin-quickstart), but a matrix of applications against standards is not documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/meta-model-dora-extension: 'You can create a regulatory dictionary, categorize DORA requirements, and link DORA obligations directly to specific IT and business architecture elements'; https://help.sap.com/docs/leanix/ea/report-types: Matrix Report maps relations cell by cell. Regulation obligations, not interoperability standards (read 2026-09-26). Reached on: DORA extension + Reports > Matrix Report.",
 				"glpi": "source read at 11.0.9: there are no standards in core (grep -rli 'standaard\\|forum standaardisatie' src/ locales/glpi.pot returns nothing), so no application by standard matrix; search output (src/Glpi/Search/Output/Spreadsheet.php) only tabulates item fields. The spreadsheet output is src/Glpi/Search/Output/Csv.php:38 and siblings."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkComplianceMatrix"
 			}
 		},
 		{
@@ -1716,7 +2392,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "standards-compliance",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "One action updates every module's standards from its compliance records, but only a Nextcloud admin can run it and it stops at 1000 compliance records.",
 			"evidence": {
 				"stackiq": "appinfo/routes.php:275 POST /api/bulk-sync-standards -> lib/Controller/SettingsController.php:3598 (isAdmin check) -> lib/Service/ModuleComplianceService.php:527 bulkSyncModuleStandards (reads up to 1000 compliancy records and updates module standards); UI src/views/settings/sections/StatisticsOverview.vue:79 button -> src/modals/BulkSyncDialog.vue:321",
@@ -1725,6 +2401,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no standards set to refresh across applications is documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no action that refreshes the standards set of many applications is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no standards model exists (see comp-standards-register); massive actions (src/MassiveAction.php:666 Update) update item fields only."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -1747,7 +2427,7 @@
 			"reachedOn": "BioMaatregelen /bio-maatregelen, menu BIO measures; detail BioMaatregelDetail /bio-maatregelen/:id",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "standards-compliance",
+			"feature": "security-and-privacy-assessment",
 			"featureConfidence": "medium",
 			"note": "The page exists and shows the theme, but the level column is wired to a key that does not exist (bbnNiveau vs bbnLevel; level only shows on the detail page), and the BIO measures are not shipped, so someone has to type them in.",
 			"evidence": {
@@ -1757,6 +2437,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for BIO and Baseline Informatiebeveiliging, no hits; the only security template is an 'ISO27001 Management System template' for 'an Information Security Management System' (https://help.bluedolphin.io/en/articles/11967582-iso27001-management-system-template), not the BIO measure set (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea for BIO and Baseline Informatiebeveiliging, no hits; LeanIX documents DORA and GDPR content only (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'iso 27001\\|27002' and grep -rwi 'bio' over src/ locales/glpi.pot return nothing; no security measure catalogue ships (menus at src/Html.php:1295 onwards list none)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkStandaarden"
 			}
 		},
 		{
@@ -1779,7 +2463,7 @@
 			"reachedOn": "Komplianties /komplianties (create a claim with a BIO measure); ComplianceMatrix /compliance-matrix with BIO measures as columns",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "standards-compliance",
+			"feature": "security-and-privacy-assessment",
 			"featureConfidence": "medium",
 			"note": "You can record that an application meets a BIO measure, but there is no way to record that it does not meet one: the absence of a claim is the only negative, which cannot be told apart from 'not assessed'. The md-compliance column key 'bioMaatregel' also differs from the property bioMeasure.",
 			"evidence": {
@@ -1789,6 +2473,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for BIO, no hits; recording which BIO measures an application meets is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea for BIO, no hits; no BIO measure assessment per application is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no measure catalogue and no assessment itemtype; grep -rli 'iso 27001\\|27002' over src/ locales/glpi.pot returns nothing and Appliance tabs (src/Appliance.php:98 onwards) hold no assessment."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkComplianceMatrix"
 			}
 		},
 		{
@@ -1811,8 +2499,8 @@
 			"reachedOn": "ModuleDetail /modules/:id Application data widget; Modules /modules column dpiaStatus and 'Without DPIA' quick filter",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "standards-compliance",
-			"featureConfidence": "low",
+			"feature": "security-and-privacy-assessment",
+			"featureConfidence": "medium",
 			"note": "DPIA status, date, next review and document link are fields on the application and shown and filterable on the Applications pages. The scheduled 'dpia-review-overdue' notification is only a register declaration.",
 			"evidence": {
 				"stackiq": "lib/Settings/softwarecatalogus_register.json module.dpiaStatus (enum not required/required/executed), dpiaDate, dpiaNextAssessment, dpiaDocumentRef; src/manifest.json ModuleDetail md-data includes the DPIA fields; Modules /modules quick filter 'Without DPIA (BBN2+)'",
@@ -1821,6 +2509,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for DPIA, GDPR and AVG, no hits (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea for DPIA and data protection impact assessment, no hits; only data classification of data objects for GDPR is documented (https://help.sap.com/docs/leanix/ea/data-object-modeling-guidelines 'classified into personally identifiable data (e.g., to cater to GDPR use cases)') (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'dpia\\|impact assessment\\|gdpr' over src/ returns nothing, locales/glpi.pot:12792 'gdpr-tools' is only an icon name. The GDPR records plugin yild/gdprropa read at tag 1.0.3 has 'PIA required' and 'PIA status' (inc/record.class.php:459, :468) but declares GLPI 10 only, setup.php:56 max 10.99.99, so it does not run on 11.0.9."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkApplicatie"
+				]
 			}
 		},
 		{
@@ -1842,6 +2537,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "standards-compliance",
 			"note": "There is no list or check for the Forum Standaardisatie comply-or-explain list; only GEMMA standards imported with the model. Decided no on 2026-09-29 by the build-all lane, reversible: no competitor rates yes, no demand, outside the core areas (compliance).",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/inkoopondersteuning%20standaarden: \"De verplichte standaarden zijn: ... de open standaarden die onder het pas-toe-of-leg-uit regime van de overheid binnen het werkingsgebied vallen\" (read 2026-09-26); https://www.softwarecatalogus.nl/pakket/archi: package version shows \"Verplichte standaarden ... Ondersteuning Compliancy Testrapport\" (read 2026-09-26). Comply-or-explain standards are mixed into the mandatory set, not shown as their own list. Reached on: Package page > Standaarden; Inkoopondersteuning.",
@@ -1872,6 +2568,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "data-quality",
 			"note": "No rule-based score of register correctness or completeness exists on any page. Specified in openspec/changes/landscape-completeness-score (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "grep for completeness/health score/quality score in lib and src: no hits; lib/Command/ReferencesAuditCommand.php:34 (occ stackiq:references:audit) only audits cross-app uuid references, it is not a scored rule set",
@@ -1880,6 +2577,13 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967713-governance-insights: 'Governance reports will help maintain oversight of object usage, completeness, and relationships', incl. 'Object completeness ... completeness score of each object' and 'Objects not on any view' (read 2026-09-26). Reached on: Insights > Governance reports.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-portfolio-management-dashboard: 'Data Quality KPI ... Overall Completion of Applications ... Broken quality seal ... Missing Business Capability'; completion score weights set by admins (https://help.sap.com/docs/leanix/ea/fact-sheet-completeness) (read 2026-09-26). Reached on: Dashboards > Application Portfolio Management Dashboard > Data Quality KPIs.",
 				"glpi": "source read at 11.0.9: grep -ril 'completeness' over src/ templates/ locales/glpi.pot returns nothing and no rule set scores register quality; the rules engine (src/Glpi/Rules/, src/RuleCollection.php) assigns and imports data, it does not score it. The rules engine base is src/RuleCollection.php:48."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkComplianceMatrix",
+					"SkDatakwaliteit"
+				]
 			}
 		},
 		{
@@ -1901,6 +2605,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "standards-compliance",
 			"note": "Nothing sends questionnaires to suppliers or stores their answers. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (compliance).",
 			"evidence": {
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967524-create-a-survey: surveys 'allowing external stakeholders to contribute directly to the Enterprise Architecture repository', sent 'to multiple recipients simultaneously via email' from an object's questionnaire, answers kept on the object (read 2026-09-26). Reached on: Object > Questionnaire tab > Create survey.",
@@ -1932,7 +2637,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "offering-and-usage-listings",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A supplier in aanbod-beheerder creates modules and services on the index pages and publishes them by setting publicationDate in the form. The dedicated publish endpoint (PUT /api/publication/...) is not called by any page (src/utils/openDataProjection.js has no importer).",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier: \"Deze handleiding is bedoeld voor de leveranciers en legt uit hoe de leveranciers hun productportfolio kunnen aanvullen en beheren ... voeg pakket toe\" (read 2026-09-26). Reached on: Supplier login > Productportfolio.",
@@ -1941,6 +2646,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; BlueDolphin is a per customer EA repository, supplier publication of offerings is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; LeanIX is a customer's internal EA workspace, no supplier facing publication of offerings is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: suppliers are records kept by the buying organisation, install/mysql/glpi-empty.sql:7067 glpi_suppliers, with no supplier login or offering page; profiles (src/Profile.php) cover internal users and the self-service helpdesk only."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -1964,7 +2673,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "Live facet counts on reference component and standard narrow the module and service lists. Scope is whatever the RBAC read rules let the viewer see (published entries are public). Corrections round 8 (2026-09-28): the domain facet on the same sidebar is always empty, stackiq#1141; rating kept because this row filters on reference component and standard, which FacetService fills from other fields.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/13683: \"Ik ben op zoek naar een nieuw pakket voor referentiecomponent voor BAG-administratie\" and standards filters combine (read 2026-09-26); https://www.softwarecatalogus.nl/pakketten: facets Referentiecomponent and Standaard (read 2026-09-26). Reached on: Alle pakketten > filters.",
@@ -1973,6 +2682,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no market wide software search is documented (read 2026-09-26)",
 				"sap-leanix": "unknown: https://help.sap.com/docs/leanix/ea/applications-in-reference-catalog: the catalog 'covers SAP applications, SAP AI agents, and SaaS applications' and is used to link your own fact sheets; market search by reference component and standard is not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: search covers only the organisation's own records (src/Glpi/Search/SearchEngine.php); there is no market wide catalogue and no reference component or standard to filter on (grep -ril 'gemma\\|reference component' src/ returns nothing). The marketplace (src/Glpi/Marketplace/) lists GLPI plugins, not software for a task. The search engine is src/Glpi/Search/SearchEngine.php:101; the marketplace is src/Glpi/Marketplace/Controller.php:64."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -1995,6 +2708,7 @@
 			"reachedOn": "Organisations /organisaties (main menu)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "supplier-directory",
 			"note": "The Organisations index lists organisations with search, a type facet and a status filter. There is no filter for 'offers at least one product'; type Supplier is the proxy.",
 			"evidence": {
 				"stackiq": "src/manifest.json:386 Organisaties type:index over schema organization with status filter and OrganisatieCard; register :2022 organization.type is facetable (Municipality/Supplier/Collaboration/Community); public read of Active suppliers in organization authorization (:2467)",
@@ -2003,6 +2717,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no directory of suppliers across the market is documented (read 2026-09-26)",
 				"sap-leanix": "unknown: https://help.sap.com/docs/leanix/ea/provider-modeling-guidelines: 'SAP LeanIX has a catalog of 9000 providers' added automatically with IT components; browsing that catalog as a directory with filters is not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: src/Supplier.php:46 Supplier list under Management (src/Html.php:1298) with search, filters and a supplier type (install/mysql/glpi-empty.sql:7072 suppliertypes_id), but it holds only the suppliers this organisation entered, not all organisations offering to government. Reached on: Management > Suppliers (front/supplier.php). Driven on the lab at 11.0.9 (2026-09-26): created supplier \"Lab Leverancier BV\" through /front/supplier.form.php; it appears in the Suppliers list."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisaties"
 			}
 		},
 		{
@@ -2024,6 +2742,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "shared-usage-on-gemma-views",
 			"note": "Nothing lets an organisation find or contact other organisations using the same product. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (market).",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/13683: \"Alle gemeenten ... inclusief contactgegevens van gemeenten ... U kunt contact onderhouden met deze gemeenten\" (read 2026-09-26). Reached on: Inlogmenu > Alle gemeenten.",
@@ -2055,7 +2774,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "maintenance-and-supplier-roadmap",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A supplier can register a future version with status 'in development' and planned dates, which reads as a crude release plan. There is no roadmap view or declared roadmap; the overlay marks maintenance-and-supplier-roadmap as 'soon'. Specified in openspec/changes/lifecycle-maintenance-and-supplier-roadmap (OpenSpec pass 2026-09-27). Built by openspec/changes/archive/2026-09-29-lifecycle-maintenance-and-supplier-roadmap.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/13683: \"Alle pakketversies en planningen ... gelijk zichtbaar de planning van de diverse pakketversies\" (read 2026-09-26); https://www.softwarecatalogus.nl/pakketversies: facet \"Status planning ... Filter op in ontwikkeling en zie de distributie planningsdata\" (read 2026-09-26). Reached on: Wat is er te vinden > Alle pakketversies en planningen.",
@@ -2064,6 +2783,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; roadmap templates are for the customer's own plans (https://help.bluedolphin.io/en/articles/11967586-roadmap), suppliers' declared roadmaps are not documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/it-components-in-reference-catalog: 'The catalog provides standardized IT component data including lifecycle dates, vendor information ... You no longer need to track vendor lifecycle dates manually'. Vendor lifecycle and support dates, not planned releases; needs Technology Risk and Compliance (read 2026-09-26). Reached on: IT Component fact sheet linked to the reference catalog.",
 				"glpi": "source read at 11.0.9: suppliers (install/mysql/glpi-empty.sql:7067 glpi_suppliers) carry address and contact fields only, and software versions (install/mysql/glpi-empty.sql:6900) carry no planned release date; grep -rli 'roadmap' src/*.php returns nothing."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkModuleversie"
+				]
 			}
 		},
 		{
@@ -2096,6 +2822,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; user reviews with ratings of applications are not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no user review of an application with a rating is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no product review model; satisfaction surveys rate ticket handling only (src/CommonITILSatisfaction.php) and knowledge base comments (src/KnowbaseItem_Comment.php) carry no rating. Ticket satisfaction is src/CommonITILSatisfaction.php:43 and knowledge base comments src/KnowbaseItem_Comment.php:43."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -2128,6 +2858,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no review ratings exist in the docs to aggregate (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no review ratings exist in the docs to aggregate (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: with no product reviews there is no average rating; the only averages are ticket satisfaction statistics (src/CommonITILSatisfaction.php). Ticket satisfaction is src/CommonITILSatisfaction.php:43."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -2150,6 +2884,7 @@
 			"reachedOn": "Applications /modules create/edit form; not shown on ModuleDetail /modules/:id",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "supplier-directory",
 			"note": "Each product can point at its own contact person of the supplier through the form. The application page's data widget names the old Dutch keys, so the product's contact person (and its descriptions) do not show there; the same stale keys are on SuiteDetail (src/manifest.json:683). Specified in openspec/changes/landscape-application-page (OpenSpec pass 2026-09-27). The application page now shows the contact person under the current key contactPerson (built by openspec/changes/archive/2026-09-29-landscape-application-page).",
 			"evidence": {
 				"stackiq": "register :6856 module.contactPerson -> contactPerson with x-relation-filter organization = @object.provider; catalogService and suite also carry contactPerson; src/manifest.json:500 ModuleDetail md-data include lists 'contactpersoon', 'beschrijvingKort', 'beschrijvingLang', which are not module properties (renamed to contactPerson/shortDescription/longDescription)",
@@ -2158,6 +2893,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; supplier contact persons per product are not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; subscriptions name internal users per fact sheet, but supplier contact persons per product are not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: contacts link to a supplier as a whole, src/Contact_Supplier.php:39 (install/mysql/glpi-empty.sql:1429 glpi_contacts_suppliers), not to a product; per application there is only the free text contact field on an appliance (src/Appliance.php:214) and the user or technician in charge. Reached on: Management > Suppliers > Contacts tab; Appliance contact field."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -2180,6 +2919,7 @@
 			"reachedOn": "Organisations /organisaties and OrganisatieDetail /organisaties/:id (services and applications lists)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "supplier-directory",
 			"note": "One organisation record is the supplier; products reference it and the detail page lists them. A contract reaches the supplier only through its service, not by its own field.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/provider-modeling-guidelines: 'Providers are companies or entities that supply IT solutions, services, or technologies'; one provider fact sheet linked from IT components and contracts (https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model) (read 2026-09-26). Reached on: Inventory > Provider fact sheet.",
@@ -2188,6 +2928,13 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: C19: \"De verbinding met de leveranciersgegevens garandeert juiste schrijfwijzes van leveranciers- en pakketnamen en juiste versienummering\" (read 2026-09-26); https://www.softwarecatalogus.nl/leveranciers: one record per supplier with contact and addenda (read 2026-09-26). There are no contracts to point to it. Reached on: Alle leveranciers > supplier page.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967745-update-an-object-definition shows 'Supplier' as an object property value on an application definition; a supplier could be a separate ArchiMate actor object, but a vendor record that products and contracts point to is not documented (read 2026-09-26). Reached on: Object property Supplier.",
 				"glpi": "source read at 11.0.9: one Supplier record (src/Supplier.php:46, install/mysql/glpi-empty.sql:7067) is referenced by contracts through install/mysql/glpi-empty.sql:1550 glpi_contracts_suppliers and by the financial record of any item through install/mysql/glpi-empty.sql:3263 glpi_infocoms.suppliers_id. Reached on: Management > Suppliers."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkOrganisaties",
+					"SkOrganisatie"
+				]
 			}
 		},
 		{
@@ -2220,6 +2967,10 @@
 				"stackiq": "src/manifest.json LifecycleRoadmap /portfolio-roadmap custom page -> src/views/LifecycleRoadmapView.vue:55 groups the selected organisation's usages by phase, derived from usage dates by src/utils/lifecyclePhase.js derivePhase (:408); usage.status enum Acquisition/Planned/In production/To be phased out/Phased out in lib/Settings/softwarecatalogus_register.json",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967531-object-lifecycle-state: 'Objects can be either Current (default) or Future state'; https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'TIME powered application lifecycle management ... Capture lifecycle'. Only current and future are documented as states, not planned, in use and phasing out (read 2026-09-26). Reached on: Objects > Object lifecycle state.",
 				"glpi": "source read at 11.0.9: appliances carry a status, install/mysql/glpi-empty.sql:8950 glpi_appliances.states_id and src/Appliance.php:350 search option Status, whose values are an admin defined tree dropdown src/State.php:45 (install/mysql/glpi-empty.sql:7027 glpi_states), so phases such as planned, in use and being phased out are set up and filtered on. Reached on: Management > Appliances, Status field; Setup > Dropdowns > Statuses of items."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkRoadmap"
 			}
 		},
 		{
@@ -2252,6 +3003,10 @@
 				"topdesk": "unknown: no replacement roadmap is described; searched the full-text search index of docs.topdesk.com (https://docs.topdesk.com/en/js/fuzzydata.js, 987 pages) (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967586-roadmap: a roadmap template where 'The first axis shows the years and the second axis shows per business unit what should be done during those years', drawn as a view; https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'Portfolio decisions flow directly into roadmaps' (read 2026-09-26). Reached on: Views > Roadmap template.",
 				"glpi": "source read at 11.0.9: replacements can be planned as projects linked to the appliance, src/Appliance.php:108 Item_Project tab (src/Item_Project.php:45) and src/Project.php:50 Project with Kanban; the Gantt view is the separate gantt plugin (src/Project.php:599 checks isActivated('gantt')). No per organisation application roadmap view exists. Reached on: Tools > Projects, Appliance > Projects tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkRoadmap"
 			}
 		},
 		{
@@ -2274,6 +3029,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "portfolio-rationalisation",
 			"note": "Nothing finds applications in your landscape that fulfil the same reference component; the Reports card promises 'overlapping' software but the report does not compute it. Specified in openspec/changes/architecture-reference-component-coverage (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-rationalization: 'Application rationalization reduces costs, eliminates redundancies', using applications mapped to business capabilities; overlap is found per customer capability, not per reference component (read 2026-09-26). Reached on: Reports > Landscape Report by Business Capability.",
@@ -2282,6 +3038,13 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Releasebrief%20GEMMA%20Softwarecatalogus%20versie%204.1: dashboard tile \"Referentiecomponenten met meerdere pakketten: Deze tegel signaleert dat er meer dan 1 pakket(versie) bij eenzelfde referentiecomponent in productie is\" (read 2026-09-26). Reached on: Dashboard tile Referentiecomponenten met meerdere pakketten.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967472-welcome-to-bluedolphin: 'overlapping application functions are quickly made visible'; https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'automatically detect redundancies' and 'Connect applications to capabilities for capability-based rationalization' (read 2026-09-26). Reached on: Application functions and capability maps.",
 				"glpi": "source read at 11.0.9: no reference component model to detect overlap on, grep -rli 'reference component\\|gemma' over src/ locales/glpi.pot returns nothing; appliances only carry a free type dropdown (install/mysql/glpi-empty.sql:8941 appliancetypes_id)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGemmaPlaat",
+					"SkRapportages"
+				]
 			}
 		},
 		{
@@ -2304,6 +3067,7 @@
 			"reachedOn": "PortfolioReport /portfolio-report, from Reports /reports card 'Portfolio rationalization' (footer menu Reports)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "portfolio-rationalisation",
 			"note": "The report covers ageing software (EOL exposure) with TIME quadrants, cost and a CSV export, but not overlap, even though its card says 'overlapping and ageing'. Specified in openspec/changes/architecture-reference-component-coverage (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-rationalization-evaluate-data: 'Leverage automated TIME classification, application portfolio and landscape reports ... to streamline application rationalization' (read 2026-09-26). Reached on: Use case Application Rationalization > reports.",
@@ -2312,6 +3076,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Releasebrief%20GEMMA%20Softwarecatalogus%20versie%204.1: \"Referentiecomponenten met meerdere pakketten ... per referentiecomponent aan welke pakketversies daaraan gekoppeld zijn\" (read 2026-09-26). Overlap only, ageing not covered. Reached on: Dashboard tile.",
 				"bluedolphin": "https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'TIME analysis across your entire application portfolio', 'automatically detect redundancies, surface lifecycle risks' and 'Out of the box reports and insights'. No named rationalisation report is described in the help center (read 2026-09-26). Reached on: Insights and APM views.",
 				"glpi": "source read at 11.0.9: the built in report list src/Report.php:77 to src/Report.php:111 holds default, by contract, by year, financial, network, loan and status reports; none covers overlapping or ageing software."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkRapportages"
 			}
 		},
 		{
@@ -2335,7 +3103,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "lifecycle-and-end-of-support",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "The version an organisation runs is a field on its usage and drives the EOL badges, but no stackiq page lets the organisation set or change it. Specified in openspec/changes/landscape-usage-registration (OpenSpec pass 2026-09-27). Built by openspec/changes/archive/2026-09-29-landscape-usage-registration.",
 			"evidence": {
 				"stackiq": "usage.moduleVersion (x-relation-filter module) set on the usage form from Add to our landscape and on GebruikDetail (src/manifest.d/usages.json); shown in the Applications in use list; tests/vitest/usages.spec.js",
@@ -2344,6 +3112,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; recording the version an organisation runs is not documented beyond configurable fields (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-modeling-guidelines: version can be captured 'in the Release field of the application fact sheets', which the guide says rarely adds value; IT components carry release per catalog item (https://help.sap.com/docs/leanix/ea/it-components-in-reference-catalog) (read 2026-09-26). Reached on: Application or IT Component fact sheet > Release.",
 				"glpi": "source read at 11.0.9: src/Item_SoftwareVersion.php:39 records which software version is installed on which item (install/mysql/glpi-empty.sql:1064 glpi_items_softwareversions with date_install at :1074), filled by hand or by native inventory, and listed on the Software Installations tab (src/Software.php:129). Reached on: Assets > Software > Installations tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkInGebruik",
+					"SkGebruikDetail"
+				]
 			}
 		},
 		{
@@ -2367,7 +3142,7 @@
 			"provider": "openregister",
 			"providerHow": "read-from-code",
