[devfive-relay-c70423]

Figma exports could leak metadata into TSX, duplicate public assets, lose responsive/interaction details and appear complete without measuring application behavior. This change applies all 22 ChondroGen feedback items and the 14 approved follow-ups to generation, shipped guidance, executable controllers, source/asset maintenance and evidence-backed verification.

• Preserve clean generated server TSX, responsive tokens/shorthands, Korean word boundaries, captured instance content and complete variant palettes. Keep provenance and overrides in structured sidecars.
• Ship working marquee, count-up, progress-cycle, persistent route-highlight and entrance controllers with explicit semantic/API bindings. One small client boundary attaches and cleans DOM observers; shared layouts and data remain server-rendered. Dynamic steps and marquee source replacement preserve continuity.
• Measure actual intermediate motion, leftward/seam coverage, selected paint, keyboard/history, clipping and footer geometry. Reject reversed/empty marquee loops and blanket animation clipping exemptions.
• Require authenticated behavior inventories, current build/lint/typecheck/test receipts, independently observed before/after browser source hashes, exact planned motion rows and URL/width coverage for staged completion. Isolated SQLite/API tests change baseline, mutated, empty and error states across landing/list/detail; Rust rehashes evidence and re-executes typed read-only SQL.
• Add devup_source_sync for guarded AST three-way regeneration that preserves API/event/ARIA wiring and reports ambiguous conflicts before writing. Track extracted/reordered components conservatively through semantic/structural sidecars.
• Add devup_assets for reference inventory, reviewed migration plans, guarded local apply/rollback and PostgreSQL forward/verify/rollback SQL artifacts. Quarantine unresolved public filenames and withhold code/public/registry publication together until meaningful names are supplied.
• Resume behavior analysis with signed snapshot-indexed cursors and authenticated aggregate coverage. Enforce incoming/outgoing bounds with explicit incomplete recovery. Prepare Rust binaries before browser timers, ship a minimal runtime runner, run the full browser gate through the existing Linux CI entry, and reduce a captured fixture 14% while preserving complete production codegen evidence.

The 22-item matrix and 14-item follow-up matrix map every requirement to implementation, executable regressions and limits. Controller bindings still need actual semantic targets/API values. Incoming regeneration source remains explicitly caller-supplied until design-grounded. Ambiguous merges and incomplete evidence block completion. PostgreSQL SQL is a reviewable artifact, not a claim that a live migration ran; DB verification is scoped to isolated SQLite snapshots. No live ChondroGen DB migration is included.

Validation on Windows:

• Workspace formatting and all-target/all-feature Clippy with warnings denied.
• Locked all-feature workspace tests: 2,239 passed, zero failures, two existing ignored tests across 188 targets.
• Runtime/browser harness: 92 passed, zero failures; the Linux CI bootstrap is skipped locally. Includes production vinext build/typecheck, SSR/no-JS, hydration, strict MCP theme validation, 11 viewport widths and persistent bidirectional route motion.
• Plugin generation verification, TypeScript check, distribution build and 61 plugin/read-script tests.
• Clean-commit locked workspace release build; --version identifies 2cfac0b and --self-check returns status ok.

GitHub Linux/macOS/Windows verification has passed on 2cfac0b. Linux executed the full real-browser suite through the existing verification entry, without a workflow-file change. Merge and release were requested; Devfive Hub rejected ready/merge operations with: "This mutation is restricted by Devfive policy; ref changes use the device Git relay, merge/ready use maintainers". Maintainer ready/merge is required. After merging, the existing changepacks workflow creates the Update Versions PR; merging that PR triggers draft releases, three-platform binary builds, the MCPB bundle and final publication.

Based on main at 6cdd6d4. Includes a minor changepack. The installed MCP remains on the main-based deployment until this branch is merged.

---

Submitted via Devfive hub.
Employee Git identity (self-declared): <>
Device: 3099154426bffbeef8b62999b80bb038