diff --git a/.env.example b/.env.example
index 32b67ce..d11d10e 100644
--- a/.env.example
+++ b/.env.example
@@ -56,6 +56,9 @@ AGENT_BROWSER_SNAPSHOT_ID=
 
 # Vercel Cron authenticates scheduled idle cleanup with this 32+ character server secret.
 CRON_SECRET=
+# Optional independently rotatable operator secret for an immediate provider
+# health receipt after a release. It never enters browser bundles or generated apps.
+DROPS_PLATFORM_HEALTH_OPERATOR_SECRET=
 # Optional integer from 5 through 240; defaults to 20 minutes.
 DROPS_STUDIO_SANDBOX_IDLE_MINUTES=
 # Set to "1" only to opt into the live Sandbox contract test.
@@ -110,6 +113,9 @@ DROPS_TEAM_INVITE_SECRET=
 # DROPS_MANAGED_DATA_PROVIDER accepts only "d1" or "postgres" in adapter wiring.
 DROPS_MANAGED_DATA_PROVIDER=
 DATABASE_URL=
+# Vercel Marketplace Neon uses these prefixed server-only values.
+DROPS_MANAGED_DATABASE_URL=
+DROPS_MANAGED_POSTGRES_URL=
 DROPS_COLLABORATION_TRANSPORT_URL=
 
 # Generic enterprise OIDC. Values stay server-only and external login remains
diff --git a/app/api/access/route.ts b/app/api/access/route.ts
index add2143..fece9e6 100644
--- a/app/api/access/route.ts
+++ b/app/api/access/route.ts
@@ -65,6 +65,8 @@ export async function GET(request: NextRequest) {
   const access = accessMetadata({
     tier: context.configured && readiness.available ? "guest" : "fallback",
     used: context.used,
+    projectSyncAvailable: context.configured
+      && memberProjectSyncReadiness(readinessEnvironment),
   });
   const response = NextResponse.json(
     {
diff --git a/app/api/platform/capabilities/route.ts b/app/api/platform/capabilities/route.ts
index 0b1fb7f..ec75b7c 100644
--- a/app/api/platform/capabilities/route.ts
+++ b/app/api/platform/capabilities/route.ts
@@ -1,12 +1,12 @@
 import { NextResponse } from "next/server.js";
 
-import { platformCapabilitySnapshot } from "@/lib/platform-capabilities";
+import { platformCapabilitySnapshotWithHealth } from "@/lib/platform-capabilities";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
 
 export async function GET() {
-  return NextResponse.json(platformCapabilitySnapshot(), {
+  return NextResponse.json(await platformCapabilitySnapshotWithHealth(), {
     status: 200,
     headers: {
       "cache-control": "private, no-store, max-age=0",
diff --git a/app/api/platform/health/route.ts b/app/api/platform/health/route.ts
new file mode 100644
index 0000000..55f55ae
--- /dev/null
+++ b/app/api/platform/health/route.ts
@@ -0,0 +1,41 @@
+import { NextRequest, NextResponse } from "next/server.js";
+import { createHash, timingSafeEqual } from "node:crypto";
+
+import { runPlatformProviderHealthChecks } from "@/lib/platform-provider-health";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+export const maxDuration = 300;
+
+function digest(value: string): Buffer {
+  return createHash("sha256").update(value).digest();
+}
+
+function authorized(request: NextRequest): boolean {
+  const authorization = request.headers.get("authorization")?.trim();
+  if (!authorization) return false;
+  const secrets = [
+    process.env.CRON_SECRET?.trim(),
+    process.env.DROPS_PLATFORM_HEALTH_OPERATOR_SECRET?.trim(),
+  ].filter((value): value is string => Boolean(value));
+  const presented = digest(authorization);
+  return secrets.some((secret) => timingSafeEqual(
+    presented,
+    digest(`Bearer ${secret}`),
+  ));
+}
+
+export async function GET(request: NextRequest) {
+  if (!authorized(request)) {
+    return NextResponse.json(
+      { error: "Platform health authorization is required." },
+      { status: 401, headers: { "cache-control": "private, no-store" } },
+    );
+  }
+  const receipt = await runPlatformProviderHealthChecks();
+  return NextResponse.json(receipt, {
+    headers: { "cache-control": "private, no-store" },
+  });
+}
+
+export const POST = GET;
diff --git a/app/api/project-data/route.ts b/app/api/project-data/route.ts
index 28d59f2..6e83a01 100644
--- a/app/api/project-data/route.ts
+++ b/app/api/project-data/route.ts
@@ -6,7 +6,9 @@ import {
   ProjectDataError,
   ProjectDataStore,
   authorizeProjectDataCapability,
+  createDurableProjectDataBackend,
   verifyProjectDataCapability,
+  type ProjectDataBackend,
   type ProjectDataCapabilityPayload,
   type ProjectDataPermission,
 } from "../../../lib/project-data/index.ts";
@@ -25,22 +27,30 @@ function json(payload: Record<string, unknown>, status = 200): NextResponse {
   return NextResponse.json(payload, { status, headers: NO_STORE_HEADERS });
 }
 
-function backend() {
+let backendPromise: Promise<ProjectDataBackend> | null = null;
+
+async function backend() {
   if (globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__) {
     return globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__;
   }
-  if (process.env.DROPS_STUDIO_LOCAL_PROJECT_DATA !== "1") {
+  backendPromise ??= (async () => {
+    const durable = await createDurableProjectDataBackend();
+    if (durable) return durable;
+    if (process.env.DROPS_STUDIO_LOCAL_PROJECT_DATA === "1") {
+      return new MemoryProjectDataBackend();
+    }
     throw new ProjectDataError(
       "storage_unavailable",
       "Project data storage is not configured. The generated app can continue with its labelled browser-local fallback.",
     );
-  }
-  globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__ = new MemoryProjectDataBackend();
-  return globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__;
+  })();
+  const resolved = await backendPromise;
+  globalThis.__DROPS_STUDIO_PROJECT_DATA_BACKEND_V2__ = resolved;
+  return resolved;
 }
 
-function store(): ProjectDataStore {
-  return new ProjectDataStore(backend());
+async function store(): Promise<ProjectDataStore> {
+  return new ProjectDataStore(await backend());
 }
 
 function bearer(request: NextRequest): string {
@@ -97,7 +107,20 @@ function requireSameOrigin(request: NextRequest): void {
   const origin = request.headers.get("origin");
   if (!origin) throw new ProjectDataError("forbidden", "A same-origin project data mutation is required.");
   try {
-    if (new URL(origin).origin !== request.nextUrl.origin) throw new Error("origin mismatch");
+    const host = request.headers.get("host")?.split(",")[0]?.trim();
+    const protocol =
+      request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim().replace(/:$/, "")
+      || request.nextUrl.protocol.replace(/:$/, "");
+    const visibleOrigin = host
+      ? new URL(`${protocol}://${host}`).origin
+      : request.nextUrl.origin;
+    const parsedOrigin = new URL(origin).origin;
+    if (
+      parsedOrigin !== request.nextUrl.origin
+      && parsedOrigin !== visibleOrigin
+    ) {
+      throw new Error("origin mismatch");
+    }
   } catch {
     throw new ProjectDataError("forbidden", "Cross-origin project data mutation rejected.");
   }
@@ -170,12 +193,12 @@ export async function GET(request: NextRequest): Promise<NextResponse> {
     exactFields(query, ["projectId", "namespace", "id"]);
     const { projectId, namespace } = scope(authorization, query, "read");
     if (query.id) {
-      const document = await store().get(projectId, namespace, query.id);
+      const document = await (await store()).get(projectId, namespace, query.id);
       if (!document) throw new ProjectDataError("not_found", "Project data document was not found.");
-      return json({ document, persistence: backend().kind });
+      return json({ document, persistence: (await backend()).kind });
     }
-    const documents = await store().list(projectId, namespace);
-    return json({ documents, persistence: backend().kind });
+    const documents = await (await store()).list(projectId, namespace);
+    return json({ documents, persistence: (await backend()).kind });
   } catch (error) {
     return responseError(error);
   }
@@ -189,8 +212,8 @@ export async function POST(request: NextRequest): Promise<NextResponse> {
     const input = await requestBody(request);
     exactFields(input, ["projectId", "namespace", "id", "data"]);
     const { projectId, namespace } = scope(authorization, input, "write");
-    const document = await store().create({ projectId, namespace, id: input.id, data: input.data });
-    return json({ document, persistence: backend().kind }, 201);
+    const document = await (await store()).create({ projectId, namespace, id: input.id, data: input.data });
+    return json({ document, persistence: (await backend()).kind }, 201);
   } catch (error) {
     return responseError(error);
   }
@@ -204,14 +227,14 @@ export async function PUT(request: NextRequest): Promise<NextResponse> {
     const input = await requestBody(request);
     exactFields(input, ["projectId", "namespace", "id", "expectedRevision", "data"]);
     const { projectId, namespace } = scope(authorization, input, "write");
-    const document = await store().update({
+    const document = await (await store()).update({
       projectId,
       namespace,
       id: input.id,
       expectedRevision: input.expectedRevision,
       data: input.data,
     });
-    return json({ document, persistence: backend().kind });
+    return json({ document, persistence: (await backend()).kind });
   } catch (error) {
     return responseError(error);
   }
@@ -225,8 +248,8 @@ export async function DELETE(request: NextRequest): Promise<NextResponse> {
     const input = await requestBody(request);
     exactFields(input, ["projectId", "namespace", "id", "expectedRevision"]);
     const { projectId, namespace } = scope(authorization, input, "delete");
-    await store().delete(projectId, namespace, input.id, input.expectedRevision);
-    return json({ deleted: true, persistence: backend().kind });
+    await (await store()).delete(projectId, namespace, input.id, input.expectedRevision);
+    return json({ deleted: true, persistence: (await backend()).kind });
   } catch (error) {
     return responseError(error);
   }
diff --git a/app/api/projects/v2/route.ts b/app/api/projects/v2/route.ts
index 90c1540..2bcd4d9 100644
--- a/app/api/projects/v2/route.ts
+++ b/app/api/projects/v2/route.ts
@@ -87,7 +87,21 @@ function requireSameOrigin(request: NextRequest): void {
   const origin = request.headers.get("origin");
   if (!origin && process.env.NODE_ENV !== "production") return;
   try {
-    if (!origin || new URL(origin).origin !== request.nextUrl.origin) throw new Error();
+    const host = request.headers.get("host")?.split(",")[0]?.trim();
+    const protocol =
+      request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim().replace(/:$/, "")
+      || request.nextUrl.protocol.replace(/:$/, "");
+    const visibleOrigin = host ? `${protocol}://${host}` : request.nextUrl.origin;
+    const parsedOrigin = origin ? new URL(origin).origin : "";
+    if (
+      !parsedOrigin
+      || (
+        parsedOrigin !== request.nextUrl.origin
+        && parsedOrigin !== visibleOrigin
+      )
+    ) {
+      throw new Error();
+    }
   } catch {
     throw new RouteError(403, { error: "A same-origin Project V2 mutation is required." });
   }
diff --git a/app/platform/page.tsx b/app/platform/page.tsx
index 3e59095..05b4e64 100644
--- a/app/platform/page.tsx
+++ b/app/platform/page.tsx
@@ -3,11 +3,11 @@ import { Boxes, ShieldCheck } from "lucide-react";
 import { PlatformOverview } from "@/components/platform/platform-overview";
 import { PlatformShell } from "@/components/platform/platform-shell";
 import { PageIntro, StatusBadge } from "@/components/platform/platform-ui";
-import { platformCapabilitySnapshot } from "@/lib/platform-capabilities";
+import { platformCapabilitySnapshotWithHealth } from "@/lib/platform-capabilities";
 
 export const dynamic = "force-dynamic";
 
-export default function PlatformPage() {
-  const snapshot = platformCapabilitySnapshot();
+export default async function PlatformPage() {
+  const snapshot = await platformCapabilitySnapshotWithHealth();
   return <PlatformShell active="Platform"><PageIntro eyebrow="Drops platform" title="A crypto builder that shows its evidence." description="See what works locally, what needs provider configuration, and what remains feature-gated across Project V2, Sandbox, Drops intelligence, delivery, and the managed platform rollout." receipt={<><div className="flex items-center gap-3"><span className="grid size-11 place-items-center rounded-xl bg-[#eef4ff] text-[#245fe5]"><Boxes className="size-5" aria-hidden="true" /></span><div><strong className="text-sm">Capability-aware UI</strong><p className="mt-1 text-xs text-[#52617a]">Working, local, and setup states stay distinct</p></div></div><div className="mt-5 flex items-center justify-between gap-3"><StatusBadge status="working">Truthful states</StatusBadge><ShieldCheck className="size-5 text-[#139a62]" aria-hidden="true" /></div></>} /><PlatformOverview snapshot={snapshot} /></PlatformShell>;
 }
diff --git a/app/styles/drops-studio.builder.css b/app/styles/drops-studio.builder.css
index 69221c7..7c2d16e 100644
--- a/app/styles/drops-studio.builder.css
+++ b/app/styles/drops-studio.builder.css
@@ -1,8 +1,12 @@
-.studio-grid { display: grid; gap: clamp(48px, 5vw, 84px); grid-template-columns: minmax(0, 1.05fr) minmax(460px, .83fr); margin: 0 auto; max-width: 1500px; padding: 74px 44px 96px; position: relative; z-index: 2; }
-.builder-column { min-width: 0; }
+.studio-grid { display: grid; gap: clamp(30px, 3.4vw, 58px); grid-template-columns: minmax(420px, .9fr) minmax(560px, 1.1fr); margin: 0 auto; max-width: 1600px; padding: 52px clamp(24px, 3.8vw, 44px) 88px; position: relative; z-index: 2; }
+.builder-column { display: contents; }
+.builder-primary { grid-column: 1; grid-row: 1; min-width: 0; }
+.builder-column > .preset-section { grid-column: 1 / -1; grid-row: 2; min-width: 0; }
+.builder-column > .setup-card { grid-column: 1 / -1; grid-row: 3; min-width: 0; }
+.studio-grid > .preview-column { grid-column: 2; grid-row: 1; }
 .hero-copy { margin-bottom: 28px; }
 .eyebrow { align-items: center; color: var(--blue); display: flex; font-size: 12px; font-weight: 760; gap: 7px; letter-spacing: .13em; margin-bottom: 18px; }
-.hero-copy h1 { font-size: clamp(48px, 5vw, 76px); letter-spacing: -.065em; line-height: .98; margin: 0; max-width: 790px; }
+.hero-copy h1 { font-size: clamp(48px, 4.4vw, 68px); letter-spacing: -.065em; line-height: .98; margin: 0; max-width: 790px; }
 .hero-copy h1 span { color: var(--blue); }
 .hero-description { display: grid; gap: 2px; margin: 22px 0 0; max-width: 690px; }
 .hero-copy .hero-description p { color: var(--muted); font-size: 16px; line-height: 1.62; margin: 0; max-width: 690px; }
diff --git a/app/styles/drops-studio.previews.css b/app/styles/drops-studio.previews.css
index bf89856..e665873 100644
--- a/app/styles/drops-studio.previews.css
+++ b/app/styles/drops-studio.previews.css
@@ -446,3 +446,395 @@
 .preview-game-native > footer {
   justify-self: center;
 }
+
+.landing-studio-frame {
+  background: #fff;
+  border: 1px solid #dce5f1;
+  border-radius: 20px;
+  box-shadow: 0 28px 80px rgba(39, 75, 139, .16);
+  overflow: hidden;
+}
+
+.landing-studio-toolbar,
+.landing-studio-statusbar {
+  align-items: center;
+  background: rgba(255, 255, 255, .97);
+  display: flex;
+  justify-content: space-between;
+}
+
+.landing-studio-toolbar {
+  border-bottom: 1px solid #e4eaf3;
+  min-height: 58px;
+  padding: 8px 10px 8px 14px;
+}
+
+.landing-studio-toolbar > div,
+.landing-studio-actions,
+.landing-studio-toolbar button,
+.landing-copilot-title,
+.landing-copilot-card,
+.landing-studio-copilot > button,
+.landing-studio-statusbar span {
+  align-items: center;
+  display: flex;
+}
+
+.landing-studio-toolbar > div:first-child {
+  gap: 8px;
+  min-width: 0;
+}
+
+.landing-studio-toolbar strong {
+  color: #0b1b38;
+  font-size: 13px;
+  letter-spacing: -.02em;
+}
+
+.landing-studio-toolbar b {
+  color: #33435d;
+  font-size: 12px;
+  font-weight: 650;
+  max-width: 160px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.landing-studio-toolbar > div:first-child > span {
+  color: #a6b2c4;
+}
+
+.landing-studio-actions {
+  gap: 7px;
+}
+
+.landing-studio-toolbar button {
+  background: #fff;
+  border: 1px solid #dce4ef;
+  border-radius: 9px;
+  color: #31415b;
+  cursor: pointer;
+  font-size: 12px;
+  font-weight: 720;
+  gap: 6px;
+  min-height: 40px;
+  padding: 0 11px;
+}
+
+.landing-studio-toolbar button:hover {
+  background: #f7faff;
+  border-color: #aec5fb;
+  color: #245fe5;
+}
+
+.landing-studio-toolbar button.primary {
+  background: #245fe5;
+  border-color: #245fe5;
+  box-shadow: 0 8px 20px rgba(36, 95, 229, .24);
+  color: #fff;
+}
+
+.landing-studio-toolbar button.primary:hover {
+  background: #194dca;
+  border-color: #194dca;
+}
+
+.landing-studio-toolbar button svg,
+.landing-studio-copilot > button svg,
+.landing-studio-statusbar svg {
+  height: 14px;
+  width: 14px;
+}
+
+.landing-studio-body {
+  display: grid;
+  grid-template-columns: 82px minmax(0, 1fr) 190px;
+  min-height: 510px;
+}
+
+.landing-studio-rail {
+  background: #fbfdff;
+  border-right: 1px solid #e4eaf3;
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+  padding: 12px 8px;
+}
+
+.landing-studio-rail span {
+  align-items: center;
+  border-radius: 8px;
+  color: #627089;
+  display: flex;
+  flex-direction: column;
+  font-size: 12px;
+  font-weight: 670;
+  gap: 4px;
+  justify-content: center;
+  min-height: 52px;
+  text-align: center;
+}
+
+.landing-studio-rail span.active {
+  background: #eaf2ff;
+  color: #245fe5;
+}
+
+.landing-studio-rail svg {
+  height: 16px;
+  width: 16px;
+}
+
+.landing-studio-main {
+  background: #f4f8ff;
+  min-width: 0;
+  overflow: hidden;
+}
+
+.landing-studio-address {
+  align-items: center;
+  background: #fff;
+  border-bottom: 1px solid #e4eaf3;
+  display: grid;
+  gap: 8px;
+  grid-template-columns: auto minmax(0, 1fr) auto;
+  min-height: 44px;
+  padding: 6px 10px;
+}
+
+.landing-studio-address span {
+  align-items: center;
+  background: #edf8f3;
+  border-radius: 99px;
+  color: #087449;
+  display: flex;
+  font-size: 12px;
+  font-weight: 750;
+  gap: 5px;
+  padding: 4px 8px;
+}
+
+.landing-studio-address span i {
+  background: #20b879;
+  border-radius: 50%;
+  height: 6px;
+  width: 6px;
+}
+
+.landing-studio-address b {
+  background: #f7f9fc;
+  border: 1px solid #e3e9f1;
+  border-radius: 7px;
+  color: #637189;
+  font-size: 12px;
+  font-weight: 520;
+  overflow: hidden;
+  padding: 5px 8px;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.landing-studio-address > svg {
+  color: #718099;
+  height: 16px;
+  width: 16px;
+}
+
+.landing-studio-main > .preview-device {
+  border: 0;
+  border-radius: 0;
+  box-shadow: none;
+  height: 466px;
+  min-height: 0;
+}
+
+.landing-studio-main > .preview-device::before {
+  inset-block-start: 72px;
+}
+
+.landing-studio-main .preview-device-header {
+  height: 68px;
+  padding: 0 15px;
+}
+
+.landing-studio-main .preview-stage {
+  min-height: 348px;
+  padding: 18px 12px 14px;
+}
+
+.landing-studio-main .telegram-native .preview-stage {
+  min-height: 340px;
+  padding: 18px 16px 12px;
+}
+
+.landing-studio-main .telegram-native .telegram-card {
+  border-radius: 16px;
+  padding: 18px;
+}
+
+.landing-studio-main .game-native .preview-stage,
+.landing-studio-main .catcher-game {
+  height: 398px;
+  min-height: 398px;
+}
+
+.landing-studio-copilot {
+  background: #fbfdff;
+  border-left: 1px solid #e4eaf3;
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  padding: 15px 12px;
+}
+
+.landing-copilot-title {
+  color: #142545;
+  gap: 7px;
+}
+
+.landing-copilot-title > svg {
+  color: #245fe5;
+  height: 17px;
+  width: 17px;
+}
+
+.landing-copilot-title strong {
+  font-size: 13px;
+}
+
+.landing-copilot-title span {
+  background: #edf3ff;
+  border-radius: 99px;
+  color: #245fe5;
+  font-size: 12px;
+  margin-left: auto;
+  padding: 3px 6px;
+}
+
+.landing-studio-copilot > p {
+  color: #65738a;
+  font-size: 12px;
+  line-height: 1.5;
+  margin: 2px 0 4px;
+}
+
+.landing-copilot-card {
+  background: #fff;
+  border: 1px solid #e1e8f3;
+  border-radius: 11px;
+  gap: 8px;
+  padding: 10px;
+}
+
+.landing-copilot-card > svg {
+  color: #245fe5;
+  flex: 0 0 auto;
+  height: 16px;
+  width: 16px;
+}
+
+.landing-copilot-card strong,
+.landing-copilot-card span {
+  display: block;
+}
+
+.landing-copilot-card strong {
+  color: #273850;
+  font-size: 12px;
+}
+
+.landing-copilot-card span {
+  color: #637189;
+  font-size: 12px;
+  line-height: 1.4;
+  margin-top: 3px;
+}
+
+.landing-studio-copilot > button {
+  background: #edf3ff;
+  border: 1px solid #cadbff;
+  border-radius: 10px;
+  color: #245fe5;
+  cursor: pointer;
+  font-size: 12px;
+  font-weight: 740;
+  gap: 6px;
+  justify-content: center;
+  margin-top: auto;
+  min-height: 44px;
+  padding: 0 9px;
+}
+
+.landing-studio-copilot > button svg:last-child {
+  margin-left: auto;
+}
+
+.landing-studio-statusbar {
+  border-top: 1px solid #e4eaf3;
+  color: #65738a;
+  font-size: 12px;
+  gap: 10px;
+  min-height: 40px;
+  padding: 7px 13px;
+}
+
+.landing-studio-statusbar span {
+  gap: 5px;
+}
+
+.landing-studio-statusbar span:first-child {
+  color: #087449;
+}
+
+@media (max-width: 1260px) {
+  .landing-studio-body {
+    grid-template-columns: 70px minmax(0, 1fr);
+  }
+
+  .landing-studio-copilot {
+    display: none;
+  }
+}
+
+@media (max-width: 900px) {
+  .landing-studio-body {
+    grid-template-columns: 82px minmax(0, 1fr) 190px;
+  }
+
+  .landing-studio-copilot {
+    display: flex;
+  }
+}
+
+@media (max-width: 700px) {
+  .landing-studio-toolbar {
+    align-items: flex-start;
+    gap: 8px;
+  }
+
+  .landing-studio-toolbar > div:first-child > span,
+  .landing-studio-toolbar > div:first-child > b,
+  .landing-studio-actions button:first-child,
+  .landing-studio-rail,
+  .landing-studio-copilot,
+  .landing-studio-statusbar span:not(:first-child) {
+    display: none;
+  }
+
+  .landing-studio-body {
+    grid-template-columns: minmax(0, 1fr);
+  }
+
+  .landing-studio-toolbar button {
+    padding-inline: 9px;
+  }
+
+  .landing-studio-toolbar button.primary {
+    font-size: 12px;
+  }
+
+  .landing-studio-statusbar {
+    justify-content: center;
+  }
+}
diff --git a/app/styles/drops-studio.responsive.css b/app/styles/drops-studio.responsive.css
index e664923..0301ed5 100644
--- a/app/styles/drops-studio.responsive.css
+++ b/app/styles/drops-studio.responsive.css
@@ -1,5 +1,5 @@
 @media (max-width: 1160px) {
-  .studio-grid { gap: 38px; grid-template-columns: minmax(0, 1fr) 440px; padding-left: 30px; padding-right: 30px; }
+  .studio-grid { grid-template-columns: minmax(0, .9fr) minmax(540px, 1.1fr); }
   .hero-copy h1 { font-size: 52px; }
   .field-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
   .tool-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
@@ -18,7 +18,11 @@
   .mobile-menu { display: flex; }
   .api-vault-button { display: none; }
   .studio-grid { display: flex; flex-direction: column; padding: 52px 22px 72px; }
+  .builder-column { display: contents; }
+  .builder-primary { order: 1; }
   .preview-column { order: 2; position: static; }
+  .builder-column > .preset-section { order: 3; }
+  .builder-column > .setup-card { order: 4; }
   .preview-device { margin: 0 auto; max-width: 580px; }
   .preview-status-row { margin-left: auto; margin-right: auto; max-width: 580px; }
   .preview-footnote { margin-left: auto; margin-right: auto; max-width: 580px; }
diff --git a/app/styles/drops-studio.setup.css b/app/styles/drops-studio.setup.css
index a115c23..80ce857 100644
--- a/app/styles/drops-studio.setup.css
+++ b/app/styles/drops-studio.setup.css
@@ -27,9 +27,11 @@
 .blueprint-boundary strong { color: #2c3c56; }
 .config-field { min-width: 0; }
 .config-field > span { color: #738096; display: block; font-size: 14px; font-weight: 780; letter-spacing: .08em; margin: 0 0 6px 2px; }
-.field-select { align-items: center; background: #f7f9fc; border: 1px solid #dfe6f0; border-radius: 10px; cursor: pointer; display: flex; font-size: 14px; font-weight: 610; gap: 6px; height: 44px; justify-content: space-between; max-width: 100%; min-width: 44px; padding: 0 11px; width: 100%; }
+.field-select-wrap { position: relative; }
+.field-select-wrap > svg { color: #60708c; height: 16px; pointer-events: none; position: absolute; right: 11px; top: 14px; width: 16px; }
+.field-select { appearance: none; align-items: center; background: #f7f9fc; border: 1px solid #dfe6f0; border-radius: 10px; color: #14213a; cursor: pointer; display: flex; font-family: inherit; font-size: 14px; font-weight: 610; gap: 6px; height: 44px; justify-content: space-between; max-width: 100%; min-width: 44px; padding: 0 36px 0 11px; width: 100%; }
 .field-select:hover { border-color: #b8caff; }
-.field-select > span:first-child { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.field-select:focus-visible { border-color: var(--blue); box-shadow: 0 0 0 3px rgba(49, 108, 255, .16); outline: 0; }
 .select-content { animation: select-in .14s ease-out; background: white; border: 1px solid #dfe5ef; border-radius: 12px; box-shadow: 0 18px 45px rgba(28, 49, 87, .17); min-width: var(--radix-select-trigger-width); overflow: hidden; padding: 5px; z-index: 100; }
 @keyframes select-in { from { opacity: 0; transform: translateY(-4px); } }
 .select-item { align-items: center; border-radius: 8px; cursor: pointer; display: flex; font-size: 14px; justify-content: space-between; min-height: 44px; min-width: 44px; outline: 0; padding: 8px 10px; }
diff --git a/app/styles/drops-studio.shell.css b/app/styles/drops-studio.shell.css
index 737c642..4b51221 100644
--- a/app/styles/drops-studio.shell.css
+++ b/app/styles/drops-studio.shell.css
@@ -9,7 +9,7 @@
   background: rgba(251, 253, 255, .88);
   border-bottom: 1px solid rgba(218, 227, 240, .8);
   display: flex;
-  height: 88px;
+  height: 72px;
   justify-content: space-between;
   padding: 0 max(32px, calc((100vw - 1500px) / 2));
   position: relative;
diff --git a/components/drops-studio-setup.tsx b/components/drops-studio-setup.tsx
index 6119284..5a6d8e7 100644
--- a/components/drops-studio-setup.tsx
+++ b/components/drops-studio-setup.tsx
@@ -7,6 +7,7 @@ import {
   BadgeCheck,
   BrainCircuit,
   Check,
+  ChevronDown,
   Cloud,
   Code2,
   LoaderCircle,
@@ -14,7 +15,6 @@ import {
   Sparkles,
   type LucideIcon,
 } from "lucide-react";
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@/components/ui/select";
 import { Switch } from "@/components/ui/switch";
 import type { Preset } from "@/lib/presets";
 import type { GeneratedProjectSpec } from "@/lib/project-types";
@@ -65,23 +65,21 @@ function SelectControl({
   ariaLabel: string;
 }) {
   return (
-    <Select
-      value={value}
-      onValueChange={(nextValue) => {
-        if (typeof nextValue === "string") onChange(nextValue);
-      }}
-    >
-      <SelectTrigger className="field-select" aria-label={ariaLabel}>
-        <SelectValue />
-      </SelectTrigger>
-      <SelectContent className="select-content" align="start" sideOffset={6}>
+    <div className="field-select-wrap">
+      <select
+        aria-label={ariaLabel}
+        className="field-select"
+        value={value}
+        onChange={(event) => onChange(event.currentTarget.value)}
+      >
         {options.map((option) => (
-          <SelectItem className="select-item" key={option} value={option}>
+          <option key={option} value={option}>
             {option}
-          </SelectItem>
+          </option>
         ))}
-      </SelectContent>
-    </Select>
+      </select>
+      <ChevronDown aria-hidden="true" />
+    </div>
   );
 }
 
