Deploy public demo governance d525f15

.gitattributes

@@ -9,22 +9,3 @@
 *.jpeg binary
 *.webp binary
 
-outputs/moodboards/nexus-raven-command-center/generated/artifact-preview-lane.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/cyber-atelier-desk.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/gmr-provider-cards.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/gothic-material-study.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/hackathon-judge-view.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/judge-inspector-glass.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/lore-timeline.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/nvidia-grounding-anchor.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/runway-to-tool-bridge.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/st3gg-purification-gate.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/wardrobe-drawer.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/generated/workflow-command-spine.png filter=lfs diff=lfs merge=lfs -text
-outputs/moodboards/nexus-raven-command-center/verification-contact-sheet.jpg filter=lfs diff=lfs merge=lfs -text
-outputs/space-deploy-3910cf6.tar filter=lfs diff=lfs merge=lfs -text
-outputs/space-deploy-3f8b48e.tar filter=lfs diff=lfs merge=lfs -text
-outputs/space-deploy-68a5636.tar filter=lfs diff=lfs merge=lfs -text
-outputs/space-deploy-b44cbe3.tar filter=lfs diff=lfs merge=lfs -text
-outputs/space-deploy-d68f4e5.tar filter=lfs diff=lfs merge=lfs -text
-outputs/space-deploy-f7eaa94.tar filter=lfs diff=lfs merge=lfs -text

README.md

@@ -10,7 +10,7 @@ pinned: false
 license: apache-2.0
 short_description: Governed gothic couture visual creation command center
 models:
-  - black-forest-labs/FLUX.2-klein-9B
+  - black-forest-labs/FLUX.2-klein-4B
   - nvidia/LocateAnything-3B
   - openbmb/MiniCPM-V-4.6
   - nvidia/NVIDIA-Nemotron-Parse-v1.2
@@ -49,7 +49,7 @@ The interface is built around a command-center surface:
 
 Pinned lanes do not rotate:
 
-- `image_generation`: FLUX.2 primary image lane
+- `image_generation`: public-demo FLUX.2 Klein 4B image lane
 - `grounding`: NVIDIA LocateAnything-3B grounding anchor
 - `security`: ST3GG defensive scanner/export gate
 
@@ -67,12 +67,13 @@ Helper lanes may rotate with quota, license, health, and parameter-budget checks
 - HF catalog research
 - Modal job runner
 
-Public demo mode excludes private, commercial-uncleared, and research-only helper models. Private research mode can expose more candidates, but it never disables consent, provenance, ST3GG, export, or dataset-partition gates.
+Public demo mode excludes private, commercial-uncleared, and research-only helper models. Private research mode keeps the gated FLUX.2 Klein 9B and OFFELLIA/Gemma routes available, but it never disables consent, provenance, ST3GG, export, or dataset-partition gates.
 
 ## Current Features
 
 - Gradio Blocks dashboard with split update regions.
-- Real FLUX.2 Klein image generation on Hugging Face ZeroGPU when `HF_TOKEN` is configured.
+- Real FLUX.2 Klein 4B image generation on Hugging Face ZeroGPU when runtime access is configured.
+- Above-fold ST3GG trust strip with safe-vs-blocked fixture evidence.
 - Generated artifact ST3GG scan and checkpoint/export state.
 - Optional MiniCPM-V and Nemotron provider evidence lanes with explicit configured/missing-secret status.
 - Active workflow graph and checkpointed run record.
@@ -88,7 +89,7 @@ Public demo mode excludes private, commercial-uncleared, and research-only helpe
 | Target | Evidence status |
 | --- | --- |
 | Gradio Space | App runs as a public Hugging Face Gradio Space with `mcp_server=True`. |
-| <=32B models | Active stack is 28.15B: FLUX.2 9B + OFFELLIA 12B + LocateAnything 3.83B + MiniCPM-V 1.30B + Nemotron Parse 0.94B + MiniCPM5 1.08B. |
+| <=32B models | Public stack is 11.42B: FLUX.2 Klein 4B + LocateAnything 3.83B + MiniCPM-V 1.30B + Nemotron Parse 0.94B + MiniCPM5 1.08B + FunctionGemma 0.27B. |
 | Off Brand | Custom command-center UI, dense inspector, workflow graph, wardrobe/lore drawer, and provider cards. |
 | Best Agent | Multi-step prompt, generation, scan, judge, checkpoint, export workflow. |
 | OpenBMB | Claimed only when MiniCPM-V returns judge evidence in an export packet. |
@@ -96,7 +97,7 @@ Public demo mode excludes private, commercial-uncleared, and research-only helpe
 | OpenAI Codex | Development branch and PR include Codex-authored implementation commits. |
 | Demo / social | Add final links here before submission: `DEMO_VIDEO_URL` and `SOCIAL_POST_URL`. |
 
-Tiny Titan is not claimed in the default demo because FLUX.2 Klein 9B is retained for image quality.
+Tiny Titan can be claimed for the public demo stack because the active public models are each <=4B. The stronger FLUX.2 Klein 9B and OFFELLIA/Gemma stack remains private research only.
 
