diff --git a/src/__tests__/AccessibilityAudit.test.tsx b/src/__tests__/AccessibilityAudit.test.tsx
new file mode 100644
index 00000000..76ec9633
--- /dev/null
+++ b/src/__tests__/AccessibilityAudit.test.tsx
@@ -0,0 +1,80 @@
+import React from "react";
+import { render, screen, fireEvent } from "@testing-library/react";
+import AccessibilityAuditPanel from "@/components/AccessibilityAuditPanel";
+import { auditColorPairs, auditDocument } from "@/lib/accessibilityAudit";
+
+function html(markup: string): HTMLElement {
+  const root = document.createElement("div");
+  root.innerHTML = markup;
+  document.body.appendChild(root);
+  return root;
+}
+
+afterEach(() => {
+  document.body.innerHTML = "";
+});
+
+describe("auditDocument", () => {
+  it("reports nothing for accessible markup", () => {
+    const root = html(`
+      <h1>Title</h1><h2>Section</h2>
+      <img src="a.png" alt="" />
+      <button>Save</button>
+      <button aria-label="Close"></button>
+      <a href="/x"><img src="i.png" alt="Home" /></a>
+      <label for="n">Name</label><input id="n" />
+      <label>Email <input /></label>
+      <input type="hidden" />
+    `);
+    expect(auditDocument(root)).toEqual([]);
+  });
+
+  it("flags missing alt, unnamed controls, unlabeled fields and heading jumps", () => {
+    const root = html(`
+      <h1>Title</h1><h3>Skipped</h3>
+      <img src="a.png" />
+      <button></button>
+      <a href="/x"></a>
+      <input id="orphan" />
+      <select></select>
+    `);
+    const rules = auditDocument(root).map((i) => i.rule);
+    expect(rules.filter((r) => r === "img-alt")).toHaveLength(1);
+    expect(rules.filter((r) => r === "control-name")).toHaveLength(2);
+    expect(rules.filter((r) => r === "form-label")).toHaveLength(2);
+    expect(rules.filter((r) => r === "heading-order")).toHaveLength(1);
+  });
+
+  it("accepts aria-labelledby references", () => {
+    const root = html(`<span id="l">Amount</span><input aria-labelledby="l" />`);
+    expect(auditDocument(root)).toEqual([]);
+  });
+});
+
+describe("auditColorPairs", () => {
+  it("flags low contrast, honours large text and rejects invalid colors", () => {
+    const issues = auditColorPairs([
+      { label: "ok", foreground: "#000000", background: "#ffffff" },
+      { label: "low", foreground: "#aaaaaa", background: "#ffffff" },
+      { label: "large-ok", foreground: "#767676", background: "#ffffff", largeText: true },
+      { label: "bad", foreground: "nope", background: "#ffffff" },
+    ]);
+    expect(issues.map((i) => i.element)).toEqual(["low", "bad"]);
+    expect(issues[0].message).toContain("below the required 4.5:1");
+  });
+});
+
+describe("AccessibilityAuditPanel", () => {
+  it("runs the audit on demand", () => {
+    render(
+      <div>
+        <img src="x.png" />
+        <AccessibilityAuditPanel />
+      </div>,
+    );
+    expect(screen.queryByText(/issue/)).not.toBeInTheDocument();
+    fireEvent.click(screen.getByText("Run audit"));
+    expect(screen.getByText("1 issue found")).toBeInTheDocument();
+    expect(screen.getByText("Image is missing an alt attribute.")).toBeInTheDocument();
+  });
+});
diff --git a/src/__tests__/CommunityEventsCalendar.test.tsx b/src/__tests__/CommunityEventsCalendar.test.tsx
new file mode 100644
index 00000000..e298e1f6
--- /dev/null
+++ b/src/__tests__/CommunityEventsCalendar.test.tsx
@@ -0,0 +1,72 @@
+import React from "react";
+import { render, screen, fireEvent } from "@testing-library/react";
+import CommunityEventsCalendar from "@/components/creator/CommunityEventsCalendar";
+import {
+  filterEvents,
+  groupEventsByDay,
+  monthGrid,
+  toggleRsvp,
+  upcomingEvents,
+  type CommunityEvent,
+} from "@/lib/creatorEvents";
+
+const events: CommunityEvent[] = [
+  { id: "b", title: "Invoice meetup", type: "meetup", startsAt: "2026-03-20T15:00:00", location: "Lagos" },
+  { id: "a", title: "Splits workshop", type: "workshop", startsAt: "2026-03-05T10:00:00" },
+  { id: "c", title: "April webinar", type: "webinar", startsAt: "2026-04-02T10:00:00" },
+  { id: "bad", title: "Broken", type: "meetup", startsAt: "not-a-date" },
+];
+
+describe("creatorEvents", () => {
+  it("sorts, filters by type and drops invalid dates", () => {
+    expect(filterEvents(events).map((e) => e.id)).toEqual(["a", "b", "c"]);
+    expect(filterEvents(events, "meetup").map((e) => e.id)).toEqual(["b"]);
+  });
+
+  it("returns only upcoming events", () => {
+    expect(upcomingEvents(events, new Date("2026-03-10T00:00:00")).map((e) => e.id)).toEqual(["b", "c"]);
+  });
+
+  it("groups events by local day", () => {
+    const groups = groupEventsByDay(events);
+    expect(groups.get("2026-03-05")?.map((e) => e.id)).toEqual(["a"]);
+  });
+
+  it("builds whole-week month grids", () => {
+    const grid = monthGrid(2026, 2); // March 2026 starts on a Sunday
+    expect(grid.length % 7).toBe(0);
+    expect(grid[0]?.getDate()).toBe(1);
+    expect(grid.filter(Boolean)).toHaveLength(31);
+  });
+
+  it("toggles RSVPs without mutating the input", () => {
