log head row and read its "
+ "tree_size — that number is the public transparency log "
+ "answering you, right now.",
+ "Every service row says alive with observed facts and latency; "
+ "the repo rows show HEAD commits.",
+ "Liveness is checked on demand, never assumed — and never silently in "
+ "the background."),
+ ("operator", "Read the wallet's own pulse",
+ "Still in green: scroll to Custody latch — it says "
+ "unlatched, and the panel explains what the latch would do. "
+ "Then Recorded history: this demo wallet carries "
+ "1 incident and 1 refusal receipt on file. You will "
+ "meet both in the next steps.",
+ "You found the latch state and the two counters without leaving the "
+ "green pane.",
+ "The operator reads state from evidence panels, not from memory."),
+ ("proposer", "Live the proposer: find your request",
+ "Switch hats — amber pane. One signing request sits in "
+ "the queue, awaiting device. Read its payload "
+ "fingerprint: that is the SHA-256 of the exact bytes the "
+ "offline signer would sign — and nothing else.",
+ "You can quote the first characters of the fingerprint of what would be "
+ "signed.",
+ "A proposal is precise, or it is nothing."),
+ ("proposer", "Read a refusal like a to-do list",
+ "Still amber: open Incidents (refusals) from the "
+ "station's instrument links. The demo refusal says "
+ "POLICY_DENIED, missing allowlisted destination, "
+ "with a remediation naming exactly what would make the "
+ "same request succeed.",
+ "You can say, in one sentence, what the proposer would fix before "
+ "retrying.",
+ "warden never says a bare «no» — every refusal is machine-readable "
+ "instructions."),
+ ("quorum", "Sit on the bench: find the dissenter",
+ "Now the indigo pane. Count the seats: four, each "
+ "built from a different verified codebase. The demo incident (you saw "
+ "its counter in step 3) records that risc0 answered "
+ "INVALID while the other three said OK — in a real wallet, that single "
+ "dissent freezes custody on the spot.",
+ "You found all four seats and can name the dissenting member.",
+ "One honest dissenter beats three comfortable agreements — that is the "
+ "whole bench."),
+ ("cryptographer", "Recompute — never trust",
+ "The purple pane: click «load the sample "
+ "evidence», then Verify (read-only). The "
+ "deployed verifier re-checks the signatures and the log inclusion in "
+ "front of you. Then delete one character from the receipt box and "
+ "verify again — watch it refuse, loudly.",
+ "First run: ACCEPTED with a diagnostics list. Broken run: "
+ "REJECTED, and the diagnostics name the exact failing check.",
+ "You never trusted this page — you recomputed it. That is the "
+ "cryptographer's entire posture."),
+ ("architect", "Zoom out: map versus territory",
+ "The slate pane: read the drift "
+ "tripwire — it just compared the two renderings of the estate "
+ "map, name by name, and they agree. Then open the Estate "
+ "map link and find this wallet's place among the repos, "
+ "services, and the two self-referential loops.",
+ "You can say where warden sits on the map, and what the tripwire would "
+ "catch.",
+ "The map is recomputed, never remembered — or it lies."),
+ ("operator", "The handoff lap — the team in one incident",
+ "Watch the whole crew move once, in your head, across the panes: the "
+ "proposer escalates a refusal → the operator "
+ "investigates and probes → the bench defends its dissent → "
+ "the cryptographer re-verifies the evidence → the "
+ "architect records what changed. Five roles touched one "
+ "incident — and not one of them did another's job.",
+ "You can retell the lap naming who hands what to whom.",
+ "Teamwork here is handoffs between distinct roles — never a blur."),
+ ("newcomer", "Graduation",
+ "Pick the station that felt most like you and open it full-size (the "
+ "↗ in its pane header). Read its Mission, its Duties — every one a "
+ "real command — and its «This station never…» list; the never-list is "
+ "the fastest way to understand a role. When you are ready for a real "
+ "wallet: pacta wallet init.",
+ "You have a station — and you know what it never does.",
+ "If any page confused you on this watch, that is a bug in the page, "
+ "not in you. Report it — that is the newcomer's superpower."),
+]
+
+
+def render_deck(wallet_dir: str) -> str:
+ """The full deck document: bar, pane grid, wizard rail, layout JS."""
+ demo_badge = (' DEMO WALLET — custody-inert'
+ if "DEMO" in wallet_dir else "")
+ panes = "".join(
+ f'Success looks like: {success}
' + f'{learn}
' + f'No sample evidence found on this "
+ "machine (expected under examples/wallet-evidence/). Fetch "
+ "real evidence from the live log instead: pacta log-fetch --url "
+ "https://ltl.zkdefi.org --component dalek-ed25519-verified, then "
+ "paste the two files and the log's log.pub.
"
+ "sample loaded evidence for "
+ f"{_esc(stem)} is pre-filled below — press «Verify "
+ "(read-only)» to watch the deployed verifier run. Then delete one "
+ "character from the receipt box and verify again: watch it refuse, "
+ "and read which check failed.