 ## Local Setup
 

assets/st3gg_examples.json

@@ -0,0 +1,22 @@
+{
+  "version": "v2.3",
+  "trust_model": "Generation is not export. Every artifact must pass ST3GG scan, purification, and human checkpoint before release.",
+  "examples": [
+    {
+      "id": "safe_clean_png",
+      "label": "Safe clean PNG",
+      "filename": "st3gg_safe_clean.png",
+      "expected_status": "pass",
+      "expected_export_gate": "clear",
+      "note": "Valid PNG signature and no trailing bytes after IEND."
+    },
+    {
+      "id": "blocked_png_trailing_data",
+      "label": "Blocked PNG with trailing data",
+      "filename": "st3gg_blocked_trailing.png",
+      "expected_status": "review",
+      "expected_export_gate": "blocked",
+      "note": "Valid PNG signature with extra bytes after the IEND marker."
+    }
+  ]
+}

docs/HACKATHON_EVALUATION.md

@@ -13,9 +13,10 @@ NEXUS Visual Weaver should open as a working command center, not a landing page.
 ## Current Strengths
 
 - Gradio-compatible app shape with `mcp_server=True`.
-- Pinned model governance is visible: FLUX.2, LocateAnything-3B, and ST3GG.
-- Real FLUX.2 generation is wired for HF Space and falls back to an honest dry-run state outside Space.
+- Pinned model governance is visible: FLUX.2 Klein 4B, LocateAnything-3B, and ST3GG.
+- Real FLUX.2 Klein 4B generation is wired for HF Space and falls back to an honest dry-run state outside Space.
 - Generated artifacts are scanned by ST3GG before checkpoint/export.
+- Above-fold trust strip makes ST3GG verdict, export gate, fixture evidence, and adult-mode safety boundaries visible immediately.
 - OpenBMB MiniCPM-V 4.6 and NVIDIA Nemotron evidence lanes are represented as real optional provider adapters with missing-secret/failed/success states.
 - Adult Mode starts off and is framed as catalog scope, not a safety bypass.
 - ModelRelay/GMR helper rotation is represented without replacing pinned lanes.
@@ -47,5 +48,5 @@ NEXUS Visual Weaver should open as a working command center, not a landing page.
 | OpenBMB | Claim only after MiniCPM-V returns `success` in export evidence. |
 | NVIDIA | Claim only after Nemotron returns `success` in export evidence. |
 | OpenAI Codex | GitHub branch/PR provides Codex development trail. |
-| Tiny Titan | Not claimed for default FLUX.2 9B demo. |
+| Tiny Titan | Public demo stack is eligible: active public models are each <=4B. |
 | Modal | Not claimed unless a real Modal job runs. |

docs/HANDOFF_FINAL_HACKATHON.md

@@ -6,13 +6,15 @@
 - Working branch: `codex/specimba/ui-polish-command-center`
 - HF Space: `build-small-hackathon/NEXUS_Visual_Weaver`
 - Public Space URL: `https://build-small-hackathon-nexus-visual-weaver-a107340.hf.space/`
-- Primary goal: finish a countable Build Small submission with real FLUX.2 generation, ST3GG scan, optional OpenBMB MiniCPM-V judge evidence, optional NVIDIA Nemotron evidence, checkpointed export packet, README prize mapping, demo video, and social post.
+- HF rollback SHA: `410a467c55d11e7308249198bd5fe0b2c190aec6`.
+- Branch discipline: use only `main` and `codex/specimba/ui-polish-command-center`; no extra recovery branches.
+- Primary goal: finish a countable Build Small submission with real FLUX.2 4B generation, ST3GG scan, optional OpenBMB MiniCPM-V judge evidence, optional NVIDIA Nemotron evidence, checkpointed export packet, README prize mapping, demo video, and social post.
 
 ## Secrets Needed
 
 Do not paste these into chat, commits, logs, or export packets.
 
-- `HF_TOKEN`: required for gated FLUX.2 Klein access.
+- `HF_TOKEN`: optional for public FLUX.2 Klein 4B access and required only if private/gated research lanes are enabled.
 - `MINICPM_BASE_URL`: OpenBMB OpenAI-compatible endpoint base URL.
 - `MINICPM_API_KEY`: OpenBMB bearer token.
 - `MINICPM_MODEL`: default `MiniCPM-V-4.6`.
@@ -37,7 +39,7 @@ Avoid pytest `--basetemp=C:\tmp` in this Windows sandbox if `tmp_path` fixtures
 ## Runtime Flow
 
 1. `run_active_weave` builds the Raven Chronicle run packet.
-2. FLUX.2 generates the image on Space when HF runtime is enabled.
+2. FLUX.2 Klein 4B generates the image on Space when HF runtime is enabled.
 3. Generated artifact is scanned by ST3GG.
 4. MiniCPM-V judge runs when OpenBMB secrets are present.
 5. Nemotron evidence runs when Nemotron/NVIDIA endpoint secrets are present.
@@ -49,13 +51,14 @@ Avoid pytest `--basetemp=C:\tmp` in this Windows sandbox if `tmp_path` fixtures
 - OpenBMB prize claim requires `minicpm_judge.status == "success"` in an export packet.
 - NVIDIA prize claim requires `nemotron_evidence.status == "success"` in an export packet.
 - LocateAnything supports the grounding story but does not replace Nemotron for the NVIDIA prize.
-- Tiny Titan is not claimed because the default image model is FLUX.2 Klein 9B.
+- Tiny Titan can be claimed for the public demo stack because each active public model is <=4B.
+- FLUX.2 Klein 9B and OFFELLIA/Gemma remain private research options only.
 - Modal is not claimed unless a real Modal job runs and is documented.
 
