diff --git a/.coderabbit.yaml b/.coderabbit.yaml
index 2768b7c42..09e72a9d7 100644
--- a/.coderabbit.yaml
+++ b/.coderabbit.yaml
@@ -261,7 +261,7 @@ reviews:
     - label: "area: specs"
       instructions: Apply when changes touch specs/ or spec.md files (specs/done_008-hardened-github-actions/, design contracts, decision records).
     - label: "area: shared"
-      instructions: Apply when changes touch shared Go packages (netguard/, gameaction/, gameproto/, svcutil/) used by operator, api, and agent.
+      instructions: Apply when changes touch shared Go packages (netguard/, gameaction/, gameproto/, svcutil/, telemetryschema/) used by operator, api, agent, and telemetry-receiver.
     - label: "area: optional-components"
       instructions: Apply when changes touch optional or sidecar components (sentinel/, capture-sidecar/, mcp-server/, tunnel/, audit-syslog-bridge/, telemetry-receiver/).
     - label: "breaking"
diff --git a/.devcontainer/post-create.sh b/.devcontainer/post-create.sh
index 6d63e9189..40ecb6e9f 100755
--- a/.devcontainer/post-create.sh
+++ b/.devcontainer/post-create.sh
@@ -76,7 +76,7 @@ log "fetching envtest binaries for K8s 1.36.2"
 # ---------- Go module cache warmup ----------
 # Go modules from go.work. Derived from 'use' entries in go.work.
 # Keep in sync with go.work when adding/removing modules.
-for m in agent api audit-syslog-bridge capture-sidecar gameaction gameproto mcp-server netguard operator sentinel svcutil telemetry-receiver test/e2e tunnel; do
+for m in agent api audit-syslog-bridge capture-sidecar gameaction gameproto mcp-server netguard operator sentinel svcutil telemetry-receiver telemetryschema test/e2e tunnel; do
 	log "go mod download ($m)"
 	( cd "$m" && go mod download )
 done
diff --git a/.github/actions/build-e2e-images/action.yml b/.github/actions/build-e2e-images/action.yml
index cf41c7db2..e8239747c 100644
--- a/.github/actions/build-e2e-images/action.yml
+++ b/.github/actions/build-e2e-images/action.yml
@@ -1,9 +1,9 @@
 name: build e2e images
 description: >
-  Build the operator/api/agent/sentinel/capture-sidecar/fakeoidc (+ gameprobe)
+  Build the operator/api/agent/sentinel/capture-sidecar/telemetry-receiver/fakeoidc (+ gameprobe)
   images the kind e2e suites load into the cluster, tagged
   gameplane-test/<component>:e2e exactly like make e2e-images, via buildx bake
-  — then `docker save` all seven into a single tar uploaded as an artifact
+  — then `docker save` all eight into a single tar uploaded as an artifact
   (e2e-images-<arch>). The heavy e2e jobs load that tar instead of each
   recompiling the same binaries. This is the ONLY builder, so it always writes
   the layer cache back (the old single-writer export dance is gone).
@@ -16,7 +16,7 @@ runs:
   using: composite
   steps:
     - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
-    - name: bake e2e images (operator/api/agent/sentinel/capture-sidecar/fakeoidc)
+    - name: bake e2e images (operator/api/agent/sentinel/capture-sidecar/telemetry-receiver/fakeoidc)
       uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
       with:
         files: docker-bake.hcl
@@ -28,12 +28,14 @@ runs:
           e2e-agent.cache-from=type=gha,scope=e2e-agent-${{ inputs.arch }}
           e2e-sentinel.cache-from=type=gha,scope=e2e-sentinel-${{ inputs.arch }}
           e2e-capture-sidecar.cache-from=type=gha,scope=e2e-capture-sidecar-${{ inputs.arch }}
+          e2e-telemetry-receiver.cache-from=type=gha,scope=e2e-telemetry-receiver-${{ inputs.arch }}
           e2e-fakeoidc.cache-from=type=gha,scope=e2e-fakeoidc-${{ inputs.arch }}
           e2e-operator.cache-to=type=gha,mode=max,scope=e2e-operator-${{ inputs.arch }}
           e2e-api.cache-to=type=gha,mode=max,scope=e2e-api-${{ inputs.arch }}
           e2e-agent.cache-to=type=gha,mode=max,scope=e2e-agent-${{ inputs.arch }}
           e2e-sentinel.cache-to=type=gha,mode=max,scope=e2e-sentinel-${{ inputs.arch }}
           e2e-capture-sidecar.cache-to=type=gha,mode=max,scope=e2e-capture-sidecar-${{ inputs.arch }}
+          e2e-telemetry-receiver.cache-to=type=gha,mode=max,scope=e2e-telemetry-receiver-${{ inputs.arch }}
           e2e-fakeoidc.cache-to=type=gha,mode=max,scope=e2e-fakeoidc-${{ inputs.arch }}
     - name: bake gameprobe image
       uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
@@ -53,6 +55,7 @@ runs:
           gameplane-test/agent:e2e \
           gameplane-test/sentinel:e2e \
           gameplane-test/capture-sidecar:e2e \
+          gameplane-test/telemetry-receiver:e2e \
           gameplane-test/fakeoidc:e2e \
           gameplane-test/gameprobe:e2e \
           -o "$RUNNER_TEMP/e2e-images.tar"
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index db5f61800..c6f851104 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -172,6 +172,20 @@ updates:
       svcutil-minor-patch:
         update-types: ["minor", "patch"]
 
+  - package-ecosystem: "gomod"
+    directory: "/telemetryschema"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "03:00"
+    commit-message:
+      prefix: "chore(deps)"
+      include: "scope"
+    open-pull-requests-limit: 5
+    groups:
+      telemetryschema-minor-patch:
+        update-types: ["minor", "patch"]
+
   - package-ecosystem: "gomod"
     directory: "/telemetry-receiver"
     schedule:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index efe32636e..77dcb7887 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -118,6 +118,7 @@ jobs:
               - 'agent/**'
               - 'audit-syslog-bridge/**'
               - 'telemetry-receiver/**'
+              - 'telemetryschema/**'
               - 'sentinel/**'
               - 'mcp-server/**'
               - 'capture-sidecar/**'
@@ -189,6 +190,9 @@ jobs:
             specs:
               - '**/specs.md'
               - 'hack/check-specs.sh'
+              - 'hack/check-telemetry-catalog.sh'
+              - 'telemetryschema/catalog.txt'
+              - 'charts/gameplane/values.yaml'
               - 'hack/check-dev-load-images.sh'
               - 'hack/test-up-registry.sh'
               - 'deploy/kind/up.sh'
@@ -463,6 +467,8 @@ jobs:
         run: make test-doc-versions
       - name: check specs compliance
         run: make check-specs
+      - name: check telemetry catalog
+        run: make check-telemetry-catalog
       - name: check dev-load image coverage
         run: make check-dev-load-images
       - name: test up.sh registry/context bootstrap
@@ -479,7 +485,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        module: [netguard, gameaction, gameproto, operator, agent, api, sentinel, audit-syslog-bridge, telemetry-receiver, mcp-server, capture-sidecar, svcutil, tunnel, gp-module, test/e2e]
+        module: [netguard, gameaction, gameproto, telemetryschema, operator, agent, api, sentinel, audit-syslog-bridge, telemetry-receiver, mcp-server, capture-sidecar, svcutil, tunnel, gp-module, test/e2e]
         exclude: ${{ fromJSON(needs.changes.outputs.lint-exclude) }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -529,6 +535,21 @@ jobs:
           version: v2.12.2
           working-directory: ${{ matrix.module }}
 
+  # Merge gate for spec 022: the project default telemetry destination
+  # (DefaultEndpoint in api/internal/telemetry/destination.go) must be an https
+  # URL. OPEN-DECISIONS OD-1 is ruled, so it passes; it keeps FR-002 enforced. Deliberately
+  # separate: not part of `make lint`, and not in the `report` job's needs.
+  telemetry-default-gate:
+    name: telemetry default gate
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: check the default telemetry destination
+        run: sh hack/check-telemetry-default.sh
+
   go:
     name: go (${{ matrix.module }} / ${{ matrix.arch }})
     needs: [changes]
@@ -543,7 +564,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        module: [netguard, gameaction, gameproto, operator, api, agent, audit-syslog-bridge, telemetry-receiver, sentinel, mcp-server, capture-sidecar, svcutil, tunnel, gp-module]
+        module: [netguard, gameaction, gameproto, telemetryschema, operator, api, agent, audit-syslog-bridge, telemetry-receiver, sentinel, mcp-server, capture-sidecar, svcutil, tunnel, gp-module]
         exclude: ${{ fromJSON(needs.changes.outputs.go-exclude) }}
         arch: [amd64, arm64]
     steps:
@@ -774,12 +795,16 @@ jobs:
         # telemetry-receiver needs its own ServiceMonitor, and both it and
         # the agent PodMonitor need a NetworkPolicy exception for the
         # configured Prometheus namespace once one is set via
-        # serviceMonitors.scrapeNamespaceSelector.
+        # serviceMonitors.scrapeNamespaceSelector. Spec 022: the receiver
+        # serves /metrics only on its dashboard port 8081 behind a Bearer
+        # token, so its ServiceMonitor and NetworkPolicy rule need
+        # api.telemetry.receiver.dashboard.tokenSecretRef.name.
         run: |
           scrape_ns='serviceMonitors.scrapeNamespaceSelector={"matchLabels":{"kubernetes.io/metadata.name":"monitoring"}}'
           helm template gameplane charts/gameplane \
             --set serviceMonitors.enabled=true \
             --set api.telemetry.receiver.enabled=true \
+            --set api.telemetry.receiver.dashboard.tokenSecretRef.name=receiver-dashboard \
             --set-json "$scrape_ns" \
             --show-only templates/servicemonitors.yaml > /tmp/servicemonitors.yaml
           awk '/kind: PodMonitor/,0' /tmp/servicemonitors.yaml | grep -q 'port: metrics'
@@ -792,6 +817,24 @@ jobs:
             exit 1
           fi
           grep -q 'name: gameplane-telemetry-receiver' /tmp/servicemonitors.yaml
+          # The receiver serves /metrics only on its dashboard listener (8081)
+          # behind the dashboard token, so the ServiceMonitor scrapes that
+          # port with the token Secret as bearerTokenSecret.
+          awk '/name: gameplane-telemetry-receiver/,/^---$/' /tmp/servicemonitors.yaml > /tmp/receiver-servicemonitor.yaml
+          grep -q 'port: dashboard' /tmp/receiver-servicemonitor.yaml
+          grep -q 'bearerTokenSecret:' /tmp/receiver-servicemonitor.yaml
+          grep -q 'name: receiver-dashboard' /tmp/receiver-servicemonitor.yaml
+          # No dashboard token: no receiver ServiceMonitor (it could only scrape
+          # a permanently-down target); NOTES.txt carries the warning.
+          helm template gameplane charts/gameplane \
+            --set serviceMonitors.enabled=true \
+            --set api.telemetry.receiver.enabled=true \
+            --set-json "$scrape_ns" \
+            --show-only templates/servicemonitors.yaml > /tmp/servicemonitors-notoken.yaml
+          if grep -q 'name: gameplane-telemetry-receiver' /tmp/servicemonitors-notoken.yaml; then
+            echo "::error::receiver ServiceMonitor rendered without api.telemetry.receiver.dashboard.tokenSecretRef.name"
+            exit 1
+          fi
           helm template gameplane charts/gameplane \
             --set serviceMonitors.enabled=true \
             --set-json "$scrape_ns" \
@@ -801,12 +844,24 @@ jobs:
           helm template gameplane charts/gameplane \
             --set serviceMonitors.enabled=true \
             --set api.telemetry.receiver.enabled=true \
+            --set api.telemetry.receiver.dashboard.tokenSecretRef.name=receiver-dashboard \
             --set-json "$scrape_ns" \
             --show-only templates/telemetry-receiver.yaml > /tmp/telemetry-receiver-scrape.yaml
-          awk '/kind: NetworkPolicy/,0' /tmp/telemetry-receiver-scrape.yaml \
+          awk '/kind: NetworkPolicy/,/^---$/' /tmp/telemetry-receiver-scrape.yaml > /tmp/telemetry-receiver-netpol.yaml
+          # The Prometheus namespace is admitted on the dashboard port 8081,
+          # not on the public ingest port 8080 (which admits only the API).
+          awk '/namespaceSelector:/,0' /tmp/telemetry-receiver-netpol.yaml \
             | grep -q 'kubernetes.io/metadata.name: monitoring'
+          awk '/namespaceSelector:/,0' /tmp/telemetry-receiver-netpol.yaml \
+            | grep -q 'port: 8081'
+          if awk '/namespaceSelector:/,0' /tmp/telemetry-receiver-netpol.yaml | grep -q 'port: 8080'; then
+            echo "::error::the Prometheus namespace must not be admitted on the receiver ingest port 8080"
+            exit 1
+          fi
           awk '/kind: Service/,/^---$/' /tmp/telemetry-receiver-scrape.yaml \
             | grep -q 'app.kubernetes.io/name: gameplane-telemetry-receiver'
+          awk '/kind: Service/,/^---$/' /tmp/telemetry-receiver-scrape.yaml \
+            | grep -q 'name: dashboard'
           # scrapeNamespaceSelector unset (the chart default): neither
           # exception renders, matching the pre-fix behavior.
           helm template gameplane charts/gameplane \
@@ -816,6 +871,94 @@ jobs:
             echo "::error::allow-prometheus-to-agent rendered without serviceMonitors.scrapeNamespaceSelector set"
             exit 1
           fi
+      - name: telemetry install values render (spec 022 FR-005, FR-006)
+        # api.telemetry.enabled=false renders --telemetry-disabled; the bundled
+        # receiver auto-wires the API and marks it bundled; a custom endpoint
+        # is used as-is without the bundled marker; defaults render no endpoint.
+        run: |
+          # api.telemetry.enabled=false is the hard off switch.
+          helm template gameplane charts/gameplane \
+            --set api.telemetry.enabled=false \
+            --show-only templates/api.yaml > /tmp/api-telemetry-off.yaml
+          grep -q -- '--telemetry-disabled' /tmp/api-telemetry-off.yaml
+          # The bundled receiver auto-wires the API and marks it bundled.
+          helm template gameplane charts/gameplane \
+            --set api.telemetry.receiver.enabled=true \
+            --show-only templates/api.yaml > /tmp/api-telemetry-bundled.yaml
+          grep -q -- '--telemetry-endpoint=http://gameplane-telemetry-receiver' /tmp/api-telemetry-bundled.yaml
+          grep -q 'GAMEPLANE_TELEMETRY_BUNDLED' /tmp/api-telemetry-bundled.yaml
+          if grep -q -- '--telemetry-disabled' /tmp/api-telemetry-bundled.yaml; then
+            echo "::error::--telemetry-disabled rendered with api.telemetry.enabled left at its default"
+            exit 1
+          fi
+          # A custom endpoint is used as-is and is never marked bundled.
+          helm template gameplane charts/gameplane \
+            --set api.telemetry.endpoint=https://telemetry.example.com/ingest \
+            --set api.telemetry.receiver.enabled=true \
+            --show-only templates/api.yaml > /tmp/api-telemetry-custom.yaml
+          grep -q -- '--telemetry-endpoint=https://telemetry.example.com/ingest' /tmp/api-telemetry-custom.yaml
+          if grep -q 'GAMEPLANE_TELEMETRY_BUNDLED' /tmp/api-telemetry-custom.yaml; then
+            echo "::error::GAMEPLANE_TELEMETRY_BUNDLED rendered for a custom telemetry endpoint"
+            exit 1
+          fi
+          # Defaults render no endpoint (the API falls back to its compiled-in default).
+          helm template gameplane charts/gameplane \
+            --show-only templates/api.yaml > /tmp/api-telemetry-default.yaml
+          if grep -q -- '--telemetry-endpoint' /tmp/api-telemetry-default.yaml; then
+            echo "::error::default values rendered a --telemetry-endpoint"
+            exit 1
+          fi
+          grep -q -- '--official-module-source=default' /tmp/api-telemetry-default.yaml
+      - name: telemetry receiver proof-of-work render (spec 022 FR-039, OD-5)
+        # api.telemetry.receiver.ingestPow renders INGEST_POW*: off with the
+        # OD-5 defaults, the configured values when enabled, and a failed
+        # render for a value the receiver would refuse to start with (the
+        # difficulty cap is the hardest challenge an install solves).
+        run: |
+          pow_env() {
+            # pow_env FILE WANT...: INGEST_POW, _TARGET_PER_MIN, _MIN_BITS and
+            # _MAX_BITS of the rendered receiver Deployment must equal WANT.
+            python3 - "$@" <<'PY'
+          import sys, yaml
+          path, *want = sys.argv[1:]
+          docs = [d for d in yaml.safe_load_all(open(path)) if d]
+          env = {e['name']: e['value'] for d in docs if d['kind'] == 'Deployment'
+                 for e in d['spec']['template']['spec']['containers'][0]['env'] if 'value' in e}
+          got = [env[k] for k in ('INGEST_POW', 'INGEST_POW_TARGET_PER_MIN', 'INGEST_POW_MIN_BITS', 'INGEST_POW_MAX_BITS')]
+          assert got == want, f"INGEST_POW env = {got}, want {want}"
+          PY
+          }
+          pow_fails() {
+            # pow_fails MESSAGE --set ...: the render must fail with MESSAGE.
+            message="$1"; shift
+            if helm template gameplane charts/gameplane --set api.telemetry.receiver.enabled=true "$@" \
+                 --show-only templates/telemetry-receiver.yaml > /dev/null 2> /tmp/pow-fail.err; then
+              echo "::error::receiver rendered for $*"
+              exit 1
+            fi
+            if ! grep -q -- "$message" /tmp/pow-fail.err; then
+              echo "::error::render for $* failed without '$message'"
+              cat /tmp/pow-fail.err
+              exit 1
+            fi
+          }
+          pow=api.telemetry.receiver.ingestPow
+          # Defaults: proof-of-work off, with the OD-5 values.
+          helm template gameplane charts/gameplane \
+            --set api.telemetry.receiver.enabled=true \
+            --show-only templates/telemetry-receiver.yaml > /tmp/pow-default.yaml
+          pow_env /tmp/pow-default.yaml false 60 0 22
+          # Enabled with its own values.
