One design system, two theme maps over the same semantic names. Components consume only semantic tokens (T-LAW 1); tenant white-label overrides brand tokens only. Copper, brass, brushed steel, blueprint ink — with restraint, never as costume. Display: Bitter · Body: Golos Text · Mono: JetBrains Mono (full Cyrillic + Latin-Extended).
theme: light
Surfaces
surface-base
surface-raised
surface-overlay
surface-sunken
Text
text-primary
text-secondary
text-muted
text-inverse
Borders & brand accent
border-hairline
border-strong
brand-accent
brand-accent-soft
Copper is the platform default accent — the one tenant-overridable brand token pair.
Status — 7 locked hues, never color alone
✓done
▶current
◆owner review
✕blocked
⟳agent running
○future
▮ NO-LIVE
The no-live boundary: an ink stamp in light, ink-on-brass in dark. The blue “current” pulse runs ≤2Hz and pauses under reduced-motion (replaced by the ▶ tag).
Elevation — shadow ramp in light, glow ramp in dark
elev-1
elev-2
elev-3
elev-4
Motion — tap a chip to preview
Durations 120 / 200 / 320ms; spring reserved for the Office scene and card expand. Theme switch cross-fades over 200ms. Under prefers-reduced-motion every duration collapses to 0 — statuses fall back to their icon tags.