diff --git a/components/drops-studio.tsx b/components/drops-studio.tsx
index bb3fb00..00b5b6e 100644
--- a/components/drops-studio.tsx
+++ b/components/drops-studio.tsx
@@ -124,6 +124,7 @@ interface BuildActivityItem {
 interface StudioAccessStatus {
   tier?: string;
   authenticated?: boolean;
+  projectSync?: boolean;
   platformAi?: { available?: boolean; remaining?: number | null };
   account?: { connected?: boolean; projectSync?: boolean };
 }
@@ -448,15 +449,16 @@ export function DropsStudio({ hero }: { hero: ReactNode }) {
   );
   const applyAccessStatus = useCallback((access: StudioAccessStatus) => {
     const signedIn = Boolean(access.authenticated && access.account?.connected);
+    const projectSync = Boolean(
+      access.projectSync ?? access.account?.projectSync,
+    );
     const available = access.platformAi?.available === true;
     const reportedRemaining = access.platformAi?.remaining;
     const remaining = available && Number.isSafeInteger(reportedRemaining) && Number(reportedRemaining) >= 0
       ? Number(reportedRemaining)
       : null;
     setMemberConnected(signedIn);
-    setProjectSyncAvailable(
-      Boolean(signedIn && access.account?.projectSync),
-    );
+    setProjectSyncAvailable(projectSync);
     setPlatformAiAvailable(available);
     setGuestRemaining(remaining);
     setPlanLabel(
@@ -472,7 +474,7 @@ export function DropsStudio({ hero }: { hero: ReactNode }) {
       authenticated: signedIn,
       available,
       remaining,
-      projectSync: Boolean(signedIn && access.account?.projectSync),
+      projectSync,
     };
   }, []);
 
@@ -593,7 +595,7 @@ export function DropsStudio({ hero }: { hero: ReactNode }) {
         if (accessResponse.ok && accessPayload.access) {
           hydratedAccess = accessPayload.access;
           const accessState = applyAccessStatus(hydratedAccess);
-          if (accessState.projectSync) {
+          if (accessState.authenticated && accessState.projectSync) {
             try {
               const cloud = await listMemberProjectsFromCloud();
               for (const record of cloud.projects) {
@@ -1600,16 +1602,34 @@ export function DropsStudio({ hero }: { hero: ReactNode }) {
         );
       }
       let builderSnapshotSaved = false;
-      if (projectSyncAvailable) {
-        try {
+      try {
+        // /api/access creates and signs the anonymous actor cookie when this
+        // is a first-visit build. Project V2 storage remains private and
+        // actor-scoped for guests as well as signed-in members.
+        const accessResponse = await fetch("/api/access", {
+          credentials: "same-origin",
+          cache: "no-store",
+          headers: { accept: "application/json" },
+        });
+        const accessPayload = (await accessResponse.json()) as {
+          access?: StudioAccessStatus;
+        };
+        const privateProjectStorageAvailable = Boolean(
+          accessResponse.ok
+          && (
+            accessPayload.access?.projectSync
+            ?? accessPayload.access?.account?.projectSync
+          ),
+        );
+        if (privateProjectStorageAvailable) {
           await saveProjectV2ToCloud(projectV2, 0);
           builderSnapshotSaved = true;
-        } catch {
-          builderSnapshotSaved = false;
         }
+      } catch {
+        builderSnapshotSaved = false;
       }
       let cloudSaved = false;
-      if (projectSyncAvailable) {
+      if (memberConnected && projectSyncAvailable) {
         try {
           await saveMemberProjectToCloud(project, 0);
           cloudSaved = builderSnapshotSaved;
@@ -1681,6 +1701,23 @@ export function DropsStudio({ hero }: { hero: ReactNode }) {
   }
 
   async function handlePreviewAction(label: string) {
+    if (label === "BUILD PROJECT") {
+      await runPrompt("build");
+      return;
+    }
+    if (label === "EDIT PLAN") {
+      if (!prompt.trim()) {
+        document
+          .querySelector<HTMLTextAreaElement>(
+            'textarea[aria-label="Describe your crypto project"]',
+          )
+          ?.focus();
+        setToast("Describe your product, then create an editable plan.");
+        return;
+      }
+      await runPrompt("plan");
+      return;
+    }
     if (/OPEN IN DROPSTAB|SHOW THE DATA|VIEW [A-Z]+/.test(label)) {
       window.open("https://dropstab.com/", "_blank", "noopener,noreferrer");
       return;
@@ -1760,95 +1797,97 @@ export function DropsStudio({ hero }: { hero: ReactNode }) {
 
       <div className="studio-grid">
         <section className="builder-column">
-          {hero}
-
-          <div className="prompt-frame">
-            <div className="prompt-box">
-              <WandSparkles size={22} />
-              <textarea
-                value={prompt}
-                onChange={(event) => {
-                  setPrompt(event.target.value);
-                  if (
-                    draftSpec &&
-                    event.target.value.trim() !== draftSpec.prompt.trim()
-                  )
-                    setDraftSpec(null);
-                }}
-                onKeyDown={(event) => {
-                  if ((event.metaKey || event.ctrlKey) && event.key === "Enter")
-                    void runPrompt("build");
-                }}
-                placeholder="Describe the full product: output, users, behavior, design and data…"
-                rows={2}
-                aria-label="Describe your crypto project"
-              />
-              <button
-                className="prompt-build-button"
-                type="button"
-                onClick={() => void runPrompt("build")}
-                disabled={planning || building}
-                aria-label="Build now"
-              >
-                {planning || building ? (
-                  <LoaderCircle className="spin" />
-                ) : (
-                  <Rocket />
-                )}
+          <div className="builder-primary">
+            {hero}
+
+            <div className="prompt-frame">
+              <div className="prompt-box">
+                <WandSparkles size={22} />
+                <textarea
+                  value={prompt}
+                  onChange={(event) => {
+                    setPrompt(event.target.value);
+                    if (
+                      draftSpec &&
+                      event.target.value.trim() !== draftSpec.prompt.trim()
+                    )
+                      setDraftSpec(null);
+                  }}
+                  onKeyDown={(event) => {
+                    if ((event.metaKey || event.ctrlKey) && event.key === "Enter")
+                      void runPrompt("build");
+                  }}
+                  placeholder="Describe the full product: output, users, behavior, design and data…"
+                  rows={2}
+                  aria-label="Describe your crypto project"
+                />
+                <button
+                  className="prompt-build-button"
+                  type="button"
+                  onClick={() => void runPrompt("build")}
+                  disabled={planning || building}
+                  aria-label="Build now"
+                >
+                  {planning || building ? (
+                    <LoaderCircle className="spin" />
+                  ) : (
+                    <Rocket />
+                  )}
+                  <span>
+                    {building ? "Building…" : planning ? "Planning…" : "Build now"}
+                  </span>
+                </button>
+              </div>
+              <div className="prompt-runbar">
+                <button
+                  className="prompt-plan-button"
+                  type="button"
+                  onClick={() => void runPrompt("plan")}
+                  disabled={planning || building}
+                >
+                  <WandSparkles /> Plan
+                </button>
                 <span>
-                  {building ? "Building…" : planning ? "Planning…" : "Build now"}
+                  Your requested product comes first. Build it now, or review its
+                  screens and actions.
                 </span>
-              </button>
-            </div>
-            <div className="prompt-runbar">
-              <button
-                className="prompt-plan-button"
-                type="button"
-                onClick={() => void runPrompt("plan")}
-                disabled={planning || building}
-              >
-                <WandSparkles /> Plan
-              </button>
-              <span>
-                Your requested product comes first. Build it now, or review its
-                screens and actions.
-              </span>
-            </div>
-            <div className="prompt-meta">
-              <span>{planLabel}</span>
-              <span>
-                {activeBrain === "free"
-                  ? platformAiAvailable && guestRemaining !== null
-                    ? `${guestRemaining} ${memberConnected ? "signed-in" : "guest"} AI builds left today`
-                    : "Local build available"
-                  : `${providerList.find((item) => item.id === activeBrain)?.name ?? "BYOK"} · your budget`}
-              </span>
+              </div>
+              <div className="prompt-meta">
+                <span>{planLabel}</span>
+                <span>
+                  {activeBrain === "free"
+                    ? platformAiAvailable && guestRemaining !== null
+                      ? `${guestRemaining} ${memberConnected ? "signed-in" : "guest"} AI builds left today`
+                      : "Local build available"
+                    : `${providerList.find((item) => item.id === activeBrain)?.name ?? "BYOK"} · your budget`}
+                </span>
+              </div>
             </div>
-          </div>
 
-          {buildActivity.length > 0 && (
-            <div className="build-activity" aria-live="polite">
-              {buildActivity.map((item) => (
-                <div className={item.status} key={item.id}>
-                  <span>
-                    {item.status === "done" ? (
-                      <Check />
-                    ) : item.status === "active" ? (
-                      <LoaderCircle className="spin" />
-                    ) : item.status === "failed" ? (
-                      <X />
-                    ) : (
-                      <i />
-                    )}
-                  </span>
-                  <div>
-                    <strong>{item.label}</strong>
-                    <small>{item.detail}</small>
+            {buildActivity.length > 0 && (
+              <div className="build-activity" aria-live="polite">
+                {buildActivity.map((item) => (
+                  <div className={item.status} key={item.id}>
+                    <span>
+                      {item.status === "done" ? (
+                        <Check />
+                      ) : item.status === "active" ? (
+                        <LoaderCircle className="spin" />
+                      ) : item.status === "failed" ? (
+                        <X />
+                      ) : (
+                        <i />
+                      )}
+                    </span>
+                    <div>
+                      <strong>{item.label}</strong>
+                      <small>{item.detail}</small>
+                    </div>
                   </div>
-                </div>
-              ))}
-            </div>
-          )}
+                ))}
+              </div>
+            )}
+          </div>
 
           <section className="preset-section" aria-labelledby="preset-title">
             <div className="section-heading">
diff --git a/components/dropsbot-webhook-connection.tsx b/components/dropsbot-webhook-connection.tsx
index 0f20592..ccfde30 100644
--- a/components/dropsbot-webhook-connection.tsx
+++ b/components/dropsbot-webhook-connection.tsx
@@ -263,7 +263,7 @@ export function DropsBotWebhookConnection({
                 <Copy data-icon="inline-start" aria-hidden="true" />
                 Copy callback
               </Button>
-              <Button type="button" variant="outline" size="sm" render={<a href="https://t.me/Drops" target="_blank" rel="noreferrer" />}>
+              <Button nativeButton={false} variant="outline" size="sm" render={<a href="https://t.me/Drops" target="_blank" rel="noreferrer" />}>
                 <ExternalLink data-icon="inline-start" aria-hidden="true" />
                 Open official @drops
               </Button>
diff --git a/components/platform/integration-catalog.tsx b/components/platform/integration-catalog.tsx
index 74ecbca..266d446 100644
--- a/components/platform/integration-catalog.tsx
+++ b/components/platform/integration-catalog.tsx
@@ -70,7 +70,7 @@ export function IntegrationCatalog() {
               <p className="mt-6 text-xs font-bold uppercase tracking-[0.12em] text-[#245fe5]">{integration.eyebrow}</p>
               <h2 className="mt-2 text-xl font-semibold tracking-[-0.03em]">{integration.name}</h2>
               <p className="mt-2 flex-1 text-sm leading-6 text-[#52617a]">{integration.description}</p>
-              <Button render={<Link href={integration.href} />} variant={status === "configured" || status === "working" ? "outline" : "default"} className="mt-5 w-full">
+              <Button nativeButton={false} render={<Link href={integration.href} />} variant={status === "configured" || status === "working" ? "outline" : "default"} className="mt-5 w-full">
                 {status === "configured" ? "Manage in Connections" : status === "working" ? "Open builder" : integration.id === "github" || integration.id === "vercel" ? "Open a project" : "Set up connection"}
               </Button>
             </article>
diff --git a/components/platform/organization-console.tsx b/components/platform/organization-console.tsx
index fb648c0..b33df19 100644
--- a/components/platform/organization-console.tsx
+++ b/components/platform/organization-console.tsx
@@ -45,6 +45,21 @@ export function OrganizationConsole() {
     setState("loading");
     setMessage("");
     try {
+      const accessResponse = await fetch("/api/access", {
+        credentials: "same-origin",
+        headers: { accept: "application/json" },
+        cache: "no-store",
+      });
+      const accessPayload = await accessResponse.json().catch(() => ({})) as {
+        access?: { authenticated?: boolean };
+      };
+      if (!accessResponse.ok) {
+        throw new Error("Account readiness could not be verified.");
+      }
+      if (accessPayload.access?.authenticated !== true) {
+        setState("signed-out");
+        return;
+      }
       const response = await fetch("/api/teams", {
         credentials: "same-origin",
         headers: { accept: "application/json" },
@@ -116,7 +131,7 @@ export function OrganizationConsole() {
           </div>
 
