ContextualWisdomLab · seonghobae · Aug 23, 2026 · Aug 23, 2026 · Aug 23, 2026 · Aug 23, 2026
diff --git a/.jules/palette.md b/.jules/palette.md
@@ -81,3 +81,7 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
+
+## 2026-08-23 - Async Interactive Element Interactions
+**Learning:** Adding `aria-busy="true"` explicitly communicates loading states to screen readers, but it does not natively prevent clicks, unlike the `disabled` attribute. During async operations (like loading scan details), users might double-click an interactive element that lacks `pointer-events: none`, causing duplicate API requests or unexpected state bugs.
+**Action:** Always map the `[aria-busy="true"]` state directly to CSS with `pointer-events: none` and visual indicators (like `opacity`) to ensure visual parity with the accessibility tree and prevent duplicate user actions.
diff --git a/CHANGELOG.d/1031-malicious-shared-skill-threats.md b/CHANGELOG.d/1031-malicious-shared-skill-threats.md
diff --git a/docs/THREAT_MODEL.md b/docs/THREAT_MODEL.md
@@ -44,8 +44,6 @@ flowchart LR
 | deploy exclusions erase evidence | hidden risk | exclusions affect gate only; finding remains visible |
 | tampered SBOM/report evidence | acquisition/security misstatement | deterministic source/lock provenance and manifest hashes |
 | autonomous model self-approval | governance bypass | developer/reviewer/merge/release authority separation |
-| malicious shared skill (homoglyph name, injected instructions, exfiltration directive) | agent hijack and secret exfiltration | deny-listed skill sync with exact alias matching; catalog/skill text treated as untrusted data, never instructions (#1031) |
-| placeholder template published as an installable skill | discovery pollution and broken installs | reject unresolved placeholder names at sync; workspace state kept out of skill roots (#1031) |
 
 ## Stored SSRF abuse case
 

diff --git a/scanner/dashboard/console.html b/scanner/dashboard/console.html
@@ -46,6 +46,7 @@
   .err{color:var(--crit);font-weight:600}
   code{background:var(--bg);padding:1px 5px;border-radius:4px}
   .hidden{display:none}
+  :disabled, [aria-busy="true"] { opacity: 0.7; pointer-events: none; }
 </style>
 </head>
 <body>
@@ -135,8 +136,8 @@ <h1>AppGuardrail Console</h1>
       <td>${esc(s.created_at)}</td><td>${esc(s.repo||"—")}</td><td><code>${esc((s.commit||"—").slice(0,10))}</code></td>
       <td>${s.total}</td><td>${pill(s.deploy_blocking,"var(--crit)")}</td><td>${pill(s.new_blocking,"var(--high)")}</td></tr>`).join("")||'<tr><td colspan="6" class="muted">No scans. POST to /api/v1/scans from CI.</td></tr>';
     document.querySelectorAll("tr.scan").forEach(tr=>{
-      tr.onclick=()=>detail(tr.dataset.id,tr);
-      tr.addEventListener('keydown', e => { if(e.key === 'Enter' || e.key === ' ') { e.preventDefault(); detail(tr.dataset.id,tr); } });
+      tr.onclick=()=>{if(tr.getAttribute("aria-busy")==="true")return;detail(tr.dataset.id,tr);};
+      tr.addEventListener('keydown', e => { if(e.key === 'Enter' || e.key === ' ') { e.preventDefault(); if(tr.getAttribute("aria-busy")==="true")return; detail(tr.dataset.id,tr); } });
     });
   }catch(e){ $("#msg").classList.remove("hidden");$("#app").classList.add("hidden");
     $("#msg").innerHTML=`<span class="err">${esc(e.message)}</span>`; }