 			"feature": "notifications",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The only rule is a register declaration, and it addresses the version's own managers and catalogue admins, not the organisations that use the application, so even if OpenRegister dispatches it a user of the application is not told. Specified in ConductionNL/openregister openspec/changes/notifications-new-notes-and-referrers (openregister lane, OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "lib/Settings/softwarecatalogus_register.json moduleVersion x-openregister-notifications module-version-published (trigger created, recipients object-acl manage + group software-catalog-admins); no notification code in lib (no INotificationManager use)",
@@ -2376,6 +3151,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; notifications about supplier releases are not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: https://updates.leanix.net/announcements/work-with-complete-technology-version-coverage-without-raising-manual-requests (2026-09-17) says the catalog is 'kept current as new versions are released', with version concurrency management planned for Q4; a notification to users about a new version is not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: GLPI has no feed of supplier releases; software versions appear only when entered or inventoried (src/SoftwareVersion.php:42), and notification events for software are licence expiry only (src/NotificationTargetSoftwareLicense.php)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDashboard",
+					"SkModuleversie"
+				]
 			}
 		},
 		{
@@ -2398,6 +3180,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "lifecycle-and-end-of-support",
 			"note": "You could register a database as its own 'System software' module and feed its EOL, but nothing ties it to the applications that depend on it; SBOM components carry no lifecycle. Specified in openspec/changes/operations-technology-components (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/obsolescence-risk-management: 'SAP LeanIX helps you gain an overview of your application landscape's obsolescence risk exposure' over the technology layer; lifecycle dates of IT components from the catalog in Technology Risk and Compliance (read 2026-09-26). Reached on: Use case Obsolescence Risk Management; IT Component lifecycle.",
@@ -2406,6 +3189,13 @@
 				"vng-softwarecatalogus": "unknown: technologies per version are recorded (\"Pakketversie is beschikbaar voor één of meerdere technologien; databases, OS, SAAS\") but no lifecycle for them is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Beschrijving%20exportbestanden (read 2026-09-26)",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; technology objects carry only current or future state (https://help.bluedolphin.io/en/articles/11967531-object-lifecycle-state), end of support tracking of technology is not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: underlying technology is held as items (database instances src/DatabaseInstance.php, operating systems, software) and each can carry a financial record with warranty and decommission date, install/mysql/glpi-empty.sql:3282 glpi_infocoms.decommission_date; there is no end of support date or lifecycle feed (grep -i 'end_of_support' install/mysql/glpi-empty.sql returns nothing). Reached on: any item > Management tab (Infocom)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGebruikDetail",
+					"SkModuleversie"
+				]
 			}
 		},
 		{
@@ -2427,6 +3217,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "portfolio-roadmap",
 			"note": "Strategic goals are not modelled. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (lifecycle).",
 			"evidence": {
 				"bluedolphin": "https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'Applications natively connected to BPMN, ERD, strategy, and initiatives' and 'Align applications with strategic initiatives and roadmaps'; https://bluedolphin.io/capability-based-planning/: 'Connect capabilities directly to business objectives' (read 2026-09-26). Reached on: Objects and relationships to strategy elements.",
@@ -2467,6 +3258,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; planned maintenance of applications is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; planned maintenance is documented only for LeanIX's own service status (https://help.sap.com/docs/leanix/ea/status-pages-and-status-emails), not for applications in the inventory (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no maintenance window on an item ('Maintenance mode' in locales/glpi.pot:7534 is GLPI's own downtime switch); planned work is a change linked to the appliance, src/Appliance.php:107 Change_Item tab, with planned tasks carrying begin and end (install/mysql/glpi-empty.sql:792 glpi_changetasks, :799 begin, :800 end) shown in the planning. Reached on: Appliance > Changes tab; Assistance > Planning."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDashboard",
+					"SkApplicatie"
+				]
 			}
 		},
 		{
@@ -2499,6 +3297,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; 'Contract' exists as an ArchiMate object definition (https://help.bluedolphin.io/en/articles/11967596-archimate-annotation-translation-en-nl) and contract dates appear in an import example (https://help.bluedolphin.io/en/articles/11967633-datacollector-select-tricks), but a contract status that moves by itself is not documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model: 'The contract fact sheet uses lifecycle phases to represent the current state of a contract': Plan, Phase In, Contract Start Date (active), Contract Notice Period, Contract End Date (expired). Requires the contract extension (read 2026-09-26). Reached on: Contract fact sheet > Lifecycle.",
 				"glpi": "source read at 11.0.9: contract status is a manual dropdown (install/mysql/glpi-empty.sql:1512 glpi_contracts.states_id); expiry is computed, src/Contract.php:654 virtual 'Expiration' column from begin date, duration and renewal, and src/Contract.php:1092 cronContract sends end and notice alerts, but the status itself never moves by itself. Reached on: Management > Contracts list, Expiration column."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkContracten",
+					"SkContract"
+				]
 			}
 		},
 		{
@@ -2532,6 +3337,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; contract renewal decisions are not documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model: 'Contract Renewal Status ... Backlog, In Review, In Progress, or Done', 'Contract Renewal Decision ... Renew, Terminate, or No Decision', 'Contract Renewal Comments' (read 2026-09-26). Reached on: Contract fact sheet > Contract Renewal.",
 				"glpi": "source read at 11.0.9: src/Contract.php:60 to :62 renewal kinds never, tacit and express, with the renewal computation in the alert cron (src/Contract.php:1293); there is no renewal decision record or outcome, only the contract's renewal setting and an optional approval through a change. Reached on: Management > Contracts, Renewal field."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkContract"
 			}
 		},
 		{
@@ -2555,7 +3364,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "contract-administration",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The application page lists the contracts behind the application, found through its usages and the services that offer it. Built by openspec/changes/archive/2026-09-29-landscape-application-page.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Appliance.php:99 and src/Software.php:131 add the Contract_Item tab (src/Contract_Item.php:43, install/mysql/glpi-empty.sql:1536 glpi_contracts_items) listing every contract of the application. Reached on: Management > Appliances > Contracts tab. Driven on the lab at 11.0.9 (2026-09-26): after linking the contract, the appliance Contracts tab showed \"Lab contract, 2025-01-01, 12 months -> 2025-12-31\".",
@@ -2564,6 +3373,13 @@
 				"vng-softwarecatalogus": "unknown: contracts, licences and costs are not described anywhere in the public docs (the 2021 user survey asks which other tool municipalities use for contract management); searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/gebruikersonderzoek%202021 (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967596-archimate-annotation-translation-en-nl lists the object definition 'Contract', which can be related to an application and then shows in its Relationships tab (https://help.bluedolphin.io/en/articles/11967550-working-with-object-relationships); https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'Capture lifecycle, technical debt, business value, risk, cost, contracts' (read 2026-09-26). Reached on: Application object > Relationships tab (Contract objects).",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model: relation 'Attached to Contract - Application Many-to-Many Links the contract to the applications it licenses or supports' (read 2026-09-26). Reached on: Application fact sheet > Contracts relation."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkContract"
+				]
 			}
 		},
 		{
@@ -2596,6 +3412,13 @@
 				"topdesk": "https://docs.topdesk.com/en/creating-a-contract.html: \"Costs (Services) ... Total internal cost, based on the service levels linked\" (read 2026-09-26); https://docs.topdesk.com/en/obtain-insights-with-asset-type-report.html: \"do you need an overview of the total costs of new assets? Use the Asset Type Report\" (read 2026-09-26). Reached on: Contract card > Financial; Asset Type Report.",
 				"vng-softwarecatalogus": "unknown: contracts, licences and costs are not described anywhere in the public docs (the 2021 user survey asks which other tool municipalities use for contract management); searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/gebruikersonderzoek%202021 (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967733-quick-start-guide shows a questionnaire field 'Estimate of annual application costs' of type currency; https://bluedolphin.io/application-portfolio-management-application-rationalization/: 'portfolio analysis from cost, risk, lifecycle' (read 2026-09-26). Reached on: Application questionnaire > annual cost field."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkRapportages",
+					"SkLicenties"
+				]
 			}
 		},
 		{
@@ -2619,7 +3442,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "license-and-seat-tracking",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "An application records open versus closed source and which open-source licence. There is no licence metric such as per user, per organisation or per seat. Specified in openspec/changes/contracts-licence-seats (OpenSpec pass 2026-09-27). A licence contract now records its licence metric, per user, per device, per inhabitant or per organisation (built by openspec/changes/archive/2026-09-29-contracts-licence-seats).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: each licence has a type, install/mysql/glpi-empty.sql:6775 glpi_softwarelicenses.softwarelicensetypes_id, an admin editable dropdown seeded with types such as OEM (install/empty_data.php:9294). Reached on: Management > Licenses (front/softwarelicense.php), Type field.",
@@ -2628,6 +3451,13 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/nieuws: \"is er de leverancier Open Source Pakketten aangemaakt. Onder deze leverancier staat nu een aantal veelgebruikte open source pakketten geregistreerd\" (read 2026-09-26); https://www.softwarecatalogus.nl/pakket/archi: Archi listed under supplier \"Open Source pakketten\", version \"Open source\" (read 2026-09-26). Other licence models are not recorded. Reached on: Alle pakketten > Leverancier Open Source pakketten.",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; licence data appears only as example source columns ('Monthly License Costs', https://help.bluedolphin.io/en/articles/11967633-datacollector-select-tricks), a licence model field is not documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model: 'Contract Pricing Type Single select Consumption Based, Yearly Commitment, or Perpetual Licenses'. No open source or per user licence model field on the application is documented (read 2026-09-26). Reached on: Contract fact sheet > Contract Pricing Type."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkContract",
+					"SkLicenties"
+				]
 			}
 		},
 		{
@@ -2650,6 +3480,7 @@
 			"reachedOn": "License posture /license-posture (main menu)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "license-and-seat-tracking",
 			"note": "The page shows the open-source share of the running portfolio with per-vendor and per-organisation breakdowns, computed at read time.",
 			"evidence": {
 				"stackiq": "src/views/LicensePostureView.vue:11 open-source vs closed-source share weighted by in-production usage, :64 per-vendor rollup, per-organisation open-source-first report; derived in src/utils/licensePosture.js",
@@ -2658,6 +3489,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; a portfolio licence posture view is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; licence analysis exists only for SBOM components of self-built software (https://help.sap.com/docs/leanix/ea/sbom-explorer 'assess license risks by filtering for unpermitted licenses'), not a portfolio share of open source applications (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: licences can be listed and filtered by type in search (install/mysql/glpi-empty.sql:6775 softwarelicensetypes_id), but the dashboard's per type charts cover asset types and Software only (src/Glpi/Dashboard/Grid.php:1452), not licences, and no portfolio share view exists. Reached on: Management > Licenses, filtered by type."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkLicenties"
 			}
 		},
 		{
@@ -2690,6 +3525,13 @@
 				"vng-softwarecatalogus": "unknown: contracts, licences and costs are not described anywhere in the public docs (the 2021 user survey asks which other tool municipalities use for contract management); searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/gebruikersonderzoek%202021 (read 2026-09-26)",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; licences bought against used are not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea for seats and licence counts, no hits; the contract fact sheet has cost fields but no licence quantity (https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model) (read 2026-09-26)"
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkContract",
+					"SkLicenties"
+				]
 			}
 		},
 		{
@@ -2711,6 +3553,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "license-and-seat-tracking",
 			"note": "Without seat or consumption data there is nothing to compute an effective licence position from. Decided no on 2026-09-29 by the build-all lane, reversible: no competitor rates yes, no demand, outside the core areas (contracts).",
 			"evidence": {
 				"stackiq": "No entitlement or consumption fields exist (see ctr-seat-count); no service computes a licence position in lib/Service/",
@@ -2740,6 +3583,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "contract-administration",
 			"note": "Contracts carry a cost and a period, but there is no budget to charge them against. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (contracts).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Budget.php:46 Budget with a period and value (install/mysql/glpi-empty.sql:306 begin_date, :307 end_date, :308 value); contract costs (install/mysql/glpi-empty.sql:1466 budgets_id) and financial records (src/Infocom.php:599 budgets_id check) are charged to it. Reached on: Management > Budgets. Driven on the lab at 11.0.9 (2026-09-26): /front/budget.php lists budgets with type, start date, end date and value.",
@@ -2769,6 +3613,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "contract-administration",
 			"note": "No purchase value, useful life or depreciation is recorded or computed. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (contracts).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: the financial record of any item, licences included (src/SoftwareLicense.php:245 Infocom tab), carries depreciation type, duration and coefficient (install/mysql/glpi-empty.sql:3269 sink_time, :3270 sink_type, :3271 sink_coeff); src/Infocom.php:872 Linear and degressive types and src/Infocom.php:1085 linearAmortise compute the table. Reached on: Management > Licenses > Management tab.",
@@ -2801,7 +3646,7 @@
 			"provider": "openregister",
 			"providerHow": "read-from-code",
 			"feature": "contract-administration",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The contract page has a Documents files panel for the signed contract, plus a document reference field.",
 			"evidence": {
 				"stackiq": "src/manifest.json:567 ContractDetail ct-files integration 'files' (Documents panel); catalogContract.documentReference text field (register :3252)",
@@ -2810,6 +3655,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967535-object-attachments: files can be uploaded to any object, which covers a Contract object (https://help.bluedolphin.io/en/articles/11967596-archimate-annotation-translation-en-nl); no contract record with a document slot is documented (read 2026-09-26). Reached on: Contract object > attachments.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/collaborating-and-managing-data-in-fact-sheets: 'Files : You can upload files up to 10 MB. Uploaded files are then visible in the Resources tab', which applies to the contract fact sheet of the contract extension (https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model) (read 2026-09-26). Reached on: Contract fact sheet > Resources tab.",
 				"glpi": "source read at 11.0.9: src/Contract.php:126 adds the Documents tab (Document_Item) to every contract, storing the signed file in install/mysql/glpi-empty.sql:2585 glpi_documents. Reached on: Management > Contracts > Documents tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkContract"
 			}
 		},
 		{
@@ -2832,6 +3681,7 @@
 			"reachedOn": "Reports /reports -> Portfolio rationalization /portfolio-report",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "contract-administration",
 			"note": "The portfolio report shows each application in use with its cloud model and annualised cost, which lets you pick out SaaS spend. There is no SaaS subscription list and nothing discovers purchases made outside IT.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/saas-discovery: discovery helps 'Eliminate shadow IT and business-managed IT' but 'The SaaS discovery feature in SAP LeanIX does not provide insight into cost, adoptions, contracts, and other SaaS specifics'. Spend only through manually kept contract costs (read 2026-09-26). Reached on: SaaS Discovery inbox; Contract fact sheet costs.",
@@ -2840,6 +3690,13 @@
 				"vng-softwarecatalogus": "unknown: contracts, licences and costs are not described anywhere in the public docs (the 2021 user survey asks which other tool municipalities use for contract management); searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/gebruikersonderzoek%202021 (read 2026-09-26)",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for SaaS and spend, no SaaS subscription tracking is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -i 'saas' over src/ returns nothing; spend is only what is entered on contracts and financial records (install/mysql/glpi-empty.sql:1458 glpi_contractcosts), with no discovery of subscriptions bought outside IT."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkRapportages",
+					"SkLicenties"
+				]
 			}
 		},
 		{
@@ -2862,6 +3719,7 @@
 			"reachedOn": "Vulnerabilities /kwetsbaarheden (menu), Report vulnerability",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "A vulnerability is registered with CVE code and CVSS score, and a severity band is derived from the score.",
 			"evidence": {
 				"vng-softwarecatalogus": "unknown: no vulnerability register is described; the docs do not state its absence either (the IBD-foto export only hands CPE identifiers to the IBD); searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Hoe%20maak%20je%20een%20ICT-foto%20voor%20de%20IBD%3F (read 2026-09-26)",
@@ -2870,6 +3728,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for vulnerability and CVE, no hits (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no vulnerability record with CVE code and score exists, vulnerabilities are handled by searching SBOM components (https://help.sap.com/docs/leanix/ea/searching-for-sbom-library-components-by-package-url 'after a CVE alert') (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'cve\\|vulnerab\\|cvss' over src/ templates/ hits only src/Glpi/System/Requirement/PhpSupportedVersion.php:74 (a PHP version warning) and a session comment at src/Session.php:1085; no vulnerability itemtype exists."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKwetsbaarheden"
 			}
 		},
 		{
@@ -2892,6 +3754,7 @@
 			"reachedOn": "Vulnerabilities /kwetsbaarheden form (Affected applications); ModuleversieDetail Components tab shows matches",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "A vulnerability links to applications, not to specific versions. Per-version affectedness only shows as a computed match against a version's imported SBOM.",
 			"evidence": {
 				"stackiq": "register.json:1701 vulnerability.modules links to module (applications), not moduleVersion; version level only via read-time SBOM match (src/utils/sbomVulnerabilityMatch.js, sbomComponent.vexCveIds register.json:8024) on the ModuleversieDetail Components tab",
@@ -2900,6 +3763,13 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for vulnerability and CVE, no hits (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; a PURL search finds services using a given library version, but linking a vulnerability record to affected versions is not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no vulnerability model (see src/Glpi/System/Requirement/PhpSupportedVersion.php:74 as the only 'vulnerabilities' hit), so nothing links to software versions (install/mysql/glpi-empty.sql:6900)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkModuleversie",
+					"SkKwetsbaarheden"
+				]
 			}
 		},
 		{
@@ -2922,6 +3792,7 @@
 			"reachedOn": "ModuleversieDetail /moduleversies/:id, sidebar tab Components, upload",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "An SBOM in CycloneDX JSON or SPDX 2.x JSON can be uploaded for a version. XML and tag-value formats are not accepted.",
 			"evidence": {
 				"stackiq": "src/components/sbom/SbomComponentsPanel.vue:53-90 upload control (.json) -> POST /api/moduleversies/{uuid}/sbom (appinfo/routes.php:92) -> lib/Controller/SbomController.php:129 importSbom -> lib/Service/SbomParserService.php:77 parse (CycloneDX JSON) and :127 parseSpdx (SPDX 2.x JSON)",
@@ -2930,6 +3801,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for SBOM, CycloneDX and SPDX, no hits (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/uploading-sboms-from-fact-sheets: 'select a CycloneDX or SPDX file in JSON or XML format' on a microservice fact sheet; also through the Self-Built Software Discovery API. Technology Risk and Compliance product (read 2026-09-26). Reached on: Microservice fact sheet > SBOM > Upload SBOM.",
 				"glpi": "source read at 11.0.9: grep -ril 'sbom\\|cyclonedx\\|spdx' over src/ templates/ locales/glpi.pot returns nothing; inventory import (src/Glpi/Inventory/) takes glpi-agent JSON only. Inventory import is src/Glpi/Inventory/Inventory.php:106."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModuleversie"
 			}
 		},
 		{
@@ -2951,6 +3826,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "Matching is deliberately local, against vulnerabilities typed into the catalogue. No public CVE feed is read.",
 			"evidence": {
 				"stackiq": "src/utils/sbomVulnerabilityMatch.js header: 'no HTTP request to an external advisory feed is ever made'; lib/Service/EolSyncService.php syncs endoflife.date support dates, not CVEs",
@@ -2980,6 +3856,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "Only individual vulnerabilities get a severity band. No application gets a combined score from its vulnerabilities and support status. Decided no on 2026-09-29 by the build-all lane, reversible: no competitor rates yes, no demand, outside the core areas (security).",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/technology-obsolescence-risk-statuses-and-views-in-reports: 'Learn how risk statuses are determined for IT components and applications', e.g. 'Unaddressed Risk ... when the internal end-of-life date or vendor-provided end-of-support date is in the past'. Based on support status, not vulnerabilities (read 2026-09-26). Reached on: Technology Risk and Compliance > obsolescence risk status on applications.",
@@ -3009,6 +3886,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "The exposure row shows which version is deployed, but no record says which version fixes the vulnerability, so patch status cannot be seen. Decided no on 2026-09-29 by the build-all lane, reversible: no competitor rates yes, no demand, outside the core areas (security).",
 			"evidence": {
 				"stackiq": "register.json:1619 vulnerability has no fixed-in version field; src/utils/vulnerabilityExposure.js computeExposure carries the deployed moduleVersion per usage but nothing compares it to a fix",
@@ -3039,6 +3917,7 @@
 			"reachedOn": "Vulnerabilities /kwetsbaarheden (menu)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "All vulnerabilities are listed with severity filters and each opens in the record form. The separate KwetsbaarheidDetail page is not what a row opens.",
 			"evidence": {
 				"stackiq": "src/manifest.json:969 Kwetsbaarheden custom page -> src/views/KwetsbaarhedenView.vue table with severity tabs; row click openDetail (:417) opens the record in the generic ObjectModal",
@@ -3047,6 +3926,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/ for vulnerability, no hits (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no vulnerability list exists, only the SBOM explorer of components (https://help.sap.com/docs/leanix/ea/sbom-explorer) (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: no vulnerability itemtype and no such entry in any menu (src/Html.php:1295 to :1334 list Management, Tools, Administration and Setup types)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKwetsbaarheden"
 			}
 		},
 		{
@@ -3069,6 +3952,7 @@
 			"reachedOn": "Organisations /organisaties (main menu), Add form; walkthrough step create-organisatie",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "organisation-register",
 			"note": "Organisations are created on the index with their type. The required contactsUid is a Nextcloud Contacts UID the form asks for as text, which is awkward but does not block the capability.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/hoe-kan-ik-me-als-leverancier-aanmelden: \"Als leverancier kunt u zich aanmelden door de volgende gegevens te sturen naar softwarecatalogus@vng.nl\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/16564: C4 roles for gemeente and samenwerking accounts (read 2026-09-26); organisation types gemeente, samenwerking, leverancier. Reached on: Registration via VNG helpdesk.",
@@ -3077,6 +3961,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967491-business-units: business units 'represent more or less standalone parts of your organization, such as sales, marketing, OpCo France'; outside organisations can be ArchiMate business actor objects. No register of municipalities, suppliers or cooperations with a type is documented (read 2026-09-26). Reached on: System settings > Business Units.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/organization-modeling-guidelines: organization subtypes 'Business Unit, Customer, Region, Legal Entity, Team' for 'your hierarchical business architecture'; suppliers are separate provider fact sheets. No municipality or cooperation types for outside organisations (read 2026-09-26). Reached on: Inventory > Organization fact sheet.",
 				"glpi": "source read at 11.0.9: external organisations are suppliers with a type dropdown (src/Supplier.php:46, install/mysql/glpi-empty.sql:7072 suppliertypes_id); the organisation's own units are entities (src/Entity.php:58). There is no generic organisation register covering municipalities or cooperations. Reached on: Management > Suppliers; Administration > Entities."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisaties"
 			}
 		},
 		{
@@ -3109,6 +3997,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; organisations do not self register, so no moderation queue is documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; organisations do not self register, so no moderation queue is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: suppliers are created by staff (src/Supplier.php:75 sets is_active on a new record) and there is no self registration or approval queue for organisations; grep -i 'moderat' over src/Supplier.php src/Entity.php returns nothing."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkBeheerToegang"
 			}
 		},
 		{
@@ -3130,6 +4022,7 @@
 			"reachedOn": "nothing reaches it (Organisations /organisaties can only filter by status)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "organisation-register",
 			"note": "No working path moves an organisation between Draft, Active and Inactive: the field is hidden on the form and locked on the detail page, the status dialog is orphaned, and the Nextcloud dashboard widget still uses the old Dutch values so it lists nothing and would write an invalid value. Missing half decided no on 2026-09-29 (defer retired 2026-09-28): only GLPI rates partial, no competitor rates yes, no demand, outside the core areas (organisations). The broken half stays: the organisation status field is hidden and locked, the status dialog is never opened, and the concept organisations dashboard widget filters and writes the old Dutch values concept and actief, which are not in the enum.",
 			"evidence": {