 ## Known Risks
 
 - GitHub CLI may fail behind proxy `127.0.0.1:9`; use local git status and HF verification when blocked.
-- Real FLUX generation depends on Space GPU availability and accepted gated model terms.
+- Real FLUX generation depends on Space GPU availability and the public 4B runtime loading successfully.
 - OpenBMB and Nemotron endpoints are optional and must show `missing secret` rather than fake success when not configured.
 - Demo video and social post links must be added before final submission.
 

src/nexus_visual_weaver/catalog.py

@@ -6,22 +6,33 @@ from .schema import AdapterRecipe, ModelCandidate
 
 MODEL_CATALOG: list[ModelCandidate] = [
     ModelCandidate(
-        repo_id="black-forest-labs/FLUX.2-klein-9B",
+        repo_id="black-forest-labs/FLUX.2-klein-4B",
         role="image_generator",
         task="image-to-image",
-        params_b=9.0,
+        params_b=4.0,
         runtime="diffusers / provider",
+        license="apache-2.0",
+        source_url="https://hf.co/black-forest-labs/FLUX.2-klein-4B",
+    ),
+    ModelCandidate(
+        repo_id="black-forest-labs/FLUX.2-klein-9B",
+        role="private_research_image_generator",
+        task="image-to-image",
+        params_b=9.0,
+        runtime="diffusers / gated provider",
         license="other",
         gated=True,
+        public_demo=False,
         source_url="https://hf.co/black-forest-labs/FLUX.2-klein-9B",
     ),
     ModelCandidate(
         repo_id="Brunobkr/OFFELLIA_Q4_0_gemma-4-12B-it.gguf",
-        role="multimodal_judge",
+        role="private_research_multimodal_judge",
         task="image-text-to-text",
         params_b=12.0,
         runtime="llama.cpp GGUF",
         license="apache-2.0",
+        public_demo=False,
         source_url="https://hf.co/Brunobkr/OFFELLIA_Q4_0_gemma-4-12B-it.gguf",
     ),
     ModelCandidate(
@@ -102,10 +113,22 @@ MODEL_CATALOG: list[ModelCandidate] = [
 ADAPTER_CATALOG: list[AdapterRecipe] = [
     AdapterRecipe(
         repo_id="DeverStyle/Flux.2-Klein-Loras",
-        adapter_for="black-forest-labs/FLUX.2-klein-9B",
+        adapter_for="black-forest-labs/FLUX.2-klein-4B",
         task="text-to-image style stack",
         license="apache-2.0",
     ),
+    AdapterRecipe(
+        repo_id="fal/flux-2-klein-4B-outpaint-lora",
+        adapter_for="black-forest-labs/FLUX.2-klein-4B",
+        task="outpaint/inpaint public demo helper",
+        license="apache-2.0",
+    ),
+    AdapterRecipe(
+        repo_id="thedeoxen/refcontrol-FLUX.2-klein-4B-reference-depth-lora",
+        adapter_for="black-forest-labs/FLUX.2-klein-base-4B",
+        task="reference-depth control for garment layout",
+        license="apache-2.0",
+    ),
     AdapterRecipe(
         repo_id="nomadoor/flux-2-klein-9B-schematic-lora",
         adapter_for="black-forest-labs/FLUX.2-klein-base-9B",
@@ -147,6 +170,15 @@ ADAPTER_CATALOG: list[AdapterRecipe] = [
 ]
 
 DEFAULT_ACTIVE_STACK = [
+    "black-forest-labs/FLUX.2-klein-4B",
+    "nvidia/LocateAnything-3B",
+    "openbmb/MiniCPM-V-4.6",
+    "nvidia/NVIDIA-Nemotron-Parse-v1.2",
+    "openbmb/MiniCPM5-1B",
+    "onnx-community/functiongemma-270m-it-ONNX",
+]
+
+PRIVATE_RESEARCH_STACK = [
     "black-forest-labs/FLUX.2-klein-9B",
     "Brunobkr/OFFELLIA_Q4_0_gemma-4-12B-it.gguf",
     "nvidia/LocateAnything-3B",
@@ -157,7 +189,11 @@ DEFAULT_ACTIVE_STACK = [
 
 
 def filter_catalog(adult_mode: bool = False) -> tuple[list[ModelCandidate], list[AdapterRecipe]]:
-    models = [model for model in MODEL_CATALOG if adult_mode or not model.adult_only]
+    models = [
+        model
+        for model in MODEL_CATALOG
+        if (adult_mode or not model.adult_only) and (adult_mode or model.public_demo)
+    ]
     adapters = [adapter for adapter in ADAPTER_CATALOG if adult_mode or not adapter.adult_only]
     return models, adapters
 
@@ -165,7 +201,8 @@ def filter_catalog(adult_mode: bool = False) -> tuple[list[ModelCandidate], list
 def active_stack(adult_mode: bool = False) -> list[ModelCandidate]:
     allowed, _ = filter_catalog(adult_mode)
     by_id = {model.repo_id: model for model in allowed}
-    return [by_id[repo_id] for repo_id in DEFAULT_ACTIVE_STACK if repo_id in by_id]
+    stack_ids = PRIVATE_RESEARCH_STACK if adult_mode else DEFAULT_ACTIVE_STACK
+    return [by_id[repo_id] for repo_id in stack_ids if repo_id in by_id]
 
 
 def parameter_budget(stack: list[ModelCandidate] | None = None) -> dict[str, float | str]:

src/nexus_visual_weaver/hf_runtime.py

@@ -9,7 +9,8 @@ from pathlib import Path
 from typing import Any
 
 
-FLUX_REPO_ID = "black-forest-labs/FLUX.2-klein-9B"
+FLUX_REPO_ID = "black-forest-labs/FLUX.2-klein-4B"
+PRIVATE_RESEARCH_FLUX_REPO_ID = "black-forest-labs/FLUX.2-klein-9B"
 