+          helm template gameplane charts/gameplane \
+            --set api.telemetry.receiver.enabled=true \
+            --set $pow.enabled=true --set $pow.targetPerMinute=30 \
+            --set $pow.minBits=8 --set $pow.maxBits=26 \
+            --show-only templates/telemetry-receiver.yaml > /tmp/pow-enabled.yaml
+          pow_env /tmp/pow-enabled.yaml true 30 8 26
+          # Values the receiver would refuse to start with fail the render.
+          pow_fails 'ingestPow.targetPerMinute must be at least 1' --set $pow.targetPerMinute=0
+          pow_fails 'ingestPow.maxBits must be at most 26' --set $pow.maxBits=27
+          pow_fails 'ingestPow.maxBits must be at least minBits' --set $pow.minBits=10 --set $pow.maxBits=9
       - name: games Namespace carries the keep policy
         # F-212: `helm uninstall` used to delete the games Namespace and
         # every GameServer/StatefulSet/PVC in it. Assert the Namespace is
@@ -890,6 +1033,33 @@ jobs:
           assert ('NetworkPolicy', 'allow-api-to-agent') in resources
           assert ('NetworkPolicy', 'allow-api-to-capture') not in resources, "legacy values without capture enabled its ingress"
           PY
+          # Spec 022: with the bundled receiver and ServiceMonitors switched on
+          # over beta.8's values (no persistence, dashboard, interval or enabled
+          # keys), the chart still renders: no receiver PVC is added, no
+          # receiver ServiceMonitor renders without a token, and the API
+          # keeps working without api.telemetry.enabled.
+          helm template gameplane charts/gameplane \
+            --set api.telemetry.receiver.enabled=true \
+            --set serviceMonitors.enabled=true > /tmp/rendered-reuse-values-receiver.yaml
+          python3 - <<'PY'
+          import yaml
+          docs = [d for d in yaml.safe_load_all(open('/tmp/rendered-reuse-values-receiver.yaml')) if d]
+          resources = {(d['kind'], d['metadata']['name']) for d in docs}
+          assert ('Deployment', 'gameplane-telemetry-receiver') in resources
+          assert ('PersistentVolumeClaim', 'gameplane-telemetry-receiver-data') not in resources, "--reuse-values added receiver storage"
+          assert ('ServiceMonitor', 'gameplane-telemetry-receiver') not in resources, "receiver ServiceMonitor rendered without a dashboard token"
+          PY
+          # Spec 022 FR-039: beta.8's values have no ingestPow block, so the
+          # receiver renders the OD-5 defaults, with proof-of-work off.
+          python3 - <<'PY'
+          import yaml
+          docs = [d for d in yaml.safe_load_all(open('/tmp/rendered-reuse-values-receiver.yaml')) if d]
+          env = {e['name']: e['value'] for d in docs
+                 if d['kind'] == 'Deployment' and d['metadata']['name'] == 'gameplane-telemetry-receiver'
+                 for e in d['spec']['template']['spec']['containers'][0]['env'] if 'value' in e}
+          got = [env[k] for k in ('INGEST_POW', 'INGEST_POW_TARGET_PER_MIN', 'INGEST_POW_MIN_BITS', 'INGEST_POW_MAX_BITS')]
+          assert got == ['false', '60', '0', '22'], f"--reuse-values changed the INGEST_POW defaults: {got}"
+          PY
       - name: crd-manifests in sync with crds
         # The CRD-apply hook serves CRDs from crd-manifests/ (crds/ isn't
         # readable by Helm .Files). make manifests keeps both in sync; guard
@@ -1137,7 +1307,7 @@ jobs:
         # (operator does zero logins and is wait-dominated, so it runs
         # wide; the api buckets stay within the login limiter's budget).
         # The arm64 job below uses the same steps and per-bucket settings.
-        bucket: [operator, api-auth, api-roles, api-rbac, api-agent, api-mods]
+        bucket: [operator, api-auth, api-roles, api-rbac, api-agent, api-mods, telemetry]
         arch: [amd64]
         include:
           - bucket: operator
@@ -1165,6 +1335,10 @@ jobs:
             parallel: 2
             test_timeout: 15m
             job_timeout: 60 # Boots a kind cluster, installs the chart, runs the bucket's suite.
+          - bucket: telemetry
+            parallel: 1
+            test_timeout: 45m # the lifecycle test waits on 1m report intervals for every subtest
+            job_timeout: 75 # Boots a kind cluster, installs the chart, runs the bucket's suite.
     env:
       CLUSTER: gameplane-e2e
       CTX: kind-gameplane-e2e
@@ -1228,7 +1402,7 @@ jobs:
         # (operator does zero logins and is wait-dominated, so it runs
         # wide; the api buckets stay within the login limiter's budget).
         # Mirrors e2e-go's steps and per-bucket settings.
-        bucket: [operator, api-auth, api-roles, api-rbac, api-agent, api-mods]
+        bucket: [operator, api-auth, api-roles, api-rbac, api-agent, api-mods, telemetry]
         arch: [arm64]
         include:
           - bucket: operator
@@ -1256,6 +1430,10 @@ jobs:
             parallel: 2
             test_timeout: 15m
             job_timeout: 60 # Boots a kind cluster, installs the chart, runs the bucket's suite.
+          - bucket: telemetry
+            parallel: 1
+            test_timeout: 45m # the lifecycle test waits on 1m report intervals for every subtest
+            job_timeout: 75 # Boots a kind cluster, installs the chart, runs the bucket's suite.
     env:
       CLUSTER: gameplane-e2e
       CTX: kind-gameplane-e2e
@@ -1805,8 +1983,8 @@ jobs:
               'go-e2e-unit': (n) => n === 'go (test/e2e)',
               'api-postgres': (n) => n === 'api (postgres)',
               'e2e-buckets': (n) => n === 'e2e bucket coverage',
-              'e2e-go': (n) => /^e2e (operator|api-auth|api-roles|api-rbac|api-agent|api-mods) \//.test(n) && n.includes('/ amd64 '),
-              'e2e-go-arm64': (n) => /^e2e (operator|api-auth|api-roles|api-rbac|api-agent|api-mods) \//.test(n) && n.includes('/ arm64 '),
+              'e2e-go': (n) => /^e2e (operator|api-auth|api-roles|api-rbac|api-agent|api-mods|telemetry) \//.test(n) && n.includes('/ amd64 '),
+              'e2e-go-arm64': (n) => /^e2e (operator|api-auth|api-roles|api-rbac|api-agent|api-mods|telemetry) \//.test(n) && n.includes('/ arm64 '),
               'e2e-multicluster': (n) => n.startsWith('e2e multicluster /') && n.includes('/ amd64 '),
               'e2e-multicluster-arm64': (n) => n.startsWith('e2e multicluster /') && n.includes('/ arm64 '),
               'e2e-upgrade': (n) => n.startsWith('e2e upgrade /') && n.includes('/ amd64 '),
@@ -1953,7 +2131,7 @@ jobs:
             const bucketSet = new Set();
             for (const j of apiJobs) {
               const n = j.name || '';
-              const m = n.match(/^e2e (operator|api-auth|api-roles|api-rbac|api-agent|api-mods) \//);
+              const m = n.match(/^e2e (operator|api-auth|api-roles|api-rbac|api-agent|api-mods|telemetry) \//);
               if (m) bucketSet.add(m[1]);
               if (/^e2e multicluster \//.test(n)) bucketSet.add('multicluster');
               if (/^e2e upgrade \//.test(n)) bucketSet.add('upgrade');
diff --git a/.github/workflows/publish-edge.yaml b/.github/workflows/publish-edge.yaml
index 7d3901b3e..dccb430ce 100644
--- a/.github/workflows/publish-edge.yaml
+++ b/.github/workflows/publish-edge.yaml
@@ -28,6 +28,7 @@ on:
       - "netguard/**"
       - "gameaction/**"
       - "gameproto/**"
+      - "telemetryschema/**"
       - "svcutil/**"
       - "gp-module/**"
       - "audit-syslog-bridge/**"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index feb6e9757..6883164b8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,105 @@ reaches `1.0.0`. Pre-1.0 minor versions may contain breaking changes.
 
 ## [Unreleased]
 
+### Upgrade Notes
+
+- **Telemetry is on by default for new installs, after a first-login
+  notice:** a new install with a telemetry destination in effect now shares
+  basic and extended data by default; the stock destination is the project's
+  receiver at telemetry.gameplane.net. The first admin to sign in sees a
+  notice that lists every field of both tiers and names the destination;
+  nothing is sent before then. Basic is `version`, `servers` and
+  `templates`. Extended adds a random install ID, the Kubernetes minor
+  version, a distribution category, node architectures and a node-count
+  band, server counts per official module plus one `custom` count, feature
+  flags (wake-on-connect, tunnel types, packet capture, backups, single
+  sign-on, audit forwarding), a cluster-count band, the database kind, the
+  UI language, the install's public signing key and the send time. Each
+  tier has its own toggle in **Admin Settings → Telemetry**, which also
+  shows the destination, a preview of the next report and an install-ID
+  reset. The data-handling statement is at
+  <https://gameplane.net/telemetry/>. See
+  [`docs/install.md`](docs/install.md#telemetry).
+- **Installs whose basic toggle was already on start sending to the
+  project's default receiver:** an install that saved **Send anonymous usage
+  metrics** while no destination was configured (so it had no effect) starts
+  sending basic reports to the project's default receiver
+  (telemetry.gameplane.net) after upgrade.
+  Extended stays off until an admin turns it on, and installs that never
+  saved a choice stay off. Installs already using a custom
+  `api.telemetry.endpoint` or the bundled receiver keep sending only there.
+  Set `api.telemetry.enabled=false` before upgrading to prevent any
+  sending.
+- **Empty `api.telemetry.endpoint` now means the project default:**
+  It now means the project's default receiver
+  (https://telemetry.gameplane.net/ingest), so the admin toggles have an
+  effect on a stock install. Set `api.telemetry.enabled=false` for a hard off (air-gapped
+  clusters, privacy-sensitive installs); it overrides the endpoint, the
+  bundled receiver and the admin toggles, and hides the notice.
+- **The receiver's `/metrics` moved to the dashboard port and needs the
+  dashboard token:** the receiver's Prometheus endpoint is no longer on
+  `:8080`; it is on `:8081` and accepts only
+  `Authorization: Bearer <DASHBOARD_TOKEN>`. Without
+  `api.telemetry.receiver.dashboard.tokenSecretRef.name` there is no
+  dashboard listener and no metrics endpoint, and the chart renders no
+  `ServiceMonitor` for the receiver. Update your Prometheus scrape config
+  or set the token Secret. See
+  [`docs/telemetry-provider.md`](docs/telemetry-provider.md).
+- **The bundled receiver now stores data:** with
+  `api.telemetry.receiver.persistence.enabled` (default `true`, 1Gi) it
+  keeps daily aggregates for 24 months and activity records for 90 days in
+  SQLite on a PVC, and runs a single replica with a `Recreate` strategy.
+  `helm upgrade --reuse-values` from 0.3.0 needs no new values; with no
+  `persistence` block the receiver keeps using an `emptyDir`, as before.
+- **The receiver's `DASHBOARD_TOKEN` must be at least 32 characters:** a
+  receiver with `DASHBOARD_TOKEN` set to a shorter value now exits at
+  startup (`DASHBOARD_TOKEN must be at least 32 characters`). Replace the
+  Secret behind `api.telemetry.receiver.dashboard.tokenSecretRef` with a
+  value generated from 32 random bytes, for example
+  `openssl rand -base64 32`, before upgrading. Replacing the token
+  invalidates browser sessions and loses no data. Receivers with no token
+  (no dashboard) are unaffected. See
+  [`docs/telemetry-provider.md`](docs/telemetry-provider.md#secrets).
+
+### Added
+
+- **Extended telemetry tier:** a second, separately consented tier with a
+  random install ID, environment, game-usage and feature-adoption
+  categories. Every value comes from a fixed set, a band or a number; no
+  names, namespaces, hostnames, addresses, player counts or custom module
+  names. Reports are signed (Ed25519, key derived from a per-install secret
+  and the install ID); a receiver binds each ID to its first key and refuses
+  forged, stale and replayed reports. See
+  [`docs/security.md`](docs/security.md#telemetry).
+- **Telemetry receiver dashboard and public summary:** a private,
+  token-protected dashboard (`DASHBOARD_LISTEN_ADDR`, default `:8081`) with
+  7-, 30-, 90- and 365-day views, durable daily aggregates
+  (`RETENTION_DAYS`, default `730`, minimum `365`), per-install activity
+  records that expire (`ACTIVITY_EXPIRY_DAYS`, default `90`, minimum `31`),
+  a per-source daily ingest limit (`INGEST_SOURCE_DAILY_LIMIT`, default
+  `20`), `TRUSTED_PROXY_CIDRS`, an `ID_PEPPER` secret and an optional public
+  `GET /v1/summary` (`PUBLIC_SUMMARY=true`). Helm values:
+  `api.telemetry.enabled`, `api.telemetry.interval`,
+  `api.telemetry.receiver.{persistence,dashboard,publicSummary,pepperSecretRef,retentionDays,activityExpiryDays,ingestSourceDailyLimit,trustedProxyCIDRs}`.
+- **Proof-of-work on telemetry ingestion (off by default):** a receiver with
+  `INGEST_POW=true` serves `GET /v1/challenge` and requires a solved
+  challenge on `/ingest` (`428 pow_required` / `pow_invalid`, `503 pow_busy`
+  when its used-challenge set is full). The difficulty is zero up to
+  `INGEST_POW_TARGET_PER_MIN` challenges a minute (default `60`), then rises
+  with the rate between `INGEST_POW_MIN_BITS` (default `0`) and
+  `INGEST_POW_MAX_BITS` (default `22`, at most `26`), and decays one bit
+  every five minutes. New metrics: `gameplane_telemetry_pow_challenges_total`
+  and `gameplane_telemetry_pow_bits`; `gameplane_telemetry_refused_total`
+  gains the reasons `pow_required`, `pow_invalid` and `pow_busy`, and
+  `gameplane_telemetry_rate_limited_total` the route `challenge`. Helm values:
+  `api.telemetry.receiver.ingestPow.{enabled,targetPerMinute,minBits,maxBits}`.
+  The API reporter solves a challenge when its destination offers one and
+  sends without it otherwise. See
+  [`docs/telemetry-provider.md`](docs/telemetry-provider.md#proof-of-work-on-ingest).
+- **Provider runbook:** [`docs/telemetry-provider.md`](docs/telemetry-provider.md)
+  covers deploying the receiver, TLS, keeping `:8081` private, secrets and
+  rotation, retention, scraping `/metrics` and backing up `telemetry.db`.
+
 ## [0.3.0] — 2026-10-05
 
 The first Gameplane release without a pre-release suffix, a pre-v1 release. It
diff --git a/CLAUDE.md b/CLAUDE.md
index 7f580dd9d..417c83565 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -35,6 +35,7 @@ Run every session.
 netguard/            SSRF dial-guard: IsAllowed (operator module sources, API sinks, agent loopback RCON); IsPublic (agent mod downloads, API Steam resolver)
 gameaction/          console-injection guard + command renderer (api, agent)
 gameproto/           Minecraft/Terraria handshake parser (sentinel)
+telemetryschema/     shared telemetry report contract (api, telemetry-receiver)
 gp-module/           module authoring CLI: init/validate/preview/package
 operator/            controller-runtime operator
   api/v1alpha1/      CRD types (edit here, then `make generate manifests`); zz_generated.deepcopy.go GENERATED
@@ -59,7 +60,7 @@ test/e2e/            Kind E2E suite (//go:build e2e)
 docs/                architecture, security, modules
 design.pen           canonical Pencil dashboard design
 cosign.pub           image + module signature key
-go.work              links all 15 Go modules (incl. test/e2e)
+go.work              links all 16 Go modules (incl. test/e2e)
 Makefile             canonical task runner
 ```
 
@@ -68,13 +69,13 @@ After cloning: `git submodule update --init` (`modules/` required for `make dev-
 ## Commands (always via Makefile)
 
 - **Dev:** `make dev-up` (Kind + OCI registry :5001 + Helm), `make web-dev` (Vite, proxies in-cluster API), `make dev-load` (load built images; run `make images` first), `make dev-install` (Helm upgrade), `make dev-down`.
-- **Build:** `make build` (all Go + web), `make build-go` (14 modules in GO_MODULES, all but test/e2e), `make build-web` (`npm ci && npm run build`), `make images`.
+- **Build:** `make build` (all Go + web), `make build-go` (15 modules in GO_MODULES, all but test/e2e), `make build-web` (`npm ci && npm run build`), `make images`.
 - **Codegen:** `make generate` (deepcopy), `make manifests` (CRD/RBAC YAML, synced to `charts/gameplane/crds/`), `make modules-push`, `make tidy`.
 - **Tests (CI only — never run locally, see Rule 8):** `make test`, `make test-integration` (envtest operator+api), `make test-e2e` (~10–20 min), `make test-e2e-bucket BUCKET=(operator|api-auth|api-roles|api-rbac|api-agent|api-mods|ratelimit|bot-fast|bot-heavy|multicluster|upgrade)`.
 - **E2E conventions:** register new tests in `test/e2e/buckets.sh`; `t.Parallel()` + unique names; guard shared resources (`ociPushMu` for module pushes, `ensureResticRepo(t)` for shared backup repos). Rate limits per cluster: IP burst 10 (5/min), user burst 6 (3/min) — cap an API bucket at ~7 admin logins.
 - **Lint:** `make lint` = gofmt, go vet, golangci-lint, ESLint, `check-specs`, `check-doc-versions`, `check-links`.
 
-**Coverage minimums:** netguard 91, gameaction 91, gameproto 90, gp-module 80, operator 72, api 80, agent 90, svcutil 90; audit-syslog-bridge, telemetry-receiver, sentinel, capture-sidecar, mcp-server, tunnel 70; web 92 lines / 76 functions / 82 branches / 92 statements.
+**Coverage minimums:** netguard 91, gameaction 91, gameproto 90, telemetryschema 90, gp-module 80, operator 72, api 80, agent 90, svcutil 90; audit-syslog-bridge, telemetry-receiver, sentinel, capture-sidecar, mcp-server, tunnel 70; web 92 lines / 76 functions / 82 branches / 92 statements.