+    const empty = new Set<string>();
+    const one = toggleRsvp(empty, "a");
+    expect(one.has("a")).toBe(true);
+    expect(empty.size).toBe(0);
+    expect(toggleRsvp(one, "a").has("a")).toBe(false);
+  });
+});
+
+describe("CommunityEventsCalendar", () => {
+  it("shows the month's events, filters by type and navigates months", () => {
+    render(<CommunityEventsCalendar events={events} initialDate={new Date(2026, 2, 1)} />);
+    expect(screen.getByRole("heading", { name: "March 2026" })).toBeInTheDocument();
+    expect(screen.getAllByText("Splits workshop").length).toBeGreaterThan(0);
+
+    fireEvent.change(screen.getByLabelText("Event type"), { target: { value: "meetup" } });
+    expect(screen.queryByText(/Splits workshop/)).not.toBeInTheDocument();
+
+    fireEvent.click(screen.getByLabelText("Next month"));
+    expect(screen.getByRole("heading", { name: "April 2026" })).toBeInTheDocument();
+    expect(screen.getByText("No events this month.")).toBeInTheDocument();
+  });
+
+  it("toggles RSVP and reports it", () => {
+    const onRsvpChange = vi.fn();
+    render(<CommunityEventsCalendar events={events} initialDate={new Date(2026, 2, 1)} onRsvpChange={onRsvpChange} />);
+    fireEvent.click(screen.getAllByText("RSVP")[0]);
+    expect(onRsvpChange).toHaveBeenLastCalledWith(["a"]);
+    expect(screen.getByText("Going")).toHaveAttribute("aria-pressed", "true");
+  });
+});
diff --git a/src/__tests__/InvoiceSecurityDashboard.test.tsx b/src/__tests__/InvoiceSecurityDashboard.test.tsx
new file mode 100644
index 00000000..e63d8c10
--- /dev/null
+++ b/src/__tests__/InvoiceSecurityDashboard.test.tsx
@@ -0,0 +1,64 @@
+import React from "react";
+import { render, screen } from "@testing-library/react";
+import InvoiceSecurityDashboard from "@/components/security/InvoiceSecurityDashboard";
+import { levelForScore, summarizeInvoiceSecurity, type InvoiceSecurityEvent } from "@/lib/invoiceSecurity";
+
+const events: InvoiceSecurityEvent[] = [
+  { id: "1", invoiceId: "INV-1", kind: "failed_auth", timestamp: 1 },
+  { id: "2", invoiceId: "INV-1", kind: "large_payment", timestamp: 2 },
+  { id: "3", invoiceId: "INV-2", kind: "export", timestamp: 3 },
+];
+
+describe("invoiceSecurity", () => {
+  it("scores 100 with no events", () => {
+    const summary = summarizeInvoiceSecurity([]);
+    expect(summary.score).toBe(100);
+    expect(summary.level).toBe("good");
+    expect(summary.riskiestInvoices).toEqual([]);
+  });
+
+  it("weights events, counts by kind and ranks invoices by risk", () => {
+    const summary = summarizeInvoiceSecurity(events);
+    expect(summary.score).toBe(100 - 5 - 10 - 1);
+    expect(summary.countsByKind.failed_auth).toBe(1);
+    expect(summary.riskiestInvoices).toEqual([
+      { invoiceId: "INV-1", risk: 15, events: 2 },
+      { invoiceId: "INV-2", risk: 1, events: 1 },
+    ]);
+  });
+
+  it("never drops below zero and maps score to a level", () => {
+    const many = Array.from({ length: 50 }, (_, i) => ({
+      id: String(i),
+      invoiceId: "INV-X",
+      kind: "large_payment" as const,
+      timestamp: i,
+    }));
+    const summary = summarizeInvoiceSecurity(many);
+    expect(summary.score).toBe(0);
+    expect(summary.level).toBe("at_risk");
+    expect(levelForScore(79)).toBe("attention");
+    expect(levelForScore(80)).toBe("good");
+  });
+
+  it("includes suspicious-activity alerts in the score", () => {
+    const activity = Array.from({ length: 6 }, (_, i) => ({ id: `e${i}`, actor: "GA", amount: 10 + i, timestamp: i * 1000 }));
+    const summary = summarizeInvoiceSecurity([], activity);
+    expect(summary.alerts.length).toBeGreaterThan(0);
+    expect(summary.score).toBeLessThan(100);
+  });
+});
+
+describe("InvoiceSecurityDashboard", () => {
+  it("renders the score, counts and riskiest invoices", () => {
+    render(<InvoiceSecurityDashboard events={events} />);
+    expect(screen.getByRole("status")).toHaveTextContent("84");
+    expect(screen.getByText("Failed sign-ins")).toBeInTheDocument();
+    expect(screen.getByText("INV-1")).toBeInTheDocument();
+  });
+
+  it("shows an empty state", () => {
+    render(<InvoiceSecurityDashboard events={[]} />);
+    expect(screen.getByText("No security events recorded.")).toBeInTheDocument();
+  });
+});
diff --git a/src/__tests__/ResourceLibrary.test.tsx b/src/__tests__/ResourceLibrary.test.tsx
new file mode 100644
index 00000000..76895e6d
--- /dev/null
+++ b/src/__tests__/ResourceLibrary.test.tsx
@@ -0,0 +1,54 @@
+import React from "react";
+import { render, screen, fireEvent } from "@testing-library/react";
+import ResourceLibrary from "@/components/creator/ResourceLibrary";
+import {
+  DEFAULT_RESOURCES,
+  filterResources,
+  loadBookmarks,
+  saveBookmarks,
+  toggleBookmark,
+} from "@/lib/creatorResources";
+
+beforeEach(() => window.localStorage.clear());
+
+describe("creatorResources", () => {
+  it("filters by query (title, description, tags) and category", () => {