 
 @dataclass(frozen=True)
@@ -98,7 +99,7 @@ def generate_flux_image(prompt: str, *, seed: int = 0, width: int = 1024, height
             status="no_cuda",
             provider_state="blocked",
             repo_id=FLUX_REPO_ID,
-            message="CUDA is not available to the Space callback; FLUX.2 9B requires GPU execution.",
+            message="CUDA is not available to the Space callback; FLUX.2 Klein 4B requires GPU execution.",
             width=width,
             height=height,
             steps=steps,
@@ -126,7 +127,7 @@ def generate_flux_image(prompt: str, *, seed: int = 0, width: int = 1024, height
             provider_state="generated",
             repo_id=FLUX_REPO_ID,
             output_path=str(output_path),
-            message="FLUX.2 Klein generated a real image artifact on HF Space.",
+            message="FLUX.2 Klein 4B generated a real public-demo artifact on HF Space.",
             latency_seconds=round(time.perf_counter() - started, 2),
             width=width,
             height=height,

src/nexus_visual_weaver/model_relay.py

@@ -15,6 +15,7 @@ from typing import Any
 
 PINNED_LANES = {"image_generation", "grounding", "security"}
 ROTATABLE_LANES = {
+    "private_image_research",
     "prompt_router",
     "taste_judge",
     "audio_lore_tts",
@@ -430,18 +431,31 @@ class WeaverModelRelay:
 def default_model_records() -> list[ModelRecord]:
     return [
         ModelRecord(
-            model_id="flux2-klein-primary",
+            model_id="flux2-klein-4b-public",
             lane="image_generation",
             provider="hf",
-            repo_id="black-forest-labs/FLUX.2-klein-9B",
-            license_gate="review_required",
-            params_b=9.0,
+            repo_id="black-forest-labs/FLUX.2-klein-4B",
+            license_gate="apache-2.0",
+            params_b=4.0,
             cost_hint="provider_or_local",
             rpm_limit=8,
             rpd_limit=60,
+            quality_score=0.92,
+            latency_ms=21000,
+            pinned=True,
+        ),
+        ModelRecord(
+            model_id="flux2-klein-9b-private",
+            lane="private_image_research",
+            provider="hf",
+            repo_id="black-forest-labs/FLUX.2-klein-9B",
+            license_gate="review_required",
+            params_b=9.0,
+            cost_hint="gated_provider_or_private_space",
+            rpm_limit=6,
+            rpd_limit=40,
             quality_score=0.96,
             latency_ms=26000,
-            pinned=True,
         ),
         ModelRecord(
             model_id="locateanything-3b-anchor",

src/nexus_visual_weaver/render.py

@@ -9,7 +9,6 @@ from pathlib import Path
 
 from .catalog import catalog_summary, parameter_budget
 from .schema import GenerationRun
-from .workflow import WorkflowState
 
 
 def badge(label: str, tone: str = "neutral") -> str:
@@ -83,13 +82,6 @@ def _image_data_uri(path: str | None) -> str | None:
     return f"data:{mime};base64,{data}"
 
 
-def render_command_header() -> str:
-    """
-    Render the command input header section with mode and policy badges.
-    
-    Returns:
-        str: HTML markup for the command input header.
-    """
 def render_command_header() -> str:
     return f"""
     <section class="nw-command-header">
@@ -101,14 +93,47 @@ def render_command_header() -> str:
       <div class="nw-command-pills">
         {badge("SFW DEFAULT", "pass")}
         {badge("ST3GG ALWAYS ON", "cyan")}
-        {badge("FLUX.2 PINNED", "accent")}
+        {badge("FLUX.2 4B PINNED", "accent")}
         {badge("HUMAN CHECKPOINT", "warn")}
       </div>
     </section>
     """
 
 
-def render_topbar(adult_mode: bool = False, relay_status: dict | None = None) -> str:
+def render_trust_strip(scan: dict | None = None, operator_state: dict | None = None) -> str:
+    scan = scan or {"status": "idle", "export_gate": "pending", "findings": [], "purification_actions": []}
+    operator_state = operator_state or {}
+    status = str(scan.get("status", "idle")).upper()
+    export_gate = str(scan.get("export_gate", "pending")).upper()
+    checkpoint = str(operator_state.get("checkpoint", "pending")).replace("_", " ").title()
+    findings = scan.get("findings") or ["No upload selected. Always-on scanner ready."]
+    actions = scan.get("purification_actions") or [
+        "strip metadata before export",
+        "truncate PNG after IEND when needed",
+        "run LSB statistical review",
+    ]
+    tone = _scan_status_tone(str(scan.get("status", "idle")))
+    return f"""
+    <section class="nw-trust-strip">
+      <div class="nw-trust-primary">
+        <small>TRUST MODEL</small>
+        <strong>Generation is not export.</strong>
+        <span>Every artifact must pass ST3GG scan, purification, and human checkpoint before release.</span>
+      </div>
+      <div class="nw-trust-card">{badge(f"ST3GG {status}", tone)}<span>{escape(str(findings[0]))}</span></div>
+      <div class="nw-trust-card">{badge(f"EXPORT {export_gate}", "pass" if export_gate == "CLEAR" else "warn" if export_gate == "BLOCKED" else "muted")}<span>{escape(str(actions[0]))}</span></div>
+      <div class="nw-trust-card">{badge(f"CHECKPOINT {checkpoint.upper()}", "pass" if checkpoint == "Approved" else "muted")}<span>Adult Mode never bypasses safety, consent, provenance, or dataset gates.</span></div>
+      <div class="nw-trust-card nw-trust-examples">{badge("FIXTURE EVIDENCE", "cyan")}<span>Clean PNG -> pass. PNG trailing bytes -> blocked.</span></div>
+    </section>
+    """
+
+
+def render_topbar(
+    adult_mode: bool = False,
+    relay_status: dict | None = None,
+    scan: dict | None = None,
+    operator_state: dict | None = None,
+) -> str:
     """
     Renders the application topbar with budget metrics, relay status, and adult mode controls.
     