 
 ## Core rules
 
@@ -114,6 +115,7 @@ After cloning: `git submodule update --init` (`modules/` required for `make dev-
 | netguard | Go | dial-time SSRF prevention: `IsAllowed` (operator/API module sources and sinks, agent loopback RCON), `IsPublic` (agent mod downloads, API Steam resolver) |
 | gameaction | Go | validates console input against schemas; escapes injection |
 | gameproto | Go | Minecraft/Terraria wire parser for connection filtering |
+| telemetryschema | Go | stdlib-only shared telemetry report contract: types, strict decode, official module catalog, report signing (api, telemetry-receiver) |
 | gp-module | Go | module CLI: scaffold, offline validate, dry-run preview, OCI package |
 | svcutil | Go | stdlib-only env + graceful shutdown (`RunHTTP`) |
 | operator | Go, controller-runtime | authoritative reconciler for 9 CRDs (`GameServer`, `GameTemplate`, …) |
diff --git a/Makefile b/Makefile
index 35ab20984..2fb3e2882 100644
--- a/Makefile
+++ b/Makefile
@@ -40,7 +40,7 @@ KUBECONFIG_ENV :=
 KUBE_CONTEXT   := kind-$(KIND_CLUSTER)
 endif
 
-GO_MODULES     := netguard gameaction gameproto gp-module operator api agent audit-syslog-bridge telemetry-receiver sentinel mcp-server capture-sidecar svcutil tunnel
+GO_MODULES     := netguard gameaction gameproto telemetryschema gp-module operator api agent audit-syslog-bridge telemetry-receiver sentinel mcp-server capture-sidecar svcutil tunnel
 GO_INTEGRATION_MODULES := operator api
 
 # test/e2e is a separate module (its own go.mod, excluded from the coverage
@@ -187,6 +187,7 @@ e2e-images: ## Build operator/api/agent/fakeoidc images tagged for e2e
 	docker build -t gameplane-test/operator:$(KIND_E2E_TAG) -f operator/Dockerfile .
 	docker build -t gameplane-test/api:$(KIND_E2E_TAG)      -f api/Dockerfile      .
 	docker build -t gameplane-test/agent:$(KIND_E2E_TAG)    -f agent/Dockerfile    .
+	docker build -t gameplane-test/telemetry-receiver:$(KIND_E2E_TAG) -f telemetry-receiver/Dockerfile .
 	docker build -t gameplane-test/fakeoidc:$(KIND_E2E_TAG) -f test/e2e/Dockerfile.fakeoidc .
 
 .PHONY: test-e2e
@@ -194,22 +195,22 @@ test-e2e: ## Run E2E tests (CLUSTER=kind spins an ephemeral cluster; CLUSTER=rem
 ifeq ($(CLUSTER),remote)
 	cd test/e2e && GAMEPLANE_E2E_REUSE_CLUSTER=1 \
 		GAMEPLANE_E2E_CONTEXT=$(REMOTE_CONTEXT) KUBECONFIG=$(REMOTE_KUBECONFIG) \
-		go test -tags=e2e -timeout 35m -v ./...
+		go test -tags=e2e -timeout 50m -v ./...
 else
 	$(MAKE) e2e-images
 	cd test/e2e && GAMEPLANE_E2E_CLUSTER=$(KIND_E2E_CLUSTER) GAMEPLANE_E2E_TAG=$(KIND_E2E_TAG) \
-		go test -tags=e2e -timeout 35m -v ./...
+		go test -tags=e2e -timeout 50m -v ./...
 endif
 
 .PHONY: test-e2e-keep
 test-e2e-keep: ## Re-run E2E tests against an already-up cluster (skip create/destroy)
 	cd test/e2e && GAMEPLANE_E2E_REUSE_CLUSTER=1 GAMEPLANE_E2E_CLUSTER=$(KIND_E2E_CLUSTER) \
-		go test -tags=e2e -timeout 35m -v ./...
+		go test -tags=e2e -timeout 50m -v ./...
 
 .PHONY: test-e2e-bucket
 test-e2e-bucket: ## Run one CI e2e bucket against an already-up cluster (BUCKET=operator|api-auth|api-roles|api-rbac|api-agent|api-mods|ratelimit|bot-fast|bot-heavy|multicluster|upgrade). BUCKET=multicluster additionally needs a second kind cluster up and GAMEPLANE_E2E_CLUSTER_B set to its name (default gameplane-e2e-b).
 	cd test/e2e && GAMEPLANE_E2E_REUSE_CLUSTER=1 GAMEPLANE_E2E_CLUSTER=$(KIND_E2E_CLUSTER) \
-		go test -tags=e2e -timeout 35m -v -run "$$(./buckets.sh regex $(BUCKET))" ./...
+		go test -tags=e2e -timeout 50m -v -run "$$(./buckets.sh regex $(BUCKET))" ./...
 
 .PHONY: e2e-up
 e2e-up: e2e-images ## Bring up the e2e kind cluster + install chart (no tests)
@@ -254,6 +255,10 @@ test-doc-versions: ## Run the fixture tests for hack/check-doc-versions.sh
 check-links: ## Verify internal documentation links and anchors resolve
 	hack/check-links.sh
 
+.PHONY: check-telemetry-catalog
+check-telemetry-catalog: ## Verify telemetryschema/catalog.txt matches the chart's official module list
+	hack/check-telemetry-catalog.sh
+
 .PHONY: check-dev-load-images
 check-dev-load-images: ## Verify `dev-load` loads every image `images` builds
 	hack/check-dev-load-images.sh
@@ -263,7 +268,7 @@ test-up-registry: ## Run the fixture tests for deploy/kind/up.sh's registry/cont
 	hack/test-up-registry.sh
 
 .PHONY: lint
-lint: check-doc-versions check-links check-specs check-dev-load-images test-up-registry lint-go lint-web ## Run all linters
+lint: check-doc-versions check-links check-specs check-telemetry-catalog check-dev-load-images test-up-registry lint-go lint-web ## Run all linters
 
 .PHONY: lint-go
 lint-go: ## Run golangci-lint across all modules
@@ -413,12 +418,15 @@ dev-install: ## Install Gameplane Helm chart into the selected cluster
 	# not just this target. On a first install the hook also fires on
 	# pre-install, but only over leftover CRDs whose bundle stamp is stale or
 	# missing (an earlier, uninstalled release's); fresh CRDs come from crds/.
+	# Deploy the bundled telemetry receiver and point the API at it: never let
+	# CI or dev installs reach the project provider (spec 022 R17).
 	$(KUBECONFIG_ENV) helm upgrade --install $(CHART_RELEASE) $(CHART_DIR) \
 		--kube-context $(KUBE_CONTEXT) \
 		--namespace $(NAMESPACE) --create-namespace \
 		--set image.tag=$(TAG) \
 		--set image.registry=$(REGISTRY) \
 		--set operator.addressManager=$(ADDRESS_MANAGER) \
+		--set api.telemetry.receiver.enabled=true \
 		--set defaultModuleSource.type=oci \
 		--set defaultModuleSource.oci.url=$(MODULE_SOURCE_URL) \
 		--set defaultModuleSource.oci.insecure=$(MODULE_SOURCE_INSECURE)
diff --git a/README.md b/README.md
index 9c2e0aeb5..11d53ffa3 100644
--- a/README.md
+++ b/README.md
@@ -154,6 +154,7 @@ its own operator and storage; users and authorization stay central. See
 | `gameaction/` | Go | Security guard and command renderer for custom module admin actions. |
 | `netguard/` | Go | SSRF protection layer for outgoing mod downloads and OCI module fetches. |
 | `svcutil/` | Go | Shared HTTP server lifecycle and environment configuration utilities. |
+| `telemetryschema/` | Go | Shared telemetry report contract (types, strict decoder, official module catalog, report signing) used by the API and `telemetry-receiver`. |
 | `audit-syslog-bridge/` | Go | HTTP-JSON to syslog relay [optional] for audit logging infrastructure. |
 | `telemetry-receiver/` | Go | Collector [optional] for anonymous daily usage reports. |
 | `mcp-server/` | Go | Strictly read-only Model Context Protocol server [optional] for AI tools. |
@@ -190,6 +191,7 @@ Gameplane extends Kubernetes using custom resources under `gameplane.local/v1alp
 ├── gameaction/           # Console injection guard & action command renderer
 ├── netguard/             # SSRF dial-guard library
 ├── svcutil/              # Shared HTTP server & env utilities
+├── telemetryschema/      # Shared telemetry report contract (types, decoder, signing)
 ├── audit-syslog-bridge/  # Optional syslog relay for audit logs
 ├── telemetry-receiver/   # Optional anonymous usage telemetry receiver
 ├── mcp-server/           # Optional read-only Model Context Protocol server
diff --git a/api/Dockerfile b/api/Dockerfile
index d0358d958..1d2e26994 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -1,12 +1,13 @@
 FROM --platform=$BUILDPLATFORM golang:1.27-alpine AS build
 WORKDIR /src
 
-# netguard, gameaction, and gp-module are in-repo modules the API depends on via local
-# replaces (../netguard, ../gameaction, ../gp-module); copy them first so `go mod
-# download` and the build resolve them.
+# netguard, gameaction, gp-module, and telemetryschema are in-repo modules the API depends
+# on via local replaces (../netguard, ../gameaction, ../gp-module, ../telemetryschema);
+# copy them first so `go mod download` and the build resolve them.
 COPY netguard/ ./netguard/
 COPY gameaction/ ./gameaction/
 COPY gp-module/ ./gp-module/
+COPY telemetryschema/ ./telemetryschema/
 COPY api/go.mod api/go.sum* ./api/
 WORKDIR /src/api
 RUN go mod download
diff --git a/api/cmd/main.go b/api/cmd/main.go
index d513a86b8..5626a7382 100644
--- a/api/cmd/main.go
+++ b/api/cmd/main.go
@@ -154,6 +154,20 @@ func main() {
 	}
 	cfg.trustedProxies = validProxies
 
+	// Resolve where telemetry goes once, now: a bad default endpoint or an
+	// interval below one minute is a configuration error, not something to
+	// discover at the first report.
+	if cfg.telemetryInterval < time.Minute {
+		logger.Error("invalid --telemetry-interval (minimum 1m)", "value", cfg.telemetryInterval.String())
+		os.Exit(1)
+	}
+	telemetryDest, err := telemetry.ResolveDestination(cfg.telemetryDisabled, cfg.telemetryEndpoint, cfg.telemetryBundled)
+	if err != nil {
+		logger.Error("resolve telemetry destination", "err", err)
+		os.Exit(1)
+	}
+	logger.Info("telemetry destination", "kind", telemetryDest.Kind, "host", telemetryDest.Host)
+
 	store, err := db.Open(ctx, cfg.dbDriver, cfg.dbDSN)
 	if err != nil {
 		logger.Error("open db", "err", err)
@@ -323,6 +337,21 @@ func main() {
 	// Public share link endpoints (unauthenticated, token-guessable)
 	handlers.MountPublicShares(r, reg, store, auth.ShareLimiter)
 
+	// What the telemetry reporter and the admin preview both collect from.
+	telemetryDeps := telemetry.Deps{
+		Kube:    k8s,
+		Store:   store,
+		Version: Version,
+		Flags: telemetry.Flags{
+			CaptureEnabled:       cfg.captureFeatureEnabled,
+			OIDCConfigured:       cfg.oidcIssuer != "",
+			AuditWebhook:         cfg.auditWebhookURL != "",
+			AuditS3:              cfg.auditS3Endpoint != "" && cfg.auditS3Bucket != "",
+			DBDriver:             cfg.dbDriver,
+			OfficialModuleSource: cfg.officialModuleSource,
+		},
+	}
+
 	// Protected API
 	r.Group(func(p chi.Router) {
 		p.Use(sessions.Authenticate)
@@ -342,7 +371,9 @@ func main() {
 		handlers.MountUsers(p, store, sessions, reg)
 		handlers.MountRoles(p, store)
 		handlers.MountAudit(p, auditor)
-		handlers.MountConfig(p, store, auditor, oidcAuth != nil, cfg.gameDataStorageClass, helmPolicy)
+		telemetrySettings := handlers.TelemetrySettings{Dest: telemetryDest, Interval: cfg.telemetryInterval, Deps: telemetryDeps}
+		handlers.MountConfigWithTelemetry(p, store, auditor, oidcAuth != nil, cfg.gameDataStorageClass, helmPolicy, telemetrySettings)
+		handlers.MountTelemetry(p, store, telemetrySettings)
 		handlers.MountNotifications(p, notifier, k8s, cfg.namespace)
 		handlers.MountAuthProviderSecrets(p, k8s, cfg.namespace)
 		handlers.MountCluster(p, reg, store, Version, cfg.clusterOps, cfg.updateChannel)
@@ -387,9 +418,16 @@ func main() {
 		ws.Mount(p, reg, cfg.agentCABundle, cfg.agentClientCert, cfg.agentClientKey, ws.AgentGatewayOptions{Namespace: cfg.namespace})
 	})
 
-	// Opt-in, off-by-default anonymous usage telemetry. No-op unless an
-	// endpoint is configured AND the admin enabled the sendMetrics toggle.
-	go telemetry.New(store, k8s, cfg.telemetryEndpoint, cfg.telemetryAuth, Version, 24*time.Hour).Run(ctx)
+	// Usage telemetry. Run returns at once when the resolved destination is
+	// disabled or none. Otherwise it sends nothing while the admin's basic
+	// toggle is off or, on a fresh install, until an admin was shown the
+	// notice (spec 022 FR-004); each report slot is claimed in the database.
+	go telemetry.New(telemetry.Config{
+		Dest:     telemetryDest,
+		Interval: cfg.telemetryInterval,
+		Auth:     cfg.telemetryAuth,
+		Deps:     telemetryDeps,
+	}).Run(ctx)
 
 	// Opt-in audit-event retention. Off by default (0 days = keep forever);
 	// when set, a daily sweep prunes events past the window so the table
@@ -483,6 +521,10 @@ type config struct {
 
 	telemetryEndpoint      string
 	telemetryAuth          string
+	telemetryDisabled      bool
+	telemetryBundled       bool
+	telemetryInterval      time.Duration
+	officialModuleSource   string
 	clusterOps             bool
 	clusterExternalAddress string
 	updateChannel          string
@@ -538,7 +580,16 @@ func (c *config) bindFlags(fs *flag.FlagSet) {
 		"Comma-separated IdP group(s) seeding the operator role")
 	fs.StringVar(&c.oidcRoleMappingViewer, "oidc-role-mapping-viewer", envOr("GAMEPLANE_OIDC_ROLE_MAPPING_VIEWER", ""),
 		"Comma-separated IdP group(s) seeding the viewer role")
-	fs.StringVar(&c.telemetryEndpoint, "telemetry-endpoint", envOr("GAMEPLANE_TELEMETRY_ENDPOINT", ""), "URL to POST anonymous usage metrics to (empty = telemetry off)")
+	fs.StringVar(&c.telemetryEndpoint, "telemetry-endpoint", envOr("GAMEPLANE_TELEMETRY_ENDPOINT", ""), "URL to POST anonymous usage metrics to (empty = the project default)")
+	fs.BoolVar(&c.telemetryDisabled, "telemetry-disabled", envOr("GAMEPLANE_TELEMETRY_DISABLED", "") == "true",
+		"hard-disable telemetry: nothing is ever sent, whatever the admin toggles say")
+	fs.DurationVar(&c.telemetryInterval, "telemetry-interval", envOrDuration("GAMEPLANE_TELEMETRY_INTERVAL", 24*time.Hour),
+		"spacing between telemetry reports (minimum 1m; shorter values are for testing only)")
+	fs.StringVar(&c.officialModuleSource, "official-module-source", envOr("GAMEPLANE_OFFICIAL_MODULE_SOURCE", ""),
+		"name of the official ModuleSource, so telemetry can tell official game modules from custom ones (empty = every module counts as custom)")
+	// Set only by the chart when it auto-wires the bundled in-cluster
+	// receiver, so it is read from the environment and has no flag.
+	c.telemetryBundled = envOr("GAMEPLANE_TELEMETRY_BUNDLED", "") == "true"
 	// Like the audit webhook auth, the telemetry ingest token is a
 	// credential and only comes from the environment (a mounted Secret),
 	// never a flag.
@@ -634,6 +685,17 @@ func envOrInt(key string, def int) int {
 	return def
 }
 
+// envOrDuration reads a duration env var ("24h", "30m"), falling back to def
+// when unset or unparseable, like envOrInt.
+func envOrDuration(key string, def time.Duration) time.Duration {
+	if v, ok := os.LookupEnv(key); ok {
+		if d, err := time.ParseDuration(v); err == nil {
+			return d
+		}
+	}
+	return def
+}
+
 // envOrInt64 reads a 64-bit integer env var, falling back to def when unset or
 // unparseable (a malformed value shouldn't crash startup — it degrades to
 // the safe default).
diff --git a/api/go.mod b/api/go.mod
index 6d40d14fc..6830454d4 100644
--- a/api/go.mod
+++ b/api/go.mod
@@ -22,6 +22,13 @@ require github.com/GameplanePanel/gameplane/gp-module v0.0.0
 // `go build ./api/...`.
 replace github.com/GameplanePanel/gameplane/gp-module => ../gp-module
 
+require github.com/GameplanePanel/gameplane/telemetryschema v0.0.0
+
+// telemetryschema is an in-repo module (no published version); resolve it
+// locally both inside the go.work workspace and for standalone
+// `go build ./api/...`.
+replace github.com/GameplanePanel/gameplane/telemetryschema => ../telemetryschema
+
 require (
 	github.com/coder/websocket v1.8.15
 	github.com/coreos/go-oidc/v3 v3.21.0
diff --git a/api/internal/db/db.go b/api/internal/db/db.go
index c92e61d65..999a7efe6 100644
--- a/api/internal/db/db.go
+++ b/api/internal/db/db.go
@@ -95,7 +95,9 @@ func (s *Store) LockUserManagement() (unlock func()) {
 // written per dialect), then the shared set (migrations/common/, 013
 // onward, portable SQL that both drivers run unchanged). See
 // migrations/README.md. Each file runs in a single transaction; failures
-// are fatal.