+    expect(filterResources(DEFAULT_RESOURCES, { query: "TAX" }).map((r) => r.id)).toEqual(["tax-export"]);
+    expect(filterResources(DEFAULT_RESOURCES, { category: "template" }).map((r) => r.id)).toEqual(["invoice-templates"]);
+    expect(filterResources(DEFAULT_RESOURCES, { category: "all" })).toHaveLength(DEFAULT_RESOURCES.length);
+  });
+
+  it("filters to bookmarks and toggles immutably", () => {
+    const none = new Set<string>();
+    const one = toggleBookmark(none, "rate-card");
+    expect(none.size).toBe(0);
+    expect(filterResources(DEFAULT_RESOURCES, { bookmarkedOnly: true }, one).map((r) => r.id)).toEqual(["rate-card"]);
+    expect(toggleBookmark(one, "rate-card").size).toBe(0);
+  });
+
+  it("round-trips bookmarks and survives corrupt storage", () => {
+    saveBookmarks(new Set(["a", "b"]));
+    expect([...loadBookmarks()].sort()).toEqual(["a", "b"]);
+    window.localStorage.setItem("creator-resource-bookmarks", "{not json");
+    expect(loadBookmarks().size).toBe(0);
+  });
+});
+
+describe("ResourceLibrary", () => {
+  it("searches, and bookmarks persist", () => {
+    render(<ResourceLibrary />);
+    fireEvent.change(screen.getByLabelText("Search resources"), { target: { value: "rate" } });
+    expect(screen.getByText("Rate card builder")).toBeInTheDocument();
+    expect(screen.queryByText("Tax export")).not.toBeInTheDocument();
+
+    fireEvent.click(screen.getByLabelText("Bookmark Rate card builder"));
+    expect(screen.getByText("Bookmarked")).toBeInTheDocument();
+    expect([...loadBookmarks()]).toEqual(["rate-card"]);
+  });
+
+  it("shows an empty state", () => {
+    render(<ResourceLibrary />);
+    fireEvent.change(screen.getByLabelText("Search resources"), { target: { value: "zzz-nothing" } });
+    expect(screen.getByText("No resources match.")).toBeInTheDocument();
+  });
+});
diff --git a/src/app/creator/events/page.tsx b/src/app/creator/events/page.tsx
new file mode 100644
index 00000000..9dafb102
--- /dev/null
+++ b/src/app/creator/events/page.tsx
@@ -0,0 +1,10 @@
+import CommunityEventsCalendar from "@/components/creator/CommunityEventsCalendar";
+
+export default function CreatorEventsPage() {
+  return (
+    <main className="mx-auto max-w-4xl px-4 py-8">
+      <h1 className="mb-4 text-2xl font-semibold">Community events</h1>
+      <CommunityEventsCalendar events={[]} />
+    </main>
+  );
+}
diff --git a/src/app/creator/resources/page.tsx b/src/app/creator/resources/page.tsx
new file mode 100644
index 00000000..239b4475
--- /dev/null
+++ b/src/app/creator/resources/page.tsx
@@ -0,0 +1,10 @@
+import ResourceLibrary from "@/components/creator/ResourceLibrary";
+
+export default function CreatorResourcesPage() {
+  return (
+    <main className="mx-auto max-w-4xl px-4 py-8">
+      <h1 className="mb-4 text-2xl font-semibold">Creator resources</h1>
+      <ResourceLibrary />
+    </main>
+  );
+}
diff --git a/src/app/security/page.tsx b/src/app/security/page.tsx
new file mode 100644
index 00000000..d8d6d512
--- /dev/null
+++ b/src/app/security/page.tsx
@@ -0,0 +1,10 @@
+import InvoiceSecurityDashboard from "@/components/security/InvoiceSecurityDashboard";
+
+export default function InvoiceSecurityPage() {
+  return (
+    <main className="mx-auto max-w-4xl px-4 py-8">
+      <h1 className="mb-4 text-2xl font-semibold">Invoice security</h1>
+      <InvoiceSecurityDashboard events={[]} />
+    </main>
+  );
+}
diff --git a/src/app/settings/accessibility/page.tsx b/src/app/settings/accessibility/page.tsx
index d754360b..2709f0f2 100644
--- a/src/app/settings/accessibility/page.tsx
+++ b/src/app/settings/accessibility/page.tsx
@@ -2,6 +2,7 @@
 
 import type { Contrast, FontScale } from "@/contexts/AccessibilityContext";
 import { useAccessibility } from "@/contexts/AccessibilityContext";
+import AccessibilityAuditPanel from "@/components/AccessibilityAuditPanel";
 
 const FONT_SCALE_OPTIONS: Array<{
   value: FontScale;
@@ -146,6 +147,8 @@ export default function AccessibilitySettingsPage() {
             })}
           </div>
         </section>
+
+        <AccessibilityAuditPanel />
       </div>
     </main>
   );
diff --git a/src/components/AccessibilityAuditPanel.tsx b/src/components/AccessibilityAuditPanel.tsx
new file mode 100644
index 00000000..436c3896
--- /dev/null
+++ b/src/components/AccessibilityAuditPanel.tsx
@@ -0,0 +1,46 @@
+"use client";
+
+import { useState } from "react";
+import { auditDocument, type A11yIssue } from "@/lib/accessibilityAudit";
+
+/** Runs the accessibility audit over the current page and lists what it finds. */
+export default function AccessibilityAuditPanel() {
+  const [issues, setIssues] = useState<A11yIssue[] | null>(null);
+
+  return (
+    <section aria-labelledby="audit-heading" className="border-t border-gray-700 pt-8">
+      <h2 id="audit-heading" className="mb-2 text-lg font-semibold">
+        Accessibility audit
+      </h2>
+      <p className="mb-4 text-sm text-gray-400">
+        Check this page for missing alt text, unlabeled controls and fields, and skipped heading levels.
