Rebuild public proof observatory and fix artifact streaming

.github/ISSUE_TEMPLATE/technical-evaluation.yml

@@ -0,0 +1,60 @@
+name: Technical evaluation
+description: Define a workload or verification problem for Power House evaluation.
+title: "[Evaluation] "
+labels:
+  - evaluation
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Describe the statement to verify, the implicit domain, and the acceptance criteria. Do not include confidential data in a public issue.
+  - type: input
+    id: organization
+    attributes:
+      label: Organization or project
+      placeholder: Team, company, laboratory, or open-source project
+  - type: dropdown
+    id: workload
+    attributes:
+      label: Workload class
+      options:
+        - Constant or closed-form polynomial
+        - Seeded affine polynomial
+        - Seeded sparse polynomial
+        - External commitment-bound sparse workload
+        - Other verification workload
+    validations:
+      required: true
+  - type: textarea
+    id: statement
+    attributes:
+      label: Verification statement
+      description: What exact claim should a verifier accept or reject?
+    validations:
+      required: true
+  - type: textarea
+    id: scale
+    attributes:
+      label: Domain and scale
+      description: Variables, field, sparse terms, incidence count, artifact size, or other relevant bounds.
+    validations:
+      required: true
+  - type: textarea
+    id: trust
+    attributes:
+      label: Trust boundary and threat model
+      description: Identify untrusted inputs, substitution risks, and required tamper rejection.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction target
+      description: Required language, runtime, hardware, operating system, or deployment environment.
+  - type: checkboxes
+    id: public
+    attributes:
+      label: Public information confirmation
+      options:
+        - label: I confirm this issue contains no confidential or regulated data.
+          required: true

.github/workflows/ci.yml

@@ -55,6 +55,9 @@ jobs:
       - name: Sparse verifier conformance and mutation tests
         run: python3 scripts/test_sparse_verifier.py
 
+      - name: Browser artifact stream regression
+        run: node scripts/test_observatory_stream.mjs
+
       - name: Soundness budget checks
         run: |
           python3 scripts/soundness_budget.py

RELEASE_NOTES.md

@@ -28,6 +28,12 @@
   shareable browser verification results.
 - Added responsive NASA Earth textures, optimized visual assets, mobile
   observatory controls, WebGL fallback, and reduced-memory artifact hashing.
+- Rebuilt the public experience as a full-screen proof instrument with a
+  generated computational lattice, proof-reactive WebGL geometry, a technical
+  evaluation intake, and a responsive verification transcript.
+- Added local `PHSPv1` and paired `PHSMv1`/`PHCPv1` release verification.
+- Fixed gzip-expanded artifact streaming by validating canonical uncompressed
+  sizes instead of allocating from the HTTP `Content-Length` header.
 
 ## v0.2.1 - 2026-06-05
 

docs/orbital_observatory.md

@@ -37,7 +37,10 @@ The four orbit tracks map to the public verification modes:
 
 Proof progress is reflected in both the verification dock and the active
 orbital beacon. Successful runs can be shared through the Web Share API or
-copied to the clipboard.
+copied to the clipboard. The local-file control accepts the published
+`PHSPv1` certificate or a paired `PHSMv1`/`PHCPv1` workload and certificate,
+checks exact byte lengths, and computes the release SHA-256 digests entirely
+in the browser.
 
 The browser replays provide immediate interactive checks. The canonical Rust
 and Python tooling provides full artifact parsing, transcript validation,
@@ -50,8 +53,11 @@ BLAKE2b workload commitment checks, and algebraic replay as documented in
 - Device pixel ratio is capped separately for desktop and mobile GPUs.
 - Rendering pauses while the page is hidden.
 - Reduced-motion preferences disable automatic orbital motion.
-- Artifact downloads stream into a preallocated buffer when content length is
-  available, avoiding a second full-size in-memory copy.
+- Artifact downloads stream against the canonical uncompressed release size.
+  The growable buffer deliberately ignores compressed HTTP `Content-Length`
+  values, preventing gzip expansion from corrupting browser verification.
+- Exact artifact-length checks reject truncated or expanded release data
+  before hashing.
 - Date and time formatters are cached per IANA zone.
 
 ## Deployment
@@ -70,3 +76,5 @@ can stream and hash them from the same origin.
   https://threejs.org/
 - Lucide:
   https://lucide.dev/
+- The computational proof-lattice backdrop was generated for this project
+  with OpenAI image generation and optimized locally as WebP.

publicpower/ATTRIBUTION.md

@@ -6,3 +6,5 @@
   https://github.com/mrdoob/three.js
 - Lucide 1.17.0 is distributed under the ISC License.
   https://github.com/lucide-icons/lucide
+- `assets/proof-lattice.webp` was generated specifically for MFENX Power House
+  with OpenAI image generation and optimized locally for the web.