+// are fatal. Afterwards it seeds the telemetry_state row once (see
+// seedTelemetryState), which is why it first notes whether the database was
+// fresh.
 func (s *Store) Migrate(ctx context.Context) error {
 	if _, err := s.DB.ExecContext(ctx,
 		`CREATE TABLE IF NOT EXISTS schema_migrations (version TEXT PRIMARY KEY, applied_at TEXT NOT NULL)`,
@@ -103,6 +105,16 @@ func (s *Store) Migrate(ctx context.Context) error {
 		return fmt.Errorf("create schema_migrations: %w", err)
 	}
 
+	// A database whose schema_migrations is still empty is a fresh install;
+	// the telemetry consent seeding below depends on telling it apart from an
+	// upgrade. Counting here, before anything is applied, keeps the answer
+	// right whichever entrypoint (bootstrap-admin or serve) migrates first.
+	var recorded int
+	if err := s.DB.QueryRowContext(ctx, `SELECT COUNT(*) FROM schema_migrations`).Scan(&recorded); err != nil {
+		return fmt.Errorf("count schema_migrations: %w", err)
+	}
+	fresh := recorded == 0
+
 	files, err := migrationFiles(migrations, s.Driver)
 	if err != nil {
 		return err
@@ -124,7 +136,7 @@ func (s *Store) Migrate(ctx context.Context) error {
 			return fmt.Errorf("migration %s: %w", f.name, err)
 		}
 	}
-	return nil
+	return s.seedTelemetryState(ctx, fresh)
 }
 
 // Migration directories inside the embedded FS. legacyMigrationDirs maps a
diff --git a/api/internal/db/migrations/common/015_telemetry_state.sql b/api/internal/db/migrations/common/015_telemetry_state.sql
new file mode 100644
index 000000000..0f8328e36
--- /dev/null
+++ b/api/internal/db/migrations/common/015_telemetry_state.sql
@@ -0,0 +1,30 @@
+-- Telemetry install state (spec 022). One singleton row holds the consent
+-- source, the extended-tier install ID, the report schedule and the signing
+-- secret. Timestamps are RFC 3339 UTC text bound from Go, so there is no
+-- database-side clock and the file runs unchanged on SQLite and PostgreSQL.
+-- The row is seeded by Store.Migrate in Go, because seeding has to read the
+-- existing JSON value of config key telemetry, which portable SQL cannot do.
+CREATE TABLE telemetry_state (
+    id                       TEXT PRIMARY KEY,
+    consent_source           TEXT NOT NULL,
+    install_id               TEXT,
+    notice_shown_at          TEXT,
+    next_due_at              TEXT,
+    last_attempt_at          TEXT,
+    last_success_at          TEXT,
+    last_outcome             TEXT NOT NULL DEFAULT 'never',
+    consecutive_failures     INTEGER NOT NULL DEFAULT 0,
+    ext_unsupported_until    TEXT,
+    ext_unsupported_endpoint TEXT,
+    signing_secret           TEXT,
+    last_id_rotation_at      TEXT
+);
+
+-- One row per admin who dismissed the consent notice. user_id is users.id.
+-- Rows are deleted in Go when the user is removed, because the shipped
+-- SQLite DSN runs with foreign keys off.
+CREATE TABLE telemetry_notice_acks (
+    user_id  BIGINT PRIMARY KEY,
+    acked_at TEXT NOT NULL,
+    action   TEXT NOT NULL
+);
diff --git a/api/internal/db/telemetry.go b/api/internal/db/telemetry.go
new file mode 100644
index 000000000..675ba8f25
--- /dev/null
+++ b/api/internal/db/telemetry.go
@@ -0,0 +1,322 @@
+package db
+
+import (
+	"context"
+	"crypto/rand"
+	"database/sql"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+)
+
+// telemetrySingletonID is the primary key of the one telemetry_state row.
+const telemetrySingletonID = "singleton"
+
+// Consent sources recorded in telemetry_state.consent_source.
+const (
+	// TelemetryConsentDefault marks a fresh install seeded with the project
+	// default (basic and extended on, reports gated on the notice).
+	TelemetryConsentDefault = "default"
+	// TelemetryConsentLegacy marks an install that existed before the
+	// extended tier; its saved choice is kept and extended stays off.
+	TelemetryConsentLegacy = "legacy"
+	// TelemetryConsentAdmin marks an install whose admin made an explicit
+	// choice.
+	TelemetryConsentAdmin = "admin"
+)
+
+// TelemetryState is the persisted telemetry machine state. Timestamp fields
+// hold RFC 3339 UTC text, and the empty string stands for SQL NULL. The
+// signing secret is deliberately not a field: it is reachable only through
+// EnsureSigningSecret, so no handler can serialise it by accident.
+type TelemetryState struct {
+	ConsentSource          string
+	InstallID              string
+	NoticeShownAt          string
+	NextDueAt              string
+	LastAttemptAt          string
+	LastSuccessAt          string
+	LastOutcome            string
+	ConsecutiveFailures    int
+	ExtUnsupportedUntil    string
+	ExtUnsupportedEndpoint string
+	LastIDRotationAt       string
+}
+
+// seedTelemetryState inserts the singleton telemetry_state row once and, only
+// when this call inserted it, applies the consent seeding. fresh reports that
+// schema_migrations held no rows when Migrate started. Running it again, for
+// example bootstrap-admin followed by serve, finds the row and changes
+// nothing, so a fresh install never flips to legacy.
+func (s *Store) seedTelemetryState(ctx context.Context, fresh bool) error {
+	source := TelemetryConsentLegacy
+	if fresh {
+		source = TelemetryConsentDefault
+	}
+	tx, err := s.DB.BeginTx(ctx, nil)
+	if err != nil {
+		return fmt.Errorf("seed telemetry state: begin: %w", err)
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	res, err := tx.ExecContext(ctx,
+		`INSERT INTO telemetry_state(id, consent_source) VALUES (?, ?) ON CONFLICT (id) DO NOTHING`,
+		telemetrySingletonID, source)
+	if err != nil {
+		return fmt.Errorf("seed telemetry state: insert: %w", err)
+	}
+	inserted, err := res.RowsAffected()
+	if err != nil {
+		return fmt.Errorf("seed telemetry state: rows affected: %w", err)
+	}
+	if inserted == 0 {
+		return nil
+	}
+
+	if fresh {
+		if err := upsertConfigTx(ctx, tx, "telemetry", `{"sendMetrics":true,"extended":true}`); err != nil {
+			return fmt.Errorf("seed telemetry state: %w", err)
+		}
+	} else {
+		raw, ok, err := ConfigValueTx(ctx, tx, "telemetry")
+		if err != nil {
+			return fmt.Errorf("seed telemetry state: read config: %w", err)
+		}
+		if ok {
+			if rewritten, changed := withExtendedOff(raw); changed {
+				if err := upsertConfigTx(ctx, tx, "telemetry", rewritten); err != nil {
+					return fmt.Errorf("seed telemetry state: %w", err)
+				}
+			}
+		}
+	}
+	if err := tx.Commit(); err != nil {
+		return fmt.Errorf("seed telemetry state: commit: %w", err)
+	}
+	return nil
+}
+
+// withExtendedOff returns raw, a JSON object, with "extended":false added.
+// A value that is not a JSON object is left alone (changed is false) rather
+// than overwritten.
+func withExtendedOff(raw string) (string, bool) {
+	var m map[string]json.RawMessage
+	if err := json.Unmarshal([]byte(raw), &m); err != nil || m == nil {
+		return raw, false
+	}
+	m["extended"] = json.RawMessage("false")
+	out, err := json.Marshal(m)
+	if err != nil {
+		return raw, false
+	}
+	return string(out), true
+}
+
+// upsertConfigTx writes one config row inside tx, stamping updated_at in the
+// layout the other config writers use.
+func upsertConfigTx(ctx context.Context, tx *sql.Tx, key, value string) error {
+	if _, err := tx.ExecContext(ctx,
+		`INSERT INTO config(key, value, updated_at) VALUES (?, ?, ?)
+		 ON CONFLICT (key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`,
+		key, value, NowTimestamp()); err != nil {
+		return fmt.Errorf("write config %q: %w", key, err)
+	}
+	return nil
+}
+
+// GetTelemetryState reads the singleton row. NULL columns come back as the
+// empty string. A missing row (Migrate not run) wraps sql.ErrNoRows.
+func (s *Store) GetTelemetryState(ctx context.Context) (TelemetryState, error) {
+	var st TelemetryState
+	err := s.DB.QueryRowContext(ctx,
+		`SELECT consent_source, COALESCE(install_id, ''), COALESCE(notice_shown_at, ''),
+		        COALESCE(next_due_at, ''), COALESCE(last_attempt_at, ''), COALESCE(last_success_at, ''),
+		        last_outcome, consecutive_failures, COALESCE(ext_unsupported_until, ''),
+		        COALESCE(ext_unsupported_endpoint, ''), COALESCE(last_id_rotation_at, '')
+		   FROM telemetry_state WHERE id = ?`, telemetrySingletonID).Scan(
+		&st.ConsentSource, &st.InstallID, &st.NoticeShownAt,
+		&st.NextDueAt, &st.LastAttemptAt, &st.LastSuccessAt,
+		&st.LastOutcome, &st.ConsecutiveFailures, &st.ExtUnsupportedUntil,
+		&st.ExtUnsupportedEndpoint, &st.LastIDRotationAt)
+	if err != nil {
+		return TelemetryState{}, fmt.Errorf("get telemetry state: %w", err)
+	}
+	return st, nil
+}
+
+// UpdateTelemetryState writes every field of st back to the singleton row,
+// storing empty strings as NULL. It never touches the signing secret.
+func (s *Store) UpdateTelemetryState(ctx context.Context, st TelemetryState) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET
+		     consent_source = ?, install_id = NULLIF(?, ''), notice_shown_at = NULLIF(?, ''),
+		     next_due_at = NULLIF(?, ''), last_attempt_at = NULLIF(?, ''), last_success_at = NULLIF(?, ''),
+		     last_outcome = ?, consecutive_failures = ?, ext_unsupported_until = NULLIF(?, ''),
+		     ext_unsupported_endpoint = NULLIF(?, ''), last_id_rotation_at = NULLIF(?, '')
+		 WHERE id = ?`,
+		st.ConsentSource, st.InstallID, st.NoticeShownAt,
+		st.NextDueAt, st.LastAttemptAt, st.LastSuccessAt,
+		st.LastOutcome, st.ConsecutiveFailures, st.ExtUnsupportedUntil,
+		st.ExtUnsupportedEndpoint, st.LastIDRotationAt,
+		telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("update telemetry state: %w", err)
+	}
+	return requireOneRow(res, "update telemetry state")
+}
+
+// ClaimTelemetryDue claims the report slot whose next_due_at equals expected
+// by moving it to next and stamping last_attempt_at with now (all RFC 3339
+// UTC text). It reports true only when this call changed the row, so of
+// several replicas racing for one slot exactly one proceeds. A NULL
+// next_due_at never matches, because the gate-open step sets the first slot.
+func (s *Store) ClaimTelemetryDue(ctx context.Context, expected, next, now string) (bool, error) {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET next_due_at = ?, last_attempt_at = ?
+		  WHERE id = ? AND next_due_at = ?`,
+		next, now, telemetrySingletonID, expected)
+	if err != nil {
+		return false, fmt.Errorf("claim telemetry slot: %w", err)
+	}
+	n, err := res.RowsAffected()
+	if err != nil {
+		return false, fmt.Errorf("claim telemetry slot: rows affected: %w", err)
+	}
+	return n == 1, nil
+}
+
+// SetInstallID stores the extended-tier install ID.
+func (s *Store) SetInstallID(ctx context.Context, id string) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET install_id = ? WHERE id = ?`, id, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("set install id: %w", err)
+	}
+	return requireOneRow(res, "set install id")
+}
+
+// ClearInstallID removes the install ID (the extended tier went off).
+func (s *Store) ClearInstallID(ctx context.Context) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET install_id = NULL WHERE id = ?`, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("clear install id: %w", err)
+	}
+	return requireOneRow(res, "clear install id")
+}
+
+// EnsureSigningSecret returns the install's 32-byte signing secret, creating
+// it on first use. Concurrent first calls agree on one value because the
+// write only lands while the column is NULL and the loser re-reads. The
+// secret is for api/internal/telemetry key derivation only: it is never part
+// of TelemetryState, an HTTP response, a log line or an audit event.
+func (s *Store) EnsureSigningSecret(ctx context.Context) ([]byte, error) {
+	if secret, err := s.readSigningSecret(ctx); err != nil || secret != nil {
+		return secret, err
+	}
+	fresh := make([]byte, 32)
+	if _, err := rand.Read(fresh); err != nil {
+		return nil, fmt.Errorf("generate signing secret: %w", err)
+	}
+	if _, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET signing_secret = ? WHERE id = ? AND signing_secret IS NULL`,
+		base64.StdEncoding.EncodeToString(fresh), telemetrySingletonID); err != nil {
+		return nil, fmt.Errorf("store signing secret: %w", err)
+	}
+	secret, err := s.readSigningSecret(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if secret == nil {
+		return nil, errors.New("store signing secret: no telemetry_state row")
+	}
+	return secret, nil
+}
+
+// readSigningSecret returns the stored secret, or nil when none is set yet or
+// the row is absent.
+func (s *Store) readSigningSecret(ctx context.Context) ([]byte, error) {
+	var enc sql.NullString
+	err := s.DB.QueryRowContext(ctx,
+		`SELECT signing_secret FROM telemetry_state WHERE id = ?`, telemetrySingletonID).Scan(&enc)
+	if errors.Is(err, sql.ErrNoRows) {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, fmt.Errorf("read signing secret: %w", err)
+	}
+	if !enc.Valid || enc.String == "" {
+		return nil, nil
+	}
+	secret, err := base64.StdEncoding.DecodeString(enc.String)
+	if err != nil {
+		return nil, fmt.Errorf("decode signing secret: %w", err)
+	}
+	return secret, nil
+}
+
+// MarkNoticeShown records when the consent notice was first rendered. The
+// value is set once: later calls leave the first timestamp in place.
+func (s *Store) MarkNoticeShown(ctx context.Context, now string) error {
+	if _, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET notice_shown_at = ? WHERE id = ? AND notice_shown_at IS NULL`,
+		now, telemetrySingletonID); err != nil {
+		return fmt.Errorf("mark notice shown: %w", err)
+	}
+	return nil
+}
+
+// InsertNoticeAck records that userID dismissed the notice with action
+// (keep, extended-off or all-off) at ackedAt (RFC 3339 UTC). The first
+// dismissal stands; repeats are ignored.
+func (s *Store) InsertNoticeAck(ctx context.Context, userID int64, action string, ackedAt string) error {
+	if _, err := s.DB.ExecContext(ctx,
+		`INSERT INTO telemetry_notice_acks(user_id, acked_at, action) VALUES (?, ?, ?)
+		 ON CONFLICT (user_id) DO NOTHING`,
+		userID, ackedAt, action); err != nil {
+		return fmt.Errorf("insert notice ack: %w", err)
+	}
+	return nil
+}
+
+// HasNoticeAck reports whether userID has dismissed the notice.
+func (s *Store) HasNoticeAck(ctx context.Context, userID int64) (bool, error) {
+	var one int
+	err := s.DB.QueryRowContext(ctx,
+		`SELECT 1 FROM telemetry_notice_acks WHERE user_id = ?`, userID).Scan(&one)
+	if errors.Is(err, sql.ErrNoRows) {
+		return false, nil
+	}
+	if err != nil {
+		return false, fmt.Errorf("has notice ack: %w", err)
+	}
+	return true, nil
+}
+
+// DeleteNoticeAcksForUser removes a user's notice ack. ex is the open
+// transaction of the account removal, or nil to run on the store directly.
+// The telemetry_notice_acks table has no foreign key, so removal is explicit.
+func (s *Store) DeleteNoticeAcksForUser(ctx context.Context, ex Execer, userID int64) error {
+	if ex == nil {
+		ex = s.DB
+	}
+	if _, err := ex.ExecContext(ctx,
+		`DELETE FROM telemetry_notice_acks WHERE user_id = ?`, userID); err != nil {
+		return fmt.Errorf("delete notice acks: %w", err)
+	}
+	return nil
+}
+
+// requireOneRow fails when an UPDATE of the singleton matched no row, which
+// means Migrate has not seeded telemetry_state.
+func requireOneRow(res sql.Result, op string) error {
+	n, err := res.RowsAffected()
+	if err != nil {
+		return fmt.Errorf("%s: rows affected: %w", op, err)
+	}
+	if n != 1 {
+		return fmt.Errorf("%s: %w", op, sql.ErrNoRows)
+	}
+	return nil
+}
diff --git a/api/internal/db/telemetry_rotate_test.go b/api/internal/db/telemetry_rotate_test.go
new file mode 100644
index 000000000..cde208b02
--- /dev/null
+++ b/api/internal/db/telemetry_rotate_test.go
@@ -0,0 +1,58 @@
+package db
+
+import (
+	"bytes"
+	"database/sql"
+	"errors"
+	"testing"
+)
+
+// RotateInstallID is the reporter's reaction to a 409 id_claimed (spec 022
+// FR-037, T084).
+func TestRotateInstallID_ReplacesIDKeepsSecretAndStampsTheRotation(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if err := s.SetInstallID(ctx, txTestInstallID); err != nil {
+		t.Fatalf("set install id: %v", err)
+	}
+	secret, err := s.EnsureSigningSecret(ctx)
+	if err != nil {
+		t.Fatalf("ensure secret: %v", err)
+	}
+
+	const next = "0a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+	if err := s.RotateInstallID(ctx, next, "2026-10-06T09:00:00Z"); err != nil {
+		t.Fatalf("rotate: %v", err)
+	}
+	st, err := s.GetTelemetryState(ctx)
+	if err != nil {
+		t.Fatalf("get state: %v", err)
+	}
+	if st.InstallID != next || st.LastIDRotationAt != "2026-10-06T09:00:00Z" {
+		t.Fatalf("state = %+v, want the new id and the rotation stamp", st)
+	}
+	if again, err := s.EnsureSigningSecret(ctx); err != nil || !bytes.Equal(again, secret) {
+		t.Fatalf("signing secret changed by the rotation: %v", err)
+	}
+}
+
+func TestRotateInstallID_RefusesWithoutAnIDOrARow(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	// A fresh install has no ID until the notice is seen, so there is nothing
+	// to replace and nothing may be written.