+      </p>
+      <button
+        type="button"
+        className="rounded border border-gray-600 px-3 py-2 text-sm"
+        onClick={() => setIssues(auditDocument(document.body))}
+      >
+        Run audit
+      </button>
+
+      <div role="status" aria-live="polite" className="mt-4">
+        {issues !== null && issues.length === 0 && <p className="text-sm text-green-400">No issues found.</p>}
+        {issues !== null && issues.length > 0 && (
+          <>
+            <p className="mb-2 text-sm">
+              {issues.length} issue{issues.length === 1 ? "" : "s"} found
+            </p>
+            <ul className="space-y-2">
+              {issues.map((issue, i) => (
+                <li key={i} className="rounded border border-gray-700 p-3 text-sm">
+                  <p className="font-medium">{issue.message}</p>
+                  <code className="break-all text-xs text-gray-400">{issue.element}</code>
+                </li>
+              ))}
+            </ul>
+          </>
+        )}
+      </div>
+    </section>
+  );
+}
diff --git a/src/components/creator/CommunityEventsCalendar.tsx b/src/components/creator/CommunityEventsCalendar.tsx
new file mode 100644
index 00000000..b2dc97fb
--- /dev/null
+++ b/src/components/creator/CommunityEventsCalendar.tsx
@@ -0,0 +1,131 @@
+"use client";
+
+import { useMemo, useState } from "react";
+import {
+  EVENT_TYPES,
+  dayKey,
+  filterEvents,
+  groupEventsByDay,
+  monthGrid,
+  toggleRsvp,
+  type CommunityEvent,
+  type EventType,
+} from "@/lib/creatorEvents";
+
+const WEEKDAYS = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
+
+interface Props {
+  events: CommunityEvent[];
+  /** Month to show first; defaults to the current month. */
+  initialDate?: Date;
+  onRsvpChange?: (eventIds: string[]) => void;
+}
+
+export default function CommunityEventsCalendar({ events, initialDate, onRsvpChange }: Props) {
+  const start = initialDate ?? new Date();
+  const [year, setYear] = useState(start.getFullYear());
+  const [month, setMonth] = useState(start.getMonth());
+  const [type, setType] = useState<EventType | "all">("all");
+  const [rsvps, setRsvps] = useState<Set<string>>(new Set());
+
+  const visible = useMemo(() => filterEvents(events, type), [events, type]);
+  const byDay = useMemo(() => groupEventsByDay(visible), [visible]);
+  const monthEvents = useMemo(
+    () =>
+      visible.filter((e) => {
+        const d = new Date(e.startsAt);
+        return d.getFullYear() === year && d.getMonth() === month;
+      }),
+    [visible, year, month],
+  );
+
+  const shift = (delta: number) => {
+    const next = new Date(year, month + delta, 1);
+    setYear(next.getFullYear());
+    setMonth(next.getMonth());
+  };
+  const rsvp = (id: string) => {
+    const next = toggleRsvp(rsvps, id);
+    setRsvps(next);
+    onRsvpChange?.([...next]);
+  };
+  const title = new Date(year, month, 1).toLocaleString("en-US", { month: "long", year: "numeric" });
+
+  return (
+    <section className="space-y-4" aria-label="Community events calendar">
+      <div className="flex flex-wrap items-center justify-between gap-2">
+        <div className="flex items-center gap-2">
+          <button type="button" aria-label="Previous month" className="rounded border px-2 py-1" onClick={() => shift(-1)}>
+            ‹
+          </button>
+          <h2 className="min-w-[10rem] text-center font-semibold" aria-live="polite">
+            {title}
+          </h2>
+          <button type="button" aria-label="Next month" className="rounded border px-2 py-1" onClick={() => shift(1)}>
+            ›
+          </button>
+        </div>
+        <label className="flex items-center gap-2 text-sm">
+          Event type
+          <select
+            className="rounded border px-2 py-1"
+            value={type}
+            onChange={(e) => setType(e.target.value as EventType | "all")}
+          >
+            <option value="all">All</option>
+            {EVENT_TYPES.map((t) => (
+              <option key={t} value={t}>
+                {t}
+              </option>
+            ))}
+          </select>
+        </label>
+      </div>
+
+      <div className="hidden grid-cols-7 gap-1 text-xs sm:grid" role="grid" aria-label={title}>
+        {WEEKDAYS.map((d) => (
+          <div key={d} className="p-1 text-center font-medium text-gray-500" role="columnheader">
+            {d}
+          </div>
+        ))}
+        {monthGrid(year, month).map((cell, i) => {
+          const dayEvents = cell ? (byDay.get(dayKey(cell)) ?? []) : [];
+          return (
+            <div key={i} role="gridcell" className="min-h-[4.5rem] rounded border p-1">
+              {cell && <span className="text-gray-500">{cell.getDate()}</span>}
+              {dayEvents.map((e) => (
+                <div key={e.id} className="mt-1 truncate rounded bg-blue-50 px-1 text-blue-800" title={e.title}>
+                  {e.title}
+                </div>
+              ))}
+            </div>
+          );
+        })}
+      </div>
+
+      <ul className="space-y-2" aria-label="Events this month">
+        {monthEvents.length === 0 && <li className="text-sm text-gray-500">No events this month.</li>}