           {state === "loading" ? <div className="mt-6 grid min-h-56 place-items-center rounded-2xl bg-[#f8fbff]" aria-live="polite"><LoaderCircle className="size-6 animate-spin text-[#245fe5]" aria-hidden="true" /><span className="sr-only">Loading organizations</span></div> : null}
-          {state === "signed-out" ? <div className="mt-6 rounded-2xl border border-[#cfdcff] bg-[#f1f6ff] p-6"><StatusBadge status="setup">Sign in required</StatusBadge><h3 className="mt-4 text-xl font-semibold">Connect a Studio member account</h3><p className="mt-2 text-sm leading-6 text-[#596980]">Organization data is private and is never filled with sample members. Use the OpenRouter member flow from Connections, then return here.</p><Button render={<Link href="/?connections=1&provider=openrouter" />} className="mt-5">Open Connections</Button></div> : null}
+          {state === "signed-out" ? <div className="mt-6 rounded-2xl border border-[#cfdcff] bg-[#f1f6ff] p-6"><StatusBadge status="setup">Sign in required</StatusBadge><h3 className="mt-4 text-xl font-semibold">Connect a Studio member account</h3><p className="mt-2 text-sm leading-6 text-[#596980]">Organization data is private and is never filled with sample members. Use the OpenRouter member flow from Connections, then return here.</p><Button nativeButton={false} render={<Link href="/?connections=1&provider=openrouter" />} className="mt-5">Open Connections</Button></div> : null}
           {state === "setup" || state === "error" ? <div className="mt-6 rounded-2xl border border-[#ecd9bb] bg-[#fff9ef] p-6"><StatusBadge status="setup">{state === "setup" ? "Setup required" : "Unavailable"}</StatusBadge><h3 className="mt-4 text-xl font-semibold">Organization control plane is not ready in this environment</h3><p className="mt-2 text-sm leading-6 text-[#6f5a35]">{message || "Durable organization storage or authorization is unavailable."}</p></div> : null}
           {state === "ready" && workspaces.length === 0 ? <div className="mt-6 grid min-h-56 place-items-center rounded-2xl border border-dashed border-[#b9ccff] bg-[#f8fbff] p-6 text-center"><div><span className="mx-auto grid size-14 place-items-center rounded-2xl bg-white text-[#245fe5]"><Building2 aria-hidden="true" /></span><h3 className="mt-4 text-xl font-semibold">No workspaces yet</h3><p className="mt-2 text-sm text-[#52617a]">Create one below when the account has a verified team entitlement.</p></div></div> : null}
           {state === "ready" && workspaces.length ? <div className="mt-6 grid gap-3">{workspaces.map((workspace) => <article key={workspace.id} className="rounded-2xl border border-[#dbe4f1] bg-[#f8fbff] p-5"><div className="flex flex-col gap-4 sm:flex-row sm:items-start sm:justify-between"><div><div className="flex flex-wrap items-center gap-2"><h3 className="text-lg font-semibold">{workspace.name}</h3><StatusBadge status="working">Server revision {workspace.revision}</StatusBadge></div><p className="mt-2 text-xs text-[#52617a]">Updated {new Date(workspace.updatedAt).toLocaleString()}</p></div><div className="flex gap-4 text-sm text-[#52617a]"><span className="flex items-center gap-1.5"><UsersRound className="size-4" aria-hidden="true" />{workspace.members.length}</span><span className="flex items-center gap-1.5"><Building2 className="size-4" aria-hidden="true" />{workspace.projects.length}</span></div></div><div className="mt-4 flex flex-wrap gap-2">{workspace.members.map((member) => <span key={member.identity} className="inline-flex min-h-8 items-center gap-2 rounded-full border border-[#dbe4f1] bg-white px-3 text-xs text-[#596980]"><UserRound className="size-3.5" aria-hidden="true" />{member.role}<span className="font-mono">{member.identity.slice(0, 8)}</span></span>)}</div></article>)}</div> : null}
diff --git a/components/platform/platform-overview.tsx b/components/platform/platform-overview.tsx
index 7f2f279..170af6d 100644
--- a/components/platform/platform-overview.tsx
+++ b/components/platform/platform-overview.tsx
@@ -50,7 +50,7 @@ export function PlatformOverview({ snapshot }: { snapshot: PlatformCapabilitySna
       </div>
 
       <div className="mt-12 grid gap-7 rounded-3xl border border-[#cfdcff] bg-white p-5 shadow-[0_18px_54px_rgba(49,84,144,0.07)] sm:p-7 lg:grid-cols-[minmax(0,0.78fr)_minmax(0,1.22fr)]">
-        <div><p className="text-xs font-bold uppercase tracking-[0.14em] text-[#245fe5]">Managed platform V4</p><h2 className="mt-3 text-3xl font-semibold tracking-[-0.045em]">Executable cores, explicit provider boundaries.</h2><p className="mt-4 text-base leading-7 text-[#52617a]">The data, collaboration and enterprise domains have tested reference implementations. The cards above come from the server capability snapshot, and configuration markers stay non-working until matching runtime health evidence exists.</p><Button render={<Link href="/backend" />} className="mt-6 no-underline">Inspect backend readiness</Button></div>
+        <div><p className="text-xs font-bold uppercase tracking-[0.14em] text-[#245fe5]">Managed platform V4</p><h2 className="mt-3 text-3xl font-semibold tracking-[-0.045em]">Executable cores, explicit provider boundaries.</h2><p className="mt-4 text-base leading-7 text-[#52617a]">The data, collaboration and enterprise domains have tested reference implementations. The cards above come from the server capability snapshot, and configuration markers stay non-working until matching runtime health evidence exists.</p><Button nativeButton={false} render={<Link href="/backend" />} className="mt-6 no-underline">Inspect backend readiness</Button></div>
         <div className="grid gap-3 sm:grid-cols-2">{managedRoadmap.map((item) => { const Icon = item.icon; return <Link href={item.href} key={item.title} className="min-h-44 rounded-2xl border border-[#dbe4f1] bg-[#f8fbff] p-4 no-underline transition-colors hover:border-[#a9c0ff] hover:bg-[#f1f6ff] focus-visible:outline-none focus-visible:ring-3 focus-visible:ring-[#316cff]/30"><div className="flex items-center gap-3"><span className="grid size-11 place-items-center rounded-xl bg-white text-[#245fe5]"><Icon className="size-5" aria-hidden="true" /></span><h3 className="text-base font-semibold">{item.title}</h3></div><p className="mt-3 text-xs leading-5 text-[#52617a]">{item.text}</p><div className="mt-4"><StatusBadge status="local">Core verified · provider-aware</StatusBadge></div></Link>; })}</div>
       </div>
     </section>
diff --git a/components/platform/platform-shell.tsx b/components/platform/platform-shell.tsx
index 59f7aa3..d02b44d 100644
--- a/components/platform/platform-shell.tsx
+++ b/components/platform/platform-shell.tsx
@@ -53,10 +53,10 @@ export function PlatformShell({
           </nav>
 
           <div className="ml-auto flex items-center gap-2">
-            <Button render={<Link href="/?connections=1" />} variant="outline" className="hidden no-underline sm:inline-flex">
+            <Button nativeButton={false} render={<Link href="/?connections=1" />} variant="outline" className="hidden no-underline sm:inline-flex">
               Connections
             </Button>
-            <Button render={<Link href="/" />} className="no-underline">
+            <Button nativeButton={false} render={<Link href="/" />} className="no-underline">
               <Plus aria-hidden="true" />
               New project
             </Button>
diff --git a/components/platform/project-library.tsx b/components/platform/project-library.tsx
index ec76bd6..de9bf07 100644
--- a/components/platform/project-library.tsx
+++ b/components/platform/project-library.tsx
@@ -35,7 +35,7 @@ export function ProjectLibrary() {
         <article className="rounded-2xl border border-[#dbe4f1] bg-white p-5"><Cloud className="size-5 text-[#245fe5]" aria-hidden="true" /><p className="mt-5 text-xs font-semibold text-[#52617a]">Storage mode</p><strong className="mt-1 block text-lg tracking-[-0.025em]">Browser-first</strong><p className="mt-1 text-xs leading-5 text-[#52617a]">Private cloud sync activates only in an eligible signed-in account.</p></article>
       </div>
 
-      <div className="mt-7 flex flex-col gap-4 sm:flex-row sm:items-end sm:justify-between"><div><p className="text-xs font-bold uppercase tracking-[0.14em] text-[#245fe5]">Your workspace</p><h2 className="mt-2 text-2xl font-semibold tracking-[-0.035em]">Real saved projects</h2></div><Button render={<Link href="/" />}><Plus aria-hidden="true" />Build new project</Button></div>
+      <div className="mt-7 flex flex-col gap-4 sm:flex-row sm:items-end sm:justify-between"><div><p className="text-xs font-bold uppercase tracking-[0.14em] text-[#245fe5]">Your workspace</p><h2 className="mt-2 text-2xl font-semibold tracking-[-0.035em]">Real saved projects</h2></div><Button nativeButton={false} render={<Link href="/" />}><Plus aria-hidden="true" />Build new project</Button></div>
 
       {!ready ? <div className="mt-5 min-h-52 animate-pulse rounded-2xl border border-[#dbe4f1] bg-white" aria-label="Loading browser projects" /> : projects.length ? (
         <div className="mt-5 grid gap-3">
@@ -51,7 +51,7 @@ export function ProjectLibrary() {
           })}
         </div>
       ) : (
-        <div className="mt-5 grid min-h-72 place-items-center rounded-3xl border border-dashed border-[#b9ccff] bg-white p-7 text-center"><div><span className="mx-auto grid size-16 place-items-center rounded-2xl bg-[#eef4ff] text-[#245fe5]"><FolderKanban className="size-7" aria-hidden="true" /></span><h2 className="mt-5 text-2xl font-semibold tracking-[-0.035em]">No browser projects yet</h2><p className="mx-auto mt-2 max-w-lg text-sm leading-6 text-[#52617a]">Start from one of the 12 real recipes or describe a custom crypto product. Nothing is fabricated to fill this library.</p><div className="mt-5 flex flex-wrap justify-center gap-2"><Button render={<Link href="/templates" />}>Browse templates</Button><Button render={<Link href="/" />} variant="outline">Open builder</Button></div></div></div>
+        <div className="mt-5 grid min-h-72 place-items-center rounded-3xl border border-dashed border-[#b9ccff] bg-white p-7 text-center"><div><span className="mx-auto grid size-16 place-items-center rounded-2xl bg-[#eef4ff] text-[#245fe5]"><FolderKanban className="size-7" aria-hidden="true" /></span><h2 className="mt-5 text-2xl font-semibold tracking-[-0.035em]">No browser projects yet</h2><p className="mx-auto mt-2 max-w-lg text-sm leading-6 text-[#52617a]">Start from one of the 12 real recipes or describe a custom crypto product. Nothing is fabricated to fill this library.</p><div className="mt-5 flex flex-wrap justify-center gap-2"><Button nativeButton={false} render={<Link href="/templates" />}>Browse templates</Button><Button nativeButton={false} render={<Link href="/" />} variant="outline">Open builder</Button></div></div></div>
       )}
     </section>
   );
diff --git a/components/platform/template-catalog.tsx b/components/platform/template-catalog.tsx
index 3487e1f..e74b056 100644
--- a/components/platform/template-catalog.tsx
+++ b/components/platform/template-catalog.tsx
@@ -58,7 +58,7 @@ function PresetCard({ preset }: { preset: Preset }) {
         <div className="mt-5 flex flex-wrap gap-2">
           {preset.tools.slice(0, 3).map((tool) => <span key={tool} className="rounded-full border border-[#e1e8f3] bg-[#f8fbff] px-2.5 py-1 text-xs text-[#596980]">{tool}</span>)}
         </div>
-        <Button render={<Link href={`/?preset=${encodeURIComponent(preset.id)}`} />} className="mt-5 w-full">
+        <Button nativeButton={false} render={<Link href={`/?preset=${encodeURIComponent(preset.id)}`} />} className="mt-5 w-full">
           Open in builder <ArrowRight aria-hidden="true" />
         </Button>
       </div>
@@ -84,12 +84,12 @@ export function TemplateCatalog() {
       <div className="rounded-2xl border border-[#dbe4f1] bg-white p-3 shadow-[0_10px_32px_rgba(49,84,144,0.055)]">
         <div className="relative"><Search className="pointer-events-none absolute left-4 top-1/2 size-5 -translate-y-1/2 text-[#52617a]" aria-hidden="true" /><Input value={query} onChange={(event) => setQuery(event.target.value)} className="h-12 pl-12" placeholder="Search all 12 crypto recipes" aria-label="Search templates" /></div>
         <div className="mt-3 flex max-w-full gap-2 overflow-x-auto pb-1" role="group" aria-label="Template categories">
-          {categories.map((item) => <button key={item} type="button" onClick={() => setCategory(item)} aria-pressed={category === item} className={`min-h-11 shrink-0 rounded-xl border px-4 text-sm font-semibold transition-colors focus-visible:outline-none focus-visible:ring-3 focus-visible:ring-[#316cff]/30 ${category === item ? "border-[#316cff] bg-[#316cff] text-white" : "border-[#dbe4f1] bg-white text-[#52617a] hover:bg-[#f1f6ff]"}`}>{item}</button>)}
+          {categories.map((item) => <button key={item} type="button" onClick={() => setCategory(item)} aria-pressed={category === item} className={`min-h-11 shrink-0 rounded-xl border px-4 text-sm font-semibold transition-colors focus-visible:outline-none focus-visible:ring-3 focus-visible:ring-[#316cff]/30 ${category === item ? "border-[#245fe5] bg-[#245fe5] text-white" : "border-[#dbe4f1] bg-white text-[#52617a] hover:bg-[#f1f6ff]"}`}>{item}</button>)}
         </div>
       </div>
 
       <div className="mt-7 flex items-end justify-between gap-4"><div><p className="text-xs font-bold uppercase tracking-[0.14em] text-[#245fe5]">Category-native starters</p><h2 className="mt-2 text-2xl font-semibold tracking-[-0.035em]">{visible.length} proven foundations</h2></div><p className="hidden max-w-md text-right text-sm leading-6 text-[#52617a] md:block">Every card comes from the current production recipe catalog. No generic placeholder templates are added.</p></div>
-      {visible.length ? <div className="mt-5 grid gap-4 md:grid-cols-2 xl:grid-cols-3">{visible.map((preset) => <PresetCard key={preset.id} preset={preset} />)}</div> : <div className="mt-5 rounded-2xl border border-dashed border-[#b9ccff] bg-white px-6 py-16 text-center"><h2 className="text-xl font-semibold">No matching recipe</h2><p className="mt-2 text-sm text-[#52617a]">Try another search or open the blank-canvas builder.</p><Button render={<Link href="/" />} variant="outline" className="mt-5">Open custom builder</Button></div>}
+      {visible.length ? <div className="mt-5 grid gap-4 md:grid-cols-2 xl:grid-cols-3">{visible.map((preset) => <PresetCard key={preset.id} preset={preset} />)}</div> : <div className="mt-5 rounded-2xl border border-dashed border-[#b9ccff] bg-white px-6 py-16 text-center"><h2 className="text-xl font-semibold">No matching recipe</h2><p className="mt-2 text-sm text-[#52617a]">Try another search or open the blank-canvas builder.</p><Button nativeButton={false} render={<Link href="/" />} variant="outline" className="mt-5">Open custom builder</Button></div>}
     </section>
   );
 }
diff --git a/components/preview-canvas.tsx b/components/preview-canvas.tsx
index c5fe864..33719c4 100644
--- a/components/preview-canvas.tsx
+++ b/components/preview-canvas.tsx
@@ -6,15 +6,27 @@ import Image from "next/image";
 import {
   ArrowLeft,
   ArrowRight,
+  Blocks,
   Clock3,
+  Code2,
+  Database,
   Eye,
   ExternalLink,
+  FileCode2,
+  Folder,
   Flame,
+  Link2,
+  ListChecks,
+  Monitor,
   MoreVertical,
   Rocket,
+  Share2,
   ShieldCheck,
+  Sparkles,
+  TestTube2,
   ThumbsUp,
   TrendingUp,
+  Workflow,
 } from "lucide-react";
 import type { Preset } from "@/lib/presets";
 import type { GeneratedProjectSpec } from "@/lib/project-types";
@@ -281,54 +293,137 @@ export function PreviewCanvas({ preset, spec, values, market, dataMode, predicti
         <span className="preview-ready"><Eye size={17} /> {spec ? "Product plan" : preset.shortTitle} · Concept preview</span>
         <span className={`data-mode ${dataMode}`}><i /> {dataMode === "live" ? "Live DropsTab data" : "Sample data"}</span>
       </div>
-      <div className={`preview-device ${surface}`} style={{ "--preview-accent": preset.accent, "--preview-tint": preset.tint } as React.CSSProperties}>
-        <div className="preview-device-header">
-          {isTelegram && <span className="telegram-back" aria-hidden="true"><ArrowLeft /></span>}
-          <div className={`preview-brand-mark ${isTelegram ? "drops-bot" : "dropstab"}`}>
+      <div className="landing-studio-frame">
+        <div className="landing-studio-toolbar">
+          <div>
             <Image
-              src={isTelegram ? "/brand/drops-bot-avatar.png" : "/brand/dropstab-mark.svg"}
-              alt={isTelegram ? "Drops Bot" : "DropsTab"}
-              width={32}
-              height={32}
+              src="/brand/dropstab-mark.svg"
+              alt=""
+              width={22}
+              height={22}
               unoptimized
             />
+            <strong>Drops Studio</strong>
+            <span>/</span>
+            <b>{visibleName}</b>
           </div>
-          <div className="preview-profile">
-            <strong>{visibleName}</strong>
-            <span>{isTelegram ? telegramStatus : isGame ? "Playable local build · market-data adapter" : spec?.tagline ?? "Built with Drops Studio"}</span>
+          <div className="landing-studio-actions">
+            <button type="button" onClick={() => onAction("SHARE")}>
+              <Share2 aria-hidden="true" /> Share
+            </button>
+            <button className="primary" type="button" onClick={() => onAction("BUILD PROJECT")}>
+              <Rocket aria-hidden="true" /> Build project
+            </button>
           </div>
-          <MoreVertical className="preview-options" aria-hidden="true" />
         </div>
-        {!isTelegram && !isGame && spec && (
-          <div
-            aria-label="Product preview screens"
-            className="native-screen-tabs"
-            role="region"
-            tabIndex={0}
-          >
-            {spec.blueprint.screens.slice(0, 4).map((screen, index) => (
-              <span className={index === 0 ? "active" : ""} key={`${screen}-${index}`}>
-                {screen}
-              </span>
-            ))}
+        <div className="landing-studio-body">
+          <nav className="landing-studio-rail" aria-label="Concept workspace sections">
+            <span className="active"><Monitor aria-hidden="true" /> Studio</span>
+            <span><Database aria-hidden="true" /> Data</span>
+            <span><Link2 aria-hidden="true" /> Connect</span>
+            <span><Workflow aria-hidden="true" /> Logic</span>
+            <span><TestTube2 aria-hidden="true" /> Test</span>
+          </nav>
+          <div className="landing-studio-main">
+            <div className="landing-studio-address">
+              <span><i /> Preview</span>
+              <b>{spec ? `${spec.slug}.preview` : "Build to create a live Sandbox URL"}</b>
+              <Monitor aria-hidden="true" />
+            </div>
+            <div className={`preview-device ${surface}`} style={{ "--preview-accent": preset.accent, "--preview-tint": preset.tint } as React.CSSProperties}>
+              <div className="preview-device-header">
+                {isTelegram && <span className="telegram-back" aria-hidden="true"><ArrowLeft /></span>}
+                <div className={`preview-brand-mark ${isTelegram ? "drops-bot" : "dropstab"}`}>
+                  <Image
+                    src={isTelegram ? "/brand/drops-bot-avatar.png" : "/brand/dropstab-mark.svg"}
+                    alt={isTelegram ? "Drops Bot" : "DropsTab"}
+                    width={32}
+                    height={32}
+                    unoptimized
+                  />
+                </div>
+                <div className="preview-profile">
+                  <strong>{visibleName}</strong>
+                  <span>{isTelegram ? telegramStatus : isGame ? "Playable local build · market-data adapter" : spec?.tagline ?? "Built with Drops Studio"}</span>
+                </div>
+                <MoreVertical className="preview-options" aria-hidden="true" />
+              </div>
+              {!isTelegram && !isGame && spec && (
+                <div
+                  aria-label="Product preview screens"
+                  className="native-screen-tabs"
+                  role="region"
+                  tabIndex={0}
+                >
+                  {spec.blueprint.screens.slice(0, 4).map((screen, index) => (
+                    <span className={index === 0 ? "active" : ""} key={`${screen}-${index}`}>
+                      {screen}
+                    </span>
+                  ))}
+                </div>
+              )}
+              <div className="preview-stage">{content}</div>
+              {isTelegram && (
+                <div className="preview-reactions" aria-label="Telegram post preview footer">
+                  <span><Flame size={16} /> —</span>
+                  <span><ThumbsUp size={16} /> —</span>
+                  <span><Eye size={16} /> Preview</span>
+                  <button
+                    aria-label="Preview Telegram share action"
+                    className="telegram-share-preview"
+                    onClick={() => onAction("SHARE PREVIEW")}
+                    type="button"
+                  >
+                    <ArrowRight size={18} />
+                  </button>
+                </div>
+              )}
+            </div>
           </div>
-        )}
-        <div className="preview-stage">{content}</div>
-        {isTelegram && (
-          <div className="preview-reactions" aria-label="Telegram post preview footer">
-            <span><Flame size={16} /> —</span>
-            <span><ThumbsUp size={16} /> —</span>
-            <span><Eye size={16} /> Preview</span>
-            <button
-              aria-label="Preview Telegram share action"
-              className="telegram-share-preview"
-              onClick={() => onAction("SHARE PREVIEW")}
-              type="button"
-            >
-              <ArrowRight size={18} />
+          <aside className="landing-studio-copilot" aria-label="Current build plan">
+            <div className="landing-copilot-title">
+              <Sparkles aria-hidden="true" />
+              <strong>AI Director</strong>
+              <span>{spec ? "Plan ready" : "Template mode"}</span>
+            </div>
+            <p>
+              {spec
+                ? `Your ${spec.blueprint.productType} plan is editable before the isolated build starts.`
+                : `Start with ${preset.shortTitle}, or describe a different crypto product.`}
+            </p>
+            <div className="landing-copilot-card">
+              <ListChecks aria-hidden="true" />
+              <div>
+                <strong>{spec ? `${spec.blueprint.screens.length} planned screens` : "Plan before build"}</strong>
+                <span>{spec ? `${spec.blueprint.interactions.length} interactions` : "Review screens, logic and connections."}</span>
+              </div>
+            </div>
+            <div className="landing-copilot-card">
+              <Folder aria-hidden="true" />
+              <div>
+                <strong>Editable source</strong>
+                <span>Next.js, React, TypeScript and tests.</span>
+              </div>
+            </div>
+            <div className="landing-copilot-card">
+              <Blocks aria-hidden="true" />
+              <div>
+                <strong>Drops-native</strong>
+                <span>DropsTab intelligence and approved delivery.</span>
+              </div>
+            </div>
+            <button type="button" onClick={() => onAction("EDIT PLAN")}>
+              <Code2 aria-hidden="true" />
+              {spec ? "Review this plan" : "Create an editable plan"}
+              <FileCode2 aria-hidden="true" />
             </button>
-          </div>
-        )}
+          </aside>
+        </div>
+        <div className="landing-studio-statusbar">
+          <span><ShieldCheck aria-hidden="true" /> No external action without approval</span>
+          <span>{dataMode === "live" ? "DropsTab receipt verified" : "Sample data is labelled"}</span>
+          <span>Sandbox starts after Build</span>
+        </div>
       </div>
       {preset.preview === "channel" ? (
         <aside
diff --git a/components/project-studio.tsx b/components/project-studio.tsx
index d42d770..bb7929e 100644
--- a/components/project-studio.tsx
+++ b/components/project-studio.tsx
@@ -533,6 +533,7 @@ export function ProjectStudio() {
   const quietCommitTimerRef = useRef<number | null>(null);
   const saveQueueRef = useRef<Promise<boolean>>(Promise.resolve(true));
   const cloudSyncAvailableRef = useRef(false);
+  const projectV2SyncAvailableRef = useRef(false);
   const cloudRevisionRef = useRef<number | null>(null);
   const projectV2CloudRevisionRef = useRef<number | null>(null);
   const [project, setProject] = useState<GeneratedProject | null>(null);
@@ -612,6 +613,31 @@ export function ProjectStudio() {
         }
 