+	if err := s.RotateInstallID(ctx, txTestInstallID, "2026-10-06T09:00:00Z"); !errors.Is(err, sql.ErrNoRows) {
+		t.Fatalf("rotate without an id = %v, want sql.ErrNoRows", err)
+	}
+	if st, err := s.GetTelemetryState(ctx); err != nil || st.InstallID != "" || st.LastIDRotationAt != "" {
+		t.Fatalf("state = %+v, %v, want it untouched", st, err)
+	}
+
+	closed := newRBACStore(t)
+	if err := closed.Close(); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	if err := closed.RotateInstallID(ctx, txTestInstallID, "x"); err == nil {
+		t.Fatal("rotate on a closed database: want an error")
+	}
+}
diff --git a/api/internal/db/telemetry_test.go b/api/internal/db/telemetry_test.go
new file mode 100644
index 000000000..06a380743
--- /dev/null
+++ b/api/internal/db/telemetry_test.go
@@ -0,0 +1,549 @@
+package db
+
+import (
+	"database/sql"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"sync"
+	"testing"
+)
+
+// telemetryConfig returns the raw telemetry config value and whether the key
+// exists.
+func telemetryConfig(t *testing.T, s *Store) (string, bool) {
+	t.Helper()
+	v, ok, err := s.ConfigValue(t.Context(), "telemetry")
+	if err != nil {
+		t.Fatalf("read telemetry config: %v", err)
+	}
+	return v, ok
+}
+
+// existingInstallStore returns a migrated store rewound to the state of an
+// install that ran before migration 015: no telemetry tables, 015 unrecorded,
+// and telemetryValue (when non-empty) saved as config key telemetry. The next
+// Migrate sees recorded migrations, so it treats the database as existing.
+func existingInstallStore(t *testing.T, telemetryValue string) *Store {
+	t.Helper()
+	s := newRBACStore(t)
+	ctx := t.Context()
+	for _, stmt := range []string{
+		`DROP TABLE telemetry_state`,
+		`DROP TABLE telemetry_notice_acks`,
+		`DELETE FROM schema_migrations WHERE version = '015_telemetry_state.sql'`,
+		`DELETE FROM config WHERE key = 'telemetry'`,
+	} {
+		if _, err := s.DB.ExecContext(ctx, stmt); err != nil {
+			t.Fatalf("%s: %v", stmt, err)
+		}
+	}
+	if telemetryValue != "" {
+		if _, err := s.DB.ExecContext(ctx,
+			`INSERT INTO config(key, value, updated_at) VALUES ('telemetry', ?, ?)`,
+			telemetryValue, "2026-01-01 00:00:00"); err != nil {
+			t.Fatalf("seed telemetry config: %v", err)
+		}
+	}
+	if err := s.Migrate(ctx); err != nil {
+		t.Fatalf("migrate existing install: %v", err)
+	}
+	return s
+}
+
+func TestMigrate_FreshInstallSeedsTelemetryDefault(t *testing.T) {
+	s := newRBACStore(t)
+	st, err := s.GetTelemetryState(t.Context())
+	if err != nil {
+		t.Fatalf("get state: %v", err)
+	}
+	if st.ConsentSource != TelemetryConsentDefault {
+		t.Errorf("consent source = %q, want default", st.ConsentSource)
+	}
+	if st.LastOutcome != "never" || st.ConsecutiveFailures != 0 {
+		t.Errorf("outcome/failures = %q/%d, want never/0", st.LastOutcome, st.ConsecutiveFailures)
+	}
+	if st.InstallID != "" || st.NoticeShownAt != "" || st.NextDueAt != "" {
+		t.Errorf("a fresh seed must leave id, notice and schedule empty, got %+v", st)
+	}
+	v, ok := telemetryConfig(t, s)
+	if !ok || v != `{"sendMetrics":true,"extended":true}` {
+		t.Errorf("config telemetry = %q (present=%v), want both tiers on", v, ok)
+	}
+}
+
+// bootstrap-admin migrates before the first serve; the second Migrate must
+// not turn a fresh install into a legacy one or undo an admin's choice.
+func TestMigrate_TwiceKeepsFreshInstallDefault(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if err := s.Migrate(ctx); err != nil {
+		t.Fatalf("second migrate: %v", err)
+	}
+	st, err := s.GetTelemetryState(ctx)
+	if err != nil {
+		t.Fatalf("get state: %v", err)
+	}
+	if st.ConsentSource != TelemetryConsentDefault {
+		t.Fatalf("consent source after a second migrate = %q, want default", st.ConsentSource)
+	}
+	if v, _ := telemetryConfig(t, s); v != `{"sendMetrics":true,"extended":true}` {
+		t.Fatalf("config after a second migrate = %q", v)
+	}
+
+	// An admin choice made between the two runs survives a later Migrate.
+	if _, err := s.DB.ExecContext(ctx,
+		`UPDATE config SET value = '{"sendMetrics":false,"extended":false}' WHERE key = 'telemetry'`); err != nil {
+		t.Fatalf("admin save: %v", err)
+	}
+	if err := s.Migrate(ctx); err != nil {
+		t.Fatalf("third migrate: %v", err)
+	}
+	if v, _ := telemetryConfig(t, s); v != `{"sendMetrics":false,"extended":false}` {
+		t.Fatalf("admin choice overwritten: %q", v)
+	}
+}
+
+func TestMigrate_ExistingInstallWithSendMetricsIsLegacy(t *testing.T) {
+	s := existingInstallStore(t, `{"sendMetrics":true}`)
+	st, err := s.GetTelemetryState(t.Context())
+	if err != nil {
+		t.Fatalf("get state: %v", err)
+	}
+	if st.ConsentSource != TelemetryConsentLegacy {
+		t.Fatalf("consent source = %q, want legacy", st.ConsentSource)
+	}
+	v, ok := telemetryConfig(t, s)
+	if !ok {
+		t.Fatal("the saved telemetry config must be kept")
+	}
+	var got map[string]bool
+	if err := json.Unmarshal([]byte(v), &got); err != nil {
+		t.Fatalf("config %q is not a JSON object of booleans: %v", v, err)
+	}
+	if len(got) != 2 || !got["sendMetrics"] || got["extended"] {
+		t.Fatalf("config = %v, want sendMetrics kept true and extended false", got)
+	}
+}
+
+func TestMigrate_ExistingInstallWithoutTelemetryRowStaysOff(t *testing.T) {
+	s := existingInstallStore(t, "")
+	st, err := s.GetTelemetryState(t.Context())
+	if err != nil {
+		t.Fatalf("get state: %v", err)
+	}
+	if st.ConsentSource != TelemetryConsentLegacy {
+		t.Fatalf("consent source = %q, want legacy", st.ConsentSource)
+	}
+	if v, ok := telemetryConfig(t, s); ok {
+		t.Fatalf("no telemetry config row may be created for a legacy install, got %q", v)
+	}
+}
+
+func TestMigrate_ExistingInstallLeavesUnusableConfigAlone(t *testing.T) {
+	for _, raw := range []string{`{bad`, `null`, `[1]`} {
+		s := existingInstallStore(t, raw)
+		if v, _ := telemetryConfig(t, s); v != raw {
+			t.Errorf("config %q was rewritten to %q", raw, v)
+		}
+		st, err := s.GetTelemetryState(t.Context())
+		if err != nil || st.ConsentSource != TelemetryConsentLegacy {
+			t.Errorf("config %q: state = %+v, err = %v, want a legacy row", raw, st, err)
+		}
+	}
+}
+
+func TestMigrate_ExistingInstallTwiceDoesNotRewriteAgain(t *testing.T) {
+	s := existingInstallStore(t, `{"sendMetrics":true}`)
+	ctx := t.Context()
+	// An admin turns the extended tier on after the upgrade.
+	if _, err := s.DB.ExecContext(ctx,
+		`UPDATE config SET value = '{"sendMetrics":true,"extended":true}' WHERE key = 'telemetry'`); err != nil {
+		t.Fatalf("admin save: %v", err)
+	}
+	if err := s.Migrate(ctx); err != nil {
+		t.Fatalf("migrate again: %v", err)
+	}
+	if v, _ := telemetryConfig(t, s); v != `{"sendMetrics":true,"extended":true}` {
+		t.Fatalf("a later migrate rewrote the admin's config: %q", v)
+	}
+}
+
+func TestTelemetryState_UpdateRoundTripAndNulls(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	want := TelemetryState{
+		ConsentSource:          TelemetryConsentAdmin,
+		InstallID:              "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+		NoticeShownAt:          "2026-10-06T09:00:00Z",
+		NextDueAt:              "2026-10-07T09:05:00Z",
+		LastAttemptAt:          "2026-10-06T09:05:00Z",
+		LastSuccessAt:          "2026-10-06T09:05:01Z",
+		LastOutcome:            "ok",
+		ConsecutiveFailures:    3,
+		ExtUnsupportedUntil:    "2026-10-13T09:05:00Z",
+		ExtUnsupportedEndpoint: "https://telemetry.example/ingest",
+		LastIDRotationAt:       "2026-10-05T00:00:00Z",
+	}
+	if err := s.UpdateTelemetryState(ctx, want); err != nil {
+		t.Fatalf("update: %v", err)
+	}
+	got, err := s.GetTelemetryState(ctx)
+	if err != nil {
+		t.Fatalf("get: %v", err)
+	}
+	if got != want {
+		t.Fatalf("round trip:\n got %+v\nwant %+v", got, want)
+	}
+
+	// Empty strings are stored as NULL, not as empty text.
+	cleared := TelemetryState{ConsentSource: TelemetryConsentAdmin, LastOutcome: "never"}
+	if err := s.UpdateTelemetryState(ctx, cleared); err != nil {
+		t.Fatalf("update cleared: %v", err)
+	}
+	var nulls int
+	if err := s.DB.QueryRowContext(ctx,
+		`SELECT COUNT(*) FROM telemetry_state
+		  WHERE install_id IS NULL AND notice_shown_at IS NULL AND next_due_at IS NULL
+		    AND last_attempt_at IS NULL AND last_success_at IS NULL AND ext_unsupported_until IS NULL
+		    AND ext_unsupported_endpoint IS NULL AND last_id_rotation_at IS NULL`).Scan(&nulls); err != nil {
+		t.Fatalf("count nulls: %v", err)
+	}
+	if nulls != 1 {
+		t.Fatal("empty fields must be stored as NULL")
+	}
+}
+
+func TestTelemetryState_UpdateKeepsSigningSecret(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	secret, err := s.EnsureSigningSecret(ctx)
+	if err != nil {
+		t.Fatalf("ensure secret: %v", err)
+	}
+	if err := s.UpdateTelemetryState(ctx, TelemetryState{ConsentSource: TelemetryConsentAdmin, LastOutcome: "ok"}); err != nil {
+		t.Fatalf("update: %v", err)
+	}
+	again, err := s.EnsureSigningSecret(ctx)
+	if err != nil {
+		t.Fatalf("ensure again: %v", err)
+	}
+	if string(again) != string(secret) {
+		t.Fatal("UpdateTelemetryState must not change the signing secret")
+	}
+}
+
+func TestClaimTelemetryDue_MovesSlotOnce(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	const due, next, now = "2026-10-06T10:00:00Z", "2026-10-07T10:03:00Z", "2026-10-06T10:00:05Z"
+	if err := s.UpdateTelemetryState(ctx, TelemetryState{
+		ConsentSource: TelemetryConsentAdmin, LastOutcome: "never", NextDueAt: due,
+	}); err != nil {
+		t.Fatalf("seed schedule: %v", err)
+	}
+
+	if won, err := s.ClaimTelemetryDue(ctx, "2026-01-01T00:00:00Z", next, now); err != nil || won {
+		t.Fatalf("claim with a stale slot = %v, %v; want false, nil", won, err)
+	}
+	if won, err := s.ClaimTelemetryDue(ctx, due, next, now); err != nil || !won {
+		t.Fatalf("claim of the due slot = %v, %v; want true, nil", won, err)
+	}
+	st, err := s.GetTelemetryState(ctx)
+	if err != nil {
+		t.Fatalf("get: %v", err)
+	}
+	if st.NextDueAt != next || st.LastAttemptAt != now {
+		t.Fatalf("after the claim next/attempt = %q/%q, want %q/%q", st.NextDueAt, st.LastAttemptAt, next, now)
+	}
+	if won, err := s.ClaimTelemetryDue(ctx, due, next, now); err != nil || won {
+		t.Fatalf("second claim of the same slot = %v, %v; want false, nil", won, err)
+	}
+}
+
+func TestClaimTelemetryDue_NullSlotNeverMatches(t *testing.T) {
+	s := newRBACStore(t)
+	if won, err := s.ClaimTelemetryDue(t.Context(), "", "2026-10-07T00:00:00Z", "2026-10-06T00:00:00Z"); err != nil || won {
+		t.Fatalf("claim while the gate is closed = %v, %v; want false, nil", won, err)
+	}
+}
+
+func TestClaimTelemetryDue_ConcurrentCallersOneWins(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	const due = "2026-10-06T10:00:00Z"
+	if err := s.UpdateTelemetryState(ctx, TelemetryState{
+		ConsentSource: TelemetryConsentAdmin, LastOutcome: "never", NextDueAt: due,
+	}); err != nil {
+		t.Fatalf("seed schedule: %v", err)
+	}
+
+	const callers = 8
+	var (
+		wg   sync.WaitGroup
+		mu   sync.Mutex
+		wins int
+		errs []error
+	)
+	start := make(chan struct{})
+	for range callers {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			<-start
+			won, err := s.ClaimTelemetryDue(ctx, due, "2026-10-07T10:00:00Z", "2026-10-06T10:00:01Z")
+			mu.Lock()
+			defer mu.Unlock()
+			if err != nil {
+				errs = append(errs, err)
+			}
+			if won {
+				wins++
+			}
+		}()
+	}
+	close(start)
+	wg.Wait()
+	if len(errs) != 0 {
+		t.Fatalf("claim errors: %v", errs)
+	}
+	if wins != 1 {
+		t.Fatalf("%d concurrent claims won, want exactly 1", wins)
+	}
+}
+
+func TestInstallID_SetAndClear(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	const id = "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10"
+	if err := s.SetInstallID(ctx, id); err != nil {
+		t.Fatalf("set: %v", err)
+	}
+	if st, _ := s.GetTelemetryState(ctx); st.InstallID != id {
+		t.Fatalf("install id = %q, want %q", st.InstallID, id)
+	}
+	if err := s.ClearInstallID(ctx); err != nil {
+		t.Fatalf("clear: %v", err)
+	}
+	if st, _ := s.GetTelemetryState(ctx); st.InstallID != "" {
+		t.Fatalf("install id after clear = %q, want empty", st.InstallID)
+	}
+}
+
+func TestEnsureSigningSecret_CreatedOnceAndStable(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	first, err := s.EnsureSigningSecret(ctx)
+	if err != nil {
+		t.Fatalf("ensure: %v", err)
+	}
+	if len(first) != 32 {
+		t.Fatalf("secret length = %d, want 32", len(first))
+	}
+	second, err := s.EnsureSigningSecret(ctx)
+	if err != nil {
+		t.Fatalf("ensure again: %v", err)
+	}
+	if string(first) != string(second) {
+		t.Fatal("the secret changed between calls")
+	}
+	// Stored as base64 text, and the same value after ID changes.
+	var enc string
+	if err := s.DB.QueryRowContext(ctx, `SELECT signing_secret FROM telemetry_state`).Scan(&enc); err != nil {
+		t.Fatalf("read column: %v", err)
+	}
+	if raw, err := base64.StdEncoding.DecodeString(enc); err != nil || string(raw) != string(first) {
+		t.Fatalf("stored secret %q does not decode to the returned secret (err=%v)", enc, err)
+	}
+	if err := s.SetInstallID(ctx, "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10"); err != nil {
+		t.Fatalf("set id: %v", err)
+	}
+	if err := s.ClearInstallID(ctx); err != nil {
+		t.Fatalf("clear id: %v", err)
+	}
+	third, err := s.EnsureSigningSecret(ctx)
+	if err != nil || string(third) != string(first) {
+		t.Fatalf("the secret must survive ID changes, got err=%v", err)
+	}
+}
+
+func TestEnsureSigningSecret_ConcurrentFirstCallsAgree(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	const callers = 6
+	results := make([][]byte, callers)
+	var wg sync.WaitGroup
+	for i := range callers {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			secret, err := s.EnsureSigningSecret(ctx)
+			if err != nil {
+				t.Errorf("ensure: %v", err)
+				return
+			}
+			results[i] = secret
+		}()
+	}
+	wg.Wait()
+	for i := 1; i < callers; i++ {
+		if string(results[i]) != string(results[0]) {
+			t.Fatalf("caller %d got a different secret", i)
+		}
+	}
+}
+
+func TestEnsureSigningSecret_Errors(t *testing.T) {
+	ctx := t.Context()
+
+	s := newRBACStore(t)
+	if _, err := s.DB.ExecContext(ctx, `DELETE FROM telemetry_state`); err != nil {
+		t.Fatalf("delete row: %v", err)
+	}
+	if _, err := s.EnsureSigningSecret(ctx); err == nil {
+		t.Error("want an error when there is no telemetry_state row to hold the secret")
+	}
+
+	s = newRBACStore(t)
+	if _, err := s.DB.ExecContext(ctx, `UPDATE telemetry_state SET signing_secret = '!!not base64!!'`); err != nil {
+		t.Fatalf("corrupt secret: %v", err)
+	}
+	if _, err := s.EnsureSigningSecret(ctx); err == nil {
+		t.Error("want an error for a stored secret that is not base64")
+	}
+}
+
+func TestMarkNoticeShown_SetsOnce(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if err := s.MarkNoticeShown(ctx, "2026-10-06T09:00:00Z"); err != nil {
+		t.Fatalf("first mark: %v", err)
+	}
+	if err := s.MarkNoticeShown(ctx, "2026-10-06T12:00:00Z"); err != nil {
+		t.Fatalf("second mark: %v", err)
+	}
+	st, err := s.GetTelemetryState(ctx)
+	if err != nil {
+		t.Fatalf("get: %v", err)
+	}
+	if st.NoticeShownAt != "2026-10-06T09:00:00Z" {
+		t.Fatalf("notice_shown_at = %q, want the first timestamp", st.NoticeShownAt)
+	}
+}
+
+func TestNoticeAck_Lifecycle(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	admin := insertUser(t, s, "notice-admin", "admin")
+	other := insertUser(t, s, "notice-other", "admin")
+
+	if has, err := s.HasNoticeAck(ctx, admin); err != nil || has {
+		t.Fatalf("before any ack: has=%v err=%v", has, err)
+	}
+	if err := s.InsertNoticeAck(ctx, admin, "keep", "2026-10-06T09:00:00Z"); err != nil {
+		t.Fatalf("insert: %v", err)
+	}
+	if has, err := s.HasNoticeAck(ctx, admin); err != nil || !has {
+		t.Fatalf("after ack: has=%v err=%v", has, err)
+	}
+	if has, _ := s.HasNoticeAck(ctx, other); has {
+		t.Fatal("an ack must belong to one user only")
+	}
+
+	// The first dismissal stands.