+        {monthEvents.map((e) => (
+          <li key={e.id} className="flex flex-wrap items-start justify-between gap-2 rounded border p-3">
+            <div>
+              <p className="font-medium">{e.title}</p>
+              <p className="text-sm text-gray-600">
+                <time dateTime={e.startsAt}>{new Date(e.startsAt).toLocaleString()}</time> · {e.type}
+                {e.location ? ` · ${e.location}` : ""}
+              </p>
+              {e.description && <p className="mt-1 text-sm">{e.description}</p>}
+            </div>
+            <button
+              type="button"
+              aria-pressed={rsvps.has(e.id)}
+              className="rounded border px-3 py-1 text-sm"
+              onClick={() => rsvp(e.id)}
+            >
+              {rsvps.has(e.id) ? "Going" : "RSVP"}
+            </button>
+          </li>
+        ))}
+      </ul>
+    </section>
+  );
+}
diff --git a/src/components/creator/ResourceLibrary.tsx b/src/components/creator/ResourceLibrary.tsx
new file mode 100644
index 00000000..0715cca3
--- /dev/null
+++ b/src/components/creator/ResourceLibrary.tsx
@@ -0,0 +1,92 @@
+"use client";
+
+import { useEffect, useMemo, useState } from "react";
+import Link from "next/link";
+import {
+  DEFAULT_RESOURCES,
+  RESOURCE_CATEGORIES,
+  filterResources,
+  loadBookmarks,
+  saveBookmarks,
+  toggleBookmark,
+  type CreatorResource,
+  type ResourceCategory,
+} from "@/lib/creatorResources";
+
+export default function ResourceLibrary({ resources = DEFAULT_RESOURCES }: { resources?: CreatorResource[] }) {
+  const [query, setQuery] = useState("");
+  const [category, setCategory] = useState<ResourceCategory | "all">("all");
+  const [bookmarkedOnly, setBookmarkedOnly] = useState(false);
+  const [bookmarks, setBookmarks] = useState<Set<string>>(new Set());
+
+  useEffect(() => setBookmarks(loadBookmarks()), []);
+
+  const visible = useMemo(
+    () => filterResources(resources, { query, category, bookmarkedOnly }, bookmarks),
+    [resources, query, category, bookmarkedOnly, bookmarks],
+  );
+
+  const toggle = (id: string) => {
+    const next = toggleBookmark(bookmarks, id);
+    setBookmarks(next);
+    saveBookmarks(next);
+  };
+
+  return (
+    <section className="space-y-4" aria-label="Resource library">
+      <div className="grid gap-2 sm:grid-cols-[1fr_auto_auto] sm:items-center">
+        <input
+          type="search"
+          aria-label="Search resources"
+          placeholder="Search resources"
+          className="rounded border px-3 py-2"
+          value={query}
+          onChange={(e) => setQuery(e.target.value)}
+        />
+        <select
+          aria-label="Category"
+          className="rounded border px-2 py-2"
+          value={category}
+          onChange={(e) => setCategory(e.target.value as ResourceCategory | "all")}
+        >
+          <option value="all">All categories</option>
+          {RESOURCE_CATEGORIES.map((c) => (
+            <option key={c} value={c}>
+              {c}
+            </option>
+          ))}
+        </select>
+        <label className="flex items-center gap-2 text-sm">
+          <input type="checkbox" checked={bookmarkedOnly} onChange={(e) => setBookmarkedOnly(e.target.checked)} />
+          Bookmarked only
+        </label>
+      </div>
+
+      <ul className="grid gap-3 sm:grid-cols-2">
+        {visible.length === 0 && <li className="text-sm text-gray-500">No resources match.</li>}
+        {visible.map((r) => (
+          <li key={r.id} className="flex flex-col justify-between gap-2 rounded border p-4">
+            <div>
+              <div className="flex items-start justify-between gap-2">
+                <Link href={r.href} className="font-medium underline">
+                  {r.title}
+                </Link>
+                <span className="rounded bg-gray-100 px-2 py-0.5 text-xs">{r.category}</span>
+              </div>
+              <p className="mt-1 text-sm text-gray-600">{r.description}</p>
+            </div>
+            <button
+              type="button"
+              aria-pressed={bookmarks.has(r.id)}
+              aria-label={`Bookmark ${r.title}`}
+              className="self-start rounded border px-2 py-1 text-sm"
+              onClick={() => toggle(r.id)}
+            >
+              {bookmarks.has(r.id) ? "Bookmarked" : "Bookmark"}
+            </button>
+          </li>
+        ))}
+      </ul>
+    </section>
+  );
+}
diff --git a/src/components/security/InvoiceSecurityDashboard.tsx b/src/components/security/InvoiceSecurityDashboard.tsx
new file mode 100644
index 00000000..ab2da68e
--- /dev/null
+++ b/src/components/security/InvoiceSecurityDashboard.tsx
@@ -0,0 +1,90 @@
+"use client";
+
+import { useMemo } from "react";
+import {
+  summarizeInvoiceSecurity,
+  type InvoiceSecurityEvent,
+  type SecurityEventKind,
+  type SecurityLevel,
+} from "@/lib/invoiceSecurity";
+import type { ActivityEvent } from "@/lib/suspiciousActivity";
+import SuspiciousActivityAlerts from "@/components/security/SuspiciousActivityAlerts";
+
+const LEVEL_LABEL: Record<SecurityLevel, string> = {
+  good: "Good",
+  attention: "Needs attention",
+  at_risk: "At risk",
+};