@@ -145,6 +170,7 @@ def render_topbar(adult_mode: bool = False, relay_status: dict | None = None) ->
       </div>
       <div class="nw-locked"><b>18+</b><span>Locked. Enable in Security with explicit justification.</span></div>
     </div>
+    {render_trust_strip(scan, operator_state)}
     """
 
 
@@ -185,24 +211,8 @@ def render_command_rail(active_section: str = "Forge") -> str:
     """
 
 
-def render_workflow(run: GenerationRun | None = None) -> str:
-    """
-    Render an interactive workflow visualization panel displaying the NEXUS processing pipeline.
-    
-    Derives workflow labels (checkpoint, recommendation, actions, models) from the provided run object
-    if available; otherwise displays defaults.
-    
-    Parameters:
-        run (GenerationRun | None): Optional generation run providing checkpoint, model stack, and
-            inspection data. If None, displays placeholder values.
-    
-    Returns:
-        str: HTML section containing a workflow diagram with nodes, edges, legend, and
-            operator console.
-    """
 def render_workflow(run: GenerationRun | None = None, operator_state: dict | None = None) -> str:
     operator_state = operator_state or {}
-    workflow = WorkflowState.default()
     score = run.checkpoint.trust_score if run else 0.82
     checkpoint_id = run.checkpoint.checkpoint_id if run else "nw-dry-run"
     checkpoint_status = str(operator_state.get("checkpoint", "pending_review" if run else "pending"))
@@ -214,17 +224,14 @@ def render_workflow(run: GenerationRun | None = None, operator_state: dict | Non
         action_label = "Checkpoint approved; export packet may be prepared after ST3GG gate."
     elif provider_state == "stopped":
         action_label = "Provider handoff stopped; dry-run evidence remains available."
-    recommendation = run.checkpoint.recommendation.replace("_", " ").title() if run else "Awaiting Run"
-    required_actions = run.checkpoint.required_actions if run else ["Review candidate thumbnails before promotion"]
-    action_label = required_actions[0] if required_actions else "No action pending"
     model_label = _short_repo(run.model_stack[0].repo_id) if run and run.model_stack else "FLUX.2"
     locate_label = run.inspection.locate_model.split("/")[-1] if run else "LocateAnything-3B"
     nodes = {
         "seed": (35, 52, 190, 210, "Seed Prompt", ["Rogue archivist moving", "through rain-slick neon", "city, couture layers."], "Text-to-Image (FLUX.2)", "complete", "red"),
         "refine": (275, 52, 185, 160, "Refine", ["Prompt Refiner", "Style Harmonizer", "Negative Purge"], "Qwen2.5-7B", "complete", "violet"),
-        "judge": (540, 52, 185, 160, "Judge", ["Aesthetic Scorer", "ST3GG Policy Filter", f"Score {score:.2f}"], "OFFELLIA / Gemma", "complete", "blue"),
+        "judge": (540, 52, 185, 160, "Judge", ["Aesthetic Scorer", "ST3GG Policy Filter", f"Score {score:.2f}"], "MiniCPM / Nemotron", "complete", "blue"),
         "locate": (785, 52, 185, 160, "Locate", ["Reference Locator", "Pose & Composition", "IP-Adapter"], "Refs 3/5", "complete", "cyan"),
-        "generate": (275, 280, 235, 210, "Generate", ["Image / Video Generation", "FLUX.2 + adapter stack", "High-detail couture"], "Steps 30  CFG 7.5", "ready", "green"),
+        "generate": (275, 280, 235, 210, "Generate", ["Image / Video Generation", "FLUX.2 4B + adapter stack", "High-detail couture"], "Steps 4  CFG 1.0", "ready", "green"),
         "video": (590, 280, 235, 210, "Video Path", ["Image to Video", "Frame interpolation", run.video.preset if run else "Wan2.2 / LTX swap"], "Duration 5.6s  24fps", "ready", "blue"),
         "checkpoint": (880, 285, 185, 185, "Human Checkpoint", ["Human review required", "Verify intent, vibe,", "and output before final."], "Review Now", "paused", "amber"),
     }
@@ -307,43 +314,10 @@ def render_workflow(run: GenerationRun | None = None, operator_state: dict | Non
           <span>Judge view keeps product purpose visible without a landing page.</span>
         </div>
       </div>
-      <div class="nw-weave-console">
-        <div class="nw-console-card nw-console-primary">
-          <small>Selected Node</small>
-          <strong>Human Checkpoint</strong>
-          <span>{escape(recommendation)} / {escape(checkpoint_id)}</span>
-        </div>
-        <div class="nw-console-card">
-          <small>Next Operator Action</small>
-          <strong>{escape(action_label)}</strong>
-          <span>Checkpoint blocks video promotion until reviewed.</span>
-        </div>
-        <div class="nw-console-card">
-          <small>Pinned Model Lanes</small>
-          <strong>{escape(model_label)} + {escape(locate_label)} + ST3GG</strong>
-          <span>Core lanes stay fixed; helper lanes may rotate.</span>
-        </div>
-        <div class="nw-console-card">
-          <small>Hackathon Signal</small>
-          <strong>Workflow, governance, visual creation</strong>
-          <span>Judge view keeps product purpose visible without a landing page.</span>
-        </div>
-      </div>
     </section>
     """
 