+	if err := s.InsertNoticeAck(ctx, admin, "all-off", "2026-10-06T10:00:00Z"); err != nil {
+		t.Fatalf("repeat insert: %v", err)
+	}
+	var count int
+	if err := s.DB.QueryRowContext(ctx, `SELECT COUNT(*) FROM telemetry_notice_acks WHERE action = 'keep'`).Scan(&count); err != nil || count != 1 {
+		t.Fatalf("the first action must be kept: count=%d err=%v", count, err)
+	}
+
+	if err := s.DeleteNoticeAcksForUser(ctx, nil, admin); err != nil {
+		t.Fatalf("delete: %v", err)
+	}
+	if has, _ := s.HasNoticeAck(ctx, admin); has {
+		t.Fatal("ack still present after DeleteNoticeAcksForUser")
+	}
+}
+
+func TestDeleteUser_RemovesNoticeAck(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	gone := insertUser(t, s, "ack-removed", "admin")
+	kept := insertUser(t, s, "ack-kept", "admin")
+	for _, id := range []int64{gone, kept} {
+		if err := s.InsertNoticeAck(ctx, id, "keep", "2026-10-06T09:00:00Z"); err != nil {
+			t.Fatalf("insert ack: %v", err)
+		}
+	}
+	if err := s.DeleteUser(ctx, gone); err != nil {
+		t.Fatalf("delete user: %v", err)
+	}
+	if has, _ := s.HasNoticeAck(ctx, gone); has {
+		t.Error("the removed user's ack must be deleted with the account")
+	}
+	if has, _ := s.HasNoticeAck(ctx, kept); !has {
+		t.Error("another user's ack must survive")
+	}
+}
+
+func TestTelemetryState_MissingRowIsAnError(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if _, err := s.DB.ExecContext(ctx, `DELETE FROM telemetry_state`); err != nil {
+		t.Fatalf("delete row: %v", err)
+	}
+	if _, err := s.GetTelemetryState(ctx); !errors.Is(err, sql.ErrNoRows) {
+		t.Errorf("Get on a missing row = %v, want sql.ErrNoRows", err)
+	}
+	if err := s.UpdateTelemetryState(ctx, TelemetryState{ConsentSource: "admin", LastOutcome: "never"}); !errors.Is(err, sql.ErrNoRows) {
+		t.Errorf("Update on a missing row = %v, want sql.ErrNoRows", err)
+	}
+	if err := s.SetInstallID(ctx, "x"); !errors.Is(err, sql.ErrNoRows) {
+		t.Errorf("SetInstallID on a missing row = %v, want sql.ErrNoRows", err)
+	}
+	if err := s.ClearInstallID(ctx); !errors.Is(err, sql.ErrNoRows) {
+		t.Errorf("ClearInstallID on a missing row = %v, want sql.ErrNoRows", err)
+	}
+}
+
+func TestTelemetryHelpers_ClosedDatabaseErrors(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if err := s.Close(); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	checks := map[string]func() error{
+		"migrate":    func() error { return s.Migrate(ctx) },
+		"seed":       func() error { return s.seedTelemetryState(ctx, true) },
+		"get":        func() error { _, err := s.GetTelemetryState(ctx); return err },
+		"update":     func() error { return s.UpdateTelemetryState(ctx, TelemetryState{}) },
+		"claim":      func() error { _, err := s.ClaimTelemetryDue(ctx, "a", "b", "c"); return err },
+		"setID":      func() error { return s.SetInstallID(ctx, "x") },
+		"clearID":    func() error { return s.ClearInstallID(ctx) },
+		"secret":     func() error { _, err := s.EnsureSigningSecret(ctx); return err },
+		"markNotice": func() error { return s.MarkNoticeShown(ctx, "t") },
+		"insertAck":  func() error { return s.InsertNoticeAck(ctx, 1, "keep", "t") },
+		"hasAck":     func() error { _, err := s.HasNoticeAck(ctx, 1); return err },
+		"deleteAcks": func() error { return s.DeleteNoticeAcksForUser(ctx, nil, 1) },
+		"deleteUser": func() error { return s.DeleteUser(ctx, 1) },
+	}
+	for name, fn := range checks {
+		if err := fn(); err == nil {
+			t.Errorf("%s: want an error from a closed database", name)
+		}
+	}
+}
+
+func TestWithExtendedOff(t *testing.T) {
+	got, changed := withExtendedOff(`{"sendMetrics":true,"extra":1}`)
+	if !changed || got != `{"extended":false,"extra":1,"sendMetrics":true}` {
+		t.Errorf("object: got %q changed=%v", got, changed)
+	}
+	for _, raw := range []string{``, `{bad`, `null`, `"str"`} {
+		if out, changed := withExtendedOff(raw); changed || out != raw {
+			t.Errorf("%q: got %q changed=%v, want it left alone", raw, out, changed)
+		}
+	}
+}
diff --git a/api/internal/db/telemetry_tx.go b/api/internal/db/telemetry_tx.go
new file mode 100644
index 000000000..297dfcc7a
--- /dev/null
+++ b/api/internal/db/telemetry_tx.go
@@ -0,0 +1,176 @@
+package db
+
+import (
+	"context"
+	"crypto/rand"
+	"database/sql"
+	"encoding/base64"
+	"fmt"
+)
+
+// This file holds the telemetry_state helpers that need an open transaction
+// (consent changes must commit with the config row, and a SQLite store has a
+// single connection, so a second query on the store would deadlock) and the
+// targeted schedule and result writes the reporter uses. Targeted writes
+// change only the columns they name, so a reporter tick can't overwrite a
+// concurrent consent change with a stale copy of the whole row.
+
+// TelemetryResult is the outcome of one report attempt.
+type TelemetryResult struct {
+	// Outcome is "ok" or "failed".
+	Outcome string
+	// SuccessAt (RFC 3339 UTC) becomes last_success_at; empty keeps the old value.
+	SuccessAt string
+	// Failures becomes consecutive_failures.
+	Failures int
+	// ExpectedNext is the next_due_at value this attempt claimed. NextDue
+	// replaces next_due_at only while the column still holds ExpectedNext, so
+	// a gate that closed during the send (NULL) stays closed.
+	ExpectedNext string
+	NextDue      string
+}
+
+// UpsertConfigTx writes one config row inside tx.
+func UpsertConfigTx(ctx context.Context, tx *sql.Tx, key, value string) error {
+	return upsertConfigTx(ctx, tx, key, value)
+}
+
+// GetTelemetryStateTx is GetTelemetryState inside tx.
+func GetTelemetryStateTx(ctx context.Context, tx *sql.Tx) (TelemetryState, error) {
+	var st TelemetryState
+	err := tx.QueryRowContext(ctx,
+		`SELECT consent_source, COALESCE(install_id, ''), COALESCE(notice_shown_at, ''),
+		        COALESCE(next_due_at, ''), COALESCE(last_attempt_at, ''), COALESCE(last_success_at, ''),
+		        last_outcome, consecutive_failures, COALESCE(ext_unsupported_until, ''),
+		        COALESCE(ext_unsupported_endpoint, ''), COALESCE(last_id_rotation_at, '')
+		   FROM telemetry_state WHERE id = ?`, telemetrySingletonID).Scan(
+		&st.ConsentSource, &st.InstallID, &st.NoticeShownAt,
+		&st.NextDueAt, &st.LastAttemptAt, &st.LastSuccessAt,
+		&st.LastOutcome, &st.ConsecutiveFailures, &st.ExtUnsupportedUntil,
+		&st.ExtUnsupportedEndpoint, &st.LastIDRotationAt)
+	if err != nil {
+		return TelemetryState{}, fmt.Errorf("get telemetry state: %w", err)
+	}
+	return st, nil
+}
+
+// UpdateTelemetryConsentTx sets consent_source, install_id and next_due_at
+// inside tx. Empty installID and nextDueAt store NULL.
+func UpdateTelemetryConsentTx(ctx context.Context, tx *sql.Tx, source, installID, nextDueAt string) error {
+	res, err := tx.ExecContext(ctx,
+		`UPDATE telemetry_state
+		    SET consent_source = ?, install_id = NULLIF(?, ''), next_due_at = NULLIF(?, '')
+		  WHERE id = ?`,
+		source, installID, nextDueAt, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("update telemetry consent: %w", err)
+	}
+	return requireOneRow(res, "update telemetry consent")
+}
+
+// EnsureSigningSecretTx creates the install's signing secret inside tx when
+// none exists yet. It never reads the secret back.
+func EnsureSigningSecretTx(ctx context.Context, tx *sql.Tx) error {
+	fresh := make([]byte, 32)
+	if _, err := rand.Read(fresh); err != nil {
+		return fmt.Errorf("generate signing secret: %w", err)
+	}
+	if _, err := tx.ExecContext(ctx,
+		`UPDATE telemetry_state SET signing_secret = ? WHERE id = ? AND signing_secret IS NULL`,
+		base64.StdEncoding.EncodeToString(fresh), telemetrySingletonID); err != nil {
+		return fmt.Errorf("store signing secret: %w", err)
+	}
+	return nil
+}
+
+// MarkNoticeShownTx is MarkNoticeShown inside tx.
+func MarkNoticeShownTx(ctx context.Context, tx *sql.Tx, now string) error {
+	if _, err := tx.ExecContext(ctx,
+		`UPDATE telemetry_state SET notice_shown_at = ? WHERE id = ? AND notice_shown_at IS NULL`,
+		now, telemetrySingletonID); err != nil {
+		return fmt.Errorf("mark notice shown: %w", err)
+	}
+	return nil
+}
+
+// InsertNoticeAckTx is InsertNoticeAck inside tx.
+func InsertNoticeAckTx(ctx context.Context, tx *sql.Tx, userID int64, action, ackedAt string) error {
+	if _, err := tx.ExecContext(ctx,
+		`INSERT INTO telemetry_notice_acks(user_id, acked_at, action) VALUES (?, ?, ?)
+		 ON CONFLICT (user_id) DO NOTHING`,
+		userID, ackedAt, action); err != nil {
+		return fmt.Errorf("insert notice ack: %w", err)
+	}
+	return nil
+}
+
+// OpenTelemetrySchedule sets next_due_at to next (RFC 3339 UTC) only while it
+// is NULL, and reports whether it changed the row.
+func (s *Store) OpenTelemetrySchedule(ctx context.Context, next string) (bool, error) {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET next_due_at = ? WHERE id = ? AND next_due_at IS NULL`,
+		next, telemetrySingletonID)
+	if err != nil {
+		return false, fmt.Errorf("open telemetry schedule: %w", err)
+	}
+	n, err := res.RowsAffected()
+	if err != nil {
+		return false, fmt.Errorf("open telemetry schedule: rows affected: %w", err)
+	}
+	return n == 1, nil
+}
+
+// CloseTelemetrySchedule sets next_due_at to NULL (the gate closed).
+func (s *Store) CloseTelemetrySchedule(ctx context.Context) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET next_due_at = NULL WHERE id = ?`, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("close telemetry schedule: %w", err)
+	}
+	return requireOneRow(res, "close telemetry schedule")
+}
+
+// RecordTelemetryResult stores the outcome of one attempt (see TelemetryResult).
+func (s *Store) RecordTelemetryResult(ctx context.Context, r TelemetryResult) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET
+		     last_outcome = ?, consecutive_failures = ?,
+		     last_success_at = COALESCE(NULLIF(?, ''), last_success_at),
+		     next_due_at = CASE WHEN next_due_at = ? THEN ? ELSE next_due_at END
+		 WHERE id = ?`,
+		r.Outcome, r.Failures, r.SuccessAt, r.ExpectedNext, r.NextDue, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("record telemetry result: %w", err)
+	}
+	return requireOneRow(res, "record telemetry result")
+}
+
+// SetExtUnsupported records (or, with empty arguments, clears) the marker that
+// the endpoint rejected the extended part: until is RFC 3339 UTC.
+func (s *Store) SetExtUnsupported(ctx context.Context, until, endpoint string) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state
+		    SET ext_unsupported_until = NULLIF(?, ''), ext_unsupported_endpoint = NULLIF(?, '')
+		  WHERE id = ?`,
+		until, endpoint, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("set ext unsupported: %w", err)
+	}
+	return requireOneRow(res, "set ext unsupported")
+}
+
+// RotateInstallID replaces the install ID with id and stamps
+// last_id_rotation_at with at (RFC 3339 UTC), after the receiver reported the
+// old ID as claimed by another key (FR-037). The signing secret is untouched.
+// It changes nothing, and wraps sql.ErrNoRows, when there is no install ID to
+// replace, for example because the extended tier was turned off meanwhile.
+func (s *Store) RotateInstallID(ctx context.Context, id, at string) error {
+	res, err := s.DB.ExecContext(ctx,
+		`UPDATE telemetry_state SET install_id = ?, last_id_rotation_at = ?
+		  WHERE id = ? AND install_id IS NOT NULL`,
+		id, at, telemetrySingletonID)
+	if err != nil {
+		return fmt.Errorf("rotate install id: %w", err)
+	}
+	return requireOneRow(res, "rotate install id")
+}
diff --git a/api/internal/db/telemetry_tx_test.go b/api/internal/db/telemetry_tx_test.go
new file mode 100644
index 000000000..7816da863
--- /dev/null
+++ b/api/internal/db/telemetry_tx_test.go
@@ -0,0 +1,220 @@
+package db
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"testing"
+)
+
+// txTestInstallID is a lowercase UUIDv4 for the install ID column.
+const txTestInstallID = "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10"
+
+// inTestTx runs fn in a transaction on s and commits it.
+func inTestTx(t *testing.T, s *Store, fn func(ctx context.Context, tx *sql.Tx)) {
+	t.Helper()
+	ctx := t.Context()
+	tx, err := s.DB.BeginTx(ctx, nil)
+	if err != nil {
+		t.Fatalf("begin: %v", err)
+	}
+	fn(ctx, tx)
+	if err := tx.Commit(); err != nil {
+		t.Fatalf("commit: %v", err)
+	}
+}
+
+func TestTelemetryTx_ConsentRoundTrip(t *testing.T) {
+	s := newRBACStore(t)
+	inTestTx(t, s, func(ctx context.Context, tx *sql.Tx) {
+		if err := UpsertConfigTx(ctx, tx, "telemetry", `{"sendMetrics":true,"extended":false}`); err != nil {
+			t.Fatalf("upsert config: %v", err)
+		}
+		if err := EnsureSigningSecretTx(ctx, tx); err != nil {
+			t.Fatalf("ensure secret: %v", err)
+		}
+		if err := MarkNoticeShownTx(ctx, tx, "2026-10-06T09:00:00Z"); err != nil {
+			t.Fatalf("mark shown: %v", err)
+		}
+		if err := MarkNoticeShownTx(ctx, tx, "2026-10-06T10:00:00Z"); err != nil {
+			t.Fatalf("mark shown again: %v", err)
+		}
+		if err := UpdateTelemetryConsentTx(ctx, tx, TelemetryConsentAdmin, txTestInstallID, "2026-10-06T09:05:00Z"); err != nil {
+			t.Fatalf("update consent: %v", err)
+		}
+		st, err := GetTelemetryStateTx(ctx, tx)
+		if err != nil {
+			t.Fatalf("get in tx: %v", err)
+		}
+		if st.ConsentSource != TelemetryConsentAdmin || st.InstallID != txTestInstallID ||
+			st.NextDueAt != "2026-10-06T09:05:00Z" || st.NoticeShownAt != "2026-10-06T09:00:00Z" {
+			t.Fatalf("state in tx = %+v", st)
+		}
+		if err := InsertNoticeAckTx(ctx, tx, 7, "keep", "2026-10-06T09:01:00Z"); err != nil {
+			t.Fatalf("ack: %v", err)
+		}
+		if err := InsertNoticeAckTx(ctx, tx, 7, "all-off", "2026-10-06T09:02:00Z"); err != nil {
+			t.Fatalf("second ack: %v", err)
+		}
+	})
+	ctx := t.Context()
+	if v, ok := telemetryConfig(t, s); !ok || v != `{"sendMetrics":true,"extended":false}` {
+		t.Fatalf("config = %q, %v", v, ok)
+	}
+	if secret, err := s.EnsureSigningSecret(ctx); err != nil || len(secret) != 32 {
+		t.Fatalf("secret = %d bytes, %v; want 32, nil", len(secret), err)
+	}
+	if ok, err := s.HasNoticeAck(ctx, 7); err != nil || !ok {
+		t.Fatalf("HasNoticeAck = %v, %v; want true, nil", ok, err)
+	}
+	var action string
+	if err := s.DB.QueryRowContext(ctx, `SELECT action FROM telemetry_notice_acks WHERE user_id = 7`).Scan(&action); err != nil || action != "keep" {
+		t.Fatalf("ack action = %q, %v; want the first ack (keep)", action, err)
+	}
+
+	// Clearing the install ID and the slot stores NULL.