+const LEVEL_STYLE: Record<SecurityLevel, string> = {
+  good: "border-green-300 bg-green-50 text-green-800",
+  attention: "border-amber-300 bg-amber-50 text-amber-800",
+  at_risk: "border-red-300 bg-red-50 text-red-800",
+};
+const KIND_LABEL: Record<SecurityEventKind, string> = {
+  failed_auth: "Failed sign-ins",
+  permission_change: "Permission changes",
+  large_payment: "Large payments",
+  link_shared: "Links shared",
+  export: "Exports",
+};
+
+interface Props {
+  events: InvoiceSecurityEvent[];
+  activity?: ActivityEvent[];
+}
+
+export default function InvoiceSecurityDashboard({ events, activity = [] }: Props) {
+  const summary = useMemo(() => summarizeInvoiceSecurity(events, activity), [events, activity]);
+
+  return (
+    <section className="space-y-6" aria-label="Invoice security dashboard">
+      <div className={`rounded border p-4 ${LEVEL_STYLE[summary.level]}`} role="status">
+        <p className="text-sm">Security score</p>
+        <p className="text-3xl font-semibold tabular-nums">{summary.score}</p>
+        <p className="font-medium">{LEVEL_LABEL[summary.level]}</p>
+      </div>
+
+      <dl className="grid grid-cols-2 gap-3 sm:grid-cols-3 lg:grid-cols-5">
+        {(Object.keys(KIND_LABEL) as SecurityEventKind[]).map((kind) => (
+          <div key={kind} className="rounded border p-3">
+            <dt className="text-xs text-gray-500">{KIND_LABEL[kind]}</dt>
+            <dd className="text-xl font-semibold tabular-nums">{summary.countsByKind[kind]}</dd>
+          </div>
+        ))}
+      </dl>
+
+      <div>
+        <h2 className="mb-2 font-semibold">Highest-risk invoices</h2>
+        {summary.riskiestInvoices.length === 0 ? (
+          <p className="text-sm text-gray-500">No security events recorded.</p>
+        ) : (
+          <div className="overflow-x-auto">
+            <table className="w-full text-left text-sm">
+              <thead>
+                <tr className="border-b text-gray-500">
+                  <th className="py-1 pr-4 font-medium">Invoice</th>
+                  <th className="py-1 pr-4 font-medium">Events</th>
+                  <th className="py-1 font-medium">Risk</th>
+                </tr>
+              </thead>
+              <tbody>
+                {summary.riskiestInvoices.map((row) => (
+                  <tr key={row.invoiceId} className="border-b">
+                    <td className="py-1 pr-4">{row.invoiceId}</td>
+                    <td className="py-1 pr-4 tabular-nums">{row.events}</td>
+                    <td className="py-1 tabular-nums">{row.risk}</td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+      </div>
+
+      <div>
+        <h2 className="mb-2 font-semibold">Suspicious activity</h2>
+        <SuspiciousActivityAlerts events={activity} />
+      </div>
+    </section>
+  );
+}
diff --git a/src/lib/accessibilityAudit.ts b/src/lib/accessibilityAudit.ts
new file mode 100644
index 00000000..07f7d4a4
--- /dev/null
+++ b/src/lib/accessibilityAudit.ts
@@ -0,0 +1,108 @@
+import { WCAG_AA_CONTRAST_RATIO, WCAG_AA_LARGE_TEXT_CONTRAST_RATIO, contrastRatio, isValidHexColor } from "@/lib/contrast";
+
+export type A11yRule = "img-alt" | "control-name" | "form-label" | "heading-order" | "color-contrast";
+
+export interface A11yIssue {
+  rule: A11yRule;
+  message: string;
+  /** Short description of the offending element, e.g. `<button class="x">`. */
+  element: string;
+}
+
+export interface ColorPair {
+  label: string;
+  foreground: string;
+  background: string;
+  largeText?: boolean;
+}
+
+function describe(el: Element): string {
+  const cls = el.getAttribute("class");
+  return `<${el.tagName.toLowerCase()}${cls ? ` class="${cls}"` : ""}>`;
+}
+
+function hasText(value: string | null | undefined): boolean {
+  return !!value && value.trim().length > 0;
+}
+
+function referencedText(el: Element, attr: "aria-labelledby"): boolean {
+  const ids = el.getAttribute(attr)?.split(/\s+/).filter(Boolean) ?? [];
+  const doc = el.ownerDocument;
+  return ids.some((id) => hasText(doc.getElementById(id)?.textContent));
+}
+
+function hasAccessibleName(el: Element): boolean {
+  if (hasText(el.getAttribute("aria-label")) || referencedText(el, "aria-labelledby")) return true;
+  if (hasText(el.getAttribute("title"))) return true;
+  if (hasText(el.textContent)) return true;
+  return Array.from(el.querySelectorAll("img")).some((img) => hasText(img.getAttribute("alt")));
+}
+
+function hasLabel(el: Element): boolean {
+  if (hasText(el.getAttribute("aria-label")) || referencedText(el, "aria-labelledby")) return true;
+  if (el.closest("label")) return true;
+  const id = el.getAttribute("id");
+  if (!id) return false;
+  return Array.from(el.ownerDocument.querySelectorAll("label")).some((l) => l.getAttribute("for") === id);
+}
+
+/** Audits the DOM under `root` for common, mechanically detectable WCAG problems. */
+export function auditDocument(root: ParentNode): A11yIssue[] {
+  const issues: A11yIssue[] = [];
+
+  root.querySelectorAll("img").forEach((img) => {
+    if (!img.hasAttribute("alt")) {
+      issues.push({ rule: "img-alt", message: "Image is missing an alt attribute.", element: describe(img) });
+    }
+  });