 
-def render_artifact_lane(run: GenerationRun | None = None, scan: dict | None = None) -> str:
-    """
-    Render the artifact preview lane section with generated artifacts and checkpoint metadata.
-    
-    Parameters:
-    	run (GenerationRun | None): Current generation run; if None, displays dry-run placeholders.
-    	scan (dict | None): Scan status including export_gate; defaults to idle/pending if not provided.
-    
-    Returns:
-    	str: HTML for the artifact preview lane section with preview stage, metadata, and artifact grid.
-    """
 def render_artifact_lane(run: GenerationRun | None = None, scan: dict | None = None, operator_state: dict | None = None) -> str:
     scan = scan or {"status": "idle", "export_gate": "pending"}
     operator_state = operator_state or {}
@@ -466,7 +440,6 @@ def render_operations_panel(
             ("Prompt contract", "Taste-refined prompt, material locks, negative purge, and checkpoint requirements."),
             ("Active run", f"{run_id} / checkpoint remains human-reviewed before video promotion."),
             ("Provider posture", f"{provider_state}: {operator_message}"),
-            ("Provider posture", "Dry-run packets are visible before paid or gated calls."),
         ],
         "Wardrobe": [
             ("Slot coverage", f"{outfit_count or 9} garment/accessory regions tracked with locks and edit priority."),
@@ -495,7 +468,6 @@ def render_operations_panel(
         "Runs": [
             ("Current checkpoint", run_id),
             ("Ledger mode", f"Operator state: {provider_state}. Run JSON, catalog summary, and ST3GG evidence remain in the evidence accordion."),
-            ("Ledger mode", "Run JSON, catalog summary, and ST3GG evidence remain in the evidence accordion."),
             ("Rollback path", "Feature branches and draft PRs carry implementation checkpoints."),
         ],
     }
@@ -572,7 +544,7 @@ def _render_relay_panel(relay_status: dict | None = None) -> str:
     <h3>GMR ModelRelay</h3>
     <ul class="nw-relay">{rows}</ul>
     <div class="nw-relay-foot">
-      {badge("FLUX.2 pinned", "pass")} {badge("LocateAnything pinned", "pass")} {badge(f"dedup hits {dedup_hits}", "muted")}
+      {badge("FLUX.2 4B pinned", "pass")} {badge("LocateAnything pinned", "pass")} {badge(f"dedup hits {dedup_hits}", "muted")}
     </div>
     """
 
@@ -618,8 +590,6 @@ def render_provider_cards(relay_status: dict | None = None, adult_mode: bool = F
               <span>{escape(str(provider))} / {escape(str(gate))}</span>
               <i class="nw-provider-meter" style="--health:{'86' if provider_state in {'configured', 'dry-run'} else '52' if provider_state == 'limited' else '22'}"></i>
               <div>{badge(provider_state.upper(), tone)}{badge("CHECKPOINTED", "muted")}</div>
-              <i class="nw-provider-meter" style="--health:{'86' if status == 'ready' else '52' if status == 'limited' else '22'}"></i>
-              <div>{badge(str(status).upper(), tone)}{badge("DRY-RUN", "muted")}</div>
             </div>
             """
         )
@@ -678,7 +648,7 @@ def render_inspector(
         scan_status = (scan or {}).get("status", "pass")
     else:
         checks = [(label, True) for label in ["Patent Leather", "Faux Fur", "Lace / Mesh", "Crimson Hardware", "Platform Boots", "Layered Garments"]]
-        model_rows = "<li><span>active stack</span><strong>FLUX.2 / OFFELLIA / LocateAnything</strong></li>"
+        model_rows = "<li><span>active stack</span><strong>FLUX.2 4B / MiniCPM / LocateAnything</strong></li>"
         score = 86
         scan_status = (scan or {}).get("status", "pass")
     checks_html = "".join(f'<li><span>{"✓" if ok else "!"}</span>{escape(label)}</li>' for label, ok in checks)
@@ -835,7 +805,6 @@ def render_dashboard(
     Returns:
         str: The full HTML dashboard markup.
     """
-    regions = render_dashboard_regions(run, adult_mode, scan, relay_status, active_section)
     regions = render_dashboard_regions(run, adult_mode, scan, relay_status, active_section, operator_state)
     return f"""
     <div class="nw-app">
@@ -882,13 +851,11 @@ def render_dashboard_regions(
         dict[str, str]: HTML markup strings keyed by region name (topbar, rail, command_rail, workflow, operations, inspector, drawer, status, artifacts, providers).
     """
     return {
-        "topbar": render_topbar(adult_mode, relay_status),
+        "topbar": render_topbar(adult_mode, relay_status, scan, operator_state),
         "rail": render_left_rail(active_section),
         "command_rail": render_command_rail(active_section),
         "workflow": render_workflow(run, operator_state),
         "operations": render_operations_panel(active_section, run, scan, relay_status, adult_mode=adult_mode, operator_state=operator_state),
-        "workflow": render_workflow(run, operator_state),
-        "operations": render_operations_panel(active_section, run, scan, relay_status, adult_mode=adult_mode, operator_state=operator_state),
         "inspector": render_inspector(run, scan, relay_status, operator_state),
         "drawer": render_drawer(run),
         "status": render_status_bar(operator_state),