+	inTestTx(t, s, func(ctx context.Context, tx *sql.Tx) {
+		if err := UpdateTelemetryConsentTx(ctx, tx, TelemetryConsentAdmin, "", ""); err != nil {
+			t.Fatalf("clear: %v", err)
+		}
+	})
+	st, err := s.GetTelemetryState(ctx)
+	if err != nil {
+		t.Fatalf("get: %v", err)
+	}
+	if st.InstallID != "" || st.NextDueAt != "" {
+		t.Fatalf("after clearing, install id/slot = %q/%q, want empty", st.InstallID, st.NextDueAt)
+	}
+}
+
+func TestTelemetrySchedule_OpenAndClose(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if ok, err := s.OpenTelemetrySchedule(ctx, "2026-10-06T10:00:00Z"); err != nil || !ok {
+		t.Fatalf("open on a NULL slot = %v, %v; want true, nil", ok, err)
+	}
+	if ok, err := s.OpenTelemetrySchedule(ctx, "2026-10-06T11:00:00Z"); err != nil || ok {
+		t.Fatalf("open on a set slot = %v, %v; want false, nil", ok, err)
+	}
+	st, err := s.GetTelemetryState(ctx)
+	if err != nil || st.NextDueAt != "2026-10-06T10:00:00Z" {
+		t.Fatalf("slot = %q, %v; want the first value kept", st.NextDueAt, err)
+	}
+	if err := s.CloseTelemetrySchedule(ctx); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	if st, _ = s.GetTelemetryState(ctx); st.NextDueAt != "" {
+		t.Fatalf("slot after close = %q, want empty", st.NextDueAt)
+	}
+}
+
+func TestRecordTelemetryResult(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	const claimed = "2026-10-07T10:03:00Z"
+	if err := s.UpdateTelemetryState(ctx, TelemetryState{
+		ConsentSource: TelemetryConsentAdmin, LastOutcome: "never", NextDueAt: claimed,
+	}); err != nil {
+		t.Fatalf("seed: %v", err)
+	}
+
+	// Success moves the slot while it still holds the claimed value.
+	if err := s.RecordTelemetryResult(ctx, TelemetryResult{
+		Outcome: "ok", SuccessAt: "2026-10-06T10:00:09Z", ExpectedNext: claimed, NextDue: "2026-10-07T10:09:00Z",
+	}); err != nil {
+		t.Fatalf("record ok: %v", err)
+	}
+	st, _ := s.GetTelemetryState(ctx)
+	if st.LastOutcome != "ok" || st.LastSuccessAt != "2026-10-06T10:00:09Z" ||
+		st.NextDueAt != "2026-10-07T10:09:00Z" || st.ConsecutiveFailures != 0 {
+		t.Fatalf("after success: %+v", st)
+	}
+
+	// A failure keeps last_success_at (empty SuccessAt) and counts up.
+	if err := s.RecordTelemetryResult(ctx, TelemetryResult{
+		Outcome: "failed", Failures: 2, ExpectedNext: "2026-10-07T10:09:00Z", NextDue: "2026-10-06T12:00:00Z",
+	}); err != nil {
+		t.Fatalf("record failed: %v", err)
+	}
+	st, _ = s.GetTelemetryState(ctx)
+	if st.LastOutcome != "failed" || st.ConsecutiveFailures != 2 ||
+		st.LastSuccessAt != "2026-10-06T10:00:09Z" || st.NextDueAt != "2026-10-06T12:00:00Z" {
+		t.Fatalf("after failure: %+v", st)
+	}
+
+	// A slot that changed since the claim (the gate closed, or reopened) is
+	// left alone, while the outcome is still recorded.
+	if err := s.CloseTelemetrySchedule(ctx); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	if err := s.RecordTelemetryResult(ctx, TelemetryResult{
+		Outcome: "ok", SuccessAt: "2026-10-06T13:00:00Z", ExpectedNext: "2026-10-06T12:00:00Z", NextDue: "2026-10-07T13:00:00Z",
+	}); err != nil {
+		t.Fatalf("record after close: %v", err)
+	}
+	st, _ = s.GetTelemetryState(ctx)
+	if st.NextDueAt != "" || st.LastOutcome != "ok" {
+		t.Fatalf("after a closed gate: slot %q outcome %q, want empty and ok", st.NextDueAt, st.LastOutcome)
+	}
+}
+
+func TestSetExtUnsupported_SetAndClear(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if err := s.SetExtUnsupported(ctx, "2026-10-13T10:00:00Z", "https://old.example/ingest"); err != nil {
+		t.Fatalf("set: %v", err)
+	}
+	st, _ := s.GetTelemetryState(ctx)
+	if st.ExtUnsupportedUntil != "2026-10-13T10:00:00Z" || st.ExtUnsupportedEndpoint != "https://old.example/ingest" {
+		t.Fatalf("marker = %q/%q", st.ExtUnsupportedUntil, st.ExtUnsupportedEndpoint)
+	}
+	if err := s.SetExtUnsupported(ctx, "", ""); err != nil {
+		t.Fatalf("clear: %v", err)
+	}
+	st, _ = s.GetTelemetryState(ctx)
+	if st.ExtUnsupportedUntil != "" || st.ExtUnsupportedEndpoint != "" {
+		t.Fatalf("marker after clear = %q/%q, want empty", st.ExtUnsupportedUntil, st.ExtUnsupportedEndpoint)
+	}
+}
+
+func TestTelemetryTx_MissingRowAndClosedDatabase(t *testing.T) {
+	s := newRBACStore(t)
+	ctx := t.Context()
+	if _, err := s.DB.ExecContext(ctx, `DELETE FROM telemetry_state`); err != nil {
+		t.Fatalf("delete row: %v", err)
+	}
+	inTestTx(t, s, func(ctx context.Context, tx *sql.Tx) {
+		if _, err := GetTelemetryStateTx(ctx, tx); !errors.Is(err, sql.ErrNoRows) {
+			t.Errorf("GetTelemetryStateTx on a missing row = %v, want sql.ErrNoRows", err)
+		}
+		if err := UpdateTelemetryConsentTx(ctx, tx, "admin", "", ""); !errors.Is(err, sql.ErrNoRows) {
+			t.Errorf("UpdateTelemetryConsentTx on a missing row = %v, want sql.ErrNoRows", err)
+		}
+	})
+	for name, fn := range map[string]func() error{
+		"close":  func() error { return s.CloseTelemetrySchedule(ctx) },
+		"record": func() error { return s.RecordTelemetryResult(ctx, TelemetryResult{Outcome: "ok"}) },
+		"marker": func() error { return s.SetExtUnsupported(ctx, "", "") },
+	} {
+		if err := fn(); !errors.Is(err, sql.ErrNoRows) {
+			t.Errorf("%s on a missing row = %v, want sql.ErrNoRows", name, err)
+		}
+	}
+
+	closed := newRBACStore(t)
+	if err := closed.Close(); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	if _, err := closed.OpenTelemetrySchedule(ctx, "x"); err == nil {
+		t.Error("OpenTelemetrySchedule: want an error from a closed database")
+	}
+	if err := closed.CloseTelemetrySchedule(ctx); err == nil {
+		t.Error("CloseTelemetrySchedule: want an error from a closed database")
+	}
+	if err := closed.RecordTelemetryResult(ctx, TelemetryResult{}); err == nil {
+		t.Error("RecordTelemetryResult: want an error from a closed database")
+	}
+	if err := closed.SetExtUnsupported(ctx, "", ""); err == nil {
+		t.Error("SetExtUnsupported: want an error from a closed database")
+	}
+}
diff --git a/api/internal/db/users.go b/api/internal/db/users.go
index f8a7d998d..fa1ed7544 100644
--- a/api/internal/db/users.go
+++ b/api/internal/db/users.go
@@ -7,11 +7,12 @@ import (
 )
 
 // DeleteUser removes a user account and every row tied to it, in one
-// transaction: the account's SSO links, preferences, sessions, API tokens and
-// role bindings are deleted, and the share links it created are revoked
-// (revocation, not a delete, keeps their audit trail). The rows are removed
-// explicitly rather than left to ON DELETE CASCADE, because the shipped
-// SQLite DSN runs with foreign keys off. Deleting an unknown id is a no-op.
+// transaction: the account's SSO links, preferences, sessions, API tokens,
+// role bindings, and telemetry notice acks are deleted, and the share links
+// it created are revoked (revocation, not a delete, keeps their audit trail).
+// The rows are removed explicitly rather than left to ON DELETE CASCADE,
+// because the shipped SQLite DSN runs with foreign keys off. Deleting an
+// unknown id is a no-op.
 func (s *Store) DeleteUser(ctx context.Context, userID int64) error {
 	tx, err := s.DB.BeginTx(ctx, nil)
 	if err != nil {
@@ -38,6 +39,9 @@ func (s *Store) DeleteUser(ctx context.Context, userID int64) error {
 	if err := s.DeleteUserBindings(ctx, tx, userID); err != nil {
 		return fmt.Errorf("delete user: %w", err)
 	}
+	if err := s.DeleteNoticeAcksForUser(ctx, tx, userID); err != nil {
+		return fmt.Errorf("delete user: %w", err)
+	}
 	if _, err := tx.ExecContext(ctx, `DELETE FROM users WHERE id = ?`, userID); err != nil {
 		return fmt.Errorf("delete user: users row: %w", err)
 	}
diff --git a/api/internal/handlers/config.go b/api/internal/handlers/config.go
index 48090d5a7..975af88f2 100644
--- a/api/internal/handlers/config.go
+++ b/api/internal/handlers/config.go
@@ -21,6 +21,7 @@ import (
 	"github.com/GameplanePanel/gameplane/api/internal/httperr"
 	"github.com/GameplanePanel/gameplane/api/internal/notify"
 	"github.com/GameplanePanel/gameplane/api/internal/registry"
+	"github.com/GameplanePanel/gameplane/api/internal/telemetry"
 )
 
 // MountConfig exposes the admin config store at /admin/config.
@@ -44,12 +45,21 @@ import (
 // in installTimeSettings.oidcHelmProvider (the raw seed, not merged with
 // helmOverride overrides). Passed as *auth.ProviderPolicy from main.go.
 func MountConfig(r chi.Router, store *db.Store, auditor *audit.Auditor, helmOIDCPresent bool, gameDataStorageClass string, helmPolicy *auth.ProviderPolicy) {
+	MountConfigWithTelemetry(r, store, auditor, helmOIDCPresent, gameDataStorageClass, helmPolicy, TelemetrySettings{})
+}
+
+// MountConfigWithTelemetry is MountConfig with the install's telemetry
+// setting, which the "telemetry" section's save hook needs to refuse a save
+// when the operator disabled telemetry and to schedule the first report.
+// MountConfig passes the zero value (no destination restriction, 24h).
+func MountConfigWithTelemetry(r chi.Router, store *db.Store, auditor *audit.Auditor, helmOIDCPresent bool, gameDataStorageClass string, helmPolicy *auth.ProviderPolicy, tel TelemetrySettings) {
 	h := &configHandler{
 		db:                   store,
 		auditor:              auditor,
 		validators:           newValidators(helmOIDCPresent),
 		gameDataStorageClass: gameDataStorageClass,
 		helmPolicy:           helmPolicy,
+		telemetry:            tel,
 	}
 	r.Route("/admin/config", func(r chi.Router) {
 		r.Get("/", h.getAll)
@@ -64,6 +74,7 @@ type configHandler struct {
 	validators           map[string]func([]byte) (json.RawMessage, error)
 	gameDataStorageClass string
 	helmPolicy           *auth.ProviderPolicy
+	telemetry            TelemetrySettings
 }
 
 func (h *configHandler) getAll(w http.ResponseWriter, req *http.Request) {
@@ -132,7 +143,18 @@ func (h *configHandler) put(w http.ResponseWriter, req *http.Request) {
 		auditEvents = h.detectAuthAuditEvents(req.Context(), canon)
 	}
 
-	if _, err := h.db.DB.ExecContext(req.Context(),
+	if section == "telemetry" {
+		// The telemetry section's post-save hook runs in the same
+		// transaction as the config write (see saveTelemetry).
+		if err := h.saveTelemetry(req.Context(), canon); err != nil {
+			if errors.Is(err, telemetry.ErrOperatorDisabled) {
+				http.Error(w, err.Error(), http.StatusConflict)
+				return
+			}
+			httperr.Write(w, req, err)
+			return
+		}
+	} else if _, err := h.db.DB.ExecContext(req.Context(),
 		`INSERT INTO config(key, value, updated_at)
 		 VALUES (?, ?, ?)
 		 ON CONFLICT(key) DO UPDATE SET
@@ -158,6 +180,22 @@ func (h *configHandler) put(w http.ResponseWriter, req *http.Request) {
 	writeJSON(w, map[string]any{"section": section, "value": canon})
 }
 
+// saveTelemetry persists the validated telemetry section through
+// telemetry.ApplyConsent, so one transaction writes the config row, sets
+// consent_source to "admin", creates or clears the install ID and opens or
+// closes the report schedule. It returns telemetry.ErrOperatorDisabled when
+// the operator disabled telemetry at install time.
+func (h *configHandler) saveTelemetry(ctx context.Context, canon json.RawMessage) error {
+	var c telemetryCfg
+	if err := json.Unmarshal(canon, &c); err != nil {
+		return fmt.Errorf("decode telemetry config: %w", err)
+	}
+	return inTx(ctx, h.db, func(tx *sql.Tx) error {
+		return telemetry.ApplyConsent(ctx, tx, h.telemetry.Dest, h.telemetry.Interval,
+			c.SendMetrics, c.Extended, db.TelemetryConsentAdmin)
+	})
+}
+
 // resetRoleMapping removes a single role's override from helmOverride.roleMappings
 // in the "auth" config row, restoring the Helm-seeded value for that role.
 // It is idempotent: returns 200 even if the role had no override.
@@ -723,6 +761,7 @@ func validateNotifications(body []byte) (json.RawMessage, error) {
 
 type telemetryCfg struct {
 	SendMetrics bool `json:"sendMetrics"`
+	Extended    bool `json:"extended"`
 }
 
 func validateTelemetry(body []byte) (json.RawMessage, error) {
@@ -730,6 +769,11 @@ func validateTelemetry(body []byte) (json.RawMessage, error) {
 	if err := json.Unmarshal(body, &c); err != nil {
 		return nil, fmt.Errorf("invalid json: %w", err)
 	}
+	// Turning basic off turns extended off with it, and the save succeeds
+	// (FR-003, spec Q7).
+	if !c.SendMetrics {
+		c.Extended = false
+	}
 	return json.Marshal(c)
 }
 
diff --git a/api/internal/handlers/config_test.go b/api/internal/handlers/config_test.go
index 42e4c0576..8655a4eaa 100644
--- a/api/internal/handlers/config_test.go
+++ b/api/internal/handlers/config_test.go
@@ -65,7 +65,7 @@ func doReq(t *testing.T, method, url string, body any) (int, []byte) {
 	return resp.StatusCode, out
 }
 
-func TestConfig_GetEmpty(t *testing.T) {
+func TestConfig_GetFreshInstallDefaults(t *testing.T) {
 	srv, _ := newConfigServer(t)
 	status, body := doReq(t, "GET", srv.URL+"/admin/config", nil)
 	if status != 200 {
@@ -75,8 +75,23 @@ func TestConfig_GetEmpty(t *testing.T) {
 	if err := json.Unmarshal(body, &got); err != nil {
 		t.Fatalf("unmarshal: %v; body=%s", err, body)
 	}
-	if len(got) != 0 {
-		t.Fatalf("want empty map, got %v", got)
+	// Migrate seeds the telemetry default on a fresh install (spec 022 FR-003).
+	if len(got) != 1 {
+		t.Fatalf("want one key, got %d: %v", len(got), got)
+	}
+	raw, ok := got["telemetry"]
+	if !ok {
+		t.Fatalf("want telemetry key, got %v", got)
+	}
+	var cfg map[string]any
+	if err := json.Unmarshal(raw, &cfg); err != nil {
+		t.Fatalf("unmarshal telemetry: %v", err)
+	}
+	if sendMetrics, ok := cfg["sendMetrics"].(bool); !ok || !sendMetrics {
+		t.Fatalf("want sendMetrics=true, got %v", cfg)
+	}
+	if extended, ok := cfg["extended"].(bool); !ok || !extended {
+		t.Fatalf("want extended=true, got %v", cfg)
 	}
 }
 
diff --git a/api/internal/handlers/config_validators_test.go b/api/internal/handlers/config_validators_test.go
index 7fd6fdd66..7a8e09e65 100644
--- a/api/internal/handlers/config_validators_test.go
+++ b/api/internal/handlers/config_validators_test.go
@@ -164,9 +164,19 @@ func TestValidateTelemetry(t *testing.T) {
 	if err != nil {
 		t.Fatalf("happy: %v", err)
 	}
-	if string(canon) != `{"sendMetrics":true}` {
+	if string(canon) != `{"sendMetrics":true,"extended":false}` {
 		t.Fatalf("canonicalized output: got %s", canon)
 	}
+	canon, err = validateTelemetry([]byte(`{"sendMetrics":true,"extended":true}`))
+	if err != nil || string(canon) != `{"sendMetrics":true,"extended":true}` {
+		t.Fatalf("both tiers on: got %s, %v", canon, err)
+	}
+	// Basic off turns extended off with it and the save is not rejected
+	// (FR-003, spec Q7).
+	canon, err = validateTelemetry([]byte(`{"sendMetrics":false,"extended":true}`))
+	if err != nil || string(canon) != `{"sendMetrics":false,"extended":false}` {
+		t.Fatalf("basic off must normalise extended off: got %s, %v", canon, err)
+	}
 	if _, err := validateTelemetry([]byte(`bogus`)); err == nil {
 		t.Fatal("expected json error")
 	}
diff --git a/api/internal/handlers/telemetry.go b/api/internal/handlers/telemetry.go
new file mode 100644
index 000000000..cda2728e2
--- /dev/null
+++ b/api/internal/handlers/telemetry.go
@@ -0,0 +1,360 @@
+package handlers
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"net/http"
+	"time"
+
+	"github.com/go-chi/chi/v5"
+
+	"github.com/GameplanePanel/gameplane/api/internal/auth"
+	"github.com/GameplanePanel/gameplane/api/internal/db"
+	"github.com/GameplanePanel/gameplane/api/internal/httperr"
+	"github.com/GameplanePanel/gameplane/api/internal/telemetry"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// Notice actions accepted by POST /admin/telemetry/notice.
+const (
+	noticeSeen        = "seen"
+	noticeKeep        = "keep"
+	noticeExtendedOff = "extended-off"
+	noticeAllOff      = "all-off"
+)
+
+// noticeBasicFields and noticeExtendedFields are the exact report fields the
+// first-login notice lists (contracts/report-schema.md).