+
+  root.querySelectorAll("button, a[href], [role='button']").forEach((el) => {
+    if (!hasAccessibleName(el)) {
+      issues.push({ rule: "control-name", message: "Interactive control has no accessible name.", element: describe(el) });
+    }
+  });
+
+  root.querySelectorAll("input, select, textarea").forEach((el) => {
+    const type = el.getAttribute("type");
+    if (type === "hidden" || type === "submit" || type === "button" || type === "reset" || type === "image") return;
+    if (!hasLabel(el)) {
+      issues.push({ rule: "form-label", message: "Form field has no label.", element: describe(el) });
+    }
+  });
+
+  let previous = 0;
+  root.querySelectorAll("h1, h2, h3, h4, h5, h6").forEach((heading) => {
+    const level = Number(heading.tagName[1]);
+    if (previous > 0 && level > previous + 1) {
+      issues.push({
+        rule: "heading-order",
+        message: `Heading level jumps from h${previous} to h${level}.`,
+        element: describe(heading),
+      });
+    }
+    previous = level;
+  });
+
+  return issues;
+}
+
+/** Checks foreground/background pairs against WCAG AA (4.5:1, or 3:1 for large text). */
+export function auditColorPairs(pairs: ColorPair[]): A11yIssue[] {
+  const issues: A11yIssue[] = [];
+  for (const pair of pairs) {
+    if (!isValidHexColor(pair.foreground) || !isValidHexColor(pair.background)) {
+      issues.push({ rule: "color-contrast", message: `${pair.label}: invalid color value.`, element: pair.label });
+      continue;
+    }
+    const required = pair.largeText ? WCAG_AA_LARGE_TEXT_CONTRAST_RATIO : WCAG_AA_CONTRAST_RATIO;
+    const ratio = contrastRatio(pair.foreground, pair.background);
+    if (ratio < required) {
+      issues.push({
+        rule: "color-contrast",
+        message: `${pair.label}: contrast ${ratio.toFixed(2)}:1 is below the required ${required}:1.`,
+        element: pair.label,
+      });
+    }
+  }
+  return issues;
+}
diff --git a/src/lib/creatorEvents.ts b/src/lib/creatorEvents.ts
new file mode 100644
index 00000000..50104844
--- /dev/null
+++ b/src/lib/creatorEvents.ts
@@ -0,0 +1,64 @@
+export type EventType = "workshop" | "meetup" | "webinar" | "hackathon";
+
+export interface CommunityEvent {
+  id: string;
+  title: string;
+  type: EventType;
+  /** ISO 8601 start time. */
+  startsAt: string;
+  location?: string;
+  description?: string;
+}
+
+export const EVENT_TYPES: EventType[] = ["workshop", "meetup", "webinar", "hackathon"];
+
+const byStart = (a: CommunityEvent, b: CommunityEvent) => Date.parse(a.startsAt) - Date.parse(b.startsAt);
+
+/** Events of one type (or all), earliest first. Events with an invalid date are dropped. */
+export function filterEvents(events: CommunityEvent[], type: EventType | "all" = "all"): CommunityEvent[] {
+  return events
+    .filter((e) => !Number.isNaN(Date.parse(e.startsAt)))
+    .filter((e) => type === "all" || e.type === type)
+    .sort(byStart);
+}
+
+/** Events starting at or after `now`, earliest first. */
+export function upcomingEvents(events: CommunityEvent[], now: Date = new Date()): CommunityEvent[] {
+  return filterEvents(events).filter((e) => Date.parse(e.startsAt) >= now.getTime());
+}
+
+/** Local `YYYY-MM-DD` key for a date. */
+export function dayKey(date: Date): string {
+  const m = String(date.getMonth() + 1).padStart(2, "0");
+  const d = String(date.getDate()).padStart(2, "0");
+  return `${date.getFullYear()}-${m}-${d}`;
+}
+
+export function groupEventsByDay(events: CommunityEvent[]): Map<string, CommunityEvent[]> {
+  const groups = new Map<string, CommunityEvent[]>();
+  for (const event of filterEvents(events)) {
+    const key = dayKey(new Date(event.startsAt));
+    groups.set(key, [...(groups.get(key) ?? []), event]);
+  }
+  return groups;
+}
+
+/**
+ * Cells for a Sunday-first month grid: leading `null`s pad the first week, and
+ * the result is padded to a whole number of weeks.
+ */
+export function monthGrid(year: number, month: number): (Date | null)[] {
+  const first = new Date(year, month, 1);
+  const daysInMonth = new Date(year, month + 1, 0).getDate();
+  const cells: (Date | null)[] = Array.from({ length: first.getDay() }, () => null);
+  for (let day = 1; day <= daysInMonth; day++) cells.push(new Date(year, month, day));
+  while (cells.length % 7 !== 0) cells.push(null);
+  return cells;
+}
+
+/** RSVP set helpers (immutable). */
+export function toggleRsvp(rsvps: ReadonlySet<string>, eventId: string): Set<string> {
+  const next = new Set(rsvps);
+  if (!next.delete(eventId)) next.add(eventId);
+  return next;
+}
diff --git a/src/lib/creatorResources.ts b/src/lib/creatorResources.ts
new file mode 100644
index 00000000..978dbcbe
--- /dev/null
+++ b/src/lib/creatorResources.ts
@@ -0,0 +1,99 @@
+export type ResourceCategory = "guide" | "template" | "tool" | "policy";
+
+export interface CreatorResource {
+  id: string;
+  title: string;
+  description: string;
+  category: ResourceCategory;
+  tags: string[];
+  /** In-app route or absolute URL. */
+  href: string;
+}
+
+export const RESOURCE_CATEGORIES: ResourceCategory[] = ["guide", "template", "tool", "policy"];
+
+export const DEFAULT_RESOURCES: CreatorResource[] = [
+  {