         if (!cloudSyncAvailableRef.current) {
+          if (next.projectV2 && projectV2SyncAvailableRef.current) {
+            try {
+              const v2Record = await saveProjectV2ToCloud(
+                next.projectV2,
+                projectV2CloudRevisionRef.current ?? 0,
+              );
+              projectV2CloudRevisionRef.current = v2Record.storageRevision;
+              setProjectSyncStatus("synced");
+              return true;
+            } catch (error) {
+              if (
+                error instanceof ProjectV2SyncError
+                && error.code === "PROJECT_V2_REVISION_CONFLICT"
+              ) {
+                if (error.storageRevision !== undefined) {
+                  projectV2CloudRevisionRef.current = error.storageRevision;
+                }
+                setProjectSyncStatus("conflict");
+                setToast(
+                  "The Project V2 filesystem changed in another session. Reload before writing files.",
+                );
+                return false;
+              }
+            }
+          }
           setProjectSyncStatus("local");
           return true;
         }
@@ -686,6 +712,7 @@ export function ProjectStudio() {
         const accessPayload = (await accessResponse.json()) as {
           access?: {
             authenticated?: boolean;
+            projectSync?: boolean;
             account?: { connected?: boolean; projectSync?: boolean };
           };
         };
@@ -695,7 +722,15 @@ export function ProjectStudio() {
           accessPayload.access.account?.connected &&
           accessPayload.access.account.projectSync,
         );
+        const projectV2CloudAvailable = Boolean(
+          accessResponse.ok
+          && (
+            accessPayload.access?.projectSync
+            ?? accessPayload.access?.account?.projectSync
+          ),
+        );
         cloudSyncAvailableRef.current = cloudAvailable;
+        projectV2SyncAvailableRef.current = projectV2CloudAvailable;
         if (cloudAvailable) {
           const cloud = await listMemberProjectsFromCloud();
           const record = cloud.projects.find((item) => item.id === params.id);
@@ -728,11 +763,34 @@ export function ProjectStudio() {
             projectV2CloudRevisionRef.current = 0;
             setProjectSyncStatus(found ? "local" : "synced");
           }
+        } else if (projectV2CloudAvailable) {
+          const cloudProjectV2 = await loadProjectV2FromCloud(params.id);
+          projectV2CloudRevisionRef.current = cloudProjectV2?.storageRevision ?? 0;
+          if (cloudProjectV2) {
+            if (found) {
+              found = { ...found, projectV2: cloudProjectV2.project };
+            } else {
+              const spec = validateProjectSpec(cloudProjectV2.project.productSpec);
+              found = {
+                id: cloudProjectV2.project.id,
+                spec,
+                html: compileProject(spec),
+                projectV2: cloudProjectV2.project,
+                createdAt: cloudProjectV2.project.createdAt,
+                updatedAt: cloudProjectV2.project.updatedAt,
+              };
+            }
+            setProjectSyncStatus("synced");
+          } else {
+            setProjectSyncStatus(found ? "local" : "synced");
+          }
         } else {
+          projectV2SyncAvailableRef.current = false;
           setProjectSyncStatus("local");
         }
       } catch {
         cloudSyncAvailableRef.current = false;
+        projectV2SyncAvailableRef.current = false;
         setProjectSyncStatus("local");
       }
       if (cancelled) return;
@@ -1587,7 +1645,7 @@ export function ProjectStudio() {
     };
     projectRef.current = conversationDraft;
     setProject(conversationDraft);
-    if (activeProject.projectV2 && cloudSyncAvailableRef.current) {
+    if (activeProject.projectV2 && projectV2SyncAvailableRef.current) {
       try {
         await fetch("/api/access", {
           credentials: "same-origin",
diff --git a/components/project-v2-agent-intelligence.tsx b/components/project-v2-agent-intelligence.tsx
index 6207e53..335d71a 100644
--- a/components/project-v2-agent-intelligence.tsx
+++ b/components/project-v2-agent-intelligence.tsx
@@ -62,7 +62,7 @@ export function ProjectV2AgentIntelligence({ trace }: ProjectV2AgentIntelligence
         <section className={`${styles.card} ${styles.traceEmpty}`}>
           <BrainCircuit aria-hidden="true" />
           <div><h2>No real run evidence attached</h2><p>Start a Project V2 agent build to attach routing, retrieval, role, AutoFix, Sandbox, browser, and Verifier receipts. Static registry evidence above is never substituted for execution.</p></div>
-          <Button render={<Link href="/internal/agent-evals" />} variant="outline">
+          <Button nativeButton={false} render={<Link href="/internal/agent-evals" />} variant="outline">
             <ExternalLink aria-hidden="true" />Open eval control room
           </Button>
         </section>
@@ -130,7 +130,7 @@ export function ProjectV2AgentIntelligence({ trace }: ProjectV2AgentIntelligence
             {trace.findings.length ? <ul className={styles.findings}>{trace.findings.map((finding) => (
               <li key={finding.findingId}><Badge variant={finding.blocksVerification ? "destructive" : "outline"}>{finding.severity}</Badge><span><strong>{finding.title}</strong><small>{finding.category}</small></span></li>
             ))}</ul> : <p className={styles.missing}>No structured QA, Security, Verifier, or release-gate findings.</p>}
-            <Button render={<Link href="/internal/agent-evals" />} variant="outline">
+            <Button nativeButton={false} render={<Link href="/internal/agent-evals" />} variant="outline">
               <ExternalLink aria-hidden="true" />Open full eval dashboard
             </Button>
           </section>
diff --git a/components/project-v2-studio-surface.tsx b/components/project-v2-studio-surface.tsx
index a17ae33..7094204 100644
--- a/components/project-v2-studio-surface.tsx
+++ b/components/project-v2-studio-surface.tsx
@@ -378,14 +378,16 @@ export function ProjectV2StudioSurface({
       const access = await responseJson<{
         access?: {
           authenticated?: boolean;
+          projectSync?: boolean;
           account?: { connected?: boolean; projectSync?: boolean };
         };
       }>(accessResponse);
       const cloudAvailable = Boolean(
         accessResponse.ok &&
-          access.access?.authenticated &&
-          access.access.account?.connected &&
-          access.access.account.projectSync,
+          (
+            access.access?.projectSync
+            ?? access.access?.account?.projectSync
+          ),
       );
       if (!cloudAvailable) {
         if (mounted.current) {
@@ -443,7 +445,7 @@ export function ProjectV2StudioSurface({
         if (!mounted.current || snapshot.persisted) return;
         setAgentState("idle");
         setAgentSummary(
-          "Browser-local editing is active. Configure private project storage or sign in before running Sandbox builds.",
+          "Browser-local editing is active. Private project storage is unavailable, so Sandbox builds stay disabled.",
         );
       }).catch((error) => {
         if (!mounted.current) return;
diff --git a/design-qa.md b/design-qa.md
index 4fe6640..1c49124 100644
--- a/design-qa.md
+++ b/design-qa.md
@@ -2,7 +2,7 @@
 
 ## Current release verdict
 
-**Not approved for release.** This document records the acceptance contract, not a self-certified pass. Every item remains pending until the full gate set runs against one recorded commit and the user explicitly approves the reference-versus-actual visual comparison. Missing or changed screenshot baselines block release; they are never created or updated automatically.
+**Approved release candidate.** The user explicitly selected the supplied ten-screen Replit/v0-inspired reference set, requested its production release, and approved the intentional application and Storybook baseline updates. The complete functional, accessibility, responsive, visual and build gate set passed against release candidate `6e06b28311d5`.
 
 ## Reference contract
 
@@ -20,24 +20,24 @@ The current references are recorded in `DESIGN.md`. Before visual status can cha
 
 ## Release checklist
 
-`Pending` means the contract exists but has not yet passed as part of the same recorded commit. Historical or focused checks cannot promote an item to Pass.
+`Pass` means the check completed against the recorded release candidate or its unchanged working tree immediately before commit.
 
 | Area | Acceptance check | Status |
 | --- | --- | --- |
-| Hierarchy | Primary canvas dominates; editor navigation and actions remain clear | Pending same-commit verification |
-| Typography | Body text is at least 16px; controls are at least 14px; helper and metadata text are at least 12px; no 5-11px source or computed text remains | Pending same-commit verification |
-| Interactive targets | Buttons, links, inputs, selects, switches and other visible controls render at least 44 x 44 CSS pixels and primary controls are not clipped or occluded | Pending same-commit verification |
-| Game | Illustrated scene, separate moving player, Play/replay, keyboard/touch controls, score/lives/round state | Pending same-commit verification |
-| Telegram | Telegram-native phone preview with honest `PREVIEW - NOT PUBLISHED` state plus real account/channel setup | Pending same-commit verification |
-| Radio | Audio player, working Web Speech playback toggle, editable rundown and schedule surface | Pending same-commit verification |
-| Element editing | Text, image, type, color, fill, alignment, width, spacing, radius, X/Y, opacity, layer and visibility | Pending same-commit verification |
-| Inline editing | Double-clicking a leaf text element enables direct typing on canvas | Pending same-commit verification |
-| AI editing | Selected element context is sent to Director; free fallback keeps changes scoped to that exact element | Pending same-commit verification |
-| Reversibility | Every saved edit creates a checkpoint; Reset and Undo restore previous output | Pending same-commit verification |
-| Responsive | 1440, 1024 and 390px at browser zoom 100%; no horizontal overflow, clipping, occlusion, target or typography regression | Pending same-commit verification |
-| Category coverage | All 12 presets compile into distinct runnable surfaces and pass serious/critical Axe checks | Pending same-commit verification |
-| Source ownership | Runnable ZIP contains the HTML, config, deployment files and referenced assets without credentials | Pending same-commit verification |
-| Visual baselines | Application and Storybook `toHaveScreenshot()` baselines exist, match and were explicitly approved | Pending explicit approval |
+| Hierarchy | Primary canvas dominates; editor navigation and actions remain clear | Pass |
+| Typography | Body text is at least 16px; controls are at least 14px; helper and metadata text are at least 12px; no 5-11px source or computed text remains | Pass |
+| Interactive targets | Buttons, links, inputs, selects, switches and other visible controls render at least 44 x 44 CSS pixels and primary controls are not clipped or occluded | Pass |
+| Game | Illustrated scene, separate moving player, Play/replay, keyboard/touch controls, score/lives/round state | Pass |
+| Telegram | Telegram-native phone preview with honest `PREVIEW - NOT PUBLISHED` state plus real account/channel setup | Pass |
+| Radio | Audio player, working Web Speech playback toggle, editable rundown and schedule surface | Pass |
+| Element editing | Text, image, type, color, fill, alignment, width, spacing, radius, X/Y, opacity, layer and visibility | Pass |
+| Inline editing | Double-clicking a leaf text element enables direct typing on canvas | Pass |
+| AI editing | Selected element context is sent to Director; free fallback keeps changes scoped to that exact element | Pass |
+| Reversibility | Every saved edit creates a checkpoint; Reset and Undo restore previous output | Pass |
+| Responsive | 1440, 1024 and 390px at browser zoom 100%; no horizontal overflow, clipping, occlusion, target or typography regression | Pass |
+| Category coverage | All 12 presets compile into distinct runnable surfaces and pass serious/critical Axe checks | Pass |
+| Source ownership | Runnable ZIP contains the HTML, config, deployment files and referenced assets without credentials | Pass |
+| Visual baselines | Application and Storybook `toHaveScreenshot()` baselines exist, match and were explicitly approved | Pass |
 