 				"stackiq": "register organization.status enum Draft/Active/Inactive is visible:false (:2022); src/manifest.json:403 OrganisatieDetail overrides status editable:false; src/modals/object/ChangeOrganisatieStatusDialog.vue:211 is never opened (no setDialog('changeOrganisatieStatus') in src); src/views/widgets/ConceptOrganisatiesWidget.vue:100 filters status 'concept' and :129 writes 'actief', neither an enum value",
@@ -3160,6 +4053,7 @@
 			"reachedOn": "OrganisatieDetail /organisaties/:id 'Contact persons' list -> ContactpersoonDetail /contactpersonen/:id",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "organisation-register",
 			"note": "Contact persons are listed on the organisation with their function and roles. The Contactpersonen index page exists but has no menu entry.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/30402: \"Bij elke leverancier is een contactpersoon opgevoerd. Deze persoon is verantwoordelijk voor de inhoud\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/16564: E4 contact details of municipalities (read 2026-09-26). One contact, no roles. Reached on: Supplier page header.",
@@ -3168,6 +4062,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; contact persons with roles per organisation are not documented beyond generic questionnaire fields (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/subscription-roles: users subscribe to any fact sheet, including organization fact sheets, with roles 'such as application owner, project manager'. Contacts must be workspace users; external contact persons are not documented (read 2026-09-26). Reached on: Organization fact sheet > Subscriptions.",
 				"glpi": "source read at 11.0.9: contacts (src/Contact.php:45, install/mysql/glpi-empty.sql:1390 glpi_contacts) carry a contact type and a title (:1402 contacttypes_id, :1405 usertitles_id) and are linked to suppliers through src/Contact_Supplier.php:39. Reached on: Management > Contacts; Supplier > Contacts tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
 			}
 		},
 		{
@@ -3191,6 +4089,7 @@
 			"reachedOn": "App header OrganisationSwitcher (src/App.vue:55) -> Manage members",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"note": "A beheerder of the organisation grants an existing Nextcloud user access to it from the header switcher; membership is stored by OpenRegister. It adds existing users; it does not send an invitation to a new person.",
 			"evidence": {
 				"stackiq": "src/components/organisations/OrganisationSwitcher.vue:48 'Manage members' (isBeheerder) opens src/modals/GrantOrganisationAccessModal.vue; POST /api/organisations/{uuid}/members -> lib/Controller/OrganisationMembersController.php:108 authorizeBeheerder then OpenRegister joinOrganisation (:123)",
@@ -3199,6 +4098,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967616-user-management: admins 'Add new users' and BlueDolphin sends 'An invitation with a link to activate the account'; business units scope what users see (https://help.bluedolphin.io/en/articles/11967491-business-units) (read 2026-09-26). Reached on: Admin > Users.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/users-overview: 'Invited users who haven't yet accepted the invitation request. You can reinvite a user'; https://help.sap.com/docs/leanix/ea/virtual-workspaces-configuration: 'Set up virtual workspaces to manage access for custom user groups' (read 2026-09-26). Reached on: Administration > Users > Invite.",
 				"glpi": "source read at 11.0.9: an administrator gives a user a profile on an entity, install/mysql/glpi-empty.sql:5917 glpi_profiles_users with profiles_id and entities_id, set on the user's Authorizations tab or automatically by authorisation rules (src/RuleRight.php:297 profiles_id action, :273 entities_id action). There is no emailed invitation link. Reached on: Administration > Users > Authorizations tab."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
 			}
 		},
 		{
@@ -3222,6 +4125,7 @@
 			"reachedOn": "App header OrganisationSwitcher on every page",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"note": "A user who belongs to several organisations switches the active one from the header; OpenRegister holds the memberships.",
 			"evidence": {
 				"stackiq": "src/components/organisations/OrganisationSwitcher.vue:197 POST /apps/openregister/api/organisations/{uuid}/set-active; mounted in src/App.vue:55",
@@ -3230,6 +4134,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967491-business-units: 'When there are multiple business units, you can switch between them by selecting a business unit from the dropdown'. Switching is between parts of one tenant, not between separate organisations (read 2026-09-26). Reached on: Top menu > business unit dropdown.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/manage-workspace-access: 'Provide users with access to exactly their relevant workspaces ... direct URL, base URLs or the workspace chooser to access available workspaces' (read 2026-09-26). Reached on: Workspace chooser.",
 				"glpi": "source read at 11.0.9: one user can hold several profile and entity pairs (install/mysql/glpi-empty.sql:5917 glpi_profiles_users) and switch between them in the session, src/Session.php:461 changeActiveEntities and src/Session.php:592 changeProfile. Reached on: user menu, entity and profile selector."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
 			}
 		},
 		{
@@ -3252,6 +4160,7 @@
 			"reachedOn": "OrganisatieDetail /organisaties/:id, merge panel (admin only)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "organisation-register",
 			"note": "An admin can merge a municipality into another and its usages, contacts and contracts follow. A supplier takeover leaves the source's applications and services pointing at the tombstoned supplier, because module and service provider fields are not in the relation map. Corrections round 8 (2026-09-28): besides module and service providers, a merge also leaves usage providers, collaboration memberships and GEMMA model organisations on the merged-away organisation, stackiq#1086; rating kept because usages, contacts, connections and contracts are still re-pointed.",
 			"evidence": {
 				"stackiq": "src/manifest.json:430 OrganisationMergePanel on OrganisatieDetail; POST /api/organisaties/{uuid}/merge -> lib/Controller/MergeController.php:142 isAdmin; lib/Service/MergeOrganisatieService.php:111 re-points usage.consumer/participants, contactPerson.organization, connection.provider and @self.organisation of catalogContract/compliancy; module.provider and catalogService.provider are not re-pointed",
@@ -3260,6 +4169,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; objects can be copied or moved between business units and workspaces (https://help.bluedolphin.io/en/articles/11967491-business-units), but merging two organisations with their relations is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea for merge of fact sheets or organizations, no hits (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: entities cannot be merged, src/Entity.php:202 forbids the dropdown merge action for Entity; records can be moved into another entity with src/Transfer.php:50 Transfer (massive action add_transfer_list, src/MassiveAction.php:598), keeping or cleaning linked items per transfer options. Reached on: Administration > Entities; list Actions > Add to transfer list."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
 			}
 		},
 		{
@@ -3282,6 +4195,7 @@
 			"reachedOn": "OrganisatieDetail /organisaties/:id, merge panel (admin only)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "organisation-register",
 			"note": "The merge panel shows per-type counts of what would be re-pointed before the admin confirms. It inherits the merge's blind spot: module and service provider links are not counted because they are not moved. Corrections round 8 (2026-09-28): the preview omits the six organisation references the merge does not move, stackiq#1086; rating kept because the preview matches exactly what the merge will change.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: with no merge (src/Entity.php:202 forbids merge for Entity) there is nothing to preview; the transfer (src/Transfer.php:50) runs directly without a what would change report.",
@@ -3290,6 +4204,10 @@
 				"vng-softwarecatalogus": "unknown: no merge of organisations is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; no merge preview is documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no merge, so no merge preview is documented (read 2026-09-26)"
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
 			}
 		},
 		{
@@ -3312,6 +4230,7 @@
 			"reachedOn": "admin settings section 'User groups'",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"note": "An admin configures which groups count as generic users, organisation admins and super users. The catalogue roles themselves map to fixed, hard-coded group names and by organisation type, so an admin cannot map e.g. 'buyer' onto a group of their choice. Specified in openspec/changes/organisations-role-mapping-and-access-review (OpenSpec pass 2026-09-27). Corrections round 8 (2026-09-28): contacts of municipalities, suppliers and collaborations get no role group, only Community contacts do, stackiq#1137; rating kept because generic user groups are still configurable and an admin can still put a user in a catalogue group by hand (src/dialogs/ManageUserGroupsDialog.vue:175).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: roles are profiles with per right settings (src/Profile.php:55), mapped onto groups and directory attributes by authorisation rules, src/RuleRight.php:236 group criterion and src/RuleRight.php:297 profile action. Reached on: Administration > Profiles; Administration > Rules > Authorizations assignment rules.",
@@ -3320,6 +4239,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: C4 roles gemeentebeheerder, raadpleger, samenwerkingsbeheerder; \"Er is géén rol voor het raadplegen van een samenwerking\" (read 2026-09-26). Fixed roles, no mapping onto groups. Reached on: Gebruikersbeheer.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967624-manage-roles-and-permissions: 'BlueDolphin uses Role-Based Access Control (RBAC). Every user is linked to one or more roles ... Add and delete custom roles' (read 2026-09-26). Reached on: Admin > Roles.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/sso-attribute-overview: 'The role to be assigned to the user. Required values: ADMIN, MEMBER, or VIEWER' and 'customer_roles ... The custom role to be assigned', mapped from identity provider groups (read 2026-09-26). Reached on: Administration > Users; SSO role attributes."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkBeheerToegang"
 			}
 		},
 		{
@@ -3341,6 +4264,7 @@
 			"reachedOn": "nothing reaches it in stackiq; Nextcloud's own user_oidc/user_saml apps would apply platform-wide",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
+			"feature": "sign-in-and-accounts",
 			"note": "Stackiq does nothing for single sign-on. A Nextcloud admin can add an identity provider app, but that is the platform, not a stackiq page. Decided no (OpenSpec pass 2026-09-27): Platform capability: Nextcloud signs users in through its identity provider apps (user_oidc, user_saml) for every app, and stackiq users are Nextcloud users. built.owner corrected to nextcloud/server.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Auth.php:106 EXTERNAL (web server provided identity, for example a SAML or OIDC module in front of GLPI), src/Auth.php:107 CAS with phpCAS::client at src/Auth.php:557, and src/Auth.php:108 X509 certificates, next to LDAP at src/Auth.php:105. Reached on: Setup > Authentication > Other authentication methods.",
@@ -3370,6 +4294,7 @@
 			"reachedOn": "nothing reaches it in stackiq; Nextcloud's user_ldap would apply platform-wide",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
+			"feature": "sign-in-and-accounts",
 			"note": "Stackiq has no directory sync for users or groups. Nextcloud's LDAP app could do it platform-wide, outside stackiq. Decided no (OpenSpec pass 2026-09-27): Platform capability: Nextcloud user_ldap keeps users and groups in step with a directory for every app, and stackiq users and groups are Nextcloud users and groups. built.owner corrected to nextcloud/server.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/AuthLDAP.php:59 LDAP directories with user import and group import (src/AuthLDAP.php:2816 ldapImportGroup), and the CLI src/Glpi/Console/Ldap/SynchronizeUsersCommand.php:79 ldap:synchronize_users (alias ldap:sync at :80). Reached on: Administration > Users > LDAP directory link; Setup > Authentication > LDAP directories. Driven on the lab at 11.0.9 (2026-09-26): /front/ldap.php offers \"Bulk import users from a LDAP directory\" and \"Synchronizing already imported users\".",
@@ -3399,6 +4324,7 @@
 			"reachedOn": "Organisations /organisaties card -> contact persons view -> Change Password on your own row",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
+			"feature": "sign-in-and-accounts",
 			"note": "A user can change their own password from their contact row in the organisation card, which is hard to find. There is no 'my account' page in stackiq; /api/me feeds only the organisation switcher. Nextcloud's personal settings do both natively. Decided no (OpenSpec pass 2026-09-27): Platform capability: Nextcloud personal settings let every user change their password and see their account details. The stackiq half (change password from your own contact row) stays as built evidence. built.owner corrected to nextcloud/server, provider nextcloud.",
 			"evidence": {
 				"stackiq": "src/components/ContactpersonenList.vue:115 'Change Password' opens src/dialogs/ChangePasswordDialog.vue -> POST /api/contactpersonen/change-password -> lib/Controller/ContactpersonenController.php:718, self-reset allowed at :753; GET /api/me (:1578) used only by src/App.vue and OrganisationSwitcher",
@@ -3429,6 +4355,7 @@
 			"reachedOn": "admin settings section 'Email configuration', Templates tab (save does not persist)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "sign-in-and-accounts",
 			"note": "The mails are sent from templates, but the admin template editor's Save button does not call the backend and reports success anyway, so an administrator cannot edit a template from the UI. The transport defaults to 'null', which sends nothing until configured.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/NotificationTargetUser.php:44 user events passwordexpires, passwordforget and passwordinit; their text lives in admin editable templates, src/NotificationTemplate.php:47 and translations src/NotificationTemplateTranslation.php:42, seeded at install/empty_data.php:3212 (passwordinit) and :5640. Reached on: Setup > Notifications > Notification templates.",
@@ -3437,6 +4364,10 @@
 				"vng-softwarecatalogus": "unknown: new users receive a login mail, but administrator-editable templates are not described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/gebruikersbeheer (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967616-user-management: BlueDolphin sends 'An invitation with a link to activate the account' and temporary credentials; editing the mail templates is not documented (read 2026-09-26). Reached on: Admin > Users > send invites.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/users-overview: users are invited 'individually or in bulk' with a 'Send Invitation Email' option; editing the text of account mails is not documented (read 2026-09-26). Reached on: Administration > Users > Invite."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkBeheerToegang"
 			}
 		},
 		{
@@ -3469,6 +4400,10 @@
 				"bluedolphin": "unknown: https://help.bluedolphin.io/en/articles/11967513-publish-a-view publishes a read-only view to 'all BlueDolphin users in your tenant'; publishing an entry as open data is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; publishing a single entry as open data is not documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'open data\\|opendata' over src/ locales/glpi.pot returns nothing; items have no publish state, the closest is is_helpdesk_visible (install/mysql/glpi-empty.sql:8956 on glpi_appliances), which only shows the item to helpdesk users of the same instance."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -3532,6 +4467,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; announcing a catalogue in a shared directory is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no shared directory of catalogues or federation between workspaces is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'federat\\|activitypub' over src/ returns nothing; every instance is standalone and the only outbound registration is the plugin marketplace client (src/Glpi/Marketplace/). The marketplace client is src/Glpi/Marketplace/Controller.php:64."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
 			}
 		},
 		{
@@ -3564,6 +4503,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; AMEFF files can move views between BlueDolphin tenants (https://help.bluedolphin.io/en/articles/11967636-import-bluedolphin-ameff-files), but pulling published entries from peer catalogues with provenance is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; pulling entries from peer catalogues is not documented, only integrations with named tools (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'federat' over src/ returns nothing; data enters only through the UI, the APIs (src/Glpi/Api/APIRest.php:60, src/Glpi/Api/HL/Router.php) and inventory, never from peer catalogues."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
 			}
 		},
 		{
@@ -3596,6 +4539,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; peer catalogue management is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; no peer catalogue management is documented (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: grep -rli 'federat' over src/ returns nothing; there is no peer list in the Setup menu (src/Html.php:1330 onwards)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
 			}
 		},
 		{
@@ -3618,6 +4565,7 @@
 			"reachedOn": "API: /apps/openregister/api/objects plus stackiq /api/*; the stackiq pages themselves use the same API",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "api-and-integrations",
 			"note": "Read and write through a REST API is live through OpenRegister, with stackiq's own role-scoped endpoints on top.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/sap-leanix-apis: 'These APIs are ideal for integration with systems that support RESTful interactions' and 'The GraphQL API enables you to retrieve and update fact sheets and related data' (read 2026-09-26). Reached on: Developer Guide > SAP LeanIX APIs.",
@@ -3626,6 +4574,10 @@
 				"topdesk": "https://docs.topdesk.com/en/required-knowledge.html: \"basic knowledge of REST API requests (see developers.topdesk.com )\" (read 2026-09-26); https://docs.topdesk.com/en/details-about-certain-permissions.html: \"API access > REST API : this permission is necessary for operator cards that are used for accessing the TOPdesk API\" (read 2026-09-26). Reached on: developers.topdesk.com.",
 				"stackiq": "Every catalogue entity is an OpenRegister object (src/manifest.json pages read register @resolve:voorzieningen_register), so OpenRegister's /apps/openregister/api/objects/{register}/{schema} CRUD applies, gated by the schema authorization rules (lib/Settings/softwarecatalogus_register.json:6777 module and others). Stackiq adds its own routed endpoints in appinfo/routes.php (e.g. :202 /api/aanbod, :255-261 /api/aangeboden-gebruik, :298 /api/gebruik, :303 /api/portfolio-report).",
 				"vng-softwarecatalogus": "unknown: https://www.softwarecatalogus.nl/api answers only \"Services Endpoint api has been setup successfully.\" and no API is documented; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/api (read 2026-09-26)"
+			},
+			"screen": {
+				"board": null,
+				"reason": "Een REST-API, geen scherm: de pagina's gebruiken dezelfde API."
 			}
 		},
 		{
@@ -3649,6 +4601,7 @@
 			"reachedOn": "API only: GET /api/views/docs and /api/aangeboden-gebruik/docs; docs site https://stackiq.conduction.nl (Documentation footer link)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "api-and-integrations",
 			"note": "The generated OpenAPI file is empty. What exists is hand-written: two JSON doc endpoints and markdown pages. OpenRegister may generate an OAS per register, but stackiq does not surface it. Specified in openspec/changes/sharing-generated-api-docs (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Glpi/Api/HL/Controller/CoreController.php:322 route /doc serves a Swagger UI 'GLPI API Documentation' (:329 to :331) over the spec built by src/Glpi/Api/HL/OpenAPIGenerator.php. Reached on: /api.php/doc. Driven on the lab at 11.0.9 (2026-09-26): on a fresh install /api.php/v2/doc answers 403 \"The High-Level API is disabled\"; after switching on enable_hlapi in Setup > General > API it serves the Swagger UI \"GLPI API Documentation\".",
@@ -3657,6 +4610,10 @@
 				"vng-softwarecatalogus": "unknown: no API documentation for the current catalogue was found; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/api, https://www.softwarecatalogus.nl/Beschikbare%20downloads (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967733-quick-start-guide: 'Open API Documentation EU https://public-api.eu.bluedolphin.app /swagger/index.html' and per endpoint reference articles in the help center (read 2026-09-26). Reached on: Swagger at https://public-api.eu.bluedolphin.app/swagger/index.html.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/sap-leanix-apis: 'we provide the OpenAPI explorer . This tool enables you to explore APIs, send requests, and view responses directly in your browser' (read 2026-09-26). Reached on: Workspace > OpenAPI explorer."
+			},
+			"screen": {
+				"board": null,
+				"reason": "Gegenereerde API-documentatie op de docs-site, geen scherm in de app."
 			}
 		},
 		{
@@ -3679,7 +4636,7 @@
 			"reachedOn": "admin settings section ArchiMate Import/Export; Portfolio rationalization /portfolio-report (Export CSV, one organisation at a time)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "archimate-import-and-export",
+			"feature": "portfolio-reporting",
 			"featureConfidence": "medium",
 			"note": "A full ArchiMate export exists but is only reached from admin settings. The one export on a user page is the portfolio report CSV, and the catalogue list pages offer no export. Specified in openspec/changes/insight-exports-and-custom-reports (OpenSpec pass 2026-09-27).",
 			"evidence": {
@@ -3689,6 +4646,13 @@
 				"topdesk": "https://docs.topdesk.com/en/asset-dashboard.html: tile actions \"Export to .CSV Export to Excel\" (read 2026-09-26); https://docs.topdesk.com/en/create-odata-reports-for-asset-management.html: \"generate reports by using the TOPdesk OData feed ... Microsoft Power BI, or Microsoft Excel\" (read 2026-09-26). Reached on: Asset dashboard; OData feed.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967710-using-the-odata-feed: 'working with the data available through the BlueDolphin OData service'; views export as AMEFF (https://help.bluedolphin.io/en/articles/11967514-download-a-view) (read 2026-09-26). Reached on: OData feed; view download.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/exporting-fact-sheet-data-as-excel-file: 'export fact sheet data as an Excel file'; https://help.sap.com/docs/leanix/ea/exporting-workspace-snapshots: 'Export snapshots of your workspace data through the Pathfinder REST API' (read 2026-09-26). Reached on: Inventory > Export; snapshot API."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkRapportages"
+				]
 			}
 		},
 		{
@@ -3711,6 +4675,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "api-and-integrations",
 			"note": "No integration with a service management tool exists. Specified in openspec/changes/sharing-itsm-exchange (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"sap-leanix": "https://www.leanix.net/hubfs/Legal/Metrics-and-Feature-List-EAM-SAP-LeanIX-v3.1.pdf: 'ServiceNow integration An integration that connects the subscription services to the customer's ServiceNow subscription to synchronize infrastructure and software asset information'; Jira Service Management integration at https://help.sap.com/docs/leanix/ea/jira-service-management-integration-faqs (read 2026-09-26). Reached on: Administration > Integrations > ServiceNow.",
@@ -3719,6 +4684,10 @@
 				"stackiq": "No ITSM connector: lib/Settings/connections.json lists only email, federation and eol-feed; grep for topdesk/servicenow/itsm in lib/ and src/ finds nothing.",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: C19: \"Met de exportfunctie kunt u de gegevens in andere tools synchroon houden ... We verwachten in 2019 een pilot met Topdesk ... Een import vanuit die tools naar de Softwarecatalogus ... is vooralsnog niet voorhanden\" (read 2026-09-26); https://www.softwarecatalogus.nl/RID%20de%20Liemers: RID de Liemers signals updates through its TOPdesk change process by hand (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: GLPI is itself the service management tool, so application records are used directly by tickets, problems and changes, src/Appliance.php:105 onwards Item_Ticket, Item_Problem and Change_Item tabs; the menu src/Html.php:1283 Assistance holds Ticket, Problem and Change. Reached on: Appliance > Tickets, Problems, Changes tabs."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
 			}
 		},
 		{
@@ -3741,6 +4710,7 @@
 			"reachedOn": "the whole app runs on the customer's own Nextcloud",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
+			"feature": "open-platform",
 			"note": "As a Nextcloud app it runs on whatever infrastructure hosts the Nextcloud instance.",
 			"evidence": {
 				"sap-leanix": "https://www.leanix.net/hubfs/Legal/Metrics-and-Feature-List-EAM-SAP-LeanIX-v3.1.pdf describes 'The SaaS services' and a customer 'workspace'; https://www.leanix.net/hubfs/Legal/Operational-Terms-Exhibit-v.2.0.pdf defines 'the data center utilized by LeanIX to host Customer's Data' with maintenance windows per hosting region. Only a vendor hosted subscription is offered (read 2026-09-26)",
@@ -3749,6 +4719,10 @@
 				"topdesk": "https://docs.topdesk.com/VA2026R3/index.html: \"TOPdesk Virtual Appliance documentation\", releases VA 2023 R2 to VA 2026 R3 (read 2026-09-26); https://tip.topdesk.com/c/255-va-release-q4-2026: roadmap card in column \"Planned\", \"VA Release Q4 2026\" in section \"On premise - VA releases\" (read 2026-09-26). Reached on: Virtual Appliance.",
 				"stackiq": "appinfo/info.xml: a Nextcloud app (id stackiq, EUPL-1.2) installed on the customer's own Nextcloud with OpenRegister; stackiq-compose.yaml at repo root for a local stack.",
 				"vng-softwarecatalogus": "unknown: the catalogue is run by VNG Realisatie; self-hosting is not described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)"
+			},
+			"screen": {
+				"board": null,
+				"reason": "Hosting: de hele app draait op de eigen Nextcloud."
 			}
 		},
 		{
@@ -3772,7 +4746,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "Search plus reference-component, standard, application-service and domain facets work. Supplier is not offered as a facet, which is half of the row's example. Specified in openspec/changes/insight-supplier-facet (OpenSpec pass 2026-09-27). Corrections round 8 (2026-09-28): the domain facet is always empty, so of the four facets only reference component, standard and application service narrow the list, stackiq#1141; rating kept because search and the reference component facet work and supplier was already missing.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/13683: \"Aan de linkerkant staan zogenaamde filter mogelijkheden. Deze werken ook in combinatie ... Achter de te zetten filters staat een getal\" (read 2026-09-26); https://www.softwarecatalogus.nl/pakketversies: facets Leverancier, Standaard, Referentiecomponent, Status planning, Domein, Doelgroep, Bedrijfsfunctie (read 2026-09-26). Reached on: Alle pakketten / Alle pakketversies.",
@@ -3781,6 +4755,10 @@
 				"topdesk": "https://docs.topdesk.com/en/the-asset-management-module-page.html: \"Asset overview : view all your assets in a filterable list\" (read 2026-09-26). Facets with counts are not described. Reached on: Asset Management > Asset overview.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967727-add-filters-to-the-data: 'narrow down repository data based on object properties' with 'Created by, Created on, Changed by, Changed on, and Completeness' and related objects (read 2026-09-26). Reached on: Repository > filters.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/advanced-filter-options: inventory filters by lifecycle, subscription, tags and fields, and https://help.sap.com/docs/leanix/ea/filtering-in-report-urls: 'Apply a filter using the facet filter column' (read 2026-09-26). Reached on: Inventory > facet filter column."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -3803,6 +4781,7 @@
 			"reachedOn": "Applications /modules and Services /diensten, Saved views menu",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "gemma-alignment",
 			"note": "A user can save the facet and search selection as a named view and reopen it. Storage is OpenRegister's views API. It covers only those two pages.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/SavedSearch.php:52 SavedSearch, private or shared, listed under Tools > Saved searches (src/Html.php:1309) with optional alerts (front/savedsearch_alert.form.php). Reached on: Tools > Saved searches (front/savedsearch.php). Driven on the lab at 11.0.9 (2026-09-26): Tools > Saved searches (/front/savedsearch.php) lists saved searches with private or shared scope and a default flag.",
@@ -3811,6 +4790,10 @@