src/nexus_visual_weaver/schema.py

@@ -71,6 +71,7 @@ class ModelCandidate:
     license: str
     gated: bool = False
     adult_only: bool = False
+    public_demo: bool = True
     source_url: str = ""
 
 
@@ -150,4 +151,3 @@ class WisdomRecord:
     dataset_target: str
     lessons: list[str]
     created_at: str = field(default_factory=utc_now)
-

src/nexus_visual_weaver/styles.py

@@ -117,6 +117,54 @@ footer { display: none !important; }
 }
 .nw-locked b { border: 1px solid rgba(255,54,95,.55); border-radius: 5px; padding: 7px 6px; text-align: center; font-size: 13px; }
 .nw-locked span { font-size: 11px; line-height: 1.25; }
+.nw-trust-strip {
+  display: grid;
+  grid-template-columns: minmax(260px, 1.2fr) repeat(4, minmax(160px, 1fr));
+  gap: 8px;
+  padding: 8px;
+  border-bottom: 1px solid #171c22;
+  background:
+    linear-gradient(90deg, rgba(38,215,130,.08), transparent 38%),
+    rgba(5, 7, 10, .98);
+}
+.nw-trust-primary,
+.nw-trust-card {
+  min-height: 62px;
+  border: 1px solid var(--nw-line);
+  border-radius: 7px;
+  background:
+    linear-gradient(135deg, rgba(255,255,255,.04), transparent 42%),
+    rgba(255,255,255,.018);
+  padding: 9px 11px;
+  display: grid;
+  align-content: center;
+  gap: 4px;
+}
+.nw-trust-primary {
+  border-color: rgba(38,215,130,.34);
+  background:
+    linear-gradient(135deg, rgba(38,215,130,.12), transparent 46%),
+    rgba(255,255,255,.02);
+}
+.nw-trust-primary small {
+  color: var(--nw-green);
+  font-size: 10px;
+  font-weight: 800;
+}
+.nw-trust-primary strong {
+  color: var(--nw-text);
+  font-size: 14px;
+  line-height: 1.2;
+}
+.nw-trust-primary span,
+.nw-trust-card span {
+  color: var(--nw-muted);
+  font-size: 11px;
+  line-height: 1.35;
+}
+.nw-trust-card .nw-badge {
+  margin-bottom: 1px;
+}
 .nw-icon { width: 18px; height: 18px; stroke: currentColor; fill: none; stroke-width: 1.8; stroke-linecap: round; stroke-linejoin: round; }
 .nw-shell {
   display: grid;
@@ -889,6 +937,7 @@ footer { display: none !important; }
 }
 @media (max-width: 1100px) {
   .nw-topbar { grid-template-columns: 1fr; }
+  .nw-trust-strip { grid-template-columns: 1fr; }
   .nw-shell { grid-template-columns: 1fr; grid-template-rows: auto; }
   .nw-rail, .nw-inspector, .nw-bottom { grid-column: 1; grid-row: auto; }
   .nw-rail { flex-direction: row; overflow-x: auto; }

tests/test_command_center.py

@@ -47,6 +47,24 @@ def test_active_parameter_budget_passes_default_stack() -> None:
     assert budget["active_b"] <= 32.0
 
 
+def test_public_stack_uses_flux_4b_and_excludes_private_models() -> None:
+    stack = active_stack(False)
+    repo_ids = {model.repo_id for model in stack}
+
+    assert "black-forest-labs/FLUX.2-klein-4B" in repo_ids
+    assert "black-forest-labs/FLUX.2-klein-9B" not in repo_ids
+    assert not any("OFFELLIA" in repo_id for repo_id in repo_ids)
+    assert all(model.params_b <= 4.0 for model in stack)
+
+
+def test_private_catalog_keeps_stronger_research_models_available() -> None:
+    private_models, _ = filter_catalog(True)
+    repo_ids = {model.repo_id for model in private_models}
+
+    assert "black-forest-labs/FLUX.2-klein-9B" in repo_ids
+    assert "Brunobkr/OFFELLIA_Q4_0_gemma-4-12B-it.gguf" in repo_ids
+
+
 def test_command_center_run_is_checkpointed() -> None:
     run = build_command_center_run(
         "Slavic model, patent leather, faux fur, Chantilly lace, crimson hardware, platform boots, NEXUS sigils"
@@ -54,7 +72,7 @@ def test_command_center_run_is_checkpointed() -> None:
     assert run.checkpoint.checkpoint_id.startswith("nw-")
     assert run.video.checkpoint_required is True
     assert run.inspection.targets
-    assert run.model_stack[2].repo_id == "nvidia/LocateAnything-3B"
+    assert any(model.repo_id == "nvidia/LocateAnything-3B" for model in run.model_stack)
 
 
 def test_security_scan_does_not_return_payload_excerpt() -> None:
@@ -77,6 +95,18 @@ def test_security_scan_flags_extension_magic_mismatch() -> None:
     assert any("extension does not match" in finding for finding in scan["findings"])
 