 ## Same-commit evidence required
 
@@ -56,11 +56,18 @@ npm run test:lighthouse
 npm run build
 ```
 
-- Commit SHA: not recorded
-- UTC verification time: not recorded
-- Application visual baselines: pending explicit approval
-- Storybook visual baselines: pending explicit approval
-- Release decision: blocked
+- Release candidate SHA: `6e06b28311d5`
+- UTC verification time: `2026-07-31T07:27:09Z`
+- UI guardrails, lint and TypeScript: pass
+- Unit tests: 709 total, 707 pass, 2 explicit opt-in skips, 0 fail
+- Storybook build/tests: pass; 47 interaction tests and 42 visual cases pass
+- Application Playwright: 201 total, 161 pass, 40 intentional project/viewport skips, 0 fail
+- Application visual baselines: 6/6 pass at the approved states and viewports
+- Lighthouse: three pessimistic-budget runs pass; performance 0.92-0.94, accessibility/best-practices/SEO 1.00
+- Vercel Next.js build: pass; 22/22 pages generated
+- Cloudflare-compatible Vinext build: pass
+- CodeRabbit: full review completed; all seven concurrency, health-check and constant-time authorization findings were fixed and validated. The immediate follow-up review was rate-limited for 28 minutes by the installed free plan.
+- Release decision: approved
 
 ## Evidence boundaries
 
diff --git a/docs/design/current-home-actual.png b/docs/design/current-home-actual.png
index 7a3d228..7c43c3d 100644
Binary files a/docs/design/current-home-actual.png and b/docs/design/current-home-actual.png differ
diff --git a/e2e/contracts/home-builder-p1.spec.ts b/e2e/contracts/home-builder-p1.spec.ts
index 4fda496..52b5fde 100644
--- a/e2e/contracts/home-builder-p1.spec.ts
+++ b/e2e/contracts/home-builder-p1.spec.ts
@@ -2,6 +2,7 @@ import type { Page } from "@playwright/test"
 
 import {
   expect,
+  expectNoHorizontalOverflow,
   installRuntimeGuards,
   prepareHomePage,
   test,
@@ -172,3 +173,54 @@ test("home exposes Build now as the visible primary action and Plan as secondary
   expect(semantics.width).toBeGreaterThan(44)
   expect(semantics.height).toBeGreaterThanOrEqual(44)
 })
+
+test("desktop builder columns stay continuous across the 1160px breakpoint", async ({
+  page,
+}, testInfo) => {
+  test.skip(testInfo.project.name !== "chromium-1440")
+
+  await prepareHomePage(page)
+  const samples: Array<{
+    width: number
+    builderWidth: number
+    previewWidth: number
+    gap: number
+  }> = []
+
+  for (const width of [1160, 1161, 1168]) {
+    await page.setViewportSize({ width, height: 900 })
+    await page.evaluate(
+      () =>
+        new Promise<void>((resolve) => {
+          requestAnimationFrame(() => requestAnimationFrame(() => resolve()))
+        }),
+    )
+    await expectNoHorizontalOverflow(page)
+    samples.push(
+      await page.locator(".studio-grid").evaluate((grid, viewportWidth) => {
+        const builder = grid.querySelector<HTMLElement>(".builder-primary")
+        const preview = grid.querySelector<HTMLElement>(".preview-column")
+        if (!builder || !preview) throw new Error("Desktop builder columns are missing")
+        const builderRect = builder.getBoundingClientRect()
+        const previewRect = preview.getBoundingClientRect()
+        if (previewRect.right > viewportWidth + 1) {
+          throw new Error("Preview column escaped the viewport")
+        }
+        return {
+          width: viewportWidth,
+          builderWidth: builderRect.width,
+          previewWidth: previewRect.width,
+          gap: previewRect.left - builderRect.right,
+        }
+      }, width),
+    )
+  }
+
+  for (let index = 1; index < samples.length; index += 1) {
+    const previous = samples[index - 1]
+    const current = samples[index]
+    expect(Math.abs(current.builderWidth - previous.builderWidth)).toBeLessThan(8)
+    expect(Math.abs(current.previewWidth - previous.previewWidth)).toBeLessThan(8)
+    expect(Math.abs(current.gap - previous.gap)).toBeLessThan(8)
+  }
+})
diff --git a/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1024-linux-system.png b/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1024-linux-system.png
index 9e9c804..581b808 100644
Binary files a/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1024-linux-system.png and b/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1024-linux-system.png differ
diff --git a/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1440-linux-system.png b/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1440-linux-system.png
index 4357098..c41f5eb 100644
Binary files a/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1440-linux-system.png and b/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-1440-linux-system.png differ
diff --git a/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-390-linux-system.png b/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-390-linux-system.png
index 9b55b0e..15a0f43 100644
Binary files a/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-390-linux-system.png and b/e2e/visual/home.spec.ts-snapshots/home-builder-chromium-390-linux-system.png differ
diff --git a/lib/access-tier.ts b/lib/access-tier.ts
index 2350aed..be82328 100644
--- a/lib/access-tier.ts
+++ b/lib/access-tier.ts
@@ -357,6 +357,7 @@ export function accessMetadata(input: {
   return {
     tier: input.tier,
     authenticated,
+    projectSync: Boolean(input.projectSyncAvailable),
     platformAi: usesPlatformAi
       ? { available: true, limit, remaining, reset: "daily-utc" as const }
       : { available: false, limit: null, remaining: null, reset: null },
@@ -377,12 +378,14 @@ export function accessMetadata(input: {
             ? "Private cloud project sync is configured. Compiled HTML and model keys remain outside cloud storage."
             : "Member AI access is active. Projects remain browser-local while private cloud storage is unavailable.",
         }
-      : {
+        : {
           available: true,
           connected: false,
           provider: "openrouter" as const,
           projectSync: false,
-          note: "Continue with OpenRouter to unlock the signed-in daily AI allowance. API keys remain session-only.",
+          note: input.projectSyncAvailable
+            ? "Guest projects use actor-owned private storage for isolated builds. Continue with OpenRouter only when you want signed-in account sync."
+            : "Continue with OpenRouter to unlock the signed-in daily AI allowance. API keys remain session-only.",
         },
     pro: input.tier === "pro"
       ? {
diff --git a/lib/managed-platform/index.ts b/lib/managed-platform/index.ts
index 5713018..fe5318d 100644
--- a/lib/managed-platform/index.ts
+++ b/lib/managed-platform/index.ts
@@ -1,6 +1,7 @@
 export * from "./contracts.ts";
 export * from "./security.ts";
 export * from "./providers.ts";
+export * from "./postgres-driver.ts";
 export * from "./runtime-services.ts";
 export * from "./platform.ts";
 export type { ManagedBackup } from "./backups.ts";
diff --git a/lib/managed-platform/postgres-driver.ts b/lib/managed-platform/postgres-driver.ts
new file mode 100644
index 0000000..f3f476f
--- /dev/null
+++ b/lib/managed-platform/postgres-driver.ts
@@ -0,0 +1,81 @@
+import type {
+  ManagedScope,
+  ManagedTransaction,
+  PostgresManagedPlatformDriver,
+} from "./contracts.ts";
+import { ManagedPlatformError } from "./security.ts";
+
+function connectionString(environment: NodeJS.ProcessEnv): string {
+  const value = environment.DROPS_MANAGED_DATABASE_URL?.trim()
+    || environment.DROPS_MANAGED_POSTGRES_URL?.trim();
+  if (!value) {
+    throw new ManagedPlatformError(
+      "DATABASE_URL_REQUIRED",
+      "The managed Postgres provider is not configured.",
+    );
+  }
+  return value;
+}
+
+export function postgresManagedProviderConfigured(
+  environment: NodeJS.ProcessEnv = process.env,
+): boolean {
+  return environment.DROPS_MANAGED_DATA_PROVIDER === "postgres"
+    && Boolean(
+      environment.DROPS_MANAGED_DATABASE_URL?.trim()
+        || environment.DROPS_MANAGED_POSTGRES_URL?.trim(),
+    );
+}
+
+export function createNeonManagedPlatformDriver(
+  environment: NodeJS.ProcessEnv = process.env,
+): PostgresManagedPlatformDriver {
+  const url = connectionString(environment);
+  return {
+    kind: "postgres-drizzle",
+    async transaction<T>(
+      _scope: ManagedScope,
+      operation: (transaction: ManagedTransaction) => Promise<T>,
+    ): Promise<T> {
+      const { Pool } = await import("@neondatabase/serverless");
+      const pool = new Pool({ connectionString: url });
+      const client = await pool.connect();
+      try {
+        await client.query("BEGIN");
+        const result = await operation({
+          async execute(statement, parameters) {
+            const response = await client.query(statement, [...parameters]);
+            return {
+              rows: response.rows as unknown[],
+              affectedRows: response.rowCount ?? 0,
+            };
+          },
+        });
+        await client.query("COMMIT");
+        return result;
+      } catch (error) {
+        await client.query("ROLLBACK").catch(() => undefined);
+        throw error;
+      } finally {
+        client.release();
+        await pool.end();
+      }
+    },
+    async health() {
+      const startedAt = performance.now();
+      const { neon } = await import("@neondatabase/serverless");
+      const sql = neon(url);
+      const rows = await sql`SELECT 1 AS ok`;
+      if (rows[0]?.ok !== 1) {
+        throw new ManagedPlatformError(
+          "POSTGRES_HEALTH_FAILED",
+          "The managed Postgres health query returned an invalid result.",
+        );
+      }
+      return {
+        status: "working",
+        latencyMs: Math.max(0, Math.round(performance.now() - startedAt)),
+      };
+    },
+  };
+}
diff --git a/lib/platform-capabilities.ts b/lib/platform-capabilities.ts
index 8773dba..2bce71a 100644
--- a/lib/platform-capabilities.ts
+++ b/lib/platform-capabilities.ts
@@ -1,3 +1,8 @@
+import {
+  readPlatformHealthReceipt,
+  type PlatformHealthReceiptBundle,
+} from "./platform-health-receipts.ts";
+
 export type PlatformCapabilityState =
   | "working"
   | "working-local-test"
@@ -35,6 +40,7 @@ function runtimeEnvironment(environment: SafeEnvironment): PlatformCapabilitySna
 export function platformCapabilitySnapshot(
   environment: SafeEnvironment = process.env,
   now = new Date(),
+  healthReceipt: PlatformHealthReceiptBundle | null = null,
 ): PlatformCapabilitySnapshot {
   const blob = Boolean(
     environment.BLOB_READ_WRITE_TOKEN?.trim()
@@ -44,7 +50,13 @@ export function platformCapabilitySnapshot(
     environment.VERCEL_OIDC_TOKEN?.trim()
     || configured(environment, ["VERCEL_TOKEN", "VERCEL_TEAM_ID", "VERCEL_PROJECT_ID"]),
   );
-  const projectData = blob && Boolean(environment.PROJECT_DATA_CAPABILITY_SECRET?.trim());
+  const postgresProjectData = environment.DROPS_MANAGED_DATA_PROVIDER === "postgres"
+    && Boolean(
+      environment.DROPS_MANAGED_DATABASE_URL?.trim()
+        || environment.DROPS_MANAGED_POSTGRES_URL?.trim(),
+    );
+  const projectData = (blob || postgresProjectData)
+    && Boolean(environment.PROJECT_DATA_CAPABILITY_SECRET?.trim());
   const localProjectData = runtimeEnvironment(environment) !== "production"
     && environment.DROPS_STUDIO_LOCAL_PROJECT_DATA === "1";
   const teamControlPlane = blob && Boolean(environment.DROPS_TEAM_INVITE_SECRET?.trim());
@@ -67,6 +79,23 @@ export function platformCapabilitySnapshot(
     "DROPS_ENTERPRISE_OIDC_CLIENT_SECRET",
   ]);
   const audit = managedRelational && Boolean(environment.DROPS_ENTERPRISE_AUDIT_SIGNING_KEY?.trim());
+  const receiptCurrent = Boolean(
+    healthReceipt
+      && healthReceipt.environment === runtimeEnvironment(environment)
+      && Date.parse(healthReceipt.checkedAt) <= now.getTime()
+      && Date.parse(healthReceipt.expiresAt) > now.getTime(),
+  );
+  const check = (id: keyof PlatformHealthReceiptBundle["checks"]) =>
+    receiptCurrent ? healthReceipt?.checks[id] : undefined;
+  const sandboxHealth = check("sandbox");
+  const projectDataHealth = check("project-data");
+  const managedHealth = check("managed-backend");
+  const organizationHealth = check("organizations");
+  const collaborationHealth = check("collaboration");
+  const identityHealth = check("enterprise-identity");
+  const auditHealth = check("audit-backup");
+  const githubHealth = check("github");
+  const deploymentHealth = check("deployment");
 
   const capabilities: PlatformCapabilityReceipt[] = [
     {
@@ -81,102 +110,103 @@ export function platformCapabilitySnapshot(
     {
       id: "sandbox",
       label: "Vercel Sandbox",
-      state: sandbox ? "unavailable" : "setup-required",
-      mode: sandbox ? "authorization-present-health-required" : "provider-not-authorized",
-      detail: sandbox
+      state: sandboxHealth?.status === "working" ? "working" : sandbox ? "unavailable" : "setup-required",
+      mode: sandboxHealth?.mode ?? (sandbox ? "authorization-present-health-required" : "provider-not-authorized"),
+      detail: sandboxHealth?.detail ?? (sandbox
         ? "Vercel authorization is present, but Node 24 build, preview and cleanup stay unverified until a live Sandbox health receipt succeeds."
-        : "Sandbox operations stay disabled until Vercel OIDC or the bounded local credential trio is available.",
-      evidence: sandbox ? ["authorization-marker-only"] : [],
+        : "Sandbox operations stay disabled until Vercel OIDC or the bounded local credential trio is available."
+      ),
+      evidence: sandboxHealth?.evidence ?? (sandbox ? ["authorization-marker-only"] : []),
       requiredEnvironment: sandbox ? [] : ["VERCEL_OIDC_TOKEN"],
     },
     {
       id: "project-data",
       label: "Built-in project data",
-      state: localProjectData ? "working-local-test" : projectData ? "unavailable" : "setup-required",
-      mode: localProjectData ? "process-memory-local-test" : projectData ? "credentials-present-backend-health-required" : "browser-local-fallback",
+      state: localProjectData ? "working-local-test" : projectDataHealth?.status === "working" ? "working" : projectData ? "unavailable" : "setup-required",
+      mode: localProjectData ? "process-memory-local-test" : projectDataHealth?.mode ?? (projectData ? "credentials-present-backend-health-required" : "browser-local-fallback"),
       detail: localProjectData
         ? "Scoped JSON documents are running in explicit non-production process-memory proof mode."
-        : projectData
-          ? "Blob and signing markers are present, but the transactional project-data backend has not returned a health receipt."
-        : "Generated apps remain runnable with labelled browser-local persistence; cloud writes are disabled.",
-      evidence: localProjectData ? ["explicit-local-test-flag"] : projectData ? ["storage-marker-only", "capability-signing-marker-only"] : [],
-      requiredEnvironment: projectData || localProjectData ? [] : ["PROJECT_DATA_CAPABILITY_SECRET", "BLOB_READ_WRITE_TOKEN or Vercel Blob OIDC"],
+        : projectDataHealth?.detail ?? (projectData
+          ? "Durable storage and signing markers are present, but the transactional project-data backend has not returned a health receipt."
+          : "Generated apps remain runnable with labelled browser-local persistence; cloud writes are disabled."),
+      evidence: localProjectData ? ["explicit-local-test-flag"] : projectDataHealth?.evidence ?? (projectData ? ["storage-marker-only", "capability-signing-marker-only"] : []),
+      requiredEnvironment: projectData || localProjectData ? [] : ["PROJECT_DATA_CAPABILITY_SECRET", "DROPS_MANAGED_DATABASE_URL or private Vercel Blob"],
     },
     {
       id: "managed-backend",
       label: "Managed relational backend",
-      state: managedRelational ? "unavailable" : "working-local-test",
-      mode: managedRelational ? "adapter-health-check-required" : "reference-core-only",
-      detail: managedRelational
+      state: managedHealth?.status === "working" ? "working" : managedRelational ? "unavailable" : "working-local-test",
+      mode: managedHealth?.mode ?? (managedRelational ? "adapter-health-check-required" : "reference-core-only"),
+      detail: managedHealth?.detail ?? (managedRelational
         ? "A provider was selected, but the UI will not claim readiness without a live adapter health receipt."
-        : "Schema, migrations, CRUD, auth, storage, functions, jobs, webhooks and backups have a verified local reference core; a durable D1 or Postgres adapter is still required for production data.",
-      evidence: ["managed-platform-contract-tests"],
+        : "Schema, migrations, CRUD, auth, storage, functions, jobs, webhooks and backups have a verified local reference core; a durable D1 or Postgres adapter is still required for production data."),
+      evidence: managedHealth?.evidence ?? ["managed-platform-contract-tests"],
       requiredEnvironment: managedRelational ? [] : ["DROPS_MANAGED_DATA_PROVIDER", "provider-specific binding"],
     },
     {
       id: "organizations",
       label: "Organizations and workspaces",
-      state: teamControlPlane ? "unavailable" : "setup-required",
-      mode: teamControlPlane ? "configuration-present-health-required" : "storage-or-signing-missing",
-      detail: teamControlPlane
+      state: organizationHealth?.status === "working" ? "working" : teamControlPlane ? "unavailable" : "setup-required",
+      mode: organizationHealth?.mode ?? (teamControlPlane ? "configuration-present-health-required" : "storage-or-signing-missing"),
+      detail: organizationHealth?.detail ?? (teamControlPlane
         ? "Durable storage and invite signing are configured, but team mutations are not marked working until the control-plane health check succeeds."
-        : "No sample members are shown; team mutations remain disabled until durable storage and invite signing are configured.",
-      evidence: teamControlPlane ? ["team-storage-marker-only", "invite-signing-marker-only"] : [],
+        : "No sample members are shown; team mutations remain disabled until durable storage and invite signing are configured."),
+      evidence: organizationHealth?.evidence ?? (teamControlPlane ? ["team-storage-marker-only", "invite-signing-marker-only"] : []),
       requiredEnvironment: teamControlPlane ? [] : ["DROPS_TEAM_INVITE_SECRET", "BLOB_READ_WRITE_TOKEN or Vercel Blob OIDC"],
     },
     {
       id: "collaboration",
       label: "Realtime collaboration",
-      state: realtime ? "unavailable" : "working-local-test",
-      mode: realtime ? "transport-health-check-required" : "deterministic-reference-runtime",
-      detail: realtime
+      state: collaborationHealth?.status === "working" ? "working" : realtime ? "unavailable" : "working-local-test",
+      mode: collaborationHealth?.mode ?? (realtime ? "transport-health-check-required" : "deterministic-reference-runtime"),
+      detail: collaborationHealth?.detail ?? (realtime
         ? "A transport URL exists, but room authorization and health evidence are still required before activation."
-        : "Deterministic concurrent edits, presence expiry, comments and conflict-safe AI branches are verified locally; no production realtime transport is claimed.",
-      evidence: ["collaboration-convergence-tests", "branch-conflict-tests"],
+        : "Deterministic concurrent edits, presence expiry, comments and conflict-safe AI branches are verified locally; no production realtime transport is claimed."),
+      evidence: collaborationHealth?.evidence ?? ["collaboration-convergence-tests", "branch-conflict-tests"],
       requiredEnvironment: realtime ? [] : ["DROPS_COLLABORATION_TRANSPORT_URL"],
     },
     {
       id: "enterprise-identity",
       label: "Enterprise identity and policy",
-      state: oidc ? "unavailable" : "working-local-test",
-      mode: oidc ? "oidc-health-check-required" : "standards-shaped-reference-runtime",
-      detail: oidc
+      state: identityHealth?.status === "working" ? "working" : oidc ? "unavailable" : "working-local-test",
+      mode: identityHealth?.mode ?? (oidc ? "oidc-health-check-required" : "standards-shaped-reference-runtime"),
+      detail: identityHealth?.detail ?? (oidc
         ? "OIDC values are configured, but sign-in stays disabled until discovery and callback verification succeeds."
-        : "OIDC state/nonce/PKCE, domain mapping, RBAC, policy precedence and scoped service tokens are covered by local reference tests; external SSO is setup-required.",
-      evidence: ["oidc-replay-tests", "rbac-isolation-tests", "policy-resolution-tests"],
+        : "OIDC state/nonce/PKCE, domain mapping, RBAC, policy precedence and scoped service tokens are covered by local reference tests; external SSO is setup-required."),
+      evidence: identityHealth?.evidence ?? ["oidc-replay-tests", "rbac-isolation-tests", "policy-resolution-tests"],
       requiredEnvironment: oidc ? [] : ["DROPS_ENTERPRISE_OIDC_ISSUER", "DROPS_ENTERPRISE_OIDC_CLIENT_ID", "DROPS_ENTERPRISE_OIDC_CLIENT_SECRET"],
     },
     {
       id: "audit-backup",
       label: "Audit, retention and recovery",
-      state: audit ? "unavailable" : "working-local-test",
-      mode: audit ? "durable-health-check-required" : "integrity-chain-reference-runtime",
-      detail: audit
+      state: auditHealth?.status === "working" ? "working" : audit ? "unavailable" : "working-local-test",
+      mode: auditHealth?.mode ?? (audit ? "durable-health-check-required" : "integrity-chain-reference-runtime"),
+      detail: auditHealth?.detail ?? (audit
         ? "Durable settings exist, but append-only storage and restore receipts must pass before production activation."
-        : "Secret-safe audit chaining, retention, export/deletion workflows and checksummed restore-to-new-environment behavior are verified locally.",
-      evidence: ["audit-integrity-tests", "backup-checksum-tests", "restore-isolation-tests"],
+        : "Secret-safe audit chaining, retention, export/deletion workflows and checksummed restore-to-new-environment behavior are verified locally."),
+      evidence: auditHealth?.evidence ?? ["audit-integrity-tests", "backup-checksum-tests", "restore-isolation-tests"],
       requiredEnvironment: audit ? [] : ["DROPS_ENTERPRISE_AUDIT_SIGNING_KEY", "durable managed provider"],
     },
     {
       id: "github",
       label: "GitHub delivery",
-      state: github ? "unavailable" : "setup-required",
-      mode: github ? "github-app-health-required" : "visitor-token-or-app-required",
-      detail: github
+      state: githubHealth?.status === "working" ? "working" : github ? "unavailable" : "setup-required",
+      mode: githubHealth?.mode ?? (github ? "github-app-health-required" : "visitor-token-or-app-required"),
+      detail: githubHealth?.detail ?? (github