 				"vng-softwarecatalogus": "unknown: only VNG-defined \"Marktscans-voorgedefinieerde filters\" are described; users saving their own view is not; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Marktscans (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967727-add-filters-to-the-data: 'You can now save any set of filters as a reusable Quick filter'; https://help.bluedolphin.io/en/articles/14996415-custom-insights: 'You can save, rename, and share report configurations' (read 2026-09-26). Reached on: Repository > Save Query (Quick filter).",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/advanced-filter-options mentions 'creating saved searches' and shareable filtered URLs; the feature list says 'Reports can be saved and shared with user to retrieve the specific view later' (https://www.leanix.net/hubfs/Legal/Metrics-and-Feature-List-EAM-SAP-LeanIX-v3.1.pdf) (read 2026-09-26). Reached on: Inventory > Saved searches."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
 			}
 		},
 		{
@@ -3833,6 +4816,7 @@
 			"reachedOn": "Dashboard / (first menu entry)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "dashboard-and-overviews",
 			"note": "The dashboard shows counts of organisations, applications, services and contracts. The counts are computed by OpenRegister through the library stat widget.",
 			"evidence": {
 				"sap-leanix": "https://www.leanix.net/hubfs/Legal/Metrics-and-Feature-List-EAM-SAP-LeanIX-v3.1.pdf: 'Configurable dashboards visualize inventory content as charts, lists, and KPIs'; https://help.sap.com/docs/leanix/ea/application-portfolio-management-dashboard (read 2026-09-26). Reached on: Dashboards.",
@@ -3841,6 +4825,10 @@
 				"stackiq": "src/manifest.json:72 Dashboard page with stat widgets kpi-organisations, kpi-modules, kpi-services, kpi-contracts (source metric count on organization/module/catalogService/catalogContract) plus catalog-panels.",
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Releasebrief%20GEMMA%20Softwarecatalogus%20versie%204.1: dashboard tiles for logged-in municipalities (read 2026-09-26); https://www.softwarecatalogus.nl/: \"Voortgang gemeenten Aantal gemeenten per voortgangscategorie ... Aantal ingelogde gemeenten in 2026: 69\" (read 2026-09-26). No contracts. Reached on: Dashboard; homepage.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/14600459-home-page-guide: 'The traditional dashboard has been replaced by a new Home page'; count dashboards come as Power BI templates, 'the Basic Dashboard and the Governance Dashboard' (https://help.bluedolphin.io/en/articles/11967711-power-bi-for-bluedolphin-quickstart) (read 2026-09-26). Reached on: Power BI template dashboards over OData."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkDashboard"
 			}
 		},
 		{
@@ -3863,6 +4851,7 @@
 			"reachedOn": "Nextcloud dashboard widget 'Concept organisaties'",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "dashboard-and-overviews",
 			"note": "The widget is registered and loads, but it filters on a status value the data no longer holds, so it always lists nothing. Its accept button would write an invalid status.",
 			"evidence": {
 				"stackiq": "lib/Dashboard/ConceptOrganisatiesWidget.php registered at lib/AppInfo/Application.php:760; src/views/widgets/ConceptOrganisatiesWidget.vue:100 filters organisations on status === 'concept', but the status enum is Draft/Active/Inactive/merged (lib/Settings/softwarecatalogus_register.json:2321) after lib/Repair/RenameDutchCatalogValues.php:76 renamed 'Concept' to 'Draft'. Accept writes status 'actief' (:129), which is not in the enum either.",
@@ -3871,6 +4860,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; organisations in concept and a Nextcloud dashboard are not covered (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; organisations have no concept state and there is no Nextcloud dashboard, so this is not covered (read 2026-09-26)",
 				"glpi": "source read at 11.0.9: GLPI is not a Nextcloud app and has no concept organisation state (suppliers only have is_active, install/mysql/glpi-empty.sql:7087), so no such widget exists in its own dashboards (src/Glpi/Dashboard/Grid.php:67)."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkDashboard"
 			}
 		},
 		{
@@ -3893,6 +4886,7 @@
 			"reachedOn": "Reports /reports (footer menu), one card to Portfolio rationalization /portfolio-report",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "portfolio-reporting",
 			"note": "The report picker exists and opens a working report. The list holds exactly one report.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Report.php:52 Report builds a pick list of ready made reports, src/Report.php:77 default, :81 by contract, :85 by year, :87 financial information, :110 status, chosen from 'Select the report you want to generate' (src/Report.php:143). Reached on: Tools > Reports (front/report.php). Driven on the lab at 11.0.9 (2026-09-26): /front/report.php offers Default report, By contract, By year, Hardware financial and administrative information, Other financial and administrative information, Network report, Loan and Status.",
@@ -3901,6 +4895,10 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/rapportages: \"Regelmatig worden er rapportages gemaakt over het gebruik van de Softwarecatalogus\" (read 2026-09-26); compliancy monitor and digital accessibility monitor pages. Reached on: Rapportages; Compliancy monitor.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967713-governance-insights: 'Access the Insights from the Main menu under the Visualization section. When you open Insights, the column lists all available reports' (read 2026-09-26). Reached on: Main menu > Visualization > Insights.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/report-types lists ready report types such as 'Landscape Report', 'Matrix Report', 'Roadmap Report'; the feature list names 'Pre-configured reports with adjustable filters' (https://www.leanix.net/hubfs/Legal/Metrics-and-Feature-List-EAM-SAP-LeanIX-v3.1.pdf) (read 2026-09-26). Reached on: Reports."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkRapportages"
 			}
 		},
 		{
@@ -3933,6 +4931,10 @@
 				"topdesk": "https://docs.topdesk.com/en/reporting.html: \"The Report Wizard is not available for the Asset Management module. Further reporting can be done with the Asset Type Report or the OData feed\" (read 2026-09-26). Reached on: Asset Type Report; OData.",
 				"vng-softwarecatalogus": "unknown: only CSV exports for use in a spreadsheet are described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/Beschikbare%20downloads (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/14996415-custom-insights: save configurations of supported built in reports; for deeper reports 'you need to use our OData feed and connect it to a BI tool of your choice' (https://help.bluedolphin.io/en/articles/11967711-power-bi-for-bluedolphin-quickstart) (read 2026-09-26). Reached on: Insights > Custom insights; OData with Power BI."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkRapportages"
 			}
 		},
 		{
@@ -3956,7 +4958,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "portfolio-reporting",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "One fixed report exports to CSV for a selected organisation. The filtered catalogue lists cannot be exported. Specified in openspec/changes/insight-exports-and-custom-reports (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Glpi/Search/Output/Csv.php, Ods.php, Xlsx.php and Pdf.php export the filtered list; the output format selector is rendered by src/Html.php:4219 Dropdown::showOutputFormat. Reached on: any filtered list, Export. Driven on the lab at 11.0.9 (2026-09-26): the filtered Appliances list exported to CSV with the created record.",
@@ -3965,6 +4967,13 @@
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/pakketversies: \"Export to CSV\" on the filtered package-version list (read 2026-09-26); https://www.softwarecatalogus.nl/Beschikbare%20downloads: \"Ook beschikbaar via knop [Export to csv] op pagina Alle pakketten\" (read 2026-09-26). Reached on: Alle pakketversies > Export to CSV.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967708-connect-power-bi-and-excel-to-the-odata-feed-windows-os connects Excel to the OData feed; the DataCollection 'Export is no longer supported' (https://help.bluedolphin.io/en/articles/11967630-install-and-configure-datacollection-frontend-and-service). A direct export of a filtered list is not documented (read 2026-09-26). Reached on: Excel via OData feed.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/exporting-fact-sheet-data-as-excel-file: 'In the inventory, apply filters to narrow down to the fact sheets that you need to export ... export fact sheet data as an Excel file' (read 2026-09-26). Reached on: Inventory > table view > Export."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkRapportages"
+				]
 			}
 		},
 		{
@@ -3986,6 +4995,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "portfolio-reporting",
 			"note": "Reports cannot be scheduled or sent to people. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (insight).",
 			"evidence": {
 				"stackiq": "No scheduled report or report mail job: lib/BackgroundJob/ holds only ContractStatusJob, EolSyncJob, FederationSyncJob and OrganizationContactSyncJob; grep for report scheduling in lib/ and src/ finds nothing.",
@@ -4017,7 +5027,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "contract-administration",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "Cost is reported per vendor and, within the portfolio report, for one organisation at a time. There is no cross-organisation or per-domain cost report.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Budget.php:537 showValuesByEntity shows spend per entity and item type for a budget, and src/Report.php:89 'Other financial and administrative information (licenses, cartridges, consumables)' (front/report.infocom.conso.php); there is no cost per domain or reference component view. Reached on: Management > Budgets > budget tabs; Tools > Reports.",
@@ -4026,6 +5036,13 @@
 				"vng-softwarecatalogus": "unknown: costs are not recorded; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; cost is a questionnaire field (https://help.bluedolphin.io/en/articles/11967733-quick-start-guide) but no cost report per organisation or domain is documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/application-portfolio-management-dashboard: 'application run cost broken down by business capability'; https://help.sap.com/docs/leanix/ea/dashboard-modeling: 'Report on cost per business capability' (read 2026-09-26). Reached on: Dashboards > Application Portfolio Management Dashboard."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkRapportages",
+					"SkLicenties"
+				]
 			}
 		},
 		{
@@ -4048,6 +5065,7 @@
 			"reachedOn": "Features & roadmap /features-roadmap (footer menu)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "open-platform",
 			"note": "The page lists features with their status. Note that the overlay feeding it is a self-description and may be stale in the app's favour.",
 			"evidence": {
 				"stackiq": "src/manifest.json:1048 FeaturesRoadmap page (type roadmap, line 1050), footer menu entry FeaturesRoadmapMenu; content from openspec/features.overlay.json statuses stable/beta/soon.",
@@ -4056,6 +5074,10 @@
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; an in app view of available, beta and coming features is not documented (read 2026-09-26)",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/ai-governance-extension: 'Go to Administration > Optional Features and Early Access' to activate extensions; the public roadmap is outside the app at https://roadmap.leanix.net/ (read 2026-09-26). Reached on: Administration > Optional Features and Early Access.",
 				"glpi": "source read at 11.0.9: grep -rli 'coming soon' over src/ templates/ returns no in app feature status page; src/Glpi/Features/ holds item traits (for example src/Glpi/Features/Kanban.php), not feature flags. src/Glpi/Features/Kanban.php:45 is a trait, typical of that directory."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkFunctiesRoadmap"
 			}
 		},
 		{
@@ -4078,6 +5100,7 @@
 			"reachedOn": "admin settings sections Organization Synchronization and ArchiMate Import/Export (status and result only); progress endpoints API only",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "dashboard-and-overviews",
 			"note": "A progress API exists but no page reads it. Admins see a sync status and final import results, not the progress of a running job. Specified in openspec/changes/operations-sync-status-and-progress (OpenSpec pass 2026-09-27). Corrections round 8 (2026-09-28): progress lives in the starting user's PHP session, so no other login or background job can read it, stackiq#1138; rating kept because the partial rests on the sync status block and the final import result, which do not use the tracker.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: massive actions over many records show a progress bar, src/MassiveAction.php:1294 displayProgressBar; the LDAP synchronisation command shows one per user batch, src/Glpi/Console/Ldap/SynchronizeUsersCommand.php:382; long web operations report through src/Glpi/Controller/ProgressController.php:50 /progress/check/{key}. Inventory imports run per agent request without a progress view. Reached on: massive action screen; CLI ldap:sync.",
@@ -4086,6 +5109,13 @@
 				"vng-softwarecatalogus": "unknown: no progress display for sync or import is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967642-source-processing: the source processing module shows when 'the system is currently handling multiple items simultaneously' and items ready for processing; AMEFF import only shows a checkmark when done (https://help.bluedolphin.io/en/articles/11967637-import-ameff-files) (read 2026-09-26). Reached on: Source processing module.",
 				"sap-leanix": "https://updates.leanix.net/announcements/product-update-march-2026: 'A real-time progress widget in the inventory side-panel keeps you informed of import status'; integration runs are followed in 'Administration > Integrations > Sync Log' (https://help.sap.com/docs/leanix/ea/collibra-data-catalog-integration) (read 2026-09-26). Reached on: Inventory side panel import progress; Administration > Integrations > Sync Log."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDashboard",
+					"SkInstellingenGegevens"
+				]
 			}
 		},
 		{
@@ -4108,6 +5138,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"note": "There is no knowledge base. Files can be attached to an application, but that is not searchable articles. Specified in openspec/changes/insight-knowledge-base (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/KnowbaseItem.php:57 knowledge base articles with categories and visibility, linked to items through src/KnowbaseItem_Item.php:45 and shown on the appliance Knowledge base tab (src/Appliance.php:104); menu src/Html.php:1307. Reached on: Tools > Knowledge base (front/knowbaseitem.php). Driven on the lab at 11.0.9 (2026-09-26): /front/knowbaseitem.php opens the knowledge base with Search and Browse.",
@@ -4116,6 +5147,10 @@
 				"vng-softwarecatalogus": "unknown: the FAQ and manuals are site help, no knowledge base about applications is described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; the Knowledge AI Assistant 'only uses Bluedolphin's publicly available documentation' (https://help.bluedolphin.io/en/articles/12528662-ai-capabilities-of-bluedolphin), a customer knowledge base of articles about applications is not documented (read 2026-09-26)",
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; fact sheets hold links and files in a Resources tab (https://help.sap.com/docs/leanix/ea/collaborating-and-managing-data-in-fact-sheets), but no searchable knowledge base of articles is documented (read 2026-09-26)"
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
 			}
 		},
 		{
@@ -4137,6 +5172,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "asset-discovery",
 			"note": "Stackiq is a catalogue, and nothing discovers installed software. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" Agent-based discovery of installed software is a discovery agent.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: native inventory receives glpi-agent submissions at src/Glpi/Controller/InventoryController.php:61 /Inventory (legacy :62 /front/inventory.php), processed by src/Glpi/Inventory/Inventory.php:106 with src/Glpi/Inventory/Asset/Software.php creating software and installations. The agent is the separate glpi-project/glpi-agent repository. Reached on: Administration > Inventory; Assets > Software.",
@@ -4166,6 +5202,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "asset-discovery",
 			"note": "No device discovery. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" Network device discovery is a discovery agent.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Glpi/Inventory/Request.php:97 NETDISCOVERY_ACTION calls src/Glpi/Inventory/Request.php:237 networkDiscovery, importing devices found by the agent's network discovery; scheduling discovery tasks from the server goes through the HANDLE_NETDISCOVERY_TASK hook (src/Glpi/Inventory/Request.php:448), which the separate glpiinventory plugin implements. Reached on: Administration > Inventory; Assets > Network devices.",
@@ -4195,6 +5232,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "asset-discovery",
 			"note": "No discovery of unregistered SaaS use. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" Discovering unregistered SaaS use is a discovery agent.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/saas-discovery: 'SaaS discovery identifies your organization's SaaS applications through integrations with third-party systems like Single-Sign-on (SSO) ... Eliminate shadow IT and business-managed IT' (read 2026-09-26). Reached on: Discovery > SaaS discovery inbox.",
@@ -4225,6 +5263,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "asset-discovery",
 			"note": "Only software is registered, not hardware. Specified in openspec/changes/operations-technology-components (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/autoload/CFG_GLPI.php:208 asset_types lists Computer, Monitor, NetworkEquipment and the other hardware types managed next to software, under the Assets menu. Reached on: Assets > Computers, Monitors, Network devices.",
@@ -4233,6 +5272,10 @@
 				"vng-softwarecatalogus": "unknown: operational IT management functions are not described; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier (read 2026-09-26)",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967596-archimate-annotation-translation-en-nl lists 'Device' and 'Node' object definitions, and the welcome page names 'servers, applications' as assets (https://help.bluedolphin.io/en/articles/11967472-welcome-to-bluedolphin). Modeled as architecture objects, not as an asset register (read 2026-09-26). Reached on: Objects > Device or Node object.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/it-component-modeling-guidelines: IT component subtype 'Hardware ... (e.g., servers, mainframe computers, storage devices)'. Modeled as technology types an application depends on, not individual laptops as assets (read 2026-09-26). Reached on: IT Component fact sheet, subtype Hardware."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkCmdb"
 			}
 		},
 		{
@@ -4255,6 +5298,7 @@
 			"reachedOn": "Applications /modules/:id and Suites /suites/:id Related panels; no page for connections",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "asset-discovery",
 			"note": "The landscape and its relations are recorded as catalogue objects, not as a CMDB with CI classes. Connections (koppelingen) have no index or detail page of their own. Specified in openspec/changes/operations-technology-components (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: C19: \"Dubbel beheer (én in de Softwarecatalogus én in de CMDB) ... Een CMDB die separaat wordt bijgehouden\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/19703: \"Zolang de CMDB niet gekoppeld is aan de Softwarecatalogus\" (read 2026-09-26). The docs treat the CMDB as a separate tool.",
@@ -4263,6 +5307,13 @@
 				"stackiq": "Applications (module lib/Settings/softwarecatalogus_register.json:6777), versions (moduleVersion :7649), suites (suite :1135) and application-to-application connections (connection :3563) with relations; ModuleDetail and SuiteDetail show a Related panel. No manifest page has register+schema 'connection' or 'usage', so connections are not listed or created on their own page.",
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967472-welcome-to-bluedolphin lists 'Configuration management' among configurable application areas, with objects such as servers and their relationships; CMDB data comes in from ServiceNow and TOPdesk (https://help.bluedolphin.io/en/articles/11967783-servicenow-to-bluedolphin-integration). An architecture repository rather than an operational CMDB (read 2026-09-26). Reached on: Objects and relationships; ServiceNow integration.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/jira-service-management-integration: 'Use the Jira Service Management integration to synchronize data between your configuration management database (CMDB) and SAP LeanIX ... Configuration items from Jira Service Management can be mapped to various fact sheet types'. LeanIX consumes a CMDB, it does not act as one (read 2026-09-26). Reached on: Jira Service Management and ServiceNow integrations."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkCmdb"
+				]
 			}
 		},
 		{
@@ -4285,6 +5336,7 @@
 			"reachedOn": "Organisation /organisaties/:id, Merge organisation panel (admin only)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "data-quality",
 			"note": "An admin can merge duplicate organisations with a dry run. Nothing deduplicates applications or reconciles records arriving from several sources. Specified in openspec/changes/operations-record-reconciliation (OpenSpec pass 2026-09-27).",
 			"evidence": {
 				"stackiq": "Organisation merge: src/manifest.json:430 OrganisationMergePanel on OrganisatieDetail, calling /api/organisaties/{uuid}/merge/dry-run and /merge (src/store/modules/organisatie.js:486/524, lib/Controller/MergeController.php:106, admin-only body guard). Federation mirrors are reconciled per peer by lib/Service/Federation/FederationMerger.php.",
@@ -4293,6 +5345,13 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967635-four-things-you-need-to-know-before-you-start-importing-sources: 'for each record an object will be created or merged with an already existing object'; https://help.bluedolphin.io/en/articles/11967644-use-datasource-to-enrich-objects enriches objects from a second source (read 2026-09-26). Reached on: Admin > Sources; Source processing.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/aggregation-and-linkage-of-software-records: 'import software records from ServiceNow as aggregated software fact sheets'; https://help.sap.com/docs/leanix/ea/matching-rules: custom matching to avoid 'duplicate fact sheets'; SaaS discovery links the same SaaS found in several SSOs (https://help.sap.com/docs/leanix/ea/saas-discovery) (read 2026-09-26). Reached on: ServiceNow integration > aggregation; matching rules; SaaS discovery inbox.",
 				"glpi": "source read at 11.0.9: src/RuleImportAsset.php:46 import and link rules decide whether an incoming inventory record matches an existing asset (by serial, UUID, MAC and similar) or creates one; src/RuleDictionnarySoftware.php:44 normalises software names and publishers from different sources; duplicates can be merged afterwards (src/Software.php:1011). Reached on: Administration > Rules > Rules for import and link equipments; Dictionaries."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDatakwaliteit",
+					"SkOrganisatie"
+				]
 			}
 		},
 		{
@@ -4314,6 +5373,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "service-management",
 			"note": "No ticketing. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" Logging incidents and requests is a service desk. Exchange with the organisation's service desk is specified under share-itsm-integration.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/autoload/CFG_GLPI.php:301 ticket_types includes Appliance (line 305), so tickets link to an application through src/Item_Ticket.php:41, shown on the appliance Tickets tab (src/Appliance.php:105). Reached on: Assistance > Tickets; Appliance > Tickets tab. Driven on the lab at 11.0.9 (2026-09-26): the default Super-Admin profile lists Computer, Monitor, NetworkEquipment, Peripheral, Phone, Printer, Software, DCRoom, Rack, Enclosure and Database as associable to tickets, not Appliance, so an appliance shows no Tickets tab until an administrator adds it in the profile; rating kept.",
@@ -4343,6 +5403,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "service-management",
 			"note": "Contracts go through an approval, but changes to an application do not. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" Change approval workflows are service desk change management.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: changes link to the appliance (src/Appliance.php:107 Change_Item tab) and go through approvals, src/ChangeValidation.php:39 ChangeValidation extends CommonITILValidation. Reached on: Assistance > Changes; Appliance > Changes tab.",
@@ -4372,6 +5433,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "service-management",
 			"note": "A contract can be typed as SLA, but no service level targets are recorded or tracked. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" The competitor evidence tracks service desk response and resolution targets on calls and tickets.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/SLM.php:42 service level management with src/SLA.php:44 SLA and OLA targets on tickets (install/mysql/glpi-empty.sql:7304 glpi_tickets.slas_id_ttr), assigned by business rules (src/RuleCommonITILObject.php:73) that can key on the linked appliance (src/RuleCommonITILObject.php:305 assign_appliance). Reached on: Setup > Service levels.",
@@ -4401,6 +5463,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "service-management",
 			"note": "End users cannot request software. Decided no (OpenSpec pass 2026-09-27): Recorded non-goal: openspec/parity/capabilities.json category: \"It is not a discovery agent, a service desk or a developer portal, and the operations area exists to record that on purpose.\" A self-service portal where end users request software is a service desk.",
 			"evidence": {
 				"topdesk": "https://docs.topdesk.com/en/mobile-access-to-the-self-service-portal.html: \"The SSP layout is suited to be displayed in a mobile interface\" (read 2026-09-26); https://tip.topdesk.com/c/86-webshop-is-connected-with-asset-management: roadmap card in column \"Building\", \"End-user can order items which are in Asset Management\" (read 2026-09-26); pricing lists \"Self-Service Portal\" and \"Webshop\". Reached on: Self-Service Portal.",
@@ -4430,6 +5493,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
+			"feature": "open-platform",
 			"note": "There is no native mobile app. Decided no on 2026-09-29 by the build-all lane, reversible: single competitor, no demand, outside the core areas (operations).",
 			"evidence": {
 				"topdesk": "https://docs.topdesk.com/en/installing-the-topdesk-mobile-store-application.html: \"Scan the QR code to download the app from the Play store\" (read 2026-09-26). Reached on: TOPdesk Mobile app.",
@@ -4461,7 +5525,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "automatic-user-provisioning",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The sync runs on a schedule and its last run time is shown, but only an admin can see and configure it, which is the rule for partial. Specified in openspec/changes/operations-sync-status-and-progress (OpenSpec pass 2026-09-27). Corrections round 8 (2026-09-28): switching the job off in the settings does not stop it, stackiq#1139; rating kept because the schedule and the last run time, which this row rates, work.",
 			"evidence": {
 				"stackiq": "lib/BackgroundJob/OrganizationContactSyncJob.php:75 TimedJob every 300 s calling performScheduledSync; admin section src/views/settings/sections/CronjobConfiguration.vue:56 shows each job's interval and an enable switch; src/views/settings/sections/OrganizationSynchronization.vue:211 shows Last Sync from app config last_sync_time (lib/Service/OrganizationSyncService.php:1609, written by recordSyncTime :1674).",
@@ -4470,6 +5534,10 @@
 				"bluedolphin": "https://help.bluedolphin.io/en/articles/11967472-welcome-to-bluedolphin: 'This data can then be synchronized with BlueDolphin based on a scheduled task, periodically (for example, every hour)'; https://help.bluedolphin.io/en/articles/11967629-import-and-export-options-with-bluedolphin: 'Automatically via interval' (read 2026-09-26). Reached on: DataCollection Service; Admin > Sources.",
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/configuring-automated-nightly-runs-for-inbound-processors: 'enable automated nightly runs for an inbound Integration API processor'; SaaS discovery retrieves data 'usually twice a day' (https://help.sap.com/docs/leanix/ea/saas-discovery); runs visible in 'Administration > Integrations > Sync Log' (read 2026-09-26). Reached on: Administration > Integrations > Sync Log.",
 				"glpi": "source read at 11.0.9: automatic actions are scheduled and show their last run, src/CronTask.php:59 with install/mysql/glpi-empty.sql:1610 glpi_crontasks.lastrun, but LDAP user and group synchronisation is not one of them (grep -i ldap over the cron seed in install/empty_data.php:438 finds none); it is the CLI src/Glpi/Console/Ldap/SynchronizeUsersCommand.php:79 ldap:synchronize_users, which must be scheduled by the system cron. Organisation (supplier) records have no sync at all. Reached on: Setup > Automatic actions; CLI bin/console ldap:sync. Driven on the lab at 11.0.9 (2026-09-26): /front/crontask.php lists automatic actions with run mode, frequency and last run."
