log head row and read its "
"tree_size — that number is the public transparency log "
"answering you, right now.",
"Every service row says alive with observed facts and latency; "
"the repo rows show HEAD commits.",
"Liveness is checked on demand, never assumed — and never silently in "
"the background."),
("operator", "Read the wallet's own pulse",
"Still in green: scroll to Custody latch — it says "
"unlatched, and the panel explains what the latch would do. "
"Then Recorded history: this demo wallet carries "
"1 incident and 1 refusal receipt on file. You will "
"meet both in the next steps.",
"You found the latch state and the two counters without leaving the "
"green pane.",
"The operator reads state from evidence panels, not from memory."),
("proposer", "Live the proposer: find your request",
"Switch hats — amber pane. One signing request sits in "
"the queue, awaiting device. Read its payload "
"fingerprint: that is the SHA-256 of the exact bytes the "
"offline signer would sign — and nothing else.",
"You can quote the first characters of the fingerprint of what would be "
"signed.",
"A proposal is precise, or it is nothing."),
("proposer", "Read a refusal like a to-do list",
"Still amber: open Incidents (refusals) from the "
"station's instrument links. The demo refusal says "
"POLICY_DENIED, missing allowlisted destination, "
"with a remediation naming exactly what would make the "
"same request succeed.",
"You can say, in one sentence, what the proposer would fix before "
"retrying.",
"warden never says a bare «no» — every refusal is machine-readable "
"instructions."),
("quorum", "Sit on the bench: find the dissenter",
"Now the indigo pane. Count the seats: four, each "
"built from a different verified codebase. The demo incident (you saw "
"its counter in step 3) records that risc0 answered "
"INVALID while the other three said OK — in a real wallet, that single "
"dissent freezes custody on the spot.",
"You found all four seats and can name the dissenting member.",
"One honest dissenter beats three comfortable agreements — that is the "
"whole bench."),
("cryptographer", "Recompute — never trust",
"The purple pane: click «load the sample "
"evidence», then Verify (read-only). The "
"deployed verifier re-checks the signatures and the log inclusion in "
"front of you. Then delete one character from the receipt box and "
"verify again — watch it refuse, loudly.",
"First run: ACCEPTED with a diagnostics list. Broken run: "
"REJECTED, and the diagnostics name the exact failing check.",
"You never trusted this page — you recomputed it. That is the "
"cryptographer's entire posture."),
("architect", "Zoom out: map versus territory",
"The slate pane: read the drift "
"tripwire — it just compared the two renderings of the estate "
"map, name by name, and they agree. Then open the Estate "
"map link and find this wallet's place among the repos, "
"services, and the two self-referential loops.",
"You can say where warden sits on the map, and what the tripwire would "
"catch.",
"The map is recomputed, never remembered — or it lies."),
("operator", "The handoff lap — the team in one incident",
"Watch the whole crew move once, in your head, across the panes: the "
"proposer escalates a refusal → the operator "
"investigates and probes → the bench defends its dissent → "
"the cryptographer re-verifies the evidence → the "
"architect records what changed. Five roles touched one "
"incident — and not one of them did another's job.",
"You can retell the lap naming who hands what to whom.",
"Teamwork here is handoffs between distinct roles — never a blur."),
("newcomer", "Graduation",
"Pick the station that felt most like you and open it full-size (the "
"↗ in its pane header). Read its Mission, its Duties — every one a "
"real command — and its «This station never…» list; the never-list is "
"the fastest way to understand a role. When you are ready for a real "
"wallet: pacta wallet init.",
"You have a station — and you know what it never does.",
"If any page confused you on this watch, that is a bug in the page, "
"not in you. Report it — that is the newcomer's superpower."),
]
def render_deck(wallet_dir: str) -> str:
"""The full deck document: bar, pane grid, wizard rail, layout JS."""
demo_badge = (' DEMO WALLET — custody-inert'
if "DEMO" in wallet_dir else "")
panes = "".join(
f'Success looks like: {success}
' f'{learn}
' f'