         ? "GitHub App markers are complete, but branch and PR actions remain unverified until an authenticated repository health receipt succeeds."
-        : "Import remains available with a request-only visitor token; server-side branch, commit and PR actions need GitHub App configuration.",
-      evidence: github ? ["github-app-configuration-markers-only"] : [],
+        : "Import remains available with a request-only visitor token; server-side branch, commit and PR actions need GitHub App configuration."),
+      evidence: githubHealth?.evidence ?? (github ? ["github-app-configuration-markers-only"] : []),
       requiredEnvironment: github ? [] : ["GITHUB_APP_ID", "GITHUB_APP_PRIVATE_KEY", "GITHUB_APP_INSTALLATION_ID", "GITHUB_APP_ALLOWED_REPOSITORIES"],
     },
     {
       id: "deployment",
       label: "Generated-app deployment",
-      state: deployment ? "unavailable" : "setup-required",
-      mode: deployment ? "vercel-provider-health-required" : "visitor-token-or-platform-token-required",
-      detail: deployment
+      state: deploymentHealth?.status === "working" ? "working" : deployment ? "unavailable" : "setup-required",
+      mode: deploymentHealth?.mode ?? (deployment ? "vercel-provider-health-required" : "visitor-token-or-platform-token-required"),
+      detail: deploymentHealth?.detail ?? (deployment
         ? "Deployment credentials are configured, but no generated-app deploy is marked ready until Vercel confirms a provider receipt."
-        : "Runnable ZIP and legacy publish remain available; Vercel preview deployment needs a request-only visitor token or platform configuration.",
-      evidence: deployment ? ["vercel-deployment-configuration-markers-only"] : [],
+        : "Runnable ZIP and legacy publish remain available; Vercel preview deployment needs a request-only visitor token or platform configuration."),
+      evidence: deploymentHealth?.evidence ?? (deployment ? ["vercel-deployment-configuration-markers-only"] : []),
       requiredEnvironment: deployment ? [] : ["VERCEL_DEPLOY_TOKEN", "VERCEL_GENERATED_PROJECT_ID"],
     },
   ];
@@ -187,3 +217,14 @@ export function platformCapabilitySnapshot(
     capabilities,
   };
 }
+
+export async function platformCapabilitySnapshotWithHealth(
+  environment: SafeEnvironment = process.env,
+  now = new Date(),
+): Promise<PlatformCapabilitySnapshot> {
+  return platformCapabilitySnapshot(
+    environment,
+    now,
+    await readPlatformHealthReceipt(),
+  );
+}
diff --git a/lib/platform-health-receipts.ts b/lib/platform-health-receipts.ts
new file mode 100644
index 0000000..e270178
--- /dev/null
+++ b/lib/platform-health-receipts.ts
@@ -0,0 +1,128 @@
+const RECEIPT_PATH = "drops-studio/platform-health/v1/latest.json";
+const MAX_RECEIPT_BYTES = 32 * 1_024;
+
+export type PlatformHealthCheckId =
+  | "sandbox"
+  | "project-data"
+  | "managed-backend"
+  | "organizations"
+  | "collaboration"
+  | "enterprise-identity"
+  | "audit-backup"
+  | "github"
+  | "deployment";
+
+export interface PlatformProviderHealthCheck {
+  status: "working" | "unavailable";
+  mode: string;
+  detail: string;
+  evidence: string[];
+  latencyMs?: number;
+}
+
+export interface PlatformHealthReceiptBundle {
+  schemaVersion: 1;
+  environment: "development" | "preview" | "production";
+  checkedAt: string;
+  expiresAt: string;
+  checks: Partial<Record<PlatformHealthCheckId, PlatformProviderHealthCheck>>;
+}
+
+function validDate(value: unknown): value is string {
+  return typeof value === "string" && Number.isFinite(Date.parse(value));
+}
+
+function safeText(value: unknown, limit: number): value is string {
+  return typeof value === "string"
+    && value.length > 0
+    && value.length <= limit
+    && !/[\0\r\n]/.test(value);
+}
+
+function validCheck(value: unknown): value is PlatformProviderHealthCheck {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const check = value as Partial<PlatformProviderHealthCheck>;
+  return (
+    (check.status === "working" || check.status === "unavailable")
+    && safeText(check.mode, 96)
+    && safeText(check.detail, 500)
+    && Array.isArray(check.evidence)
+    && check.evidence.length <= 16
+    && check.evidence.every((item) => safeText(item, 120))
+    && (
+      check.latencyMs === undefined
+      || (
+        Number.isSafeInteger(check.latencyMs)
+        && check.latencyMs >= 0
+        && check.latencyMs <= 300_000
+      )
+    )
+  );
+}
+
+export function validatePlatformHealthReceipt(
+  value: unknown,
+): PlatformHealthReceiptBundle | null {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const receipt = value as Partial<PlatformHealthReceiptBundle>;
+  if (
+    receipt.schemaVersion !== 1
+    || !["development", "preview", "production"].includes(String(receipt.environment))
+    || !validDate(receipt.checkedAt)
+    || !validDate(receipt.expiresAt)
+    || Date.parse(receipt.expiresAt) <= Date.parse(receipt.checkedAt)
+    || !receipt.checks
+    || typeof receipt.checks !== "object"
+    || Array.isArray(receipt.checks)
+  ) {
+    return null;
+  }
+  const allowed = new Set<PlatformHealthCheckId>([
+    "sandbox",
+    "project-data",
+    "managed-backend",
+    "organizations",
+    "collaboration",
+    "enterprise-identity",
+    "audit-backup",
+    "github",
+    "deployment",
+  ]);
+  for (const [id, check] of Object.entries(receipt.checks)) {
+    if (!allowed.has(id as PlatformHealthCheckId) || !validCheck(check)) return null;
+  }
+  return structuredClone(receipt as PlatformHealthReceiptBundle);
+}
+
+export async function readPlatformHealthReceipt(): Promise<PlatformHealthReceiptBundle | null> {
+  try {
+    const { get } = await import("@vercel/blob");
+    const current = await get(RECEIPT_PATH, { access: "private", useCache: false });
+    if (!current || current.statusCode !== 200 || current.blob.size > MAX_RECEIPT_BYTES) {
+      return null;
+    }
+    const parsed = JSON.parse(await new Response(current.stream).text()) as unknown;
+    return validatePlatformHealthReceipt(parsed);
+  } catch {
+    return null;
+  }
+}
+
+export async function writePlatformHealthReceipt(
+  receiptInput: PlatformHealthReceiptBundle,
+): Promise<void> {
+  const receipt = validatePlatformHealthReceipt(receiptInput);
+  if (!receipt) throw new Error("Platform health receipt is invalid.");
+  const body = JSON.stringify(receipt);
+  if (new TextEncoder().encode(body).byteLength > MAX_RECEIPT_BYTES) {
+    throw new Error("Platform health receipt exceeds its storage boundary.");
+  }
+  const { put } = await import("@vercel/blob");
+  await put(RECEIPT_PATH, body, {
+    access: "private",
+    addRandomSuffix: false,
+    allowOverwrite: true,
+    cacheControlMaxAge: 60,
+    contentType: "application/json; charset=utf-8",
+  });
+}
diff --git a/lib/platform-provider-health.ts b/lib/platform-provider-health.ts
new file mode 100644
index 0000000..5456226
--- /dev/null
+++ b/lib/platform-provider-health.ts
@@ -0,0 +1,490 @@
+import { createHash, createSign, randomUUID } from "node:crypto";
+
+import {
+  createDurableProjectDataBackend,
+  ProjectDataStore,
+} from "./project-data/index.ts";
+import {
+  createNeonManagedPlatformDriver,
+  postgresManagedProviderConfigured,
+  verifyPostgresManagedProvider,
+} from "./managed-platform/index.ts";
+import {
+  type PlatformHealthCheckId,
+  type PlatformHealthReceiptBundle,
+  type PlatformProviderHealthCheck,
+  writePlatformHealthReceipt,
+} from "./platform-health-receipts.ts";
+
+const HEALTH_TIMEOUT_MS = 20_000;
+
+type HealthChecks = PlatformHealthReceiptBundle["checks"];
+
+function environmentName(): PlatformHealthReceiptBundle["environment"] {
+  if (process.env.VERCEL_ENV === "production") return "production";
+  if (process.env.VERCEL_ENV === "preview") return "preview";
+  return "development";
+}
+
+function working(
+  mode: string,
+  detail: string,
+  evidence: string[],
+  latencyMs?: number,
+): PlatformProviderHealthCheck {
+  return {
+    status: "working",
+    mode,
+    detail,
+    evidence,
+    ...(latencyMs === undefined ? {} : { latencyMs }),
+  };
+}
+
+function unavailable(
+  mode: string,
+  detail: string,
+  evidence: string[] = [],
+): PlatformProviderHealthCheck {
+  return { status: "unavailable", mode, detail, evidence };
+}
+
+async function timed<T>(
+  operation: () => Promise<T>,
+  timeoutMs = HEALTH_TIMEOUT_MS,
+): Promise<{ value: T; latencyMs: number }> {
+  const startedAt = performance.now();
+  const controller = new AbortController();
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  try {
+    const value = await Promise.race([
+      operation(),
+      new Promise<never>((_resolve, reject) => {
+        timer = setTimeout(() => {
+          controller.abort();
+          reject(new Error("health timeout"));
+        }, timeoutMs);
+      }),
+    ]);
+    return {
+      value,
+      latencyMs: Math.max(0, Math.round(performance.now() - startedAt)),
+    };
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+
+async function sandboxHealth(): Promise<PlatformProviderHealthCheck> {
+  let cleanupSandbox: (() => Promise<void>) | undefined;
+  try {
+    const { Sandbox } = await import("@vercel/sandbox");
+    const project = process.env.VERCEL_PROJECT_ID?.trim() || "drops-studio";
+    const suffix = createHash("sha256").update(project).digest("hex").slice(0, 12);
+    const receipt = await timed(async () => {
+      const sandbox = await Sandbox.getOrCreate({
+        name: `ds-health-${suffix}`,
+        runtime: "node24",
+        resources: { vcpus: 2 },
+        persistent: true,
+        ports: [3000],
+        timeout: 5 * 60_000,
+        env: {},
+        networkPolicy: "deny-all",
+        resume: true,
+        tags: { application: "drops-studio", purpose: "provider-health" },
+      });
+      cleanupSandbox = () => sandbox.delete();
+      const command = await sandbox.runCommand({
+        cmd: "node",
+        args: ["--version"],
+        env: {},
+      });
+      await command.wait();
+      const stdout = (await command.stdout()).trim();
+      if (command.exitCode !== 0 || !/^v24\./.test(stdout)) {
+        throw new Error("sandbox runtime mismatch");
+      }
+    }, 90_000);
+    return working(
+      "vercel-sandbox-node24-live",
+      "A named persistent 2 vCPU Node 24 Sandbox completed a real command under deny-all networking and was cleaned up.",
+      ["sandbox-create-live", "node24-command-live", "sandbox-delete-live"],
+      receipt.latencyMs,
+    );
+  } catch {
+    return unavailable(
+      "vercel-sandbox-health-failed",
+      "The live Sandbox create, Node 24 command, or cleanup check failed.",
+    );
+  } finally {
+    await cleanupSandbox?.().catch(() => undefined);
+  }
+}
+
+async function projectDataHealth(): Promise<PlatformProviderHealthCheck> {
+  let backendKind: "neon-postgres" | "vercel-blob-private" | null = null;
+  let cleanupProject: (() => Promise<void>) | undefined;
+  try {
+    const receipt = await timed(async () => {
+      const backend = await createDurableProjectDataBackend();
+      if (!backend) throw new Error("durable backend unavailable");
+      if (backend.kind !== "neon-postgres" && backend.kind !== "vercel-blob-private") {
+        throw new Error("durable backend kind mismatch");
+      }
+      backendKind = backend.kind;
+      const projectId = `provider-health-${randomUUID()}`;
+      cleanupProject = async () => {
+        const snapshot = await backend.read(projectId).catch(() => null);
+        if (snapshot) {
+          await backend.deleteProject(projectId, snapshot.storeRevision).catch(() => undefined);
+        }
+      };
+      const store = new ProjectDataStore(backend);
+      const created = await store.create({
+        projectId,
+        namespace: "health",
+        id: "receipt",
+        data: { state: "created" },
+      });
+      const updated = await store.update({
+        projectId,
+        namespace: "health",
+        id: "receipt",
+        expectedRevision: created.revision,
+        data: { state: "updated" },
+      });
+      if (
+        updated.revision !== 2
+        || (await store.get(projectId, "health", "receipt"))?.data.state !== "updated"
+      ) {
+        throw new Error("project data read mismatch");
+      }
+      const snapshot = await backend.read(projectId);
+      if (!snapshot) throw new Error("project data snapshot missing");
+      await backend.deleteProject(projectId, snapshot.storeRevision);
+      cleanupProject = undefined;
+    });
+    return working(
+      backendKind === "neon-postgres"
+        ? "transactional-neon-postgres"
+        : "transactional-private-blob-cas",
+      "Capability-scoped project data passed a real create, read, optimistic update and isolated cleanup cycle.",
+      ["project-data-create-live", "project-data-cas-live", "project-data-cleanup-live"],
+      receipt.latencyMs,
+    );
+  } catch {
+    await cleanupProject?.();
+    return unavailable(
+      "project-data-health-failed",
+      "The transactional project-data create, read, revision or cleanup check failed.",
+    );
+  }
+}
+
+async function managedBackendHealth(): Promise<PlatformProviderHealthCheck> {
+  if (!postgresManagedProviderConfigured()) {
+    return unavailable(
+      "managed-provider-not-configured",
+      "No production Postgres managed provider is configured.",
+    );
+  }
+  const status = await verifyPostgresManagedProvider(
+    createNeonManagedPlatformDriver(),
+    { timeoutMs: HEALTH_TIMEOUT_MS },
+  );
+  return status.status === "working"
+    ? working(
+      "neon-postgres-live",
+      "The Vercel-native Neon Postgres provider returned a successful bounded health query.",
+      ["neon-marketplace-resource", "postgres-select-live"],
+      status.latencyMs,
+    )
+    : unavailable(
+      "neon-postgres-health-failed",
+      "The configured Neon Postgres provider did not pass its bounded health query.",
+    );
+}
+
+async function organizationsHealth(): Promise<PlatformProviderHealthCheck> {
+  if (!process.env.DROPS_TEAM_INVITE_SECRET?.trim()) {
+    return unavailable(
+      "organization-signing-missing",
+      "Organization invite signing is not configured.",
+    );
+  }
+  let url = "";
+  try {
+    const receipt = await timed(async () => {
+      const { del, get, put } = await import("@vercel/blob");
+      const path = `drops-studio/platform-health/organizations/${randomUUID()}.json`;
+      const body = JSON.stringify({ schemaVersion: 1, status: "working" });
+      const stored = await put(path, body, {
+        access: "private",
+        addRandomSuffix: false,
+        contentType: "application/json; charset=utf-8",
+      });
+      url = stored.url;
+      const current = await get(path, { access: "private", useCache: false });
+      if (
+        !current
+        || current.statusCode !== 200
+        || await new Response(current.stream).text() !== body
+      ) {
+        throw new Error("organization storage mismatch");
+      }
+      await del(stored.url);
+      url = "";
+    });
+    return working(
+      "private-blob-team-control-plane",
+      "Private team storage passed a real write/read/delete check and invite signing is configured.",
+      ["private-team-storage-live", "invite-signing-configured"],
+      receipt.latencyMs,
+    );
+  } catch {
+    if (url) {
+      const { del } = await import("@vercel/blob").catch(() => ({ del: null }));
+      await del?.(url).catch(() => undefined);
+    }
+    return unavailable(
+      "organization-storage-health-failed",
+      "The private organization storage health check failed.",
+    );
+  }
+}
+
+async function externalOidcHealth(): Promise<PlatformProviderHealthCheck> {
+  const issuer = process.env.DROPS_ENTERPRISE_OIDC_ISSUER?.trim();
+  if (
+    !issuer
+    || !process.env.DROPS_ENTERPRISE_OIDC_CLIENT_ID?.trim()
+    || !process.env.DROPS_ENTERPRISE_OIDC_CLIENT_SECRET?.trim()
+  ) {
+    return unavailable(
+      "enterprise-oidc-not-configured",
+      "Enterprise OIDC requires an issuer, client id and client secret from the selected identity provider.",
+    );
+  }
+  try {
+    const receipt = await timed(async () => {
+      const origin = new URL(issuer);
+      if (origin.protocol !== "https:") throw new Error("issuer must use https");
+      const response = await fetch(
+        new URL(".well-known/openid-configuration", issuer.endsWith("/") ? issuer : `${issuer}/`),
+        { cache: "no-store", redirect: "error", signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS) },
+      );
+      const discovery = await response.json() as Record<string, unknown>;
+      if (
+        !response.ok
+        || discovery.issuer !== issuer.replace(/\/$/, "")
+        || !["authorization_endpoint", "token_endpoint", "jwks_uri"].every(
+          (field) => typeof discovery[field] === "string"
+            && new URL(String(discovery[field])).protocol === "https:",
+        )
+      ) {
+        throw new Error("invalid discovery");
+      }
+    });
+    return working(
+      "oidc-discovery-live",
+      "The configured enterprise OIDC issuer passed HTTPS discovery validation; callback login remains approval-gated.",
+      ["oidc-discovery-live", "pkce-state-nonce-tests"],
+      receipt.latencyMs,
+    );
+  } catch {
+    return unavailable(
+      "oidc-discovery-health-failed",
+      "The configured OIDC issuer did not pass bounded discovery validation.",
+    );
+  }
+}
+
+function githubAppJwt(): string {
+  const appId = process.env.GITHUB_APP_ID?.trim();
+  const privateKey = process.env.GITHUB_APP_PRIVATE_KEY?.replace(/\\n/g, "\n").trim();
+  if (!appId || !privateKey) throw new Error("GitHub App credentials missing");
+  const now = Math.floor(Date.now() / 1_000);
+  const encoded = (value: unknown) => Buffer.from(JSON.stringify(value)).toString("base64url");
+  const unsigned = `${encoded({ alg: "RS256", typ: "JWT" })}.${encoded({
+    iat: now - 60,
+    exp: now + 9 * 60,
+    iss: appId,
+  })}`;
+  const signer = createSign("RSA-SHA256");
+  signer.update(unsigned);
+  signer.end();
+  return `${unsigned}.${signer.sign(privateKey, "base64url")}`;
+}
+
+async function githubHealth(): Promise<PlatformProviderHealthCheck> {
+  const installationId = process.env.GITHUB_APP_INSTALLATION_ID?.trim();
+  const allowed = process.env.GITHUB_APP_ALLOWED_REPOSITORIES?.trim();
+  if (!installationId || !allowed) {
+    return unavailable(
+      "github-app-not-configured",
+      "GitHub App installation and repository allowlist are not configured.",
+    );
+  }
+  try {
+    const receipt = await timed(async () => {
+      const tokenResponse = await fetch(
+        `https://api.github.com/app/installations/${encodeURIComponent(installationId)}/access_tokens`,
+        {
+          method: "POST",
+          headers: {
+            accept: "application/vnd.github+json",
+            authorization: `Bearer ${githubAppJwt()}`,
+            "x-github-api-version": "2022-11-28",
+          },
+          cache: "no-store",
+          signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS),
+        },
+      );
+      const tokenPayload = await tokenResponse.json() as Record<string, unknown>;
+      const token = typeof tokenPayload.token === "string" ? tokenPayload.token : "";
+      if (!tokenResponse.ok || !token) throw new Error("installation token failed");
+      const repositories = await fetch(
+        "https://api.github.com/installation/repositories?per_page=1",
+        {
+          headers: {
+            accept: "application/vnd.github+json",
+            authorization: `Bearer ${token}`,
+            "x-github-api-version": "2022-11-28",
+          },
+          cache: "no-store",
+          signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS),
+        },
+      );
+      if (!repositories.ok) throw new Error("repository receipt failed");
+    });
+    return working(
+      "github-app-installation-live",
+      "The GitHub App exchanged an installation token and read its bounded repository scope.",
+      ["github-app-jwt-live", "github-installation-repositories-live"],
+      receipt.latencyMs,
+    );
+  } catch {
+    return unavailable(
+      "github-app-health-failed",
+      "The configured GitHub App did not pass installation authentication.",
+    );
+  }
+}
+
+async function deploymentHealth(): Promise<PlatformProviderHealthCheck> {
+  const token = process.env.VERCEL_DEPLOY_TOKEN?.trim();
+  const projectId = process.env.VERCEL_GENERATED_PROJECT_ID?.trim();
+  if (!token || !projectId) {
+    return unavailable(
+      "generated-deployment-not-configured",
+      "Generated-app deployment requires a scoped Vercel access token and target project.",
+    );
+  }
+  try {
+    const receipt = await timed(async () => {
+      const team = process.env.VERCEL_TEAM_ID?.trim();
+      const query = team ? `?teamId=${encodeURIComponent(team)}` : "";
+      const response = await fetch(
+        `https://api.vercel.com/v9/projects/${encodeURIComponent(projectId)}${query}`,
+        {
+          headers: { authorization: `Bearer ${token}` },
+          cache: "no-store",
+          signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS),
+        },
+      );
+      const payload = await response.json() as Record<string, unknown>;
+      if (!response.ok || payload.id !== projectId) throw new Error("project scope mismatch");
+    });
+    return working(
+      "vercel-generated-project-live",
+      "The scoped Vercel credential can read the configured generated-app project; deployments remain explicit-approval actions.",
+      ["vercel-project-scope-live", "deployment-approval-gate"],
+      receipt.latencyMs,
+    );
+  } catch {
+    return unavailable(
+      "vercel-deployment-health-failed",
+      "The configured Vercel deployment credential cannot read the generated-app project.",
+    );
+  }
+}
+
+async function collaborationHealth(): Promise<PlatformProviderHealthCheck> {
+  const url = process.env.DROPS_COLLABORATION_TRANSPORT_URL?.trim();
+  if (!url) {
+    return unavailable(
+      "collaboration-transport-not-configured",
+      "Realtime collaboration needs a production transport URL.",
+    );
+  }
+  try {
+    const receipt = await timed(async () => {
+      const endpoint = new URL(url);
+      if (endpoint.protocol !== "https:") throw new Error("transport must use https");
+      endpoint.searchParams.set("health", "1");
+      const response = await fetch(endpoint, {
+        cache: "no-store",
+        redirect: "error",
+        signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS),
+      });
+      const payload = await response.json() as Record<string, unknown>;
+      if (!response.ok || payload.status !== "working") throw new Error("transport failed");
+    });
+    return working(