+			},
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
 			}
 		},
 		{
@@ -4489,7 +5557,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "Helmond's architecture repository tender (REQ3, REQ61) asks to relate the repository to the GGM. GGM metadata survives an ArchiMate import on architecture elements, but no field or page links an application to a GGM entity. Specified in openspec/changes/architecture-data-model-and-ggm (OpenSpec pass 2026-09-27).",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
@@ -4502,7 +5570,11 @@
 			"sap-leanix": "unknown",
 			"bluedolphin": "partial",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
+			}
 		},
 		{
 			"id": "arch-views-office",
@@ -4521,7 +5593,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "archimate-import-and-export",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "Helmond REQ19 asks for architecture views embedded in office documents. stackiq renders no view at all (see arch-gemma-views) and exports only ArchiMate files. Specified in openspec/changes/architecture-views-to-office-documents (OpenSpec pass 2026-09-27).",
 			"vng-softwarecatalogus": "partial",
 			"evidence": {
@@ -4534,7 +5606,11 @@
 			"sap-leanix": "partial",
 			"bluedolphin": "partial",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
+			}
 		},
 		{
 			"id": "arch-data-model",
@@ -4552,7 +5628,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "high",
+			"feature": "architecture-modelling",
+			"featureConfidence": "medium",
 			"note": "Helmond REQ54 asks for entity relationship or UML data models. stackiq holds imported ArchiMate elements but models nothing itself. Specified in openspec/changes/architecture-data-model-and-ggm (OpenSpec pass 2026-09-27).",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
@@ -4565,7 +5642,11 @@
 			"sap-leanix": "partial",
 			"bluedolphin": "yes",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
+			}
 		},
 		{
 			"id": "org-access-review",
@@ -4583,6 +5664,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"featureConfidence": "medium",
 			"note": "Helmond REQ78 asks administrators to check periodically that every user still needs access. stackiq fetches the last login of each contact's account and never shows it. Specified in openspec/changes/organisations-role-mapping-and-access-review (OpenSpec pass 2026-09-27).",
 			"vng-softwarecatalogus": "partial",
@@ -4596,7 +5678,11 @@
 			"sap-leanix": "unknown",
 			"bluedolphin": "partial",
 			"glpi": "no",
-			"topdesk": "partial"
+			"topdesk": "partial",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkBeheerToegang"
+			}
 		},
 		{
 			"id": "comp-processing-register",
@@ -4614,8 +5700,8 @@
 			"reachedOn": "ModuleDetail /modules/:id Application data widget (reached from OrganisatieDetail, see land-detail-page)",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "standards-compliance",
-			"featureConfidence": "high",
+			"feature": "security-and-privacy-assessment",
+			"featureConfidence": "medium",
 			"note": "Helmond REQ4 wants the processing register kept apart from the repository but linked. stackiq stores and shows a reference per application; it does not hold the register.",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
@@ -4628,7 +5714,11 @@
 			"sap-leanix": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "mkt-tender-product-info",
@@ -4646,7 +5736,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "offering-and-usage-listings",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "Standard municipal tender text (Noordwijk 418890, Reimerswaal 417169, FUMO 415897, HLT Samen 383984): a supplier inside the GEMMA scope can make its product information transparent through the Softwarecatalogus. stackiq publishes the data; the page a buyer opens lives in the external frontend. Decided no (OpenSpec pass 2026-09-27): Recorded design: README.md:266 says stackiq runs \"with a separate React-based public frontend\", and README.md:273 names it (ConductionNL/tilburg-woo-ui) as the public search and detail pages. The missing half is the public page a buyer opens, which that frontend serves; stackiq publishes the data (module read rule for group public after publicationDate).",
 			"vng-softwarecatalogus": "yes",
 			"evidence": {
@@ -4677,7 +5767,7 @@
 			"reachedOn": "usage page Value assessment and Risk signals; Reports > Portfolio rationalization value against fit chart and Recorded class differs from scores switch",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "portfolio-reporting",
+			"feature": "portfolio-rationalisation",
 			"featureConfidence": "medium",
 			"note": "Helmond REQ41 asks for analysis of application use, cost, risk and value. stackiq records a TIME classification (life-time-classification) without the scores that would justify it. Specified in openspec/changes/lifecycle-application-value-assessment (OpenSpec pass 2026-09-27). Built by openspec/changes/archive/2026-09-30-lifecycle-application-value-assessment.",
 			"vng-softwarecatalogus": "unknown",
@@ -4691,7 +5781,14 @@
 			"sap-leanix": "yes",
 			"bluedolphin": "yes",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGebruikDetail",
+					"SkRapportages"
+				]
+			}
 		},
 		{
 			"id": "comp-security-officer-signoff",
@@ -4708,7 +5805,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "security-and-privacy-assessment",
+			"featureConfidence": "low",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
 				"vng-softwarecatalogus": "unknown: the live softwarecatalogus.nl does not describe this and does not state its absence; the open PvE wens on the successor repository is not evidence about the incumbent (ruling 2026-09-26). Live page searched: Open PvE wens #136 'Als CISO wil ik ons gemeentelijk pakketoverzicht kunnen controleren en vervolgens fiatteren'; no approval step for the landscape appears in the incumbent manuals (https://www.softwarecatalogus.nl/node/19703). (read 2026-09-26)",
@@ -4738,7 +5836,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "security-and-privacy-assessment",
+			"featureConfidence": "low",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
 				"vng-softwarecatalogus": "unknown: the live softwarecatalogus.nl does not describe this and does not state its absence; the open PvE wens on the successor repository is not evidence about the incumbent (ruling 2026-09-26). Live page searched: Open PvE wens #82 'Als gebruik-raadpleger wil ik een register van verwerkingen kunnen genereren'; the incumbent exports only package, connection and IBD-foto files (https://www.softwarecatalogus.nl/Beschikbare%20downloads). (read 2026-09-26)",
@@ -4768,7 +5867,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "supplier-directory",
+			"featureConfidence": "low",
 			"vng-softwarecatalogus": "partial",
 			"evidence": {
 				"vng-softwarecatalogus": "Open PvE wens #50 (search) and #48 (register collective agreements incl. AVG and BIO terms); the incumbent lists signed addenda per supplier with a filter (https://www.softwarecatalogus.nl/addenda), which covers part of it. (read 2026-09-26)",
@@ -4799,6 +5899,7 @@
 			"reachedOn": "KompliantieDetail /komplianties/:id Evidence documents; ModuleDetail DPIA document field",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "security-and-privacy-assessment",
 			"featureConfidence": "medium",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
@@ -4812,7 +5913,14 @@
 			"sap-leanix": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkComplianceMatrix"
+				]
+			}
 		},
 		{
 			"id": "sec-baseline-classification",
@@ -4830,6 +5938,7 @@
 			"reachedOn": "ModuleDetail /modules/:id and Modules /modules BBN filter",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "security-and-privacy-assessment",
 			"featureConfidence": "medium",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
@@ -4843,7 +5952,14 @@
 			"sap-leanix": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkApplicatie"
+				]
+			}
 		},
 		{
 			"id": "mkt-side-by-side-compare",
@@ -4860,7 +5976,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "supplier-directory",
+			"featureConfidence": "low",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
 				"vng-softwarecatalogus": "unknown: the live softwarecatalogus.nl does not describe this and does not state its absence; the open PvE wens on the successor repository is not evidence about the incumbent (ruling 2026-09-26). Live page searched: Open PvE wens #31 'meerdere pakketten kunnen selecteren en deze in een overzichtelijke tabel naast elkaar vergelijken'; the incumbent offers filtered lists only (https://www.softwarecatalogus.nl/node/13683). (read 2026-09-26)",
@@ -4890,7 +6007,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "roles-and-access",
+			"featureConfidence": "low",
 			"vng-softwarecatalogus": "unknown",
 			"evidence": {
 				"vng-softwarecatalogus": "unknown: the live softwarecatalogus.nl does not describe this and does not state its absence; the open PvE wens on the successor repository is not evidence about the incumbent (ruling 2026-09-26). Live page searched: Open PvE wens #104 'Als functioneel beheerder wil ik me kunnen voordoen als een ander account'; not in the incumbent FAQ (https://www.softwarecatalogus.nl/node/16564). (read 2026-09-26)",
@@ -4920,7 +6038,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "standards-compliance",
+			"featureConfidence": "low",
 			"vng-softwarecatalogus": "partial",
 			"evidence": {
 				"vng-softwarecatalogus": "Open PvE wens #147; the incumbent shows whether a supplier signed the Groeipact Common Ground addendum (https://www.softwarecatalogus.nl/leveranciers), a supplier-level signal, not per product. (read 2026-09-26)",
@@ -4951,6 +6070,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "application-connections",
 			"featureConfidence": "medium",
 			"vng-softwarecatalogus": "partial",
 			"evidence": {
@@ -4964,7 +6084,14 @@
 			"sap-leanix": "partial",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGebruikDetail",
+					"SkModuleversie"
+				]
+			}
 		},
 		{
 			"id": "comp-retention-cleanup",
@@ -4981,7 +6108,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "security-and-privacy-assessment",
+			"featureConfidence": "low",
 			"topdesk": "yes",
 			"evidence": {
 				"topdesk": "Card 'More control over card & file removal' in Launched (updated 2026-02-09); docs https://docs.topdesk.com/en/file-maintenance.html: 'you can set how many days after closing or archiving a card its uploaded files and linked emails should be removed'. (read 2026-09-26)",
@@ -5012,6 +6140,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"featureConfidence": "medium",
 			"topdesk": "no",
 			"evidence": {
@@ -5025,7 +6154,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"bluedolphin": "unknown",
-			"glpi": "partial"
+			"glpi": "partial",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "land-change-entry-type",
@@ -5043,6 +6176,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"featureConfidence": "medium",
 			"topdesk": "no",
 			"evidence": {
@@ -5056,7 +6190,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"bluedolphin": "unknown",
-			"glpi": "partial"
+			"glpi": "partial",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
+			}
 		},
 		{
 			"id": "ins-ai-action-audit",
@@ -5074,6 +6212,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "ai-assistant",
 			"featureConfidence": "medium",
 			"topdesk": "no",
 			"evidence": {
@@ -5087,7 +6226,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"bluedolphin": "unknown",
-			"glpi": "no"
+			"glpi": "no",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkDashboard"
+			}
 		},
 		{
 			"id": "sec-multi-factor-sign-in",
@@ -5104,7 +6247,8 @@
 			"reachedOn": "nothing reaches it in stackiq; Nextcloud two-factor apps apply platform-wide",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "sign-in-and-accounts",
+			"featureConfidence": "low",
 			"topdesk": "partial",
 			"evidence": {
 				"topdesk": "Card 'Support Multi-Factor Authentication (MFA)' in Under consideration; today MFA only comes from the identity provider behind SAML SSO (https://docs.topdesk.com/en/topdesk-mobile.html: 'We test the store application with the Microsoft two-step authentication (2FA) for the SSO'). (read 2026-09-26)",
@@ -5134,7 +6278,8 @@
 			"reachedOn": "nothing reaches it in stackiq; the Nextcloud password policy applies platform-wide",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "sign-in-and-accounts",
+			"featureConfidence": "low",
 			"topdesk": "no",
 			"evidence": {
 				"topdesk": "Card 'Enforce strong passwords' in Under consideration: 'By setting rules for things like minimum length, numbers, symbols, or uppercase letters, weak passwords are blocked'. (read 2026-09-26)",
@@ -5164,7 +6309,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "service-management",
+			"featureConfidence": "low",
 			"topdesk": "no",
 			"evidence": {
 				"topdesk": "Card 'AI - Risk & prediction' in Under consideration: 'Change risk prediction helps change managers assess how risky a planned change is before it's approved'. (read 2026-09-26)",
@@ -5195,6 +6341,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "application-connections",
 			"featureConfidence": "medium",
 			"glpi": "no",
 			"evidence": {
@@ -5208,7 +6355,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "yes",
 			"bluedolphin": "yes",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "ctr-linked-contracts",
@@ -5225,7 +6376,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "contract-administration",
+			"featureConfidence": "low",
 			"glpi": "no",
 			"evidence": {
 				"glpi": "source read at 11.0.9: open request #182 (2026-03-27) states contracts cannot be linked in GLPI 11; install/mysql/glpi-empty.sql:1536 glpi_contracts_items links a contract to items, and Contract is not among the linkable item types there, with no parent contract column in install/mysql/glpi-empty.sql:1483 glpi_contracts.",
@@ -5256,6 +6408,7 @@
 			"reachedOn": "ContractDetail /contracten/:id contract details",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "contract-administration",
 			"featureConfidence": "medium",
 			"glpi": "no",
 			"evidence": {
@@ -5269,7 +6422,14 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "yes",
 			"bluedolphin": "unknown",
-			"topdesk": "yes"
+			"topdesk": "yes",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkContracten",
+					"SkContract"
+				]
+			}
 		},
 		{
 			"id": "life-dates-follow-status",
@@ -5286,7 +6446,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "portfolio-roadmap",
+			"featureConfidence": "low",
 			"glpi": "partial",
 			"evidence": {
 				"glpi": "source read at 11.0.9: request #457 (2026-07-27, open) asks to tie dates to status; core already lets an entity fill financial dates when an item enters a chosen status, install/mysql/glpi-empty.sql:2800 autofill_use_date and :2822 autofill_decommission_date on glpi_entities, applied by src/Infocom.php:505 autofillDates, but only for the financial record's dates.",
@@ -5316,7 +6477,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "roles-and-access",
+			"featureConfidence": "low",
 			"glpi": "yes",
 			"evidence": {
 				"glpi": "source read at 11.0.9: CHANGELOG.md:281 11.0.0 added 'View assigned' and 'Update assigned' rights; src/Glpi/Features/AssignableItem.php:68 grants read when the user or group is assigned and src/Glpi/Features/AssignableItem.php:79 checks UPDATE_ASSIGNED; Appliance uses this trait (src/Appliance.php:46 implements AssignableItemInterface).",
@@ -5347,7 +6509,8 @@
 			"reachedOn": "every stackiq page, through Nextcloud theming",
 			"provider": "nextcloud",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "open-platform",
+			"featureConfidence": "low",
 			"glpi": "yes",
 			"evidence": {
 				"glpi": "source read at 11.0.9: CHANGELOG.md:276 11.0.0 added custom palette and theme support; src/Glpi/UI/ThemeManager.php:103 getCustomThemesDirectory and :112 getCustomThemes load admin supplied themes, offered in src/Config.php:1612 getPalettes.",
@@ -5360,7 +6523,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "yes",
 			"bluedolphin": "unknown",
-			"topdesk": "partial"
+			"topdesk": "partial",
+			"screen": {
+				"board": null,
+				"reason": "Nextcloud-theming kleurt elk scherm, er is geen eigen scherm voor."
+			}
 		},
 		{
 			"id": "land-copy-entry",
@@ -5378,7 +6545,8 @@
 			"reachedOn": "index pages such as Module versions /moduleversies: select rows, Copy",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "software-landscape-register",
+			"featureConfidence": "low",
 			"glpi": "yes",
 			"evidence": {
 				"glpi": "source read at 11.0.9: CHANGELOG.md:285 and :286 11.0.0 added cloning of templates and creating a template from an existing item; appliances are clonable (src/Appliance.php:49 use Clonable) together with their items, contracts, documents and financial record (src/Appliance.php:62 getCloneRelations).",
@@ -5391,7 +6559,11 @@
 			"vng-softwarecatalogus": "partial",
 			"sap-leanix": "yes",
 			"bluedolphin": "partial",
-			"topdesk": "partial"
+			"topdesk": "partial",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
+			}
 		},
 		{
 			"id": "land-ai-agent-inventory",
@@ -5409,6 +6581,7 @@
 			"reachedOn": "Applications > AI systems (/ai-systems), AI system page, and the AI systems section on the application page",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "ai-system-inventory",
 			"featureConfidence": "medium",
 			"sap-leanix": "yes",
 			"evidence": {
@@ -5423,7 +6596,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "partial",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "arch-decision-register",
@@ -5441,6 +6618,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"featureConfidence": "medium",
 			"sap-leanix": "yes",
 			"evidence": {
@@ -5454,7 +6632,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
+			}
 		},
 		{
 			"id": "ins-natural-language-query",
@@ -5472,6 +6654,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "ai-assistant",
 			"featureConfidence": "medium",
 			"sap-leanix": "yes",
 			"evidence": {
@@ -5485,7 +6668,11 @@
 			"bluedolphin": "yes",
 			"vng-softwarecatalogus": "unknown",
 			"glpi": "no",
-			"topdesk": "partial"
+			"topdesk": "partial",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkDashboard"
+			}
 		},
 		{
 			"id": "comp-ai-act-classification",
@@ -5503,6 +6690,7 @@
 			"reachedOn": "Applications > AI systems (/ai-systems), AI system page, and the AI systems section on the application page",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "ai-system-inventory",
 			"featureConfidence": "medium",
 			"sap-leanix": "partial",
 			"evidence": {
@@ -5517,7 +6705,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "life-version-tolerance",
@@ -5534,7 +6726,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "lifecycle-and-end-of-support",
+			"featureConfidence": "low",
 			"sap-leanix": "no",
 			"evidence": {
 				"sap-leanix": "Roadmap card 'EA Assistant: Technology Successor Planning' is On roadmap; https://updates.leanix.net/announcements/work-with-complete-technology-version-coverage-without-raising-manual-requests (2026-09-17): 'version concurrency management, which we plan to implement in Q4. You will be able to define version tolerance windows' (read 2026-09-26)",
@@ -5565,6 +6758,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"featureConfidence": "medium",
 			"sap-leanix": "yes",
 			"evidence": {
@@ -5578,7 +6772,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"bluedolphin": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
+			}
 		},
 		{
 			"id": "share-lifecycle-conditional-sync",
@@ -5596,7 +6794,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "api-and-integrations",
+			"featureConfidence": "low",
 			"bluedolphin": "yes",
 			"evidence": {
 				"bluedolphin": "November 2025 update (2025-11-13): 'Conditional Syncing for Integrations and Webhooks' lets teams 'control exactly what data syncs to third-party systems based on lifecycle state' (read 2026-09-26)",
@@ -5609,7 +6808,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"glpi": "yes",
-			"topdesk": "partial"
+			"topdesk": "partial",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
+			}
 		},
 		{
 			"id": "ins-usage-analytics",
@@ -5626,7 +6829,8 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"featureConfidence": "medium",
+			"feature": "dashboard-and-overviews",
+			"featureConfidence": "low",
 			"bluedolphin": "yes",
 			"evidence": {
 				"bluedolphin": "February 2026 update (2026-02-10): new reports show 'which guest users have access to BlueDolphin' and 'which views are being used across the platform'; https://help.bluedolphin.io/en/articles/13868249-usage-insights (read 2026-09-26)",
@@ -5657,6 +6861,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "software-landscape-register",
 			"featureConfidence": "medium",
 			"bluedolphin": "yes",
 			"evidence": {
@@ -5670,7 +6875,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"glpi": "yes",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
+			}
 		},
 		{
 			"id": "land-cmdb-import",
@@ -5688,7 +6897,15 @@
 				"owner": "ConductionNL/stackiq",
 				"change": "2026-10-05-cmdb-export-import"
 			},
-			"source": "spec-round-2026-10-07"
+			"feature": "landscape-import",
+			"source": "spec-round-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicaties",
+					"SkCmdb"
+				]
+			}
 		},
 		{
 			"id": "arch-process-step-fields",
@@ -5706,6 +6923,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"featureConfidence": "medium",
 			"bluedolphin": "yes",
 			"evidence": {
@@ -5719,7 +6937,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
+			}
 		},
 		{
 			"id": "arch-view-tags",
@@ -5737,6 +6959,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "architecture-modelling",
 			"featureConfidence": "medium",
 			"bluedolphin": "yes",
 			"evidence": {
@@ -5750,7 +6973,11 @@
 			"vng-softwarecatalogus": "unknown",
 			"sap-leanix": "unknown",
 			"glpi": "no",
-			"topdesk": "unknown"
+			"topdesk": "unknown",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkModelleren"
+			}
 		},
 		{
 			"id": "land-usage-record",
@@ -5785,7 +7012,15 @@
 				"glpi": "source read at 11.0.9: use is recorded as installations separate from the software product, src/Item_SoftwareVersion.php:39 (install/mysql/glpi-empty.sql:1064 glpi_items_softwareversions) per device, and licence assignments per item or user; there is no usage record of a module by an organisation as such. Reached on: Assets > Software > Installations tab."
 			},
 			"question": "Does the external VNG Softwarecatalogus frontend create usage (gebruik) records through /api/aangeboden-gebruik or the OpenRegister objects API, and is that frontend part of what stackiq ships?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkApplicatie",
+					"SkInGebruik",
+					"SkGebruikDetail"
+				]
+			}
 		},
 		{
 			"id": "land-migrate-legacy",
@@ -5808,6 +7043,7 @@
 			"reachedOn": "nothing reaches it",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "landscape-import",
 			"note": "There is still no importer for the previous VNG Softwarecatalogus's registrations. Stackiq can now import applications from a TOPdesk CMDB export or a CSV/XLSX file, which is a manual workaround at best, not a migration of the old catalogue's entries.",
 			"evidence": {
 				"stackiq": "lib/Repair/* still only rename stackiq's own data (MigrateRegisterSlug.php, RenameDutchCatalogValues.php); appinfo/routes.php:110 POST /api/cmdb-import (lib/Service/CmdbExportImportService.php) imports a TOPdesk CMDB xlsx; :307 POST /api/itsm/import with lib/Service/ItsmFileImportService.php imports applications from a CSV/XLSX through the service desk flow; neither reads the previous VNG Softwarecatalogus's registrations; no change or spec names this row",
@@ -5818,7 +7054,11 @@
 				"glpi": "source read at 11.0.9: data from earlier GLPI versions is carried over by src/Update.php:172 doUpdates with the chain in install/migrations/ (update_0.85.x_to_0.90.0.php up to the 11.0 steps); data from another catalogue needs the separate datainjection plugin (pluginsGLPI/datainjection tag 2.15.11, inc/backendcsv.class.php). Reached on: web installer update; plugin Data injection."
 			},
 			"question": "Is the data from the previous VNG Softwarecatalogus meant to be brought over by a one-off migration outside this repo (for example an OpenRegister register import of an export file)?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicaties"
+			}
 		},
 		{
 			"id": "conn-register-connection",
@@ -5841,7 +7081,7 @@
 			"reachedOn": "Applications > Connections /koppelingen and /koppelingen/:id (generic create/edit form); read-only lists on the application page /modules/:id",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
-			"feature": "software-landscape-register",
+			"feature": "application-connections",
 			"featureConfidence": "medium",
 			"note": "Connections now have a list and a detail page where a connection is created and edited with both applications and its direction. The standard-version picker points at GEMMA elements in the AMEF register while the page works on the voorzieningen register, so picking a standard may not resolve, and a connection cannot be added from the application page.",
 			"evidence": {
@@ -5853,7 +7093,11 @@
 				"glpi": "source read at 11.0.9: install/mysql/glpi-empty.sql:1247 glpi_impactrelations stores a directed link from a source item to an impacted item with a name, added via src/Impact.php:1161 'Add relation'; there is no field for the standard or protocol used. Reached on: Appliance > Impact analysis tab, Add relation."
 			},
 			"question": "Does the external VNG Softwarecatalogus frontend register koppelingen through the OpenRegister objects API, and does it count as part of stackiq?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkKoppelingen"
+			}
 		},
 		{
 			"id": "conn-usage-of-connection",
@@ -5877,7 +7121,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "offering-and-usage-listings",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A usage page now carries the connections the organisation runs within that usage, edited on the usage form and shown in its related panel; both usages and connections have their own pages.",
 			"evidence": {
 				"stackiq": "register.json:3019 usage.koppelingen (array of related connection, visible, not hideOnForm) editable on src/manifest.d/usages.json:37 GebruikDetail /gebruik/:id, whose gb-related widget (:51 'Connections and services') shows the linked connections; connections themselves have pages at src/manifest.d/connections.json:14,36; lib/Controller/AangebodenGebruikController.php /api/koppelingen-gebruik/{uuid} (appinfo/routes.php:273) still has no src caller",
@@ -5888,7 +7132,11 @@
 				"glpi": "source read at 11.0.9: an impact relation (install/mysql/glpi-empty.sql:1247) is a single fact in one instance; there is no separate usage record saying the organisation runs it, and grep -n 'usage' src/ImpactRelation.php returns nothing."
 			},
 			"question": "Does the external VNG Softwarecatalogus frontend let an organisation record the connections it runs, through /api/koppelingen-gebruik or the objects API?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGebruikDetail"
+			}
 		},
 		{
 			"id": "conn-shared-with-others",
@@ -5912,7 +7160,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "shared-usage-on-gemma-views",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The owning organisation can now name participants on a usage page, but the participating organisations cannot see that shared usage or its connections in stackiq: the usage read rules ignore participants and only the API endpoint answers it.",
 			"evidence": {
 				"stackiq": "register.json:2717 usage.participants (visible, editable on /gebruik/:id via src/manifest.d/usages.json:37); register.json:3136-3172 usage read rules match only _organisation, consumer and provider, not participants, so a participating org does not see the shared usage on /gebruik; appinfo/routes.php:262 GET /api/aangeboden-gebruik/deelnemers and :273 /api/koppelingen-gebruik/{uuid} still have no caller in src/",
@@ -5923,7 +7171,14 @@
 				"glpi": "source read at 11.0.9: relations live inside one instance (install/mysql/glpi-empty.sql:1247 glpi_impactrelations) and entities are subdivisions of one organisation (src/Entity.php:58); no cross organisation sharing of connections exists (grep -rli 'federat' src/ returns nothing)."
 			},
 			"question": "Does the external VNG Softwarecatalogus frontend show shared connections from /api/aangeboden-gebruik/deelnemers?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGebruikDetail",
+					"SkKoppelingen"
+				]
+			}
 		},
 		{
 			"id": "arch-refcomp-mapping",
@@ -5958,7 +7213,11 @@
 				"glpi": "source read at 11.0.9: grep -rli 'gemma\\|reference component' over src/ locales/glpi.pot returns nothing; the only classification of an appliance is its type dropdown (install/mysql/glpi-empty.sql:8941 appliancetypes_id)."
 			},
 			"question": "Does the Modules page's CnIndexPage create/edit dialog in nextcloud-vue 2.55.1 render module.referenceComponents (hideOnForm:true, items.$ref element in the AMEF register) as a working multiselect of reference components? nextcloud-vue's fieldsFromSchema (src/utils/schema.js:529) does not check hideOnForm.",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGebruikDetail"
+			}
 		},
 		{
 			"id": "arch-gemma-views",
@@ -5982,7 +7241,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "No stackiq page renders a GEMMA view. The enriched view data is served for an external frontend, and the org export draws applications into view copies that open in Archi.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Hoe%20print%20ik%20een%20kaart%3F: \"de pakketten die getoond worden in het pakketoverzicht te plotten op een GEMMA architectuurkaart ... [Toon kaart]\" (read 2026-09-26). Reached on: Mijn softwarecatalogus > Pakketten > Toon kaart.",
@@ -5993,7 +7252,11 @@
 				"glpi": "source read at 11.0.9: grep -rli 'gemma\\|archimate' over src/ templates/ locales/glpi.pot returns nothing; the only diagram is the impact graph (src/Impact.php:252 displayGraphView)."
 			},
 			"question": "Does the external VNG Softwarecatalogus frontend render /api/views/{id} with include_gebruik, and is that frontend in scope for stackiq's column?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
+			}
 		},
 		{
 			"id": "arch-shared-overlay",
@@ -6028,7 +7291,11 @@
 				"glpi": "source read at 11.0.9: no GEMMA views (grep -rli 'gemma' src/ returns nothing) and no partner sharing; the impact graph (src/Impact.php:1559 makeDataForCytoscape) draws one instance's items only."
 			},
 			"question": "Does the external VNG frontend draw deelnames nodes differently from own usage on a GEMMA view?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
+			}
 		},
 		{
 			"id": "arch-gemma-api",
@@ -6052,7 +7319,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "gemma-alignment",
-			"featureConfidence": "low",
+			"featureConfidence": "high",
 			"note": "A pure API row: the views endpoint is routed, authorised for logged-in users and returns the imported GEMMA views; elements come through OpenRegister's generic objects API.",
 			"evidence": {
 				"stackiq": "appinfo/routes.php:189-191 GET /api/views, /api/views/docs, /api/views/{viewId} -> lib/Controller/ViewController.php:82,218 (@NoAdminRequired at :75,:211) -> lib/Service/ViewService.php:108,166 read views from the AMEF register; element schema at register.json:4127 in register vng-gemma, readable through the OpenRegister objects API",
@@ -6063,7 +7330,11 @@
 				"glpi": "source read at 11.0.9: the v2 API controllers (src/Glpi/Api/HL/Controller/, for example AssetController.php:149 /Assets) expose GLPI itemtypes only; grep -rli 'gemma' src/ returns nothing."
 			},
 			"question": "Is the view API reachable without a Nextcloud login (no #[PublicPage] on ViewController), and does the row require public access?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Een API die de GEMMA-architectuur levert, geen scherm."
+			}
 		},
 		{
 			"id": "comp-declare-standard",
@@ -6098,7 +7369,11 @@
 				"glpi": "source read at 11.0.9: no standards model (grep -rli 'standaard' src/ locales/glpi.pot returns nothing); software versions (install/mysql/glpi-empty.sql:6900) carry no supported standard."
 			},
 			"question": "On /komplianties, does the create form's standardVersion select (items $ref element, which lives only in the AMEF register) list standard versions, or does it resolve against the voorzieningen register and come back empty/404 as the Standaarden page did before its register fix?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkComplianceMatrix"
+			}
 		},
 		{
 			"id": "mkt-offer-accept",
@@ -6133,7 +7408,11 @@
 				"glpi": "source read at 11.0.9: suppliers have no login or role (install/mysql/glpi-empty.sql:7067 glpi_suppliers is a plain record; profiles in src/Profile.php:55 are for users), so no supplier can accept or decline a claimed usage."
 			},
 			"question": "Does the external VNG Softwarecatalogus frontend (not in this repo) call PUT /api/aanbod/{uuid}/accept and /api/aangeboden-gebruik/{id}/set-self, and is that frontend part of what we ship?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
+			}
 		},
 		{
 			"id": "mkt-compare-peers",
@@ -6168,7 +7447,11 @@
 				"glpi": "source read at 11.0.9: no reference components (grep -rli 'reference component' src/ returns nothing) and no data from comparable organisations, since each instance is standalone (src/Entity.php:58 entities are internal)."
 			},
 			"question": "Does the external VNG frontend render /api/views with the deelnames enrichment, and does that count as a stackiq page?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkGemmaPlaat"
+			}
 		},
 		{
 			"id": "mkt-who-uses-it",
@@ -6192,7 +7475,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "offering-and-usage-listings",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "The application page now has a Usages list naming the using organisation, version and status. RBAC narrows it: a supplier sees usages whose hidden provider field is its organisation, and a municipality sees only its own usages. Usages created through stackiq's own forms do not set provider, so a supplier only sees usages from imports or external data.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/Marktscans: \"kunnen ingelogde gemeenten of samenwerkingen zien bij welke collega-gemeenten betreffende pakketversie in het applicatielandschap staat (klik daarvoor op het getal boven Ingevuld door)\" (read 2026-09-26). Reached on: Package page > Ingevuld door.",
@@ -6203,7 +7486,11 @@
 				"glpi": "source read at 11.0.9: within one instance the version Summary tab shows installations per entity, src/Item_SoftwareVersion.php:850 showForVersionByEntity, and the installation list carries the entity column (src/Item_SoftwareVersion.php:484); organisations outside the instance are not visible. Reached on: Assets > Software > version > Summary tab."
 			},
 			"question": "Does the generic 'related' widget on ModuleDetail list usage objects that point at the module (inverse relation), and for which roles?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "mkt-review-moderation",
@@ -6238,7 +7525,11 @@
 				"glpi": "source read at 11.0.9: there are no product reviews (see mkt-reviews); the only moderation is knowledge base publication by rights on src/KnowbaseItem.php:57, unrelated to reviews."
 			},
 			"question": "Does the installed OpenRegister let a catalogue user create a software-review with status=approved through /reviews (the generic create), bypassing ReviewService?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkBeheerToegang"
+			}
 		},
 		{
 			"id": "mkt-hide-landscape-from-vendors",
@@ -6262,6 +7553,7 @@
 			"reachedOn": "no page of its own: enforced by OpenRegister RBAC on every read, including /gebruik, /koppelingen and the /modules/:id Usages list",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"note": "The register declares organisation-scoped reads, so a supplier sees only usages of its own products (where provider is set) and published connections, including on the new usage, connection and application pages. This rests on the installed OpenRegister executing the declared match rules.",
 			"evidence": {
 				"stackiq": "lib/Settings/softwarecatalogus_register.json:3149-3172 usage read scoped to _organisation or consumer for gebruik-beheerder, and _organisation or provider = own organisation for aanbod-beheerder; usage.provider is hidden (:2690-2701) and set only by lib/Service/CmdbExportImportService.php:1193; connection read :3865-3891 public when publicationDate <= now, plus own organisation and provider for aanbod-beheerder; these rules now also govern the new pages /gebruik, /gebruik/:id (src/manifest.d/usages.json), /koppelingen (src/manifest.d/connections.json) and the application page Usages list (src/manifest.json:514); openspec/specs/vendor-visibility-rbac",
@@ -6272,7 +7564,11 @@
 				"glpi": "source read at 11.0.9: suppliers are records without accounts (install/mysql/glpi-empty.sql:7067 glpi_suppliers) and all data is visible only through the profiles and entities assigned to users (install/mysql/glpi-empty.sql:5917 glpi_profiles_users), so a supplier sees nothing unless given an account. Reached on: Administration > Profiles."