+    id: "invoicing-basics",
+    title: "Invoicing basics",
+    description: "Create your first split invoice and share it with recipients.",
+    category: "guide",
+    tags: ["invoices", "getting-started"],
+    href: "/invoice",
+  },
+  {
+    id: "invoice-templates",
+    title: "Invoice templates",
+    description: "Reuse layouts and line items across invoices.",
+    category: "template",
+    tags: ["invoices", "templates"],
+    href: "/templates",
+  },
+  {
+    id: "rate-card",
+    title: "Rate card builder",
+    description: "Price your services and turn them into invoice line items.",
+    category: "tool",
+    tags: ["pricing", "invoices"],
+    href: "/creator/rate-card",
+  },
+  {
+    id: "tax-export",
+    title: "Tax export",
+    description: "Export your earnings for tax reporting.",
+    category: "tool",
+    tags: ["tax", "reports"],
+    href: "/revenue",
+  },
+];
+
+export interface ResourceFilter {
+  query?: string;
+  category?: ResourceCategory | "all";
+  bookmarkedOnly?: boolean;
+}
+
+export function filterResources(
+  resources: CreatorResource[],
+  filter: ResourceFilter = {},
+  bookmarks: ReadonlySet<string> = new Set(),
+): CreatorResource[] {
+  const q = filter.query?.trim().toLowerCase() ?? "";
+  return resources
+    .filter((r) => !filter.category || filter.category === "all" || r.category === filter.category)
+    .filter((r) => !filter.bookmarkedOnly || bookmarks.has(r.id))
+    .filter(
+      (r) =>
+        !q ||
+        r.title.toLowerCase().includes(q) ||
+        r.description.toLowerCase().includes(q) ||
+        r.tags.some((t) => t.toLowerCase().includes(q)),
+    );
+}
+
+export function toggleBookmark(bookmarks: ReadonlySet<string>, id: string): Set<string> {
+  const next = new Set(bookmarks);
+  if (!next.delete(id)) next.add(id);
+  return next;
+}
+
+const STORAGE_KEY = "creator-resource-bookmarks";
+
+/** Loads saved bookmarks; returns an empty set when storage is unavailable or corrupt. */
+export function loadBookmarks(): Set<string> {
+  try {
+    const raw = window.localStorage.getItem(STORAGE_KEY);
+    const parsed: unknown = raw ? JSON.parse(raw) : [];
+    return new Set(Array.isArray(parsed) ? parsed.filter((v): v is string => typeof v === "string") : []);
+  } catch {
+    return new Set();
+  }
+}
+
+export function saveBookmarks(bookmarks: ReadonlySet<string>): void {
+  try {
+    window.localStorage.setItem(STORAGE_KEY, JSON.stringify([...bookmarks]));
+  } catch {
+    // Storage may be unavailable (private mode / quota); bookmarks are best-effort.
+  }
+}
diff --git a/src/lib/invoiceSecurity.ts b/src/lib/invoiceSecurity.ts
new file mode 100644
index 00000000..8e4b6896
--- /dev/null
+++ b/src/lib/invoiceSecurity.ts
@@ -0,0 +1,73 @@
+import { detectSuspiciousActivity, type ActivityEvent, type SuspiciousActivityAlert } from "@/lib/suspiciousActivity";
+
+export type SecurityEventKind = "failed_auth" | "permission_change" | "large_payment" | "link_shared" | "export";
+
+export interface InvoiceSecurityEvent {
+  id: string;
+  invoiceId: string;
+  kind: SecurityEventKind;
+  timestamp: number;
+}
+
+export type SecurityLevel = "good" | "attention" | "at_risk";
+
+export interface InvoiceSecuritySummary {
+  /** 0 (worst) – 100 (best). */
+  score: number;
+  level: SecurityLevel;
+  countsByKind: Record<SecurityEventKind, number>;
+  /** Invoices ranked by accumulated risk weight, highest first. */
+  riskiestInvoices: { invoiceId: string; risk: number; events: number }[];
+  alerts: SuspiciousActivityAlert[];
+}
+
+export const EVENT_WEIGHTS: Record<SecurityEventKind, number> = {
+  failed_auth: 5,
+  permission_change: 3,
+  large_payment: 10,
+  link_shared: 2,
+  export: 1,
+};
+
+const ALERT_WEIGHTS = { high: 15, medium: 8, low: 3 } as const;
+
+export function levelForScore(score: number): SecurityLevel {
+  if (score >= 80) return "good";
+  if (score >= 50) return "attention";
+  return "at_risk";
+}
+
+export function summarizeInvoiceSecurity(
+  events: InvoiceSecurityEvent[],
+  activity: ActivityEvent[] = [],
+  topN = 5,
+): InvoiceSecuritySummary {
+  const countsByKind: Record<SecurityEventKind, number> = {
+    failed_auth: 0,
+    permission_change: 0,
+    large_payment: 0,
+    link_shared: 0,
+    export: 0,
+  };
+  const perInvoice = new Map<string, { risk: number; events: number }>();
+  let penalty = 0;
+
+  for (const event of events) {
+    countsByKind[event.kind] += 1;
+    const weight = EVENT_WEIGHTS[event.kind];
+    penalty += weight;
+    const entry = perInvoice.get(event.invoiceId) ?? { risk: 0, events: 0 };
+    perInvoice.set(event.invoiceId, { risk: entry.risk + weight, events: entry.events + 1 });
+  }
+
+  const alerts = detectSuspiciousActivity(activity);
+  for (const alert of alerts) penalty += ALERT_WEIGHTS[alert.severity];
+
+  const score = Math.max(0, Math.min(100, 100 - penalty));
+  const riskiestInvoices = [...perInvoice.entries()]
+    .map(([invoiceId, v]) => ({ invoiceId, ...v }))
+    .sort((a, b) => b.risk - a.risk || a.invoiceId.localeCompare(b.invoiceId))
+    .slice(0, topN);
+
+  return { score, level: levelForScore(score), countsByKind, riskiestInvoices, alerts };
+}