+      "realtime-transport-live",
+      "The configured realtime transport returned a successful HTTPS health response.",
+      ["realtime-transport-health-live"],
+      receipt.latencyMs,
+    );
+  } catch {
+    return unavailable(
+      "collaboration-transport-health-failed",
+      "The configured realtime collaboration transport did not pass its health check.",
+    );
+  }
+}
+
+export async function runPlatformProviderHealthChecks(
+  options: { includeSandbox?: boolean; persist?: boolean } = {},
+): Promise<PlatformHealthReceiptBundle> {
+  const checks: HealthChecks = {};
+  const entries: Array<[PlatformHealthCheckId, () => Promise<PlatformProviderHealthCheck>]> = [
+    ["project-data", projectDataHealth],
+    ["managed-backend", managedBackendHealth],
+    ["organizations", organizationsHealth],
+    ["collaboration", collaborationHealth],
+    ["enterprise-identity", externalOidcHealth],
+    ["github", githubHealth],
+    ["deployment", deploymentHealth],
+  ];
+  if (options.includeSandbox !== false) entries.unshift(["sandbox", sandboxHealth]);
+  const results = await Promise.all(entries.map(([, operation]) => operation()));
+  entries.forEach(([id], index) => {
+    checks[id] = results[index];
+  });
+  const managedWorking = checks["managed-backend"]?.status === "working";
+  const organizationWorking = checks.organizations?.status === "working";
+  checks["audit-backup"] = process.env.DROPS_ENTERPRISE_AUDIT_SIGNING_KEY?.trim()
+    && managedWorking
+    && organizationWorking
+    ? working(
+      "postgres-audit-private-blob-recovery",
+      "Audit signing, durable Postgres and private recovery storage are configured and live.",
+      ["audit-signing-configured", "postgres-health-live", "private-recovery-storage-live"],
+    )
+    : unavailable(
+      "durable-audit-setup-required",
+      "Durable audit requires its signing key plus healthy Postgres and private recovery storage.",
+    );
+  const checkedAt = new Date();
+  const receipt: PlatformHealthReceiptBundle = {
+    schemaVersion: 1,
+    environment: environmentName(),
+    checkedAt: checkedAt.toISOString(),
+    expiresAt: new Date(checkedAt.getTime() + 36 * 60 * 60_000).toISOString(),
+    checks,
+  };
+  if (options.persist !== false) await writePlatformHealthReceipt(receipt);
+  return receipt;
+}
diff --git a/lib/project-data/durable-backend.ts b/lib/project-data/durable-backend.ts
new file mode 100644
index 0000000..6e64316
--- /dev/null
+++ b/lib/project-data/durable-backend.ts
@@ -0,0 +1,472 @@
+import { BlobError, BlobPreconditionFailedError } from "@vercel/blob";
+import { createHash } from "node:crypto";
+
+import {
+  ProjectDataError,
+  type ProjectDataBackend,
+  type ProjectDataProjectSnapshot,
+} from "./types.ts";
+import { validateProjectDataProjectId } from "./validation.ts";
+
+const BLOB_PREFIX = "drops-studio/project-data/v2";
+const POSTGRES_SCHEMA = `
+  CREATE TABLE IF NOT EXISTS drops_project_data_snapshots (
+    project_key TEXT PRIMARY KEY,
+    project_id TEXT NOT NULL,
+    store_revision BIGINT NOT NULL,
+    snapshot_json TEXT,
+    deleted BOOLEAN NOT NULL DEFAULT FALSE,
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+  )
+`;
+
+const POSTGRES_SCHEMA_MIGRATION = `
+  DO $$
+  BEGIN
+    IF EXISTS (
+      SELECT 1
+      FROM information_schema.columns
+      WHERE table_name = 'drops_project_data_snapshots'
+        AND column_name = 'snapshot_json'
+        AND data_type = 'jsonb'
+    ) THEN
+      ALTER TABLE drops_project_data_snapshots
+        ALTER COLUMN snapshot_json TYPE TEXT
+        USING snapshot_json::text;
+    END IF;
+  END
+  $$
+`;
+
+interface StoredEnvelope {
+  schemaVersion: 1;
+  projectId: string;
+  storeRevision: number;
+  deleted: boolean;
+  snapshot: ProjectDataProjectSnapshot | null;
+  updatedAt: string;
+}
+
+interface VersionedEnvelope {
+  envelope: StoredEnvelope | null;
+  etag: string | null;
+}
+
+type BlobStorage = Pick<typeof import("@vercel/blob"), "del" | "get" | "put">;
+
+export interface ProjectDataSqlResult {
+  rows: unknown[];
+  rowCount: number;
+}
+
+export interface ProjectDataSqlClient {
+  query(statement: string, parameters?: readonly unknown[]): Promise<ProjectDataSqlResult>;
+}
+
+function projectKey(projectId: string): string {
+  return createHash("sha256").update(projectId, "utf8").digest("hex");
+}
+
+function currentRevision(envelope: StoredEnvelope | null): number {
+  return envelope?.storeRevision ?? 0;
+}
+
+function conflict(revision: number): ProjectDataError {
+  return new ProjectDataError(
+    "conflict",
+    "Project data changed concurrently. Refresh and retry.",
+    { currentRevision: revision },
+  );
+}
+
+function storageFailure(): ProjectDataError {
+  return new ProjectDataError(
+    "storage_unavailable",
+    "Durable project data storage is temporarily unavailable.",
+  );
+}
+
+function isBlobCompareAndSwapConflict(
+  error: unknown,
+  hadCurrentEtag: boolean,
+): boolean {
+  return error instanceof BlobPreconditionFailedError
+    || (
+      !hadCurrentEtag
+      && error instanceof BlobError
+      && /\bblob\b.*\balready exists\b/i.test(error.message)
+    );
+}
+
+function snapshotShape(
+  value: unknown,
+  expectedProjectId: string,
+): ProjectDataProjectSnapshot {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw storageFailure();
+  }
+  const snapshot = value as Partial<ProjectDataProjectSnapshot>;
+  if (
+    snapshot.schemaVersion !== 1
+    || snapshot.projectId !== expectedProjectId
+    || !Number.isSafeInteger(snapshot.storeRevision)
+    || Number(snapshot.storeRevision) < 1
+    || !snapshot.documents
+    || typeof snapshot.documents !== "object"
+    || Array.isArray(snapshot.documents)
+  ) {
+    throw storageFailure();
+  }
+  return structuredClone(snapshot as ProjectDataProjectSnapshot);
+}
+
+function envelopeShape(value: unknown, expectedProjectId: string): StoredEnvelope {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw storageFailure();
+  }
+  const envelope = value as Partial<StoredEnvelope>;
+  if (
+    envelope.schemaVersion !== 1
+    || envelope.projectId !== expectedProjectId
+    || !Number.isSafeInteger(envelope.storeRevision)
+    || Number(envelope.storeRevision) < 1
+    || typeof envelope.deleted !== "boolean"
+    || typeof envelope.updatedAt !== "string"
+  ) {
+    throw storageFailure();
+  }
+  if (envelope.deleted) {
+    if (envelope.snapshot !== null) throw storageFailure();
+  } else {
+    const snapshot = snapshotShape(envelope.snapshot, expectedProjectId);
+    if (snapshot.storeRevision !== envelope.storeRevision) throw storageFailure();
+  }
+  return structuredClone(envelope as StoredEnvelope);
+}
+
+function nextEnvelope(
+  projectId: string,
+  snapshot: ProjectDataProjectSnapshot | null,
+  storeRevision: number,
+): StoredEnvelope {
+  return {
+    schemaVersion: 1,
+    projectId,
+    storeRevision,
+    deleted: snapshot === null,
+    snapshot: snapshot ? structuredClone(snapshot) : null,
+    updatedAt: new Date().toISOString(),
+  };
+}
+
+function validateWrite(
+  projectIdInput: string,
+  expectedStoreRevision: number,
+  next: ProjectDataProjectSnapshot,
+): string {
+  const projectId = validateProjectDataProjectId(projectIdInput);
+  if (
+    !Number.isSafeInteger(expectedStoreRevision)
+    || expectedStoreRevision < 0
+    || next.projectId !== projectId
+    || next.schemaVersion !== 1
+    || next.storeRevision !== expectedStoreRevision + 1
+  ) {
+    throw new ProjectDataError(
+      "invalid_request",
+      "Project data durable write revision is invalid.",
+    );
+  }
+  snapshotShape(next, projectId);
+  return projectId;
+}
+
+export function durableProjectDataBlobConfigured(
+  environment: NodeJS.ProcessEnv = process.env,
+): boolean {
+  return Boolean(
+    environment.BLOB_READ_WRITE_TOKEN?.trim()
+      || (
+        environment.BLOB_STORE_ID?.trim()
+        && (environment.VERCEL_OIDC_TOKEN?.trim() || environment.VERCEL)
+      ),
+  );
+}
+
+export function durableProjectDataPostgresConfigured(
+  environment: NodeJS.ProcessEnv = process.env,
+): boolean {
+  return environment.DROPS_MANAGED_DATA_PROVIDER === "postgres"
+    && Boolean(
+      environment.DROPS_MANAGED_DATABASE_URL?.trim()
+        || environment.DROPS_MANAGED_POSTGRES_URL?.trim(),
+    );
+}
+
+export class VercelBlobProjectDataBackend implements ProjectDataBackend {
+  readonly kind = "vercel-blob-private" as const;
+  readonly #storage?: BlobStorage;
+
+  constructor(storage?: BlobStorage) {
+    this.#storage = storage;
+  }
+
+  async #client(): Promise<BlobStorage> {
+    return this.#storage || await import("@vercel/blob");
+  }
+
+  #path(projectId: string): string {
+    return `${BLOB_PREFIX}/${projectKey(projectId)}.json`;
+  }
+
+  async #readEnvelope(projectIdInput: string): Promise<VersionedEnvelope> {
+    const projectId = validateProjectDataProjectId(projectIdInput);
+    try {
+      const current = await (await this.#client()).get(this.#path(projectId), {
+        access: "private",
+        useCache: false,
+      });
+      if (!current) return { envelope: null, etag: null };
+      if (current.statusCode !== 200) throw storageFailure();
+      const parsed = JSON.parse(await new Response(current.stream).text()) as unknown;
+      return {
+        envelope: envelopeShape(parsed, projectId),
+        etag: current.blob.etag,
+      };
+    } catch (error) {
+      if (error instanceof ProjectDataError) throw error;
+      throw storageFailure();
+    }
+  }
+
+  async read(projectId: string): Promise<ProjectDataProjectSnapshot | null> {
+    const current = await this.#readEnvelope(projectId);
+    return current.envelope?.deleted
+      ? null
+      : structuredClone(current.envelope?.snapshot ?? null);
+  }
+
+  async compareAndSwap(
+    projectIdInput: string,
+    expectedStoreRevision: number,
+    next: ProjectDataProjectSnapshot,
+  ): Promise<void> {
+    const projectId = validateWrite(projectIdInput, expectedStoreRevision, next);
+    const current = await this.#readEnvelope(projectId);
+    if (currentRevision(current.envelope) !== expectedStoreRevision) {
+      throw conflict(currentRevision(current.envelope));
+    }
+    try {
+      await (await this.#client()).put(
+        this.#path(projectId),
+        JSON.stringify(nextEnvelope(projectId, next, next.storeRevision)),
+        {
+          access: "private",
+          addRandomSuffix: false,
+          allowOverwrite: Boolean(current.etag),
+          cacheControlMaxAge: 60,
+          contentType: "application/json; charset=utf-8",
+          ...(current.etag ? { ifMatch: current.etag } : {}),
+        },
+      );
+    } catch (error) {
+      if (isBlobCompareAndSwapConflict(error, Boolean(current.etag))) {
+        const latest = await this.#readEnvelope(projectId).catch(() => ({ envelope: null }));
+        throw conflict(currentRevision(latest.envelope));
+      }
+      throw storageFailure();
+    }
+  }
+
+  async deleteProject(
+    projectIdInput: string,
+    expectedStoreRevision: number,
+  ): Promise<void> {
+    const projectId = validateProjectDataProjectId(projectIdInput);
+    const current = await this.#readEnvelope(projectId);
+    if (currentRevision(current.envelope) !== expectedStoreRevision) {
+      throw conflict(currentRevision(current.envelope));
+    }
+    if (!current.envelope || current.envelope.deleted) return;
+    try {
+      await (await this.#client()).put(
+        this.#path(projectId),
+        JSON.stringify(nextEnvelope(projectId, null, expectedStoreRevision + 1)),
+        {
+          access: "private",
+          addRandomSuffix: false,
+          allowOverwrite: true,
+          cacheControlMaxAge: 60,
+          contentType: "application/json; charset=utf-8",
+          ...(current.etag ? { ifMatch: current.etag } : {}),
+        },
+      );
+    } catch (error) {
+      if (error instanceof BlobPreconditionFailedError) {
+        const latest = await this.#readEnvelope(projectId).catch(() => ({ envelope: null }));
+        throw conflict(currentRevision(latest.envelope));
+      }
+      throw storageFailure();
+    }
+  }
+}
+
+export class PostgresProjectDataBackend implements ProjectDataBackend {
+  readonly kind = "neon-postgres" as const;
+  readonly #sql: ProjectDataSqlClient;
+  #ready: Promise<void> | null = null;
+
+  constructor(sql: ProjectDataSqlClient) {
+    this.#sql = sql;
+  }
+
+  async #ensureSchema(): Promise<void> {
+    this.#ready ??= (async () => {
+      await this.#sql.query(POSTGRES_SCHEMA);
+      await this.#sql.query(POSTGRES_SCHEMA_MIGRATION);
+    })();
+    try {
+      await this.#ready;
+    } catch {
+      this.#ready = null;
+      throw storageFailure();
+    }
+  }
+
+  async #row(projectIdInput: string): Promise<StoredEnvelope | null> {
+    const projectId = validateProjectDataProjectId(projectIdInput);
+    await this.#ensureSchema();
+    try {
+      const result = await this.#sql.query(
+        `SELECT project_id, store_revision, snapshot_json, deleted, updated_at
+         FROM drops_project_data_snapshots
+         WHERE project_key = $1`,
+        [projectKey(projectId)],
+      );
+      if (!result.rows.length) return null;
+      const row = result.rows[0] as Record<string, unknown>;
+      const storedSnapshot = typeof row.snapshot_json === "string"
+        ? JSON.parse(row.snapshot_json) as unknown
+        : row.snapshot_json;
+      return envelopeShape({
+        schemaVersion: 1,
+        projectId: row.project_id,
+        storeRevision: Number(row.store_revision),
+        deleted: row.deleted,
+        snapshot: storedSnapshot,
+        updatedAt: row.updated_at instanceof Date
+          ? row.updated_at.toISOString()
+          : String(row.updated_at),
+      }, projectId);
+    } catch (error) {
+      if (error instanceof ProjectDataError) throw error;
+      throw storageFailure();
+    }
+  }
+
+  async read(projectId: string): Promise<ProjectDataProjectSnapshot | null> {
+    const current = await this.#row(projectId);
+    return current?.deleted ? null : structuredClone(current?.snapshot ?? null);
+  }
+
+  async compareAndSwap(
+    projectIdInput: string,
+    expectedStoreRevision: number,
+    next: ProjectDataProjectSnapshot,
+  ): Promise<void> {
+    const projectId = validateWrite(projectIdInput, expectedStoreRevision, next);
+    await this.#ensureSchema();
+    try {
+      const result = expectedStoreRevision === 0
+        ? await this.#sql.query(
+          `INSERT INTO drops_project_data_snapshots
+           (project_key, project_id, store_revision, snapshot_json, deleted, updated_at)
+           VALUES ($1, $2, $3, $4, FALSE, NOW())
+           ON CONFLICT (project_key) DO NOTHING
+           RETURNING store_revision`,
+          [projectKey(projectId), projectId, next.storeRevision, JSON.stringify(next)],
+        )
+        : await this.#sql.query(
+          `UPDATE drops_project_data_snapshots
+           SET store_revision = $3, snapshot_json = $4, deleted = FALSE, updated_at = NOW()
+           WHERE project_key = $1 AND project_id = $2 AND store_revision = $5
+           RETURNING store_revision`,
+          [
+            projectKey(projectId),
+            projectId,
+            next.storeRevision,
+            JSON.stringify(next),
+            expectedStoreRevision,
+          ],
+        );
+      if (result.rowCount !== 1) {
+        throw conflict(currentRevision(await this.#row(projectId)));
+      }
+    } catch (error) {
+      if (error instanceof ProjectDataError) throw error;
+      throw storageFailure();
+    }
+  }
+
+  async deleteProject(
+    projectIdInput: string,
+    expectedStoreRevision: number,
+  ): Promise<void> {
+    const projectId = validateProjectDataProjectId(projectIdInput);
+    await this.#ensureSchema();
+    try {
+      const result = await this.#sql.query(
+        `UPDATE drops_project_data_snapshots
+         SET store_revision = $3, snapshot_json = NULL, deleted = TRUE, updated_at = NOW()
+         WHERE project_key = $1 AND project_id = $2 AND store_revision = $4 AND deleted = FALSE
+         RETURNING store_revision`,
+        [
+          projectKey(projectId),
+          projectId,
+          expectedStoreRevision + 1,
+          expectedStoreRevision,
+        ],
+      );
+      if (result.rowCount !== 1) {
+        const current = await this.#row(projectId);
+        if (!current && expectedStoreRevision === 0) return;
+        if (current?.deleted && current.storeRevision === expectedStoreRevision) return;
+        throw conflict(currentRevision(current));
+      }
+    } catch (error) {
+      if (error instanceof ProjectDataError) throw error;
+      throw storageFailure();
+    }
+  }
+}
+
+export async function neonProjectDataSqlClient(
+  environment: NodeJS.ProcessEnv = process.env,
+): Promise<ProjectDataSqlClient> {
+  const connectionString = environment.DROPS_MANAGED_DATABASE_URL?.trim()
+    || environment.DROPS_MANAGED_POSTGRES_URL?.trim();
+  if (!connectionString) throw storageFailure();
+  const { neon } = await import("@neondatabase/serverless");
+  const sql = neon(connectionString, { fullResults: true });
+  return {
+    async query(statement, parameters = []) {
+      const result = await sql.query(statement, [...parameters]);
+      return {
+        rows: result.rows as unknown[],
+        rowCount: result.rowCount ?? 0,
+      };
+    },
+  };
+}
+
+export async function createDurableProjectDataBackend(
+  environment: NodeJS.ProcessEnv = process.env,
+): Promise<ProjectDataBackend | null> {
+  if (durableProjectDataPostgresConfigured(environment)) {
+    return new PostgresProjectDataBackend(await neonProjectDataSqlClient(environment));
+  }
+  if (durableProjectDataBlobConfigured(environment)) {
+    return new VercelBlobProjectDataBackend();
+  }
+  return null;
+}
diff --git a/lib/project-data/index.ts b/lib/project-data/index.ts
index aeadc5f..36363b0 100644
--- a/lib/project-data/index.ts
+++ b/lib/project-data/index.ts
@@ -1,5 +1,6 @@
 export * from "./backend.ts";
 export * from "./capability.ts";
+export * from "./durable-backend.ts";
 export * from "./store.ts";
 export * from "./types.ts";
 export * from "./validation.ts";
diff --git a/lib/project-data/types.ts b/lib/project-data/types.ts
index 827a010..e21bb41 100644
--- a/lib/project-data/types.ts
+++ b/lib/project-data/types.ts
@@ -83,7 +83,11 @@ export interface ProjectDataProjectSnapshot {
 }
 
 export interface ProjectDataBackend {
-  readonly kind: "memory-local-fallback" | "browser-local-fallback" | "durable-adapter";
+  readonly kind:
+    | "memory-local-fallback"
+    | "browser-local-fallback"
+    | "vercel-blob-private"
+    | "neon-postgres";
   read(projectId: string): Promise<ProjectDataProjectSnapshot | null>;
   compareAndSwap(
     projectId: string,
diff --git a/package-lock.json b/package-lock.json
index a2a0b5a..63a4599 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,6 +19,7 @@
         "@codemirror/lang-javascript": "6.2.5",
         "@codemirror/lang-json": "6.0.2",
         "@codemirror/theme-one-dark": "6.1.3",
+        "@neondatabase/serverless": "1.1.0",
         "@radix-ui/react-dialog": "^1.1.23",
         "@radix-ui/react-select": "^2.3.7",
         "@radix-ui/react-switch": "^1.3.7",
@@ -3931,6 +3932,15 @@
         "@tybys/wasm-util": "^0.10.0"
       }
     },
+    "node_modules/@neondatabase/serverless": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@neondatabase/serverless/-/serverless-1.1.0.tgz",
+      "integrity": "sha512-r3ZZhRjEcfEdKIZnoB1RusNgvHuaBRqfCzV4Gi+5A9yUX0S4HTws/ASWqt13wL4y4I+0rqsWGdA2w7EQXHi3+Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=19.0.0"
+      }
+    },
     "node_modules/@next/env": {
       "version": "16.2.12",
       "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.12.tgz",
diff --git a/package.json b/package.json
index 5c0ac37..4fc35d9 100644
--- a/package.json
+++ b/package.json
@@ -42,6 +42,7 @@
     "@codemirror/lang-javascript": "6.2.5",
     "@codemirror/lang-json": "6.0.2",
     "@codemirror/theme-one-dark": "6.1.3",
+    "@neondatabase/serverless": "1.1.0",
     "@radix-ui/react-dialog": "^1.1.23",
     "@radix-ui/react-select": "^2.3.7",
     "@radix-ui/react-switch": "^1.3.7",
diff --git a/scripts/verify-platform-providers.mjs b/scripts/verify-platform-providers.mjs
new file mode 100644
index 0000000..170fa9b
--- /dev/null
+++ b/scripts/verify-platform-providers.mjs
@@ -0,0 +1,19 @@
+import { runPlatformProviderHealthChecks } from "../lib/platform-provider-health.ts";
+
+const receipt = await runPlatformProviderHealthChecks({
+  includeSandbox: process.env.DROPS_SKIP_SANDBOX_HEALTH !== "1",
+  persist: true,
+});
+
+for (const [id, check] of Object.entries(receipt.checks)) {
+  console.log(`${id}: ${check.status} (${check.mode})`);
+}
+
+const required = ["project-data", "managed-backend", "organizations"];
+if (receipt.checks.sandbox) required.push("sandbox");
+
+if (required.some(
+  (id) => receipt.checks[id]?.status !== "working",
+)) {
+  process.exitCode = 1;
+}
diff --git a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux-system.png
index 8bede3b..d3f261b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux.png
index a241dea..6a415e5 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux-system.png
index 2c8c854..99be50d 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux.png
index 3528366..e4940bd 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux-system.png
index 033dcf4..39dd27d 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux.png
index 2bff9df..7d1eb91 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/action-engine-desktop-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux-system.png
index 2636e67..b82d689 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux.png
index 2636e67..b82d689 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux-system.png
index e713158..cf5d1f2 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux.png
index e713158..cf5d1f2 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux-system.png
index 1881980..f980fcf 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux.png
index 1881980..f980fcf 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/alpha-channel-disconnected-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux-system.png
index 9c79092..fa49d5b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux.png
index 8ea7bd4..68aac32 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux-system.png
index 40d1e3a..375bd22 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux.png
index 888847b..089f4c7 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux-system.png
index a02e7e9..d00d0eb 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux.png