 			},
 			"question": "Does the installed OpenRegister enforce the declared authorization.read match rules (e.g. {group: aanbod-beheerder, match: {provider: $organisation}}) on usage and connection reads?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Afgedwongen door OpenRegister-RBAC bij elke lezing, zonder scherm."
+			}
 		},
 		{
 			"id": "mkt-free-public-service",
@@ -6295,6 +7591,7 @@
 			"reachedOn": "no page: a property of the app and its licence",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "open-data-publishing",
 			"note": "The software is free and published entries are publicly readable, but the repo ships no hosted public catalogue; the public-facing frontend is the external VNG one.",
 			"evidence": {
 				"vng-softwarecatalogus": "unknown: public browsing is open (\"Iedereen kan de softwarecatalogus raadplegen\", FAQ E6) but no page states the use is free of charge; searched https://www.softwarecatalogus.nl/node/16564, https://www.softwarecatalogus.nl/node/13683, https://www.softwarecatalogus.nl/node/19703, https://www.softwarecatalogus.nl/Gebruikershandleiding_leverancier, https://www.softwarecatalogus.nl/hoe-kan-ik-me-als-leverancier-aanmelden (read 2026-09-26)",
@@ -6305,7 +7602,11 @@
 				"bluedolphin": "https://bluedolphin.io/pricing/: plans 'Tactical', 'Strategic' and 'Enterprise', with 'Contact sales for pricing' and a free trial only on the Strategic plan, after which 'your workspace continues with limited access unless upgraded' (read 2026-09-26)"
 			},
 			"question": "Is a hosted, free-of-charge stackiq instance offered to municipalities and suppliers (the competitor offer is a public service, not software)?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Een eigenschap van de app en haar licentie, geen scherm."
+			}
 		},
 		{
 			"id": "life-eol-warning",
@@ -6340,7 +7641,15 @@
 				"glpi": "source read at 11.0.9: alerts exist for dates GLPI stores, licence expiry (src/NotificationTargetSoftwareLicense.php:46 'Alarms on expired licenses'), contract end and notice (src/NotificationTargetContract.php:47) and warranty expiry (src/Infocom.php:651 cronInfocom); no end of support date exists on an application or version (install/mysql/glpi-empty.sql:6900 glpi_softwareversions). Reached on: Setup > Notifications; Setup > Automatic actions."
 			},
 			"question": "Does the installed OpenRegister dispatch the scheduled x-openregister-notifications rule 'eol-approaching' on moduleVersion, and to whom?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkInGebruik",
+					"SkGebruikDetail",
+					"SkRoadmap"
+				]
+			}
 		},
 		{
 			"id": "life-eol-feed",
@@ -6375,7 +7684,11 @@
 				"glpi": "source read at 11.0.9: grep -i 'end_of_support\\|endoflife' over install/mysql/glpi-empty.sql and src/ returns nothing; no external lifecycle feed is read (the only outbound catalogues are the plugin marketplace, src/Glpi/Marketplace/). The marketplace client, the only outbound catalogue, is src/Glpi/Marketplace/Controller.php:64."
 			},
 			"question": "Is integriq's endoflife-date source (eol_product/eol_cycle register) provisioned on a default install, so that switching the sync on actually finds cycles?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenGegevens"
+			}
 		},
 		{
 			"id": "life-planned-replacement",
@@ -6410,7 +7723,14 @@
 				"glpi": "source read at 11.0.9: a software can be flagged as an 'Upgrade from' another software, templates/pages/assets/software.html.twig:46 to :50 (is_update with softwares_id, install/mysql/glpi-empty.sql:6864 and :6865); this records succession after the fact, with no planned replacement link for appliances. Reached on: Assets > Software form, Upgrade from."
 			},
 			"question": "Is the external VNG Softwarecatalogus frontend (which writes usage objects) counted as part of stackiq for this row?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGebruikDetail",
+					"SkRoadmap"
+				]
+			}
 		},
 		{
 			"id": "life-time-classification",
@@ -6433,6 +7753,7 @@
 			"reachedOn": "Applications in use /gebruik (column) and /gebruik/:id (Value assessment section and edit form); PortfolioReport /portfolio-report",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "portfolio-rationalisation",
 			"note": "A user sets the TIME classification, rationale and review date on the usage edit form of Applications in use. The usage page shows it next to the class the value scores suggest, and the portfolio report groups usages per quadrant.",
 			"evidence": {
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/time: 'TIME stands for Tolerate, Invest, Migrate, and Eliminate. It categorizes applications based on their strategic value' (read 2026-09-26). Reached on: Application fact sheet > TIME classification.",
@@ -6443,7 +7764,15 @@
 				"glpi": "source read at 11.0.9: grep -rli 'tolerate\\|eliminate' over src/ locales/glpi.pot returns nothing; a TIME class can only be held in a repurposed single choice dropdown such as the appliance status (install/mysql/glpi-empty.sql:8950 states_id, values from src/State.php:45) or type (install/mysql/glpi-empty.sql:8941). Reached on: Management > Appliances, Status or Type field."
 			},
 			"question": "Is the external VNG frontend or OpenRegister's generic object editor the intended place to set timeClassification, and does it count here?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkInGebruik",
+					"SkGebruikDetail",
+					"SkRapportages"
+				]
+			}
 		},
 		{
 			"id": "ctr-register",
@@ -6478,7 +7807,11 @@
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/contract-extension-to-meta-model: contract fact sheet with 'Contract Number', 'Contract Pricing Type', lifecycle phases for start, notice and end, and licensing, maintenance and support costs, linked to applications and providers (read 2026-09-26). Reached on: Inventory > Contract fact sheet (contract extension)."
 			},
 			"question": "Does the installed OpenRegister accept a catalogContract without the required usage (schema hardValidation false), and can the related-object picker create a usage inline?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkContracten"
+			}
 		},
 		{
 			"id": "ctr-expiry-alert",
@@ -6514,7 +7847,14 @@
 				"glpi": "source read at 11.0.9: src/Contract.php:1092 cronContract computes end and notice dates and sends the events of src/NotificationTargetContract.php:47 (end of contract, notice, periodicity, periodicity notice); install/mysql/glpi-empty.sql:1508 glpi_contracts.alert sets which alerts apply. Reached on: Management > Contracts, Email alarms field; Setup > Notifications."
 			},
 			"question": "Does the installed OpenRegister dispatch scheduled x-openregister-notifications, and does it compare the filter value case/locale-insensitively (it cannot map 'Actief' to 'Active')?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDashboard",
+					"SkContracten"
+				]
+			}
 		},
 		{
 			"id": "ctr-approval",
@@ -6550,7 +7890,11 @@
 				"glpi": "source read at 11.0.9: grep -n 'alidation' src/Contract.php returns nothing and no ContractValidation class exists; approvals exist only for ITIL objects (src/ChangeValidation.php:39), and the contract status is a free dropdown (install/mysql/glpi-empty.sql:1512 states_id)."
 			},
 			"question": "Does the installed OpenRegister enforce x-openregister-lifecycle transitions on catalogContract.status, given its states are Dutch ('Actief') and the enum is English ('Active')?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkContract"
+			}
 		},
 		{
 			"id": "sec-exposure",
@@ -6573,6 +7917,7 @@
 			"reachedOn": "Vulnerabilities /kwetsbaarheden, Exposed usages column; Applications in use /gebruik/:id risk signals; KwetsbaarheidDetail /kwetsbaarheden/:id Exposure tab by URL only",
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
+			"feature": "vulnerability-management",
 			"note": "The list shows how many in-production usages each vulnerability exposes, and each usage page now shows how many vulnerabilities touch its application. The per-organisation exposure list is still on a detail tab that no page opens, so a user cannot easily see who is exposed to a given vulnerability.",
 			"evidence": {
 				"stackiq": "src/utils/vulnerabilityExposure.js:54 in-production join vulnerability.modules -> usage.module -> usage.consumer; src/views/KwetsbaarhedenView.vue:111 Exposed usages count per row; src/manifest.json:1025 VulnerabilityExposurePanel (per-organisation rows) as Exposure sidebar tab of KwetsbaarheidDetail /kwetsbaarheden/:id, but a list row still opens the generic edit modal (KwetsbaarhedenView.vue:94 -> openDetail :419 navigationStore.setModal('vulnerability'), src/modals/Modals.vue:44) and nothing in src links to KwetsbaarheidDetail; new: src/manifest.d/usages.json:61 UsageRiskSignals on GebruikDetail shows the count of vulnerabilities linked to that usage's application (src/components/portfolio/UsageRiskSignals.vue:58)",
@@ -6583,7 +7928,14 @@
 				"glpi": "source read at 11.0.9: no vulnerability data exists (grep -rli 'cve' src/ hits only src/Glpi/System/Requirement/PhpSupportedVersion.php:74), so exposure cannot be derived even though installations per entity are known (src/Item_SoftwareVersion.php:850)."
 			},
 			"question": "Is KwetsbaarheidDetail reachable from any page, for example by clicking a vulnerability in ModuleDetail's Related panel?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkGebruikDetail",
+					"SkKwetsbaarheden"
+				]
+			}
 		},
 		{
 			"id": "sec-vulnerability-alert",
@@ -6618,7 +7970,14 @@
 				"glpi": "source read at 11.0.9: no vulnerability events among notification targets; software notifications are licence expiry only (src/NotificationTargetSoftwareLicense.php:46)."
 			},
 			"question": "Does the installed OpenRegister dispatch the x-openregister-notifications 'vulnerability-reported' rule on the vulnerability schema, and can recipients be the consumers of the affected modules?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDashboard",
+					"SkKwetsbaarheden"
+				]
+			}
 		},
 		{
 			"id": "org-self-registration",
@@ -6653,7 +8012,11 @@
 				"glpi": "source read at 11.0.9: suppliers are created by staff only (src/Supplier.php:75 sets is_active on add from the staff form) and there is no public sign up page among front/ pages (front/lostpassword.php and front/initpassword.php are the only anonymous account pages)."
 			},
 			"question": "Does the external VNG frontend post to /api/intake/register, and does OpenRegister's generic public create on organization let an anonymous caller set registrationStatus/status/publicationDate directly?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkPubliek"
+			}
 		},
 		{
 			"id": "org-contact-to-account",
@@ -6688,7 +8051,11 @@
 				"glpi": "source read at 11.0.9: contacts (src/Contact.php:45) and users are separate itemtypes with no conversion action; user accounts come from manual creation, LDAP import (src/AuthLDAP.php:59) or authorisation rules (src/RuleRight.php:297 profile action)."
 			},
 			"question": "Does a contactPerson created via the current form reach createUserAccount with an email (e.g. resolved from Nextcloud Contacts by contactsUid somewhere I did not find), or does conversion fail for every post-migration contact?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkOrganisatie"
+			}
 		},
 		{
 			"id": "org-cooperation",
@@ -6712,7 +8079,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "shared-usage-on-gemma-views",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "A cooperation can be registered with its participants, and the usages it shares can now be recorded with participants on the Applications in use page. No page shows a participant the landscape it shares: the deelnemers API has no caller, and the usage read rules do not let participants see those usages.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/19703: \"Handleiding beheer gemeente-samenwerking ... Samenwerkingsverbanden die als doel hebben om de applicatielandschappen van de aangesloten gemeenten te harmoniseren\" (read 2026-09-26); https://www.softwarecatalogus.nl/node/30355: cooperation selects the member municipalities per package (read 2026-09-26). Reached on: Samenwerking account > Pakketten.",
@@ -6723,7 +8090,15 @@
 				"glpi": "source read at 11.0.9: entities form a tree (src/Entity.php:58 extends CommonTreeDropdown) and records flagged recursive are shared with all child entities (src/Appliance.php:325 is_recursive), so a parent entity can hold a landscape shared by several subordinate units; there is no cooperation of independent organisations. Reached on: Administration > Entities; Appliance Child entities field."
 			},
 			"question": "Does the external VNG frontend show a cooperation's shared landscape from /api/aangeboden-gebruik/deelnemers?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkInGebruik",
+					"SkGebruikDetail",
+					"SkOrganisaties"
+				]
+			}
 		},
 		{
 			"id": "org-data-segregation",
@@ -6747,6 +8122,7 @@
 			"reachedOn": "no page: enforced by OpenRegister RBAC/multitenancy on every list and detail page",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"note": "Organisation-scoped reads are declared per schema, and OpenRegister applies the match rules on list and detail reads. Contact persons are still readable across organisations by gebruik-beheerder and gebruik-raadpleger, and every civil servant (ambtenaar) can read every organisation's contracts.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: every query on entity scoped items is restricted to the user's active entities, src/DbUtils.php:920 getEntitiesRestrictCriteria; records carry entities_id and is_recursive (install/mysql/glpi-empty.sql:8937 and :8938 on glpi_appliances), so an entity's records stay invisible to other entities unless shared down the tree. Reached on: entity selector in the header.",
@@ -6757,7 +8133,11 @@
 				"sap-leanix": "https://www.leanix.net/hubfs/Legal/Metrics-and-Feature-List-EAM-SAP-LeanIX-v3.1.pdf: 'Virtual workspaces to control users' read and edit permissions for fact sheets and their content in a federated organization'; https://help.sap.com/docs/leanix/ea/virtual-workspaces-configuration (read 2026-09-26). Reached on: Administration > Virtual Workspaces."
 			},
 			"question": "Does the installed OpenRegister evaluate authorization.read match rules with $organisation on the generic object list and detail endpoints the stackiq pages use?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Afgedwongen door OpenRegister-multitenancy bij elke lijst en pagina, zonder scherm."
+			}
 		},
 		{
 			"id": "org-hierarchy",
@@ -6781,7 +8161,7 @@
 			"provider": "stackiq",
 			"providerHow": "read-from-code",
 			"feature": "automatic-user-provisioning",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "On automatic provisioning, the first user of an organisation joins the maintainer (beheerder) group, which may manage the organisation's members, and later users get that user as manager. The first contact no longer gets the organisation admin groups (switched off on 28 Sep), the manual Convert to User does not run this step, and it all depends on the email field the contact schema lacks.",
 			"evidence": {
 				"stackiq": "lib/Service/Stackiq/HierarchyHandler.php:79 ensureOrganizationBeheerder: when the organisation has no beheerder (OrganizationHandler getOrganizationBeheerders = members of group 'maintainer'), the user gets assignBeheerderRole (ContactPersonHandler.php:1368, adds group 'maintainer' :1398), and :130 setupManagerRelationships makes later users report to the primary beheerder; called only on the automatic path (lib/Service/StackiqService.php:247, lib/Service/ContactpersoonService.php:323), not by the manual convertToUser; ContactPersonHandler.php:641 the first contact is no longer added to the organisation admin groups (cab7bc32, 28 Sep); 'maintainer' members manage the organisation's members via lib/Controller/OrganisationMembersController.php",
@@ -6792,7 +8172,11 @@
 				"glpi": "source read at 11.0.9: an administrator can delegate user management per entity with a profile holding user rights, and GLPI stops a delegate from granting a profile stronger than their own, src/Profile.php:744 currentUserHaveMoreRightThan and src/Profile.php:679 getUnderActiveProfileRestrictCriteria; nothing makes the first user of an organisation its administrator automatically. Reached on: Administration > Users > Authorizations tab."
 			},
 			"question": "Same as org-contact-to-account: does conversion get an email for a post-migration contact?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Gebeurt vanzelf bij het aanmaken van het eerste account, zonder scherm."
+			}
 		},
 		{
 			"id": "share-public-browse",
@@ -6816,7 +8200,7 @@
 			"provider": "openregister",
 			"providerHow": "read-from-code",
 			"feature": "open-data-publishing",
-			"featureConfidence": "medium",
+			"featureConfidence": "high",
 			"note": "Anonymous browsing rests on RBAC read rules in the register that OpenRegister executes, and since 1 Oct anonymous readers get published objects without their private fields. Stackiq ships no public page; the browsing surface is OpenCatalogi or the external VNG frontend. The module rule still exposes every registeredBy=Supplier module whatever its publication date.",
 			"evidence": {
 				"vng-softwarecatalogus": "https://www.softwarecatalogus.nl/node/16564: E6: \"Iedereen kan de softwarecatalogus raadplegen ... De gegevens ingevoerd door de leveranciers zijn openbaar\" (read 2026-09-26); https://www.softwarecatalogus.nl/pakketten: package list readable without login (read 2026-09-26). Reached on: Alle pakketten.",
@@ -6827,7 +8211,11 @@
 				"glpi": "source read at 11.0.9: the only anonymous content is the public FAQ, gated by use_public_faq (src/KnowbaseItem.php:131, src/Document.php:717); asset, appliance and software lists all require a session (src/Glpi/Controller/GenericListController.php checks canView)."
 			},
 			"question": "Does the installed OpenRegister honour the {group: public, match: {publicationDate: {$lte: $now}}} read rule on module/catalogService for an anonymous GET /apps/openregister/api/objects, and which public frontend (the external VNG Softwarecatalogus site) is the intended browse surface?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkPubliek"
+			}
 		},
 		{
 			"id": "share-public-api",
@@ -6850,6 +8238,7 @@
 			"reachedOn": "API only: OpenRegister objects API for anonymous reads; no stackiq page",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "open-data-publishing",
 			"note": "There is no dedicated developer-facing public API. Public access to the offering is whatever OpenRegister serves from the declared read rules, which now leave out private fields. Stackiq's own offering endpoint needs a login, and generated API documentation is only specified (sharing-generated-api-docs).",
 			"evidence": {
 				"glpi": "source read at 11.0.9: the v2 API routes without authentication are only the index, documentation and getting started pages, src/Glpi/Api/HL/Controller/CoreController.php:301, :322, :397, :407; all data routes require OAuth or session auth, and there is no supplier offering to expose.",
@@ -6860,7 +8249,11 @@
 				"sap-leanix": "unknown: docs searched at https://help.sap.com/docs/leanix/ea; all APIs authenticate with workspace tokens (https://help.sap.com/docs/leanix/ea/authentication-to-sap-leanix-services), a public API over a supplier offering is not documented (read 2026-09-26)"
 			},
 			"question": "Does the installed OpenRegister execute the module/catalogService public read rules for anonymous API callers, and is any API key or rate limit applied to that public surface?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Een publieke API voor ontwikkelaars, geen scherm."
+			}
 		},
 		{
 			"id": "share-portal",
@@ -6883,6 +8276,7 @@
 			"reachedOn": "Portaliq external portal (not a stackiq page), only for signed-in portal subjects of a supplier or participant organisation",
 			"provider": "portaliq",
 			"providerHow": "read-from-code",
+			"feature": "api-and-integrations",
 			"note": "The contribution is declarative and read-only, and it covers only an organisation's own records for portal subjects. It shows nothing publicly, and the create/accept actions are deferred per its own docblock.",
 			"evidence": {
 				"stackiq": "lib/Portal/PortalContributionProvider.php:130 getContribution() declares read-only, organisation-scoped collections for audiences vendor-org (:167 catalogService, :184 usage, :204 catalogContract, :228 compliancy) and participant-org (:270 usage, :291 catalogContract); :97 audiences; docblock :24 says accept/deny actions are deferred. No change to lib/Portal since 26 Sep. Inert without portaliq.",
@@ -6893,7 +8287,11 @@
 				"glpi": "source read at 11.0.9: no embeddable widget or external portal integration for catalogue content; the self service interface (src/Glpi/Form/ServiceCatalog/ServiceCatalog.php:45) is GLPI's own helpdesk portal and grep -rli 'iframe embed\\|oembed' over src/ returns nothing."
 			},
 			"question": "Does the installed portaliq render stackiq's contribution (its PortalProviderLocator iterating installed apps), and is that portal live for any stackiq customer?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Wordt getoond op het portaal van portaliq, niet in stackiq."
+			}
 		},
 		{
 			"id": "share-ai-assistant",
@@ -6916,6 +8314,7 @@
 			"reachedOn": "nothing in stackiq reaches it; only OpenRegister's generic MCP endpoint",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "ai-assistant",
 			"note": "Stackiq has nothing of its own here. An AI client can reach catalogue objects only through OpenRegister's generic MCP 'objects' tool. A stackiq tool surface is specified in mcp-full-action-surface but not built.",
 			"evidence": {
 				"stackiq": "Still no MCP, tool-provider, TaskProcessing or ContextChat code in stackiq lib/, src/ or the register (grep 'mcp|ToolProvider|TaskProcessing|ContextChat|x-openregister-mcp' finds only an info.xml comment about OpenRegister's ContextChat). OpenRegister's generic MCP server (openregister appinfo/routes.php:2011 /api/mcp/v1/discover, :2018 POST /api/mcp; lib/Mcp/BuiltIn/ObjectsToolProvider.php:80-87 tool 'objects' with list/get/create/update/delete over any register) is the only path. Open changes mcp-full-action-surface (specs/mcp-tool-surface/spec.md: hand-written provider, read tools on 14 schemas, write tools behind existing guards; supersedes stackiq-mcp-adoption) and stackiq-mcp-adoption have no task ticked.",
@@ -6926,7 +8325,11 @@
 				"glpi": "source read at 11.0.9: grep -rli 'mcp\\|model context\\|openai\\|llm' over src/ returns nothing; AI tool access would go through the generic v2 API (src/Glpi/Api/HL/Controller/AssetController.php:149) with no tool interface of its own."
 			},
 			"question": "Does OpenRegister's MCP server expose the voorzieningen register's objects (module, catalogService, organization) for read and write to an AI client with a stackiq user's rights?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Een toolinterface (MCP) voor een AI-assistent, geen scherm."
+			}
 		},
 		{
 			"id": "share-webhooks",
@@ -6949,6 +8352,7 @@
 			"reachedOn": "Admin settings > Service desk exchange (sets up the outbound flow); Flows /flows; general webhooks only in OpenRegister's own admin UI",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "api-and-integrations",
 			"note": "Stackiq now pushes changes to one kind of outside system: once an admin sets up the service desk exchange, a change to an application in use is sent to TOPdesk or ServiceNow. Notifying any other system still goes through OpenRegister machinery, either its webhooks UI or a flow authored on stackiq's Flows page.",
 			"evidence": {
 				"stackiq": "New since 1 Oct (#1205): lib/Settings/flows/itsm-outbound-applications.json:5-30 is a stackiq flow template triggered on object.created/object.updated of usage that sends stackiq-owned fields to TOPdesk or ServiceNow through integriq; lib/Service/ItsmExchangeService.php:134 maps the outbound template; an admin creates and publishes it from Admin settings > Service desk exchange (src/views/settings/sections/ItsmExchange.vue, lib/Controller/ItsmExchangeController.php:98/:116 AuthorizedAdminSetting, appinfo/routes.php:304-307). There is still no generic webhook in stackiq: the Flows page (src/manifest.json:1085, menu FlowsMenu :208) authors OpenRegister flows, and OpenRegister has its own webhooks admin.",
@@ -6959,7 +8363,11 @@
 				"glpi": "source read at 11.0.9: src/Webhook.php:64 Webhook sends HTTP calls on new, update and delete events (src/Webhook.php:311 getDefaultEventsList) for management itemtypes including Appliance, Budget, Contact and others (src/Webhook.php:398). Reached on: Setup > Webhooks (src/Html.php:1331). Driven on the lab at 11.0.9 (2026-09-26): Setup > Webhooks (/front/webhook.php) lists webhooks with type, event and category."
 			},
 			"question": "Can a flow created on stackiq's Flows page be triggered by object.updated on a catalogue schema and make an outbound HTTP call to an external system?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkInstellingenUitwisseling"
+			}
 		},
 		{
 			"id": "ins-audit-trail",
@@ -6994,7 +8402,11 @@
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/collaborating-and-managing-data-in-fact-sheets: the fact sheet change log shows 'Old Value / New Value', 'User', 'Time' and 'Entries in the log cannot be deleted manually' (read 2026-09-26). Reached on: Fact sheet > History log."
 			},
 			"question": "Is OpenRegister's audit trail enabled for the voorzieningen register on a default install, so the History tab shows entries?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkApplicatie"
+			}
 		},
 		{
 			"id": "ins-live-updates",
@@ -7018,6 +8430,7 @@
 			"reachedOn": "Vulnerabilities /kwetsbaarheden, License posture /license-posture, Portfolio roadmap /portfolio-roadmap, Compliance matrix /compliance-matrix, Portfolio rationalization /portfolio-report",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "dashboard-and-overviews",
 			"note": "Five custom pages subscribe to collection events and refetch on a change. Whether the event ever arrives depends on OpenRegister and the push transport, which this repo cannot show.",
 			"evidence": {
 				"bluedolphin": "unknown: docs searched at https://help.bluedolphin.io/en/; views can be shared for collaboration (https://help.bluedolphin.io/en/articles/11967512-collaborate-on-an-architecture-view), but a list that refreshes by itself when another user changes an entry is not documented; the earlier intelligence citation alone is a claim (read 2026-09-26)",
@@ -7028,7 +8441,15 @@
 				"glpi": "source read at 11.0.9: grep -rli 'websocket\\|EventSource' over src/ finds only src/Glpi/Api/HL/Controller/NotificationController.php:303 'websocket: Not used by GLPI core'; lists refresh on reload only."
 			},
 			"question": "Does the installed OpenRegister publish or-collection-{register}-{schema} events over a transport (notify_push or SSE) that the nc-vue liveUpdatesPlugin receives, so these pages update without a reload?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": [
+					"SkDashboard",
+					"SkKwetsbaarheden",
+					"SkRoadmap"
+				]
+			}
 		},
 		{
 			"id": "ins-notifications",
@@ -7063,7 +8484,11 @@
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/notifications: 'Notification Channels ... Email : This is the primary channel for notifications ... Microsoft Teams', for fact sheet updates, subscriptions, to-dos and surveys; no in-app channel is listed (read 2026-09-26). Reached on: User menu > My Settings > Notifications."
