fix: polish live administration table and record overhaul qualification

docs/APPROVED_UI_OVERHAUL.md

@@ -0,0 +1,29 @@
+# Approved Hope web interface overhaul
+
+The user approved the standalone HTML proposal, including personal settings and administration, with “do it.” This document records the implementation boundary and evidence.
+
+## Implemented
+- Square 48px Lightwell realtime action inside the composer; direct intentional connection initiation, not dictation and not a portal to another Start button.
+- Inline voice console with actual connection, agent and microphone state, mute/end, selected-conversation ownership, and retained editable typed draft. Text send stays disabled while voice owns the conversation.
+- Compact header and conversation-action overflow; workspace editing behind progressive controls; sidebar Library, Activity, and Account & settings.
+- Library mounts existing files/artifact controls. Activity mounts actual scheduled tasks. Memory controls are mounted in personal settings without duplicating owners or handlers.
+- Real personal settings: readonly account identity, saved appearance, actual voice catalog, server-managed model/thinking, memory, security guidance, current-device sign-out.
+- Real administrator account list, creation, password reset, deletion, and retry for failed provisioning. No invented profile writes, existing-role editor, device-session list, connector management or temporary-chat privacy.
+- Existing cookie auth, role enforcement and backend contracts preserved. Account change closes dialogs and clears private UI. Appearance loads/saves are account-epoch guarded.
+- Shared semantic theme surfaces fix the legacy light-theme voice transcript contrast defect; reduced-motion matrix avoids live layout size mutations.
+
+## Qualification before deployment
+- Integrated browser/theme/package/token/rollback selection: 45 passed, 304 subtests.
+- Final conversation/settings recheck after appearance-save epoch guard: 12 passed.
+- Responsive captures verified 1440/390/320 widths: no horizontal overflow, composer action exactly 48×48.
+- Mocked SDK lifecycle covers direct start, real-readiness gating, mute/unmute, cid binding, stop and microphone rejection. This is not acoustic evidence.
+- Account/backend isolation regression selection: 25 passed.
+
+## Deployment
+Clean committed archive e59c712, separate NAS staging path (no overwrite of dirty NAS checkout), voice image sha256:02bd8e47c2a802ac2232f1403de570e7fb843472b03037167e0ea1e124a048dc. Existing control API image retained. Deployment script produced healthy services with protected quiesced account-state backup and retained rollback containers suffix 20261003T172419Z. External Hope Music is outside this release.
+
+## Live verification
+Live qualification scripts are explicit, credential-protected and use disposable conversations. Personal settings/admin verification is read-only: no account or memory changes. Text verification exercises stream completion, overflow Pin, reload and cleanup. Synthetic microphone verification exercises Azure STT → Hermes → Azure TTS → browser audio, not physical acoustic quality. Collected live release verification passed: all personal settings, actual admin list and mobile settings navigation; text response/overflow Pin/reload; direct composer-start synthetic speech with Azure user transcription, expected Hermes answer, playing LiveKit TTS track, 32,067 received audio bytes, zero browser errors, and successful disposable voice-conversation cleanup. No live accounts or memory were mutated by settings verification.
+
+## Remaining boundaries
+This release changes the web interface; it does not install a native redesign. Physical microphone/speaker quality and device-specific mobile keyboard behavior remain separate human/device qualification. Native prior signed app installation is not evidence of this web overhaul. Unsupported capabilities remain unavailable rather than simulated in production.