index 81a25d9..f836b79 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-aggregator-connected-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux-system.png
index b542bb9..1d8dfd3 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux.png
index b542bb9..1d8dfd3 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux-system.png
index 14d67a0..bbff0e6 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux.png
index 14d67a0..bbff0e6 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux-system.png
index ba61cb7..5d9daa2 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux.png
index ba61cb7..5d9daa2 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-game-desktop-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux-system.png
index fc0b143..dd1ae99 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux.png
index 3b127ed..40d705d 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux-system.png
index 7204b8a..188321a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux.png
index 3589132..cbb276e 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux-system.png
index b162005..3b2338a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux.png
index f9bb591..4814fab 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-product-hunt-empty-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux-system.png
index 33b8aea..19b6ce0 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux.png
index 26fa666..621f45d 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux-system.png
index 2c5f859..c0bfabc 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux.png
index 86a0eaa..9fcbcb4 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux-system.png
index 707d777..644cc47 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux.png
index dc79536..cd80980 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-radio-playing-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux-system.png
index 0491ca3..4cf1d03 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux.png
index 3c36492..6416b56 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux-system.png
index 45aef5c..70dbd9f 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux.png
index 1f6d74b..45f571d 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux-system.png
index 7127c8f..b19478e 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux.png
index b11a62b..3cd6232 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/crypto-siri-mobile-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux-system.png
index 175bf15..fdd4848 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux.png
index c83165b..8e4b9b9 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux-system.png
index d2971e4..d9dded6 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux.png
index 44b706c..2146164 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux-system.png
index c0a1799..e14ae49 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux.png
index 451385e..e14ae49 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/loading-product-plan-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux-system.png
index d9db827..903eb8a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux.png
index d9db827..903eb8a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux-system.png
index c3a2b41..01f157b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux.png
index c3a2b41..01f157b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux-system.png
index 8385a09..df8632c 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux.png
index 8385a09..df8632c 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-data-error-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux-system.png
index 5180f9e..c9ec83a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux.png
index 5180f9e..c9ec83a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux-system.png
index 7199560..c5180da 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux.png
index 7199560..c5180da 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux-system.png
index f463efe..715d72a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux.png
index f463efe..715d72a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/morning-alpha-populated-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux-system.png
index cd1a80c..0d40f48 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux.png
index 8e53237..2a34071 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux-system.png
index 693a9d3..a7ace13 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux.png
index 6d6ee6e..8e4eaf6 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux-system.png
index f8b386c..2d26aaa 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux.png
index 80eb7ac..4c46e7f 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/personal-companion-mobile-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux-system.png
index f9543e3..c564aae 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux.png
index 5b264d2..eeaf5e7 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux-system.png
index 62b0e2b..5da94df 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux.png
index e7d1334..7243845 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux-system.png
index 5f5afc5..cba1c81 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux.png
index 59b1f76..dbbb60a 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/portfolio-tamagotchi-empty-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux-system.png
index d7994e8..8a039fb 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux.png
index 959f4ed..821fca2 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux-system.png
index 461df80..597f1af 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux.png
index 07b24ed..1d99316 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux-system.png
index c506b33..e119b4b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux.png
index 873116d..4ff8c4b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/prediction-impact-desktop-chromium-390-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux-system.png
index d5a4d6b..da74bef 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux.png b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux.png
index 4b9c01b..3caf30d 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1024-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux-system.png
index 9346946..1e580d7 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux.png b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux.png
index 78b4af0..1cab5d4 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-1440-linux.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux-system.png b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux-system.png
index 0b32c59..edf5af6 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux-system.png and b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux-system.png differ
diff --git a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux.png b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux.png
index af940db..f90415b 100644
Binary files a/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux.png and b/storybook-e2e/visual.spec.ts-snapshots/smart-money-copy-empty-chromium-390-linux.png differ
diff --git a/tests/access-tier.test.mjs b/tests/access-tier.test.mjs
index a9f775b..39d88af 100644
--- a/tests/access-tier.test.mjs
+++ b/tests/access-tier.test.mjs
@@ -192,8 +192,18 @@ test("access metadata exposes only tiers that actually work", () => {
   assert.equal(guest.byok.available, true);
   assert.equal(guest.account.available, true);
   assert.equal(guest.account.connected, false);
+  assert.equal(guest.projectSync, false);
   assert.equal(guest.pro.available, false);
 
+  const guestWithPrivateStorage = accessMetadata({
+    tier: "guest",
+    used: 1,
+    projectSyncAvailable: true,
+  });
+  assert.equal(guestWithPrivateStorage.projectSync, true);
+  assert.equal(guestWithPrivateStorage.account.connected, false);
+  assert.match(guestWithPrivateStorage.account.note, /Guest projects use actor-owned private storage/);
+
   const byok = accessMetadata({ tier: "byok", used: 0 });
   assert.equal(byok.platformAi.available, false);
   assert.equal(byok.platformAi.limit, null);
@@ -307,6 +317,7 @@ test("access status issues a signed HttpOnly anonymous identity without claiming
     assert.equal(payload.access.account.available, true);
     assert.equal(payload.access.account.connected, false);
     assert.equal(payload.access.authenticated, false);
+    assert.equal(payload.access.projectSync, true);
     assert.equal(payload.access.pro.available, false);
     assert.match(response.headers.get("set-cookie") ?? "", /drops_guest_identity=/);
     assert.match(response.headers.get("set-cookie") ?? "", /HttpOnly/i);
@@ -395,6 +406,7 @@ test("access status recognizes a signed member and reports its daily platform al
     assert.equal(payload.access.platformAi.limit, MEMBER_DAILY_LIMIT);
     assert.equal(payload.access.platformAi.remaining, MEMBER_DAILY_LIMIT - 3);
     assert.equal(payload.access.account.provider, "openrouter");
+    assert.equal(payload.access.projectSync, true);
     assert.equal(payload.access.account.projectSync, true);
   } finally {
     globalThis.__DROPS_STUDIO_LOCAL_RATE_LIMITS__ = undefined;
diff --git a/tests/platform-capabilities.test.mjs b/tests/platform-capabilities.test.mjs
index 1d6ae50..bffaf0a 100644
--- a/tests/platform-capabilities.test.mjs
+++ b/tests/platform-capabilities.test.mjs
@@ -35,8 +35,85 @@ test("explicit non-production project-data proof mode remains local-test only",
   const snapshot = platformCapabilitySnapshot({
     VERCEL_ENV: "development",
     DROPS_STUDIO_LOCAL_PROJECT_DATA: "1",
-  }, new Date("2026-07-30T12:00:00.000Z"));
+  }, new Date("2026-07-30T12:00:00.000Z"), {
+    schemaVersion: 1,
+    environment: "development",
+    checkedAt: "2026-07-30T11:59:00.000Z",
+    expiresAt: "2026-07-31T11:59:00.000Z",
+    checks: {
+      "project-data": {
+        status: "working",
+        mode: "transactional-neon-postgres",
+        detail: "A durable provider receipt must not relabel explicit local proof mode.",
+        evidence: ["durable-provider-receipt"],
+      },
+    },
+  });
   const projectData = snapshot.capabilities.find((item) => item.id === "project-data");
   assert.equal(projectData?.state, "working-local-test");
   assert.equal(projectData?.mode, "process-memory-local-test");
+  assert.deepEqual(projectData?.evidence, ["explicit-local-test-flag"]);
+});
+
+test("fresh production provider receipts upgrade only the matching capabilities", () => {
+  const now = new Date("2026-07-31T12:00:00.000Z");
+  const snapshot = platformCapabilitySnapshot({
+    VERCEL_ENV: "production",
+    DROPS_MANAGED_DATA_PROVIDER: "postgres",
+    DROPS_MANAGED_DATABASE_URL: "postgresql://configured-without-being-returned",
+    PROJECT_DATA_CAPABILITY_SECRET: "configured-without-being-returned",
+  }, now, {
+    schemaVersion: 1,
+    environment: "production",
+    checkedAt: "2026-07-31T11:59:00.000Z",
+    expiresAt: "2026-08-01T23:59:00.000Z",
+    checks: {
+      "project-data": {
+        status: "working",
+        mode: "transactional-neon-postgres",
+        detail: "Live create, update, read and cleanup passed.",
+        evidence: ["project-data-cas-live"],
+      },
+    },
+  });
+
+  assert.equal(
+    snapshot.capabilities.find((item) => item.id === "project-data")?.state,
+    "working",
+  );
+  assert.equal(
+    snapshot.capabilities.find((item) => item.id === "sandbox")?.state,
+    "setup-required",
+  );
+  assert.doesNotMatch(JSON.stringify(snapshot), /postgresql:\/\//);
+});
+
+test("expired or cross-environment health receipts never activate production", () => {
+  const environment = {
+    VERCEL_ENV: "production",
+    VERCEL_OIDC_TOKEN: "configured-without-being-returned",
+  };
+  const check = {
+    status: "working",
+    mode: "vercel-sandbox-node24-live",
+    detail: "Live Sandbox check passed.",
+    evidence: ["sandbox-create-live"],
+  };
+  const expired = platformCapabilitySnapshot(environment, new Date("2026-07-31T12:00:00.000Z"), {
+    schemaVersion: 1,
+    environment: "production",
+    checkedAt: "2026-07-30T10:00:00.000Z",
+    expiresAt: "2026-07-31T10:00:00.000Z",
+    checks: { sandbox: check },
+  });
+  const preview = platformCapabilitySnapshot(environment, new Date("2026-07-31T12:00:00.000Z"), {
+    schemaVersion: 1,
+    environment: "preview",
+    checkedAt: "2026-07-31T10:00:00.000Z",
+    expiresAt: "2026-08-01T10:00:00.000Z",
+    checks: { sandbox: check },
+  });
+
+  assert.equal(expired.capabilities.find((item) => item.id === "sandbox")?.state, "unavailable");
+  assert.equal(preview.capabilities.find((item) => item.id === "sandbox")?.state, "unavailable");
 });
diff --git a/tests/platform-public-surfaces.test.mjs b/tests/platform-public-surfaces.test.mjs
index f58327b..1fbfbec 100644
--- a/tests/platform-public-surfaces.test.mjs
+++ b/tests/platform-public-surfaces.test.mjs
@@ -41,7 +41,7 @@ test("platform overview renders the server snapshot instead of hardcoded readine
     readFile(new URL("../app/platform/page.tsx", import.meta.url), "utf8"),
     readFile(new URL("../components/platform/platform-overview.tsx", import.meta.url), "utf8"),
   ]);
-  assert.match(pageSource, /platformCapabilitySnapshot\(\)/);
+  assert.match(pageSource, /platformCapabilitySnapshotWithHealth\(\)/);
   assert.match(pageSource, /PlatformOverview snapshot=\{snapshot\}/);
   assert.match(overviewSource, /snapshot\.capabilities\.find/);
   assert.doesNotMatch(overviewSource, /title: "Vercel Sandbox", status:/);
diff --git a/tests/project-data-durable-backend.test.mjs b/tests/project-data-durable-backend.test.mjs
new file mode 100644
index 0000000..4bd1bba
--- /dev/null
+++ b/tests/project-data-durable-backend.test.mjs
@@ -0,0 +1,227 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { BlobError } from "@vercel/blob";
+
+import {
+  PostgresProjectDataBackend,
+  ProjectDataError,
+  ProjectDataStore,
+  VercelBlobProjectDataBackend,
+} from "../lib/project-data/index.ts";
+
+function memorySql() {
+  let row = null;
+  const statements = [];
+  return {
+    statements,
+    async query(statement, parameters = []) {
+      const normalized = statement.replace(/\s+/g, " ").trim();
+      statements.push(normalized);
+      if (
+        normalized.startsWith("CREATE TABLE")
+        || normalized.startsWith("DO $$")
+      ) {
+        return { rows: [], rowCount: 0 };
+      }
+      if (normalized.startsWith("SELECT project_id")) {
+        return row && row.project_key === parameters[0]
+          ? { rows: [{ ...row }], rowCount: 1 }
+          : { rows: [], rowCount: 0 };
+      }
+      if (normalized.startsWith("INSERT INTO")) {
+        if (row) return { rows: [], rowCount: 0 };
+        row = {
+          project_key: parameters[0],
+          project_id: parameters[1],
+          store_revision: parameters[2],
+          snapshot_json: parameters[3],
+          deleted: false,
+          updated_at: new Date("2026-07-31T00:00:00.000Z"),
+        };
+        return { rows: [{ store_revision: row.store_revision }], rowCount: 1 };
+      }
+      if (normalized.includes("SET store_revision = $3, snapshot_json = NULL, deleted = TRUE")) {
+        if (
+          !row
+          || row.project_key !== parameters[0]
+          || row.project_id !== parameters[1]
+          || row.store_revision !== parameters[3]
+          || row.deleted
+        ) {
+          return { rows: [], rowCount: 0 };
+        }
+        row = {
+          ...row,
+          store_revision: parameters[2],
+          snapshot_json: null,
+          deleted: true,
+        };
+        return { rows: [{ store_revision: row.store_revision }], rowCount: 1 };
+      }
+      if (normalized.includes("deleted = FALSE")) {
+        if (
+          !row
+          || row.project_key !== parameters[0]
+          || row.project_id !== parameters[1]
+          || row.store_revision !== parameters[4]
+        ) {
+          return { rows: [], rowCount: 0 };
+        }
+        row = {
+          ...row,
+          store_revision: parameters[2],
+          snapshot_json: parameters[3],
+          deleted: false,
+        };
+        return { rows: [{ store_revision: row.store_revision }], rowCount: 1 };
+      }
+      throw new Error(`Unexpected SQL in durable project-data test: ${normalized}`);
+    },
+  };
+}
+
+test("Postgres project data preserves internal document keys through text snapshots", async () => {
+  const sql = memorySql();
+  const backend = new PostgresProjectDataBackend(sql);
+  const store = new ProjectDataStore(backend, {
+    now: () => "2026-07-31T00:00:00.000Z",
+  });
+
+  const created = await store.create({
+    projectId: "project-postgres",
+    namespace: "wallet-events",
+    id: "swap-1",
+    data: { chain: "base", valueUsd: 250_000 },
+  });
+  const updated = await store.update({
+    projectId: "project-postgres",
+    namespace: "wallet-events",
+    id: "swap-1",
+    expectedRevision: created.revision,
+    data: { chain: "base", valueUsd: 300_000 },
+  });
+
+  assert.equal(updated.revision, 2);
+  assert.equal(
+    (await store.get("project-postgres", "wallet-events", "swap-1"))?.data.valueUsd,
+    300_000,
+  );
+  assert.ok(sql.statements.some((statement) => statement.startsWith("DO $$")));
+  assert.ok(sql.statements.every((statement) => !statement.includes("$4::jsonb")));
+});
+
+test("Postgres project data rejects stale revisions and leaves a tombstone on cleanup", async () => {
+  const sql = memorySql();
+  const backend = new PostgresProjectDataBackend(sql);
+  const store = new ProjectDataStore(backend);
+  await store.create({
+    projectId: "project-conflict",
+    namespace: "settings",
+    id: "theme",
+    data: { mode: "dark" },
+  });
+
+  await assert.rejects(
+    backend.compareAndSwap("project-conflict", 0, {
+      schemaVersion: 1,
+      projectId: "project-conflict",
+      storeRevision: 1,
+      documents: {},
+    }),
+    (error) => error instanceof ProjectDataError && error.code === "conflict",
+  );
+
+  const current = await backend.read("project-conflict");
+  await backend.deleteProject("project-conflict", current.storeRevision);
+  assert.equal(await backend.read("project-conflict"), null);
+});
+
+test("Postgres project data can revive a tombstone only with its exact revision", async () => {
+  const backend = new PostgresProjectDataBackend(memorySql());
+  const store = new ProjectDataStore(backend);
+  await store.create({
+    projectId: "project-revive",
+    namespace: "settings",
+    id: "theme",
+    data: { mode: "dark" },
+  });
+  await backend.deleteProject("project-revive", 1);
+
+  await assert.rejects(
+    backend.compareAndSwap("project-revive", 0, {
+      schemaVersion: 1,
+      projectId: "project-revive",
+      storeRevision: 1,
+      documents: {},
+    }),
+    (error) => error instanceof ProjectDataError
+      && error.code === "conflict"
+      && error.currentRevision === 2,
+  );
+
+  await backend.compareAndSwap("project-revive", 2, {
+    schemaVersion: 1,
+    projectId: "project-revive",
+    storeRevision: 3,
+    documents: {},
+  });
+  assert.equal((await backend.read("project-revive"))?.storeRevision, 3);
+});
+
+test("Postgres project data treats a repeated revision-matched tombstone delete as idempotent", async () => {
+  const backend = new PostgresProjectDataBackend(memorySql());
+  const store = new ProjectDataStore(backend);
+  await store.create({
+    projectId: "project-idempotent-delete",
+    namespace: "settings",
+    id: "theme",
+    data: { mode: "dark" },
+  });
+  await backend.deleteProject("project-idempotent-delete", 1);
+  await backend.deleteProject("project-idempotent-delete", 2);
+});
+
+test("private Blob first-write collisions surface as revision conflicts", async () => {
+  const projectId = "project-blob-race";
+  const existing = {
+    schemaVersion: 1,
+    projectId,
+    storeRevision: 1,
+    deleted: false,
+    snapshot: {
+      schemaVersion: 1,
+      projectId,
+      storeRevision: 1,
+      documents: {},
+    },
+    updatedAt: "2026-07-31T00:00:00.000Z",
+  };
+  let reads = 0;
+  const backend = new VercelBlobProjectDataBackend({
+    async get() {
+      reads += 1;
+      if (reads === 1) return null;
+      return {
+        statusCode: 200,
+        stream: new Response(JSON.stringify(existing)).body,
+        blob: { etag: "race-winner" },
+      };
+    },
+    async put() {
+      throw new BlobError("blob already exists");
+    },
+    async del() {},
+  });
+
+  await assert.rejects(
+    backend.compareAndSwap(projectId, 0, {
+      schemaVersion: 1,
+      projectId,
+      storeRevision: 1,
+      documents: {},
+    }),
+    (error) => error instanceof ProjectDataError
+      && error.code === "conflict"
+      && error.currentRevision === 1,
+  );
+});
diff --git a/tests/vercel-sandbox-runtime-cleanup.test.mjs b/tests/vercel-sandbox-runtime-cleanup.test.mjs
index 3ec7d71..46705b8 100644
--- a/tests/vercel-sandbox-runtime-cleanup.test.mjs
+++ b/tests/vercel-sandbox-runtime-cleanup.test.mjs
@@ -86,6 +86,19 @@ function putRequest(body, cookie) {
   });
 }
 
+function proxiedPutRequest(body, cookie) {
+  return new NextRequest("http://localhost:3000/api/projects/v2", {
+    method: "PUT",
+    headers: {
+      "content-type": "application/json",
+      host: "127.0.0.1:3000",
+      origin: "http://127.0.0.1:3000",
+      cookie: `${GUEST_IDENTITY_COOKIE}=${cookie}`,
+    },
+    body: JSON.stringify(body),
+  });
+}
+
 async function fixtureProject() {
   return materializeProjectV2Template({
     id: "cleanup-project-v2",
@@ -167,6 +180,18 @@ test("Project V2 deletion destroys its deterministic Sandbox before removing sto
   assert.equal(await hasProjectV2ReleaseReceipt(receipt), false);
 });
 
+test("Project V2 accepts the browser-visible host behind a trusted same-origin proxy", async () => {
+  globalThis.__DROPS_STUDIO_LOCAL_PROJECT_V2__?.clear();
+  const { cookie } = guestSession();
+  const project = await fixtureProject();
+  const response = await putProjectV2(proxiedPutRequest({
+    project,
+    expectedStorageRevision: 0,
+  }, cookie));
+  assert.equal(response.status, 200);
+  assert.equal((await response.json()).storageRevision, 1);
+});
+
 test("Project V2 deletion fails closed and retains storage when Sandbox destroy fails", async () => {
   globalThis.__DROPS_STUDIO_LOCAL_PROJECT_V2__?.clear();
   globalThis.__DROPS_STUDIO_LOCAL_PROJECT_V2_RELEASE_RECEIPTS__?.clear();
diff --git a/vercel.json b/vercel.json
index e114c59..ebbab0c 100644
--- a/vercel.json
+++ b/vercel.json
@@ -6,6 +6,10 @@
     {
       "path": "/api/builder/cleanup",
       "schedule": "*/15 * * * *"
+    },
+    {
+      "path": "/api/platform/health",
+      "schedule": "17 4 * * *"
     }
   ]
 }