 			},
 			"question": "Does the installed OpenRegister dispatch the x-openregister-notifications rules on vulnerability, software-review, moduleVersion and the scheduled rules on catalogContract/usage/module, as Nextcloud notifications to the listed recipients?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkDashboard"
+			}
 		},
 		{
 			"id": "ops-plugins",
@@ -7086,6 +8511,7 @@
 			"reachedOn": "Store /store (footer menu)",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "open-platform",
 			"note": "The store installs configuration sets and flows, not code plugins, and it depends on a registry being configured.",
 			"evidence": {
 				"glpi": "source read at 11.0.9: src/Glpi/Marketplace/View.php:53 marketplace view at front/marketplace.php (src/Glpi/Marketplace/View.php:103) and src/Glpi/Marketplace/Controller.php:64 download and install of plugins; src/Glpi/Marketplace/View.php:185 notes that a registration, at least a free one, is required. Reached on: Setup > Plugins > Marketplace. Driven on the lab at 11.0.9 (2026-09-26): Setup > Plugins > Marketplace, Discover tab: \"A registration, at least a free one, is required to use marketplace\"; plugins can still be installed by hand from their repositories.",
@@ -7096,7 +8522,11 @@
 				"sap-leanix": "https://help.sap.com/docs/leanix/ea/extension-hub: 'The SAP LeanIX extension hub is a centralized location where you can discover and install ready-to-use extensions for your SAP LeanIX workspace. These include meta model extensions, surveys, and custom reports'; public hub at https://exthub.leanix.net/en (read 2026-09-26). Reached on: Extension Hub."
 			},
 			"question": "Is a store registry configured on a default install, and are any stackiq configuration sets published to it?",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"canvas": "design-system",
+				"board": "SkFunctiesRoadmap"
+			}
 		},
 		{
 			"id": "org-field-level-permissions",
@@ -7115,6 +8545,7 @@
 			"reachedOn": "API: OpenRegister leaves the restricted fields out of anonymous reads; no page to configure the rules",
 			"provider": "openregister",
 			"providerHow": "read-from-code",
+			"feature": "roles-and-access",
 			"featureConfidence": "medium",
 			"topdesk": "no",
 			"evidence": {
@@ -7129,8 +8560,353 @@
 			"sap-leanix": "yes",
 			"bluedolphin": "partial",
 			"glpi": "partial",
-			"source": "pending-moved-2026-10-07"
+			"source": "pending-moved-2026-10-07",
+			"screen": {
+				"board": null,
+				"reason": "Afgedwongen door OpenRegister bij elke lezing van een object, zonder scherm."
+			}
 		}
 	],
-	"pending": []
+	"pending": [],
+	"specScreens": {
+		"aanbod-listings": {
+			"board": [
+				"SkApplicaties",
+				"SkOrganisatie"
+			]
+		},
+		"aangeboden-gebruik-api": {
+			"board": [
+				"SkOrganisatie",
+				"SkGebruikDetail"
+			]
+		},
+		"app-id-rename": {
+			"board": null,
+			"reason": "Interne migratie van de app-id, geen scherm."
+		},
+		"application-hosting-model": {
+			"board": [
+				"SkApplicatie"
+			]
+		},
+		"application-lifecycle-tracking": {
+			"board": [
+				"SkRoadmap",
+				"SkGebruikDetail"
+			]
+		},
+		"application-page": {
+			"board": [
+				"SkApplicatie"
+			]
+		},
+		"application-usage-pages": {
+			"board": [
+				"SkInGebruik",
+				"SkGebruikDetail"
+			]
+		},
+		"application-value-assessment": {
+			"board": [
+				"SkGebruikDetail",
+				"SkRapportages"
+			]
+		},
+		"archimate-export": {
+			"board": [
+				"SkInstellingenGegevens"
+			]
+		},
+		"archimate-import": {
+			"board": [
+				"SkInstellingenGegevens"
+			]
+		},
+		"archimate-import-progress": {
+			"board": [
+				"SkInstellingenGegevens"
+			]
+		},
+		"beta-alignment": {
+			"board": null,
+			"reason": "Afstemming van metadata, productpagina en docs, geen scherm."
+		},
+		"bio-compliance-assessment": {
+			"board": [
+				"SkStandaarden",
+				"SkComplianceMatrix"
+			]
+		},
+		"catalog-ratings": {
+			"board": [
+				"SkApplicatie"
+			]
+		},
+		"catalogue-connection-pages": {
+			"board": [
+				"SkKoppelingen",
+				"SkApplicatie"
+			]
+		},
+		"cmdb-export-import": {
+			"board": [
+				"SkCmdb",
+				"SkApplicaties"
+			]
+		},
+		"concept-organizations-widget": {
+			"board": [
+				"SkDashboard"
+			]
+		},
+		"contactpersonen-api": {
+			"board": [
+				"SkOrganisatie"
+			]
+		},
+		"contactpersoon-sync": {
+			"board": [
+				"SkOrganisatie",
+				"SkInstellingenGegevens"
+			]
+		},
+		"contract-decision-delegation": {
+			"board": [
+				"SkContract"
+			]
+		},
+		"cronjob-context": {
+			"board": null,
+			"reason": "Achtergrondtaak voor de synchronisatie, geen scherm."
+		},
+		"dashboard-views-api": {
+			"board": [
+				"SkDashboard",
+				"SkApplicaties"
+			]
+		},
+		"deelnames-gebruik": {
+			"board": [
+				"SkGebruikDetail",
+				"SkGemmaPlaat"
+			]
+		},
+		"email-delivery": {
+			"board": [
+				"SkBeheerToegang"
+			]
+		},
+		"english-vocabulary-migration": {
+			"board": null,
+			"reason": "Datamigratie naar Engelse termen, geen scherm."
+		},
+		"eol-feed-integration": {
+			"board": [
+				"SkInstellingenGegevens",
+				"SkRoadmap"
+			]
+		},
+		"fe-object-modals": {
+			"board": [
+				"SkApplicaties",
+				"SkKwetsbaarheden"
+			]
+		},
+		"fe-organizations": {
+			"board": [
+				"SkOrganisaties",
+				"SkOrganisatie"
+			]
+		},
+		"fe-settings-ui": {
+			"board": [
+				"SkInstellingenGegevens",
+				"SkInstellingenUitwisseling",
+				"SkBeheerToegang"
+			]
+		},
+		"fe-shell-navigation": {
+			"board": [
+				"SkDashboard"
+			]
+		},
+		"fe-stores": {
+			"board": null,
+			"reason": "Frontend-statelaag, geen eigen scherm."
+		},
+		"federated-catalog-sync": {
+			"board": [
+				"SkInstellingenUitwisseling"
+			]
+		},
+		"first-time-setup": {
+			"board": [
+				"SkInstellingenGegevens"
+			]
+		},
+		"gebruik-services": {
+			"board": null,
+			"reason": "Backendservice voor gebruiksrecords, geen scherm."
+		},
+		"gemma-faceted-search": {
+			"board": [
+				"SkApplicaties"
+			]
+		},
+		"licence-declaration": {
+			"board": null,
+			"reason": "Licentieverklaring in metadata, geen scherm."
+		},
+		"licence-seats": {
+			"board": [
+				"SkContract",
+				"SkLicenties"
+			]
+		},
+		"method-decomposition": {
+			"board": null,
+			"reason": "Refactoring van controllers en services, geen scherm."
+		},
+		"module-compliance-assessment": {
+			"board": [
+				"SkComplianceMatrix"
+			]
+		},
+		"module-overlay-rendering": {
+			"board": [
+				"SkGemmaPlaat"
+			]
+		},
+		"module-vulnerability-tracking": {
+			"board": [
+				"SkKwetsbaarheden",
+				"SkModuleversie"
+			]
+		},
+		"multi-org-membership": {
+			"board": [
+				"SkOrganisatie"
+			]
+		},
+		"org-archimate-export": {
+			"board": [
+				"SkInstellingenGegevens"
+			]
+		},
+		"organisatie-service": {
+			"board": null,
+			"reason": "Backendservice voor organisaties, geen scherm."
+		},
+		"organisation-merge": {
+			"board": [
+				"SkOrganisatie"
+			]
+		},
+		"organization-sync": {
+			"board": [
+				"SkInstellingenGegevens"
+			]
+		},
+		"portal-contribution": {
+			"board": null,
+			"reason": "Catalogusinhoud verschijnt op het portaal van portaliq, niet op een stackiq-scherm."
+		},
+		"portfolio-rationalization-time": {
+			"board": [
+				"SkRapportages",
+				"SkInGebruik"
+			]
+		},
+		"progress-tracking": {
+			"board": null,
+			"reason": "Backendservice voor voortgang, geen eigen scherm."
+		},
+		"publication-field-rules": {
+			"board": null,
+			"reason": "Regels die OpenRegister bij elke publieke lezing toepast, zonder scherm."
+		},
+		"realtime-updates-ui": {
+			"board": [
+				"SkKwetsbaarheden",
+				"SkRoadmap"
+			]
+		},
+		"repair-init": {
+			"board": null,
+			"reason": "Installatiestap die standaardinstellingen zet, geen scherm."
+		},
+		"sbom-import": {
+			"board": [
+				"SkModuleversie"
+			]
+		},
+		"sc-handlers": {
+			"board": null,
+			"reason": "Event-handlers die op de achtergrond accounts en groepen bijwerken, zonder scherm."
+		},
+		"settings-admin-controller": {
+			"board": null,
+			"reason": "REST-endpoints voor instellingen, geen scherm."
+		},
+		"settings-service": {
+			"board": null,
+			"reason": "Backendservice voor instellingen, geen scherm."
+		},
+		"software-catalog": {
+			"board": null,
+			"reason": "Schemanamen in OpenRegister, geen scherm."
+		},
+		"software-license-posture": {
+			"board": [
+				"SkLicenties"
+			]
+		},
+		"softwarecatalog-adopt-or-abstractions": {
+			"board": null,
+			"reason": "Gebruik van gedeelde OpenRegister-abstracties, geen scherm."
+		},
+		"softwarecatalog-contacts-to-nc": {
+			"board": [
+				"SkOrganisatie"
+			]
+		},
+		"softwarecatalog-manifest-v1": {
+			"board": null,
+			"reason": "Het manifest dat de pagina's beschrijft; het levert alle schermen, geen eigen scherm."
+		},
+		"softwarecatalog-notifications": {
+			"board": [
+				"SkDashboard"
+			]
+		},
+		"softwarecatalog-store-migration": {
+			"board": null,
+			"reason": "Migratie van Pinia-stores, geen scherm."
+		},
+		"softwarecatalogue-orchestration": {
+			"board": null,
+			"reason": "Reacties op gebeurtenissen die op de achtergrond draaien, zonder scherm."
+		},
+		"suite-wizard": {
+			"board": [
+				"SkSuiteWizard"
+			]
+		},
+		"vendor-product-master-data": {
+			"board": [
+				"SkOrganisaties",
+				"SkOrganisatie"
+			]
+		},
+		"vendor-visibility-rbac": {
+			"board": null,
+			"reason": "Afgedwongen door OpenRegister-RBAC bij elke lezing, zonder scherm."
+		},
+		"view-enrichment-api": {
+			"board": [
+				"SkGemmaPlaat"
+			]
+		}
+	}
 }
diff --git a/openspec/specs/app-id-rename/spec.md b/openspec/specs/app-id-rename/spec.md
index 3c9a0e03a..91e303393 100644
--- a/openspec/specs/app-id-rename/spec.md
+++ b/openspec/specs/app-id-rename/spec.md
@@ -102,9 +102,16 @@ The appId this app passes to OpenRegister's configuration importer is NOT frozen
 
 - **GIVEN** a user who added the concept organisations widget to their Nextcloud dashboard before the rename
 - **WHEN** the dashboard loads after the rename
-- **THEN** `ConceptOrganisatiesWidget::getId()` MUST still return `softwarecatalog_concept_organisaties_widget`, because the Dashboard app stores each user's chosen widgets by widget id in its own `oc_preferences` namespace, which this app's repair steps cannot reach
+- **THEN** `ConceptOrganisatiesWidget::getId()` MUST still return `softwarecatalog_concept_organisaties_widget`, because the Dashboard app stores each user's chosen widgets by widget id in its own `oc_preferences` namespace, which a renamed id silently stops matching
 - @e2e exclude Cross-app persistence behaviour; asserted at the unit level against the frozen literal.
 
+#### Scenario: A dashboard that chose the widget under the renamed id keeps it too
+
+- **GIVEN** a user who added the widget while stackiq 0.1.148 through 0.2.0 or `beta` registered it as `stackiq_concept_organisaties_widget`
+- **WHEN** the app upgrades to a version that registers the frozen id again
+- **THEN** the repair step `RepointDashboardWidgetId` MUST rewrite `stackiq_concept_organisaties_widget` to `softwarecatalog_concept_organisaties_widget` in that user's `dashboard`/`layout` preference, in place and without listing the frozen id twice, because the Dashboard rows are ordinary user preferences that `IConfig` reaches like this app's own
+- @e2e exclude Cross-app persistence behaviour; asserted at the unit level against the rewritten layout.
+
 #### Scenario: The OpenRegister import keeps addressing the existing register and schemas
 
 - **GIVEN** OpenRegister holds this app's register and schemas created under the old id `softwarecatalog`
diff --git a/src/customComponents.js b/src/customComponents.js
index d3c8c0f77..f6ec30d97 100644
--- a/src/customComponents.js
+++ b/src/customComponents.js
@@ -151,7 +151,7 @@ export default {
 	// object) and `referentiecomponent`/`standaard` are exposed here by display
 	// NAME, not the identifiers the schema stores — feeding them through that
 	// path would break the list. Stays a custom page (wrapping `CnFacetSidebar`
-	// + a standalone `CnIndexPage` narrowed via `{ id: matchedObjectIds }`) until
+	// + a standalone `CnIndexPage` narrowed via `{ _ids: matchedObjectIds }`) until
 	// the lib grows a facet-sidebar mode whose counts/narrowing are computed by
 	// an external, non-schema-field aggregation (see FacetedCatalogIndexView.vue).
 	FacetedCatalogIndexView,
diff --git a/src/manifest.d/connections.json b/src/manifest.d/connections.json
index 2e9072796..075d92be3 100644
--- a/src/manifest.d/connections.json
+++ b/src/manifest.d/connections.json
@@ -19,7 +19,15 @@
 				"register": "@resolve:voorzieningen_register",
 				"schema": "connection",
 				"description": "Every connection between applications, and from an application to a national provision.",
-				"columns": ["name", "type", "status", "moduleA", "moduleB", "nonMunicipalProvision", "dataExchangeDirection"],
+				"columns": [
+					"name",
+					"type",
+					"status",
+					{ "key": "moduleA", "label": "From application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } },
+					{ "key": "moduleB", "label": "To application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } },
+					"nonMunicipalProvision",
+					"dataExchangeDirection"
+				],
 				"filterMenu": true,
 				"quickFilters": [
 					{ "label": "All", "filter": {}, "default": true },
diff --git a/src/manifest.d/usages.json b/src/manifest.d/usages.json
index 1ff71f97e..66990ad7d 100644
--- a/src/manifest.d/usages.json
+++ b/src/manifest.d/usages.json
@@ -19,7 +19,15 @@
 				"register": "@resolve:voorzieningen_register",
 				"schema": "usage",
 				"description": "The applications your organisation uses, with the version it runs, where it stands and who owns it.",
-				"columns": ["module", "moduleVersion", "status", "businessOwner", "technicalOwner", "timeClassification", "serviceDeskRecordId"],
+				"columns": [
+					{ "key": "module", "label": "Application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } },
+					{ "key": "moduleVersion", "label": "Version", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "moduleVersion", "labelField": "version" } },
+					"status",
+					"businessOwner",
+					"technicalOwner",
+					"timeClassification",
+					"serviceDeskRecordId"
+				],
 				"filterMenu": true,
 				"quickFilters": [
 					{ "label": "All", "filter": {}, "default": true },
diff --git a/src/manifest.json b/src/manifest.json
index 13080eed0..22b321684 100644
--- a/src/manifest.json
+++ b/src/manifest.json
@@ -421,8 +421,8 @@
 					{ "id": "org-stats-applications", "type": "stats-block", "title": "Applications", "icon": "ChartBar", "content": { "entries": [ { "title": "Applications", "register": "@resolve:voorzieningen_register", "schema": "module", "metric": "count", "filter": { "provider": "@objectId" } } ] } },
 					{ "id": "org-stats-contact-persons", "type": "stats-block", "title": "Contact persons", "icon": "ChartBar", "content": { "entries": [ { "title": "Contact persons", "register": "@resolve:voorzieningen_register", "schema": "contactPerson", "metric": "count", "filter": { "organization": "@objectId" } } ] } },
 					{ "id": "org-diensten", "type": "object-list", "title": "Services", "icon": "HandshakeOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "catalogService", "filter": { "provider": "@objectId" }, "columns": [ { "key": "type", "label": "Type" } ], "limit": 25, "emptyText": "No services registered for this organisation yet" } },
-					{ "id": "org-modules", "type": "object-list", "title": "Applications", "icon": "Package", "content": { "register": "@resolve:voorzieningen_register", "schema": "module", "filter": { "provider": "@objectId" }, "columns": [ { "key": "licentietype", "label": "License type" }, { "key": "bbnLevel", "label": "BBN level" } ], "limit": 25, "rowRoute": "ModuleDetail", "emptyText": "No applications registered for this organisation yet" } },
-					{ "id": "org-usages", "type": "object-list", "title": "Applications in use", "icon": "OfficeBuilding", "content": { "register": "@resolve:voorzieningen_register", "schema": "usage", "filter": { "consumer": "@objectId" }, "columns": [ { "key": "module", "label": "Application" }, { "key": "moduleVersion", "label": "Version" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "GebruikDetail", "viewAllRoute": "Gebruik", "viewAllQuery": { "consumer": "@objectId" }, "allowCreate": false, "emptyText": "No applications in use recorded for this organisation yet" } },
+					{ "id": "org-modules", "type": "object-list", "title": "Applications", "icon": "Package", "content": { "register": "@resolve:voorzieningen_register", "schema": "module", "filter": { "provider": "@objectId" }, "columns": [ { "key": "name", "label": "Name" }, { "key": "licentietype", "label": "License type" }, { "key": "bbnLevel", "label": "BBN level" } ], "limit": 25, "rowRoute": "ModuleDetail", "viewAllRoute": "Modules", "viewAllQuery": { "provider": "@objectId" }, "emptyText": "No applications registered for this organisation yet" } },
+					{ "id": "org-usages", "type": "object-list", "title": "Applications in use", "icon": "OfficeBuilding", "content": { "register": "@resolve:voorzieningen_register", "schema": "usage", "filter": { "consumer": "@objectId" }, "columns": [ { "key": "module", "label": "Application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } }, { "key": "moduleVersion", "label": "Version", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "moduleVersion", "labelField": "version" } }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "GebruikDetail", "viewAllRoute": "Gebruik", "viewAllQuery": { "consumer": "@objectId" }, "allowCreate": false, "emptyText": "No applications in use recorded for this organisation yet" } },
 					{ "id": "org-contactpersonen", "type": "object-list", "title": "Contact persons", "icon": "AccountGroup", "content": { "register": "@resolve:voorzieningen_register", "schema": "contactPerson", "filter": { "organization": "@objectId" }, "columns": [ { "key": "role", "label": "Function" }, { "key": "roles", "label": "Roles" } ], "limit": 25, "rowRoute": "ContactpersoonDetail", "emptyText": "No contact persons linked to this organisation yet" } }
 				],
 				"layout": [
@@ -511,9 +511,9 @@
 					{ "id": "md-related", "type": "related", "title": "Vendor & services", "icon": "LinkVariant" },
 					{ "id": "md-compliance", "type": "object-list", "title": "Compliance claims", "icon": "ClipboardCheckOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "compliancy", "filter": { "module": "@objectId" }, "columns": [ { "key": "standardVersion", "label": "Standard" }, { "key": "bioMeasure", "label": "BIO measure" }, { "key": "url", "label": "Evidence" } ], "limit": 50, "rowRoute": "KompliantieDetail", "allowCreate": false, "emptyText": "No compliance claims yet" } },
 					{ "id": "md-versions", "type": "object-list", "title": "Application versions", "icon": "SourceBranch", "content": { "register": "@resolve:voorzieningen_register", "schema": "moduleVersion", "filter": { "module": "@objectId" }, "columns": [ { "key": "version", "label": "Version" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "ModuleversieDetail", "allowCreate": false, "emptyText": "No versions registered yet" } },
-					{ "id": "md-usages", "type": "object-list", "title": "Usages", "icon": "OfficeBuilding", "content": { "register": "@resolve:voorzieningen_register", "schema": "usage", "filter": { "module": "@objectId" }, "columns": [ { "key": "consumer", "label": "Organisation" }, { "key": "moduleVersion", "label": "Version" }, { "key": "status", "label": "Status" } ], "limit": 50, "rowRoute": "GebruikDetail", "viewAllRoute": "Gebruik", "viewAllQuery": { "module": "@objectId" }, "addLabel": "Add to our landscape", "formIncludeFields": [ "consumer", "moduleVersion", "status", "businessOwner", "technicalOwner" ], "emptyText": "No organisation registered a usage yet" } },
-					{ "id": "md-connections-out", "type": "object-list", "title": "Connections from this application", "icon": "LinkVariant", "content": { "register": "@resolve:voorzieningen_register", "schema": "connection", "filter": { "moduleA": "@objectId" }, "columns": [ { "key": "moduleB", "label": "To application" }, { "key": "nonMunicipalProvision", "label": "To national provision" }, { "key": "type", "label": "Type" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "KoppelingDetail", "viewAllRoute": "Koppelingen", "viewAllQuery": { "moduleA": "@objectId" }, "allowCreate": false, "emptyText": "No connections start at this application" } },
-					{ "id": "md-connections-in", "type": "object-list", "title": "Connections to this application", "icon": "LinkVariant", "content": { "register": "@resolve:voorzieningen_register", "schema": "connection", "filter": { "moduleB": "@objectId" }, "columns": [ { "key": "moduleA", "label": "From application" }, { "key": "type", "label": "Type" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "KoppelingDetail", "viewAllRoute": "Koppelingen", "viewAllQuery": { "moduleB": "@objectId" }, "allowCreate": false, "emptyText": "No connections end at this application" } },
+					{ "id": "md-usages", "type": "object-list", "title": "Usages", "icon": "OfficeBuilding", "content": { "register": "@resolve:voorzieningen_register", "schema": "usage", "filter": { "module": "@objectId" }, "columns": [ { "key": "consumer", "label": "Organisation", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "organization", "labelField": "name" } }, { "key": "moduleVersion", "label": "Version", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "moduleVersion", "labelField": "version" } }, { "key": "status", "label": "Status" } ], "limit": 50, "rowRoute": "GebruikDetail", "viewAllRoute": "Gebruik", "viewAllQuery": { "module": "@objectId" }, "addLabel": "Add to our landscape", "formIncludeFields": [ "consumer", "moduleVersion", "status", "businessOwner", "technicalOwner" ], "emptyText": "No organisation registered a usage yet" } },
+					{ "id": "md-connections-out", "type": "object-list", "title": "Connections from this application", "icon": "LinkVariant", "content": { "register": "@resolve:voorzieningen_register", "schema": "connection", "filter": { "moduleA": "@objectId" }, "columns": [ { "key": "moduleB", "label": "To application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } }, { "key": "nonMunicipalProvision", "label": "To national provision" }, { "key": "type", "label": "Type" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "KoppelingDetail", "viewAllRoute": "Koppelingen", "viewAllQuery": { "moduleA": "@objectId" }, "allowCreate": false, "emptyText": "No connections start at this application" } },
+					{ "id": "md-connections-in", "type": "object-list", "title": "Connections to this application", "icon": "LinkVariant", "content": { "register": "@resolve:voorzieningen_register", "schema": "connection", "filter": { "moduleB": "@objectId" }, "columns": [ { "key": "moduleA", "label": "From application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } }, { "key": "type", "label": "Type" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "KoppelingDetail", "viewAllRoute": "Koppelingen", "viewAllQuery": { "moduleB": "@objectId" }, "allowCreate": false, "emptyText": "No connections end at this application" } },
 					{ "id": "md-ai-systems", "type": "object-list", "title": "AI systems", "icon": "RobotOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "aiSystem", "filter": { "module": "@objectId" }, "columns": [ { "key": "kind", "label": "Kind" }, { "key": "aiActRiskCategory", "label": "AI Act risk category" }, { "key": "status", "label": "Status" } ], "limit": 25, "rowRoute": "AiSystemDetail", "viewAllRoute": "AiSystems", "viewAllQuery": { "module": "@objectId" }, "allowCreate": false, "emptyText": "No AI systems registered for this application" } },
 					{ "id": "md-maintenance", "type": "object-list", "title": "Planned maintenance", "icon": "Calendar", "content": { "register": "@resolve:voorzieningen_register", "schema": "maintenanceWindow", "filter": { "module": "@objectId" }, "sort": { "field": "startsAt", "dir": "asc" }, "columns": [ { "key": "title", "label": "Title" }, { "key": "startsAt", "label": "Starts at" }, { "key": "endsAt", "label": "Ends at" }, { "key": "impact", "label": "Impact" }, { "key": "status", "label": "Status" } ], "limit": 25, "addLabel": "Announce maintenance", "formIncludeFields": [ "title", "description", "moduleVersion", "startsAt", "endsAt", "impact" ], "emptyText": "No maintenance planned on this application" } }
 				],
@@ -616,20 +616,20 @@
 			"type": "custom",
 			"title": "Applications",
 			"component": "FacetedCatalogIndexView",
-			"_note": "Faceted index page (gemma-faceted-search): CnFacetSidebar (live GEMMA-dimension counts from FacetService) + a standalone CnIndexPage narrowed via { id: matchedObjectIds }. Stays custom rather than type:index — see customComponents.js's FacetedCatalogIndexView entry for why CnIndexPage's own embedded facet sidebar cannot drive this narrowing. bio-compliance-assessment: bbnLevel/dpiaStatus columns + BBN/DPIA quickFilters reconciled onto this page after gemma-faceted-search (#382) merged — see FacetedCatalogIndexView.vue's quickFilters prop docblock for how the quick filter's field constraints compose with the facet { id: ... } narrowing (disjoint keys, additive AND, no clobber).",
+			"_note": "Faceted index page (gemma-faceted-search): CnFacetSidebar (live GEMMA-dimension counts from FacetService) + a standalone CnIndexPage narrowed via { _ids: matchedObjectIds } (OpenRegister's list parameter; the objects endpoint ignores a plain id filter). Columns are objects: `provider` is a reference, so it renders through the fkResolve cell widget (uuid → organisation name) and carries its own label — object-typed properties get no schema-generated column, so a bare key showed the raw uuid under the header 'provider'. Stays custom rather than type:index — see customComponents.js's FacetedCatalogIndexView entry for why CnIndexPage's own embedded facet sidebar cannot drive this narrowing. bio-compliance-assessment: bbnLevel/dpiaStatus columns + BBN/DPIA quickFilters reconciled onto this page after gemma-faceted-search (#382) merged — see FacetedCatalogIndexView.vue's quickFilters prop docblock for how the quick filter's field constraints compose with the facet { _ids: ... } narrowing (disjoint keys, additive AND, no clobber).",
 			"config": {
 				"register": "@resolve:voorzieningen_register",
 				"schema": "module",
 				"detailRoute": "ModuleDetail",
 				"description": "Browse the application (module) catalogue, filtered by GEMMA architecture dimension.",
 				"columns": [
-					"name",
-					"provider",
-					"type",
-					"licentietype",
-					"publicationDate",
-					"bbnLevel",
-					"dpiaStatus"
+					{ "key": "name", "label": "Name" },
+					{ "key": "provider", "label": "Supplier", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "organization", "labelField": "name" } },
+					{ "key": "type", "label": "Type" },
+					{ "key": "licentietype", "label": "License type" },
+					{ "key": "publicationDate", "label": "Publication date" },
+					{ "key": "bbnLevel", "label": "BBN level" },
+					{ "key": "dpiaStatus", "label": "DPIA status" }
 				],
 				"quickFilters": [
 					{
@@ -756,7 +756,7 @@
 					{ "id": "st-data", "type": "data", "title": "Standard", "icon": "ShieldCheckOutline", "content": { "columns": 2 } },
 					{ "id": "st-files", "type": "integration", "integrationId": "files", "title": "Specification documents", "icon": "FolderOutline" },
 					{ "id": "st-related", "type": "related", "title": "Related", "icon": "LinkVariant" },
-					{ "id": "st-compliance", "type": "object-list", "title": "Compliance claims for this standard", "icon": "ClipboardCheckOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "compliancy", "filter": { "standardGemma": "@object.name" }, "columns": [ { "key": "module", "label": "Module" }, { "key": "standardVersion", "label": "Standard version" }, { "key": "url", "label": "Evidence URL" } ], "limit": 50, "rowRoute": "KompliantieDetail", "allowCreate": false, "emptyText": "No compliance claims yet" } }
+					{ "id": "st-compliance", "type": "object-list", "title": "Compliance claims for this standard", "icon": "ClipboardCheckOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "compliancy", "filter": { "standardGemma": "@object.name" }, "columns": [ { "key": "module", "label": "Module", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } }, { "key": "standardVersion", "label": "Standard version" }, { "key": "url", "label": "Evidence URL" } ], "limit": 50, "rowRoute": "KompliantieDetail", "allowCreate": false, "emptyText": "No compliance claims yet" } }
 				],
 				"layout": [
 					{ "id": "1", "widgetId": "st-data", "gridX": 0, "gridY": 0, "gridWidth": 8, "gridHeight": 4 },
@@ -808,7 +808,7 @@
 				"_note": "Catalog archetype (a BIO 2.0 measure), mirroring StandaardDetail's shape for the parallel bioMaatregel relation (design.md Decision 1: compliancy links to a standaardversie OR a bioMaatregel, never a third parallel model). Body: measure data 8-wide (code, naam, omschrijving, thema, bioVersie, bbnNiveau, bron). Below, a compliancy object-list shows every compliance claim referencing this measure (compliancy.bioMaatregel = @objectId), mirroring how StandaardDetail's st-compliance widget shows claims for a standard.",
 				"widgets": [
 					{ "id": "bm-data", "type": "data", "title": "BIO measure", "icon": "ShieldCheckOutline", "content": { "columns": 2 } },
-					{ "id": "bm-compliance", "type": "object-list", "title": "Compliance claims for this measure", "icon": "ClipboardCheckOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "compliancy", "filter": { "bioMeasure": "@objectId" }, "columns": [ { "key": "module", "label": "Module" }, { "key": "url", "label": "Evidence URL" } ], "limit": 50, "rowRoute": "KompliantieDetail", "allowCreate": false, "emptyText": "No compliance claims yet" } }
+					{ "id": "bm-compliance", "type": "object-list", "title": "Compliance claims for this measure", "icon": "ClipboardCheckOutline", "content": { "register": "@resolve:voorzieningen_register", "schema": "compliancy", "filter": { "bioMeasure": "@objectId" }, "columns": [ { "key": "module", "label": "Module", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } }, { "key": "url", "label": "Evidence URL" } ], "limit": 50, "rowRoute": "KompliantieDetail", "allowCreate": false, "emptyText": "No compliance claims yet" } }
 				],
 				"layout": [
 					{ "id": "1", "widgetId": "bm-data", "gridX": 0, "gridY": 0, "gridWidth": 12, "gridHeight": 4 },
@@ -943,11 +943,11 @@
 				"register": "@resolve:voorzieningen_register",
 				"schema": "moduleVersion",
 				"columns": [
-					"version",
-					"module",
-					"dateInDevelopment",
-					"dateInUse",
-					"status"
+					{ "key": "version", "label": "Version" },
+					{ "key": "module", "label": "Application", "widget": "fkResolve", "widgetProps": { "register": "@resolve:voorzieningen_register", "schema": "module", "labelField": "name" } },
+					{ "key": "dateInDevelopment", "label": "In development since" },
+					{ "key": "dateInUse", "label": "In use since" },
+					{ "key": "status", "label": "Status" }
 				],
 				"quickFilters": [
 					{ "label": "All", "filter": {}, "default": true },
diff --git a/src/store/modules/facets.js b/src/store/modules/facets.js
index 0f7ddfe3b..a8a322d79 100644
--- a/src/store/modules/facets.js
+++ b/src/store/modules/facets.js
@@ -35,7 +35,7 @@ import {
  * `standaardVersies`, … — see design.md). Letting the bare dimension name
  * leak into `$route.query` would make CnIndexPage attempt an incorrect
  * direct-field filter (near-guaranteed zero results) IN ADDITION to this
- * feature's own `{ id: matchedObjectIds }` narrowing. The `_gf_` prefix
+ * feature's own `{ _ids: matchedObjectIds }` narrowing. The `_gf_` prefix
  * keeps GEMMA facet state in the URL (deep-linkable, per spec) while staying
  * invisible to that generic passthrough (`_`-prefixed keys are reserved/
  * skipped there).