 
+def test_security_scan_safe_vs_blocked_fixtures() -> None:
+    fixture_dir = Path(__file__).parent / "fixtures"
+    safe = scan_file(str(fixture_dir / "st3gg_safe_clean.png"))
+    blocked = scan_file(str(fixture_dir / "st3gg_blocked_trailing.png"))
+
+    assert safe["status"] == "pass"
+    assert safe["export_gate"] == "clear"
+    assert blocked["status"] == "review"
+    assert blocked["export_gate"] == "blocked"
+    assert any("trailing data" in finding for finding in blocked["findings"])
+
+
 def test_dashboard_regions_expose_artifacts_and_provider_cards() -> None:
     run = build_command_center_run("gothic couture archivist, patent leather, platform boots")
     relay = WeaverModelRelay()
@@ -102,6 +132,8 @@ def test_dashboard_regions_expose_artifacts_and_provider_cards() -> None:
     assert "Provider Handoff Cards" in regions["providers"]
     assert "nw-provider-meter" in regions["providers"]
     assert "Selected: Forge" in regions["command_rail"]
+    assert "TRUST MODEL" in regions["topbar"]
+    assert "Clean PNG -> pass" in regions["topbar"]
     assert "ST3GG Scan" in regions["inspector"]
     assert "nw-weave-console" in regions["workflow"]
     assert "Hackathon Signal" in regions["workflow"]
@@ -165,7 +197,7 @@ def test_command_header_exposes_governed_run_controls() -> None:
 
     assert "Raven Chronicle Active Weave" in header
     assert "ST3GG ALWAYS ON" in header
-    assert "FLUX.2 PINNED" in header
+    assert "FLUX.2 4B PINNED" in header
     assert "HUMAN CHECKPOINT" in header
 
 

tests/test_hf_runtime.py

@@ -1,6 +1,6 @@
 from PIL import Image
 
-from nexus_visual_weaver.hf_runtime import generate_flux_image, hf_runtime_enabled
+from nexus_visual_weaver.hf_runtime import FLUX_REPO_ID, PRIVATE_RESEARCH_FLUX_REPO_ID, generate_flux_image, hf_runtime_enabled
 from nexus_visual_weaver.render import render_artifact_lane
 
 
@@ -14,6 +14,12 @@ def test_hf_runtime_is_disabled_locally_by_default(monkeypatch) -> None:
     result = generate_flux_image("test prompt")
     assert result.status == "disabled"
     assert result.provider_state == "dry-run"
+    assert result.repo_id == "black-forest-labs/FLUX.2-klein-4B"
+
+
+def test_public_and_private_flux_repo_ids_are_split() -> None:
+    assert FLUX_REPO_ID == "black-forest-labs/FLUX.2-klein-4B"
+    assert PRIVATE_RESEARCH_FLUX_REPO_ID == "black-forest-labs/FLUX.2-klein-9B"
 
 
 def test_artifact_lane_embeds_generated_image() -> None:

tests/test_model_relay.py

@@ -11,11 +11,21 @@ def test_pinned_lanes_do_not_rotate() -> None:
     assert decision.pinned is True
     assert decision.rotatable is False
     assert decision.primary is not None
-    assert decision.primary.repo_id == "black-forest-labs/FLUX.2-klein-9B"
+    assert decision.primary.repo_id == "black-forest-labs/FLUX.2-klein-4B"
+    assert decision.primary.params_b == 4.0
     assert decision.fallbacks == []
     assert "rotation disabled" in decision.reason
 
 
+def test_private_image_research_keeps_flux_9b_available() -> None:
+    relay = WeaverModelRelay()
+    decision = relay.select_lane("private_image_research", budget=9.0, public_demo=False, strategy="private_research")
+
+    assert decision.primary is not None
+    assert decision.primary.repo_id == "black-forest-labs/FLUX.2-klein-9B"
+    assert decision.primary.pinned is False
+
+
 def test_public_private_taste_judge_respects_license_and_budget() -> None:
     relay = WeaverModelRelay()
 
@@ -65,8 +75,8 @@ def test_metadata_dedup_prevents_repeated_hf_lookup() -> None:
         calls["count"] += 1
         return {"calls": calls["count"]}
 
-    first = relay.metadata_lookup("hf:black-forest-labs/FLUX.2-klein-9B", resolver)
-    second = relay.metadata_lookup("hf:black-forest-labs/FLUX.2-klein-9B", resolver)
+    first = relay.metadata_lookup("hf:black-forest-labs/FLUX.2-klein-4B", resolver)
+    second = relay.metadata_lookup("hf:black-forest-labs/FLUX.2-klein-4B", resolver)
 
     assert first == second == {"calls": 1}
     assert calls["count"] == 1
@@ -113,7 +123,7 @@ def test_dashboard_surfaces_gmr_pinned_models_and_fallbacks() -> None:
     html = render_dashboard(relay_status=relay.dashboard_snapshot(public_demo=True))
 
     assert "GMR ModelRelay" in html
-    assert "FLUX.2 pinned" in html
+    assert "FLUX.2 4B pinned" in html
     assert "LocateAnything pinned" in html
     assert "fallback:" in html
     assert "Rotation Safe" in html