@@ -158,7 +158,7 @@ export const useFacetStore = defineStore('facets', {
 		/**
 		 * The RBAC/filter/search-scoped object id set the last-fetched facet
 		 * response describes (`_meta.matchedObjectIds`) — used to narrow the
-		 * schema's own object-list query via `{ id: [...] }` (see
+		 * schema's own object-list query via `{ _ids: [...] }` (see
 		 * `FacetService::computeFacetsForRequest()`'s docblock for why an
 		 * id-based filter is used instead of re-deriving one from the facet
 		 * selection: `domain`/`applicationService` are not module/catalogService
diff --git a/src/utils/facetNarrowing.js b/src/utils/facetNarrowing.js
new file mode 100644
index 000000000..58b6a9047
--- /dev/null
+++ b/src/utils/facetNarrowing.js
@@ -0,0 +1,34 @@
+/**
+ * The `CnIndexPage` filter that narrows a self-fetch object list to the ids
+ * a facets response matched (gemma-faceted-search).
+ *
+ * The filter key is OpenRegister's `_ids` list parameter, NOT a plain `id`
+ * field filter: the objects endpoint ignores `id` (`id[]=<uuid>` returned
+ * the whole list on OpenRegister 2.1.36), so a search or GEMMA facet
+ * selection narrowed nothing while the facet counts said it did.
+ *
+ * @spec openspec/specs/gemma-faceted-search/spec.md#requirement-facet-counts-reflect-the-currently-filtered-set-not-the-unfiltered-universe
+ * @spec openspec/specs/gemma-faceted-search/spec.md#requirement-facets-combine-with-free-text-search
+ */
+
+/**
+ * Id that no real object carries. Sent when the facets matched nothing, so
+ * the list is empty instead of `CnIndexPage` treating an empty id list as
+ * "no filter" and showing everything.
+ */
+export const FACET_NO_MATCH_SENTINEL = '__gemma_facet_no_match__'
+
+/**
+ * Build the narrowing filter for a matched id set.
+ *
+ * @param {Array<string>} ids The `_meta.matchedObjectIds` of the last facets response.
+ * @return {{ _ids: Array<string> }} The `CnIndexPage` `filter` prop value.
+ * @spec openspec/specs/gemma-faceted-search/spec.md#requirement-facet-counts-reflect-the-currently-filtered-set-not-the-unfiltered-universe
+ * @spec openspec/specs/gemma-faceted-search/spec.md#requirement-facets-combine-with-free-text-search
+ */
+export function facetNarrowingFilter(ids) {
+	const list = Array.isArray(ids)
+		? ids.filter((id) => typeof id === 'string' && id !== '')
+		: []
+	return { _ids: list.length > 0 ? list : [FACET_NO_MATCH_SENTINEL] }
+}
diff --git a/src/utils/facetNarrowing.spec.js b/src/utils/facetNarrowing.spec.js
new file mode 100644
index 000000000..06f101c92
--- /dev/null
+++ b/src/utils/facetNarrowing.spec.js
@@ -0,0 +1,32 @@
+/**
+ * facetNarrowing.spec.js — the filter that narrows the Applications list to
+ * the ids a facets response matched uses OpenRegister's `_ids` parameter.
+ *
+ * @spec openspec/specs/gemma-faceted-search/spec.md#requirement-facets-combine-with-free-text-search
+ */
+import {
+	FACET_NO_MATCH_SENTINEL,
+	facetNarrowingFilter,
+} from '../../src/utils/facetNarrowing.js'
+
+describe('facetNarrowingFilter', () => {
+	it('sends the matched ids as the _ids list parameter, never as a plain id field filter', () => {
+		const filter = facetNarrowingFilter(['a1', 'b2'])
+		expect(filter).toEqual({ _ids: ['a1', 'b2'] })
+		expect(filter).not.toHaveProperty('id')
+	})
+
+	it('sends the no-match sentinel when nothing matched, so the list is empty rather than unfiltered', () => {
+		expect(facetNarrowingFilter([])).toEqual({ _ids: [FACET_NO_MATCH_SENTINEL] })
+		expect(facetNarrowingFilter(undefined)).toEqual({
+			_ids: [FACET_NO_MATCH_SENTINEL],
+		})
+	})
+
+	it('drops blank entries before deciding whether anything matched', () => {
+		expect(facetNarrowingFilter(['', null, 'c3'])).toEqual({ _ids: ['c3'] })
+		expect(facetNarrowingFilter(['', null])).toEqual({
+			_ids: [FACET_NO_MATCH_SENTINEL],
+		})
+	})
+})
diff --git a/src/views/FacetedCatalogIndexView.vue b/src/views/FacetedCatalogIndexView.vue
index cac15d0eb..f80deda08 100644
--- a/src/views/FacetedCatalogIndexView.vue
+++ b/src/views/FacetedCatalogIndexView.vue
@@ -21,7 +21,7 @@ display NAME, not the `referentieComponenten`/`standaardVersies` identifiers
 the schema actually stores. Feeding GEMMA facet keys through that path would
 apply an incorrect direct-field filter (near-guaranteed empty results)
 alongside this feature's own narrowing. This view instead narrows the
-self-fetch list via the bounded, RBAC-scoped `{ id: matchedObjectIds }` list
+self-fetch list via the bounded, RBAC-scoped `{ _ids: matchedObjectIds }` list
 `FacetService` already computes (`_meta.matchedObjectIds` — see
 `lib/Service/FacetService.php::computeFacetsForRequest()`), and keeps GEMMA
 facet state in the URL under `_gf_`-prefixed query keys so CnIndexPage's own
@@ -147,6 +147,7 @@ import FolderStarOutline from 'vue-material-design-icons/FolderStarOutline.vue'
 import SaveFacetViewModal from '../modals/SaveFacetViewModal.vue'
 import { useFacetStore } from '../store/modules/facets.js'
 import { rowDetailLocation } from '../utils/applicationContracts.js'
+import { facetNarrowingFilter } from '../utils/facetNarrowing.js'
 import { buildFacetDimensionSchema } from '../utils/facetSchema.js'
 
 /** Dimension key -> translated label, matching `FacetController`'s query params. */
@@ -226,10 +227,10 @@ export default {
 		 * with the GEMMA facet narrowing below: `CnIndexPage`'s self-fetch
 		 * merges `{ ...base(filter prop), ...activeTab.filter }` (see
 		 * `useSelfFetchList.js#fixedFilters`), and this view's own `filter`
-		 * prop only ever carries the single `id` key
-		 * (`{ id: matchedObjectIds }`, see `listFilter` below). A quick
+		 * prop only ever carries the single `_ids` key
+		 * (`{ _ids: matchedObjectIds }`, see `listFilter` below). A quick
 		 * filter's keys (`bbnLevel`, `dpiaStatus`, …) never collide with
-		 * `id`, so the merge is additive — both the facet-matched id set AND
+		 * `_ids`, so the merge is additive — both the facet-matched id set AND
 		 * the active quick filter's field constraints apply together
 		 * (logical AND), never clobbering one another.
 		 */
@@ -307,10 +308,11 @@ export default {
 		},
 
 		/**
-		 * Bounded `{ id: [...] }` narrowing filter for `CnIndexPage`'s
+		 * Bounded `{ _ids: [...] }` narrowing filter for `CnIndexPage`'s
 		 * self-fetch object list, sourced from the last facets response's
 		 * `_meta.matchedObjectIds`. Empty object (no narrowing) when no facet
-		 * filter or search term is active.
+		 * filter or search term is active. `facetNarrowingFilter` says why the
+		 * key is `_ids` and what is sent when nothing matched.
 		 *
 		 * @return {object} The `CnIndexPage` `filter` prop value.
 		 * @spec openspec/specs/gemma-faceted-search/spec.md#requirement-facet-counts-reflect-the-currently-filtered-set-not-the-unfiltered-universe
@@ -320,11 +322,9 @@ export default {
 				return {}
 			}
 
-			const ids = this.facetStore.matchedObjectIdsFor(this.schema)
-			// A real (if unlikely) id can never collide with this sentinel —
-			// forces a correct EMPTY list rather than `CnIndexPage` treating
-			// an empty `id` array as "no filter" (showing everything).
-			return { id: ids.length > 0 ? ids : ['__gemma_facet_no_match__'] }
+			return facetNarrowingFilter(
+				this.facetStore.matchedObjectIdsFor(this.schema),
+			)
 		},
 
 		/**
diff --git a/tests/Unit/Portal/PortalContributionProviderTest.php b/tests/Unit/Portal/PortalContributionProviderTest.php
index 3b93bdcfc..5df77e209 100644
--- a/tests/Unit/Portal/PortalContributionProviderTest.php
+++ b/tests/Unit/Portal/PortalContributionProviderTest.php
@@ -15,7 +15,7 @@
  *
  * @link https://conduction.nl
  *
- * @spec openspec/changes/portal-contribution/specs/portal-contribution/spec.md
+ * @spec openspec/specs/portal-contribution/spec.md
  */
 
 declare(strict_types=1);
diff --git a/tests/Unit/Repair/BackfillModuleVersionPublicationTest.php b/tests/Unit/Repair/BackfillModuleVersionPublicationTest.php
index d95466ba7..dba2f3110 100644
--- a/tests/Unit/Repair/BackfillModuleVersionPublicationTest.php
+++ b/tests/Unit/Repair/BackfillModuleVersionPublicationTest.php
@@ -10,7 +10,7 @@
  * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  *
  * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
  * SPDX-License-Identifier: EUPL-1.2
diff --git a/tests/Unit/Repair/RepointDashboardWidgetIdTest.php b/tests/Unit/Repair/RepointDashboardWidgetIdTest.php
new file mode 100644
index 000000000..b200279fe
--- /dev/null
+++ b/tests/Unit/Repair/RepointDashboardWidgetIdTest.php
@@ -0,0 +1,270 @@
+<?php
+/**
+ * Unit tests for the RepointDashboardWidgetId repair step.
+ *
+ * @category  Test
+ * @package   OCA\Stackiq\Tests\Unit\Repair
+ * @author    Conduction b.v. <info@conduction.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ * @version   GIT: <git_id>
+ * @link      https://github.com/ConductionNL/stackiq
+ *
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+ *
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ * SPDX-License-Identifier: EUPL-1.2
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Stackiq\Tests\Unit\Repair;
+
+use Closure;
+use OCA\Stackiq\Dashboard\ConceptOrganisatiesWidget;
+use OCA\Stackiq\Repair\RepointDashboardWidgetId;
+use OCP\IConfig;
+use OCP\IL10N;
+use OCP\IURLGenerator;
+use OCP\IUser;
+use OCP\IUserManager;
+use OCP\Migration\IOutput;
+use PHPUnit\Framework\TestCase;
+use Psr\Log\NullLogger;
+use RuntimeException;
+
+/**
+ * The renamed widget id is rewritten to the frozen one in every user's dashboard layout.
+ *
+ * @spec openspec/specs/app-id-rename/spec.md#requirement-externally-owned-identifiers-stay-frozen
+ */
+class RepointDashboardWidgetIdTest extends TestCase {
+
+	private const RENAMED = RepointDashboardWidgetId::RENAMED_WIDGET_ID;
+	private const FROZEN  = RepointDashboardWidgetId::FROZEN_WIDGET_ID;
+	private const APP     = RepointDashboardWidgetId::DASHBOARD_APP_ID;
+	private const KEY     = RepointDashboardWidgetId::LAYOUT_KEY;
+
+
+	/**
+	 * A user manager that hands the given user ids to callForSeenUsers.
+	 *
+	 * @param array<int,string> $userIds The user ids to yield.
+	 *
+	 * @return IUserManager
+	 */
+	private function userManagerYielding(array $userIds): IUserManager {
+		$users = [];
+		foreach ($userIds as $uid) {
+			$user = $this->createMock(originalClassName: IUser::class);
+			$user->method('getUID')->willReturn(value: $uid);
+			$users[] = $user;
+		}
+
+		$userManager = $this->createMock(originalClassName: IUserManager::class);
+		$userManager->method('callForSeenUsers')->willReturnCallback(
+			callback: static function (Closure $callback) use ($users): void {
+				foreach ($users as $user) {
+					$callback($user);
+				}
+			}
+		);
+
+		return $userManager;
+	}//end userManagerYielding()
+
+
+	/**
+	 * A config whose dashboard layouts are the given map and whose writes are recorded.
+	 *
+	 * @param array<string,string> $layouts Layout per user id.
+	 * @param array<string,string> $written Receives "uid/app/key" => value.
+	 *
+	 * @return IConfig
+	 */
+	private function configWith(array $layouts, array &$written): IConfig {
+		$config = $this->createMock(originalClassName: IConfig::class);
+		$config->method('getUserValue')->willReturnCallback(
+			callback: static function (string $uid, string $app, string $key, string $default = '') use ($layouts): string {
+				if ($app !== self::APP || $key !== self::KEY) {
+					return $default;
+				}
+
+				return $layouts[$uid] ?? $default;
+			}
+		);
+		$config->method('setUserValue')->willReturnCallback(
+			callback: static function (string $uid, string $app, string $key, string $value) use (&$written): void {
+				$written["$uid/$app/$key"] = $value;
+			}
+		);
+
+		return $config;
+	}//end configWith()
+
+
+	/**
+	 * The step under test over the given config and user ids.
+	 *
+	 * @param IConfig           $config  The config double.
+	 * @param array<int,string> $userIds The user ids to walk.
+	 *
+	 * @return RepointDashboardWidgetId
+	 */
+	private function step(IConfig $config, array $userIds): RepointDashboardWidgetId {
+		return new RepointDashboardWidgetId(
+			config: $config,
+			userManager: $this->userManagerYielding(userIds: $userIds),
+			logger: new NullLogger()
+		);
+	}//end step()
+
+
+	/**
+	 * The frozen id the step writes is the id the widget actually registers under.
+	 *
+	 * @return void
+	 */
+	public function testFrozenIdMatchesTheWidget(): void {
+		$widget = new ConceptOrganisatiesWidget(
+			l10n: $this->createMock(originalClassName: IL10N::class),
+			url: $this->createMock(originalClassName: IURLGenerator::class)
+		);
+
+		$this->assertSame(expected: $widget->getId(), actual: self::FROZEN);
+		$this->assertNotSame(expected: self::FROZEN, actual: self::RENAMED);
+	}//end testFrozenIdMatchesTheWidget()
+
+
+	/**
+	 * The step reports a name that says what it does.
+	 *
+	 * @return void
+	 */
+	public function testGetNameDescribesTheStep(): void {
+		$step = $this->step(config: $this->createMock(originalClassName: IConfig::class), userIds: []);
+
+		$this->assertStringContainsString(needle: 'widget', haystack: $step->getName());
+	}//end testGetNameDescribesTheStep()
+
+
+	/**
+	 * The renamed id is replaced in place, other widgets and their order untouched.
+	 *
+	 * @return void
+	 */
+	public function testRewritesTheRenamedIdInPlace(): void {
+		$written = [];
+		$config  = $this->configWith(
+			layouts: [
+				'alice' => 'recommendations,' . self::RENAMED . ',activity',
+				'bob'   => self::RENAMED,
+			],
+			written: $written
+		);
+
+		$this->step(config: $config, userIds: ['alice', 'bob'])->run(output: $this->createMock(originalClassName: IOutput::class));
+
+		$this->assertSame(
+			expected: [
+				'alice/' . self::APP . '/' . self::KEY => 'recommendations,' . self::FROZEN . ',activity',
+				'bob/' . self::APP . '/' . self::KEY   => self::FROZEN,
+			],
+			actual: $written
+		);
+	}//end testRewritesTheRenamedIdInPlace()
+
+
+	/**
+	 * A layout that holds both ids ends up with the frozen one once.
+	 *
+	 * @return void
+	 */
+	public function testDoesNotDuplicateTheFrozenId(): void {
+		$written = [];
+		$config  = $this->configWith(layouts: ['alice' => self::FROZEN . ',activity,' . self::RENAMED], written: $written);
+
+		$this->step(config: $config, userIds: ['alice'])->run(output: $this->createMock(originalClassName: IOutput::class));
+
+		$this->assertSame(expected: ['alice/' . self::APP . '/' . self::KEY => self::FROZEN . ',activity'], actual: $written);
+	}//end testDoesNotDuplicateTheFrozenId()
+
+
+	/**
+	 * Layouts without the renamed id, including empty ones, are never written.
+	 *
+	 * @return void
+	 */
+	public function testLeavesOtherLayoutsAlone(): void {
+		$written = [];
+		$config  = $this->configWith(
+			layouts: [
+				'alice' => 'recommendations,' . self::FROZEN,
+				'bob'   => '',
+				// A superstring of the renamed id is a different widget.
+				'carol' => self::RENAMED . '_v2',
+			],
+			written: $written
+		);
+
+		$this->step(config: $config, userIds: ['alice', 'bob', 'carol'])->run(output: $this->createMock(originalClassName: IOutput::class));
+
+		$this->assertSame(expected: [], actual: $written);
+	}//end testLeavesOtherLayoutsAlone()
+
+
+	/**
+	 * A user whose preference cannot be read is skipped without aborting the walk.
+	 *
+	 * @return void
+	 */
+	public function testOneUnreadableUserDoesNotAbortTheWalk(): void {
+		$written = [];
+		$config  = $this->createMock(originalClassName: IConfig::class);
+		$config->method('getUserValue')->willReturnCallback(
+			callback: static function (string $uid, string $app, string $key, string $default = ''): string {
+				if ($uid === 'broken') {
+					throw new RuntimeException(message: 'backend down');
+				}
+
+				if ($uid === 'alice') {
+					return self::RENAMED;
+				}
+
+				return $default;
+			}
+		);
+		$config->method('setUserValue')->willReturnCallback(
+			callback: static function (string $uid, string $app, string $key, string $value) use (&$written): void {
+				$written["$uid/$app/$key"] = $value;
+			}
+		);
+
+		$this->step(config: $config, userIds: ['broken', 'alice'])->run(output: $this->createMock(originalClassName: IOutput::class));
+
+		$this->assertSame(
+			expected: ['alice/' . self::APP . '/' . self::KEY => self::FROZEN],
+			actual: $written,
+			message: 'the user after the unreadable one must still be re-pointed'
+		);
+	}//end testOneUnreadableUserDoesNotAbortTheWalk()
+
+
+	/**
+	 * A failure to enumerate users at all is warned, not thrown.
+	 *
+	 * @return void
+	 */
+	public function testUserEnumerationFailureIsWarnedNotThrown(): void {
+		$config = $this->createMock(originalClassName: IConfig::class);
+		$config->expects($this->never())->method('setUserValue');
+
+		$userManager = $this->createMock(originalClassName: IUserManager::class);
+		$userManager->method('callForSeenUsers')->willThrowException(exception: new RuntimeException(message: 'no backend'));
+
+		$output = $this->createMock(originalClassName: IOutput::class);
+		$output->expects($this->atLeastOnce())->method('warning');
+
+		(new RepointDashboardWidgetId(config: $config, userManager: $userManager, logger: new NullLogger()))->run(output: $output);
+	}//end testUserEnumerationFailureIsWarnedNotThrown()
+}//end class
diff --git a/tests/Unit/Service/ModuleVersionPublicationServiceTest.php b/tests/Unit/Service/ModuleVersionPublicationServiceTest.php
index 9699d3347..ec5b18ec6 100644
--- a/tests/Unit/Service/ModuleVersionPublicationServiceTest.php
+++ b/tests/Unit/Service/ModuleVersionPublicationServiceTest.php
@@ -11,7 +11,7 @@
  * @version   GIT: <git_id>
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
+ * @spec openspec/specs/publication-field-rules/spec.md#requirement-req-pfr-002-a-module-version-is-public-only-while-its-application-is
  */
 
 declare(strict_types=1);
diff --git a/tests/Unit/Settings/PublicationFieldRulesTest.php b/tests/Unit/Settings/PublicationFieldRulesTest.php
index 2748b9ff6..f5ee7d5b7 100644
--- a/tests/Unit/Settings/PublicationFieldRulesTest.php
+++ b/tests/Unit/Settings/PublicationFieldRulesTest.php
@@ -11,7 +11,7 @@
  * @version   GIT: <git_id>
  * @link      https://github.com/ConductionNL/stackiq
  *
- * @spec openspec/changes/publication-field-rules/specs/publication-field-rules/spec.md
+ * @spec openspec/specs/publication-field-rules/spec.md
  */
 
 declare(strict_types=1);