+var (
+	noticeBasicFields    = []string{"version", "servers", "templates"}
+	noticeExtendedFields = []string{"installId", "env.k8s", "env.distro", "env.arch", "env.nodes", "games", "features"}
+)
+
+// TelemetrySettings is the install-time telemetry setting the config and
+// notice handlers need: where reports go and how far apart they are.
+type TelemetrySettings struct {
+	// Dest is the destination the API resolved at startup.
+	Dest telemetry.Destination
+	// Interval is the spacing between reports; zero means 24h.
+	Interval time.Duration
+	// Deps is what GET /admin/telemetry collects the preview from; it is the
+	// same value the reporter uses. A nil Deps.Store is filled with the
+	// handler's store.
+	Deps telemetry.Deps
+}
+
+// errExtendedOff is returned when an install-ID reset is asked for while the
+// extended tier is off: there is no ID to reset.
+var errExtendedOff = errors.New("extended telemetry is off: there is no install id to reset")
+
+// MountTelemetry exposes the telemetry status at /admin/telemetry, the install
+// ID reset at /admin/telemetry/install-id and the first-login notice at
+// /admin/telemetry/notice (spec 022, contracts/api-telemetry-http.md).
+func MountTelemetry(r chi.Router, store *db.Store, settings TelemetrySettings) {
+	if settings.Deps.Store == nil {
+		settings.Deps.Store = store
+	}
+	h := &telemetryHandler{db: store, settings: settings}
+	r.Route("/admin/telemetry", func(r chi.Router) {
+		r.Get("/", h.getTelemetry)
+		r.Post("/install-id", h.postInstallID)
+		r.Get("/notice", h.getNotice)
+		r.Post("/notice", h.postNotice)
+	})
+}
+
+type telemetryHandler struct {
+	db       *db.Store
+	settings TelemetrySettings
+}
+
+// noticeDestination is the destination as shown to an admin: its kind and
+// the URL host only, never the path, query or credentials.
+type noticeDestination struct {
+	Kind string `json:"kind"`
+	Host string `json:"host"`
+}
+
+// telemetryDestination is noticeDestination for GET /admin/telemetry: host is
+// null for the disabled and none kinds.
+type telemetryDestination struct {
+	Kind string  `json:"kind"`
+	Host *string `json:"host"`
+}
+
+type telemetryConsent struct {
+	Basic    bool   `json:"basic"`
+	Extended bool   `json:"extended"`
+	Source   string `json:"source"`
+}
+
+// telemetryStatus is the delivery status. It never carries a failure detail,
+// and the state's signing secret is not reachable from it.
+type telemetryStatus struct {
+	LastAttemptAt    *string `json:"lastAttemptAt"`
+	LastSuccessAt    *string `json:"lastSuccessAt"`
+	LastOutcome      string  `json:"lastOutcome"`
+	LastIDRotationAt *string `json:"lastIdRotationAt"`
+}
+
+type telemetryResponse struct {
+	Destination      telemetryDestination `json:"destination"`
+	OperatorDisabled bool                 `json:"operatorDisabled"`
+	Consent          telemetryConsent     `json:"consent"`
+	InstallID        *string              `json:"installId"`
+	// Preview is the exact report body the reporter would POST now, or null.
+	Preview json.RawMessage `json:"preview"`
+	Status  telemetryStatus `json:"status"`
+}
+
+// nullString returns nil for the empty string, so it encodes as JSON null.
+func nullString(s string) *string {
+	if s == "" {
+		return nil
+	}
+	return &s
+}
+
+// destSends reports whether the destination can receive reports at all.
+func destSends(d telemetry.Destination) bool {
+	return d.Kind != telemetry.KindDisabled && d.Kind != telemetry.KindNone
+}
+
+// getTelemetry serves GET /admin/telemetry (config:read). The preview is
+// built by telemetry.BuildReport, the function the reporter uses, and encoded
+// by telemetryschema.Encode, so it is byte-for-byte what would be POSTed,
+// apart from ext.sentAt (SC-006).
+func (h *telemetryHandler) getTelemetry(w http.ResponseWriter, req *http.Request) {
+	ctx := req.Context()
+	st, err := h.db.GetTelemetryState(ctx)
+	if err != nil {
+		httperr.Write(w, req, err)
+		return
+	}
+	c, err := telemetry.ReadConsent(ctx, h.db)
+	if err != nil {
+		httperr.Write(w, req, err)
+		return
+	}
+	dest := h.settings.Dest
+	resp := telemetryResponse{
+		Destination:      telemetryDestination{Kind: dest.Kind},
+		OperatorDisabled: dest.Kind == telemetry.KindDisabled,
+		Consent:          telemetryConsent{Basic: c.Basic, Extended: c.Extended, Source: st.ConsentSource},
+		Status: telemetryStatus{
+			LastAttemptAt:    nullString(st.LastAttemptAt),
+			LastSuccessAt:    nullString(st.LastSuccessAt),
+			LastOutcome:      st.LastOutcome,
+			LastIDRotationAt: nullString(st.LastIDRotationAt),
+		},
+	}
+	if destSends(dest) {
+		resp.Destination.Host = nullString(dest.Host)
+	}
+	if c.Extended {
+		resp.InstallID = nullString(st.InstallID)
+	}
+	if c.Basic && destSends(dest) {
+		now := time.Now().UTC()
+		extended := c.Extended && st.InstallID != "" && !telemetry.ExtWithheld(st, dest.URL, now)
+		rep, err := telemetry.BuildReport(ctx, h.settings.Deps, extended, now)
+		if err != nil {
+			httperr.Write(w, req, err)
+			return
+		}
+		body, err := telemetryschema.Encode(rep)
+		if err != nil {
+			httperr.Write(w, req, err)
+			return
+		}
+		resp.Preview = body
+	}
+	writeJSON(w, resp)
+}
+
+// postInstallID serves POST /admin/telemetry/install-id (config:manage). It
+// replaces the install ID, keeps the signing secret (so the new ID gets a new
+// key) and the schedule, and returns the new ID. It returns 409 when extended
+// is off or the operator disabled telemetry.
+func (h *telemetryHandler) postInstallID(w http.ResponseWriter, req *http.Request) {
+	ctx := req.Context()
+	var id string
+	err := inTx(ctx, h.db, func(tx *sql.Tx) error {
+		if h.settings.Dest.Kind == telemetry.KindDisabled {
+			return telemetry.ErrOperatorDisabled
+		}
+		c, err := telemetry.ReadConsentTx(ctx, tx)
+		if err != nil {
+			return err
+		}
+		if !c.Extended {
+			return errExtendedOff
+		}
+		st, err := db.GetTelemetryStateTx(ctx, tx)
+		if err != nil {
+			return err
+		}
+		if id, err = telemetry.NewInstallID(); err != nil {
+			return err
+		}
+		if err := db.EnsureSigningSecretTx(ctx, tx); err != nil {
+			return err
+		}
+		return db.UpdateTelemetryConsentTx(ctx, tx, st.ConsentSource, id, st.NextDueAt)
+	})
+	switch {
+	case errors.Is(err, telemetry.ErrOperatorDisabled), errors.Is(err, errExtendedOff):
+		http.Error(w, err.Error(), http.StatusConflict)
+	case err != nil:
+		httperr.Write(w, req, err)
+	default:
+		writeJSON(w, map[string]string{"installId": id})
+	}
+}
+
+type noticeFields struct {
+	Basic    []string `json:"basic"`
+	Extended []string `json:"extended"`
+}
+
+// noticeResponse omits everything but pending while the notice isn't pending.
+type noticeResponse struct {
+	Pending     bool               `json:"pending"`
+	Destination *noticeDestination `json:"destination,omitempty"`
+	Fields      *noticeFields      `json:"fields,omitempty"`
+}
+
+// pending reports whether the notice is pending for u: u holds config:manage,
+// a destination is in effect, no admin has made a choice yet (consent_source
+// is "default"), and u has not dismissed it.
+func (h *telemetryHandler) pending(ctx context.Context, u *auth.User) (bool, error) {
+	if !u.Can("config:manage", false, "", "") {
+		return false, nil
+	}
+	if h.settings.Dest.Kind == telemetry.KindDisabled || h.settings.Dest.Kind == telemetry.KindNone {
+		return false, nil
+	}
+	st, err := h.db.GetTelemetryState(ctx)
+	if err != nil {
+		return false, err
+	}
+	if st.ConsentSource != db.TelemetryConsentDefault {
+		return false, nil
+	}
+	acked, err := h.db.HasNoticeAck(ctx, u.ID)
+	if err != nil {
+		return false, err
+	}
+	return !acked, nil
+}
+
+func (h *telemetryHandler) getNotice(w http.ResponseWriter, req *http.Request) {
+	u := auth.UserFromContext(req.Context())
+	pending, err := h.pending(req.Context(), u)
+	if err != nil {
+		httperr.Write(w, req, err)
+		return
+	}
+	if !pending {
+		writeJSON(w, noticeResponse{})
+		return
+	}
+	writeJSON(w, noticeResponse{
+		Pending:     true,
+		Destination: &noticeDestination{Kind: h.settings.Dest.Kind, Host: h.settings.Dest.Host},
+		Fields:      &noticeFields{Basic: noticeBasicFields, Extended: noticeExtendedFields},
+	})
+}
+
+func (h *telemetryHandler) postNotice(w http.ResponseWriter, req *http.Request) {
+	ctx := req.Context()
+	u := auth.UserFromContext(ctx)
+	if u == nil {
+		http.Error(w, "unauthorized", http.StatusUnauthorized)
+		return
+	}
+	var body struct {
+		Action string `json:"action"`
+	}
+	if err := json.NewDecoder(http.MaxBytesReader(w, req.Body, 1<<10)).Decode(&body); err != nil {
+		http.Error(w, "invalid json", http.StatusBadRequest)
+		return
+	}
+	switch body.Action {
+	case noticeSeen, noticeKeep, noticeExtendedOff, noticeAllOff:
+	default:
+		http.Error(w, "action must be one of seen|keep|extended-off|all-off", http.StatusBadRequest)
+		return
+	}
+	pending, err := h.pending(ctx, u)
+	if err != nil {
+		httperr.Write(w, req, err)
+		return
+	}
+	if !pending {
+		if body.Action == noticeSeen {
+			w.WriteHeader(http.StatusNoContent) // a no-op, not an error
+			return
+		}
+		http.Error(w, "telemetry notice is not pending", http.StatusConflict)
+		return
+	}
+	err = inTx(ctx, h.db, func(tx *sql.Tx) error {
+		return h.apply(ctx, tx, u.ID, body.Action)
+	})
+	switch {
+	case errors.Is(err, telemetry.ErrOperatorDisabled):
+		http.Error(w, err.Error(), http.StatusConflict)
+	case err != nil:
+		httperr.Write(w, req, err)
+	default:
+		w.WriteHeader(http.StatusNoContent)
+	}
+}
+
+// apply performs one notice action inside tx. seen records no ack; the other
+// actions record the caller's ack in the same transaction as their effect.
+func (h *telemetryHandler) apply(ctx context.Context, tx *sql.Tx, userID int64, action string) error {
+	s := h.settings
+	switch action {
+	case noticeSeen:
+		return telemetry.MarkNoticeSeen(ctx, tx, s.Dest, s.Interval)
+	case noticeExtendedOff:
+		c, err := telemetry.ReadConsentTx(ctx, tx)
+		if err != nil {
+			return err
+		}
+		if err := telemetry.ApplyConsent(ctx, tx, s.Dest, s.Interval, c.Basic, false, db.TelemetryConsentAdmin); err != nil {
+			return err
+		}
+	case noticeAllOff:
+		if err := telemetry.ApplyConsent(ctx, tx, s.Dest, s.Interval, false, false, db.TelemetryConsentAdmin); err != nil {
+			return err
+		}
+	}
+	if err := db.InsertNoticeAckTx(ctx, tx, userID, action, time.Now().UTC().Format(time.RFC3339)); err != nil {
+		return err
+	}
+	return nil
+}
+
+// inTx runs fn in a transaction on store and commits when fn succeeds. A
+// SQLite store has one connection, so work that must commit together has to
+// share the transaction rather than reach for the store.
+func inTx(ctx context.Context, store *db.Store, fn func(tx *sql.Tx) error) error {
+	tx, err := store.DB.BeginTx(ctx, nil)
+	if err != nil {
+		return fmt.Errorf("begin: %w", err)
+	}
+	defer func() { _ = tx.Rollback() }()
+	if err := fn(tx); err != nil {
+		return err
+	}
+	if err := tx.Commit(); err != nil {
+		return fmt.Errorf("commit: %w", err)
+	}
+	return nil
+}
diff --git a/api/internal/handlers/telemetry_envtest_test.go b/api/internal/handlers/telemetry_envtest_test.go
new file mode 100644
index 000000000..504756bd1
--- /dev/null
+++ b/api/internal/handlers/telemetry_envtest_test.go
@@ -0,0 +1,777 @@
+//go:build envtest
+
+package handlers
+
+import (
+	"context"
+	"encoding/base64"
+	"encoding/hex"
+	"encoding/json"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/go-chi/chi/v5"
+
+	"github.com/GameplanePanel/gameplane/api/internal/auth"
+	"github.com/GameplanePanel/gameplane/api/internal/db"
+	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/api/internal/rbac"
+	"github.com/GameplanePanel/gameplane/api/internal/telemetry"
+)
+
+// Telemetry notice and config-hook tests (spec 022, US1).
+//
+// Each test builds its own router over its own in-memory store, with
+// rbac.Middleware in front, because the notice and the config hook change
+// the telemetry_state singleton: sharing captureAuditStore would let tests
+// disturb each other. Callers are injected with auth.WithUser through
+// doConfigAsUser (config_envtest_test.go).
+
+var telemetryBundledDest = telemetry.Destination{
+	Kind: telemetry.KindBundled, URL: "http://receiver.test:8080/ingest", Host: "receiver.test:8080",
+}
+
+// newTelemetryRouter returns a router with the config and telemetry routes
+// mounted for dest, and the fresh-install store behind it (consent_source
+// "default", basic and extended on, notice not shown).
+func newTelemetryRouter(t *testing.T, dest telemetry.Destination) (*chi.Mux, *db.Store) {
+	t.Helper()
+	store, err := db.Open(context.Background(), "sqlite",
+		"file:"+uniqueResourceName("telemetry")+"?mode=memory&cache=shared&_pragma=journal_mode(WAL)")
+	if err != nil {
+		t.Fatalf("open store: %v", err)
+	}
+	t.Cleanup(func() { _ = store.Close() })
+	if err := store.Migrate(context.Background()); err != nil {
+		t.Fatalf("migrate: %v", err)
+	}
+	settings := TelemetrySettings{Dest: dest, Interval: time.Hour}
+	r := chi.NewRouter()
+	r.Use(rbac.Middleware(kube.NewRegistry("default")))
+	MountConfigWithTelemetry(r, store, nil, false, "", nil, settings)
+	MountTelemetry(r, store, settings)
+	return r, store
+}
+
+// telemetryAdmin is an admin ("*") with the given user ID.
+func telemetryAdmin(id int64) *auth.User {
+	u := configAdminUser()
+	u.ID = id
+	return u
+}
+
+// telemetryReader holds config:read but not config:manage.
+func telemetryReader() *auth.User {
+	return &auth.User{
+		ID:       200,
+		Username: "telemetry-reader",
+		Perms: map[string]map[string]map[string]struct{}{
+			"*": {"*": {"config:read": {}}},
+		},
+	}
+}
+
+func telemetryState(t *testing.T, store *db.Store) db.TelemetryState {
+	t.Helper()
+	st, err := store.GetTelemetryState(context.Background())
+	if err != nil {
+		t.Fatalf("get telemetry state: %v", err)
+	}
+	return st
+}
+
+func telemetryConfigValue(t *testing.T, store *db.Store) string {
+	t.Helper()
+	v, ok, err := store.ConfigValue(context.Background(), "telemetry")
+	if err != nil || !ok {
+		t.Fatalf("read telemetry config: %q, %v, %v", v, ok, err)
+	}
+	return v
+}
+
+// getNotice calls GET /admin/telemetry/notice as u and decodes the object.
+func getNotice(t *testing.T, r http.Handler, u *auth.User) map[string]any {
+	t.Helper()
+	rr := doConfigAsUser(t, r, u, http.MethodGet, "/admin/telemetry/notice", nil)
+	if rr.Code != http.StatusOK {
+		t.Fatalf("GET notice = %d, want 200; body=%s", rr.Code, rr.Body.String())
+	}
+	var out map[string]any
+	if err := json.Unmarshal(rr.Body.Bytes(), &out); err != nil {
+		t.Fatalf("decode notice %q: %v", rr.Body.String(), err)
+	}
+	return out
+}
+
+func postNotice(t *testing.T, r http.Handler, u *auth.User, action string) *httptest.ResponseRecorder {
+	t.Helper()
+	return doConfigAsUser(t, r, u, http.MethodPost, "/admin/telemetry/notice", map[string]string{"action": action})
+}
+
+func TestTelemetryNotice_PendingOnlyForManagersOnADefaultInstallWithADestination(t *testing.T) {
+	t.Run("a manager on a default install sees the notice", func(t *testing.T) {
+		r, _ := newTelemetryRouter(t, telemetryBundledDest)
+		got := getNotice(t, r, telemetryAdmin(1))
+		if got["pending"] != true {
+			t.Fatalf("notice = %v, want pending", got)
+		}
+		dest, _ := got["destination"].(map[string]any)
+		if dest["kind"] != "bundled" || dest["host"] != "receiver.test:8080" {
+			t.Fatalf("destination = %v, want kind bundled and the URL host only", dest)
+		}
+		fields, _ := got["fields"].(map[string]any)
+		basic, _ := fields["basic"].([]any)
+		extended, _ := fields["extended"].([]any)
+		if len(basic) != 3 || len(extended) != 7 {
+			t.Fatalf("fields = %v, want 3 basic and 7 extended", fields)
+		}
+	})
+
+	t.Run("a reader without config:manage gets pending false only", func(t *testing.T) {
+		r, _ := newTelemetryRouter(t, telemetryBundledDest)
+		got := getNotice(t, r, telemetryReader())
+		if got["pending"] != false || len(got) != 1 {
+			t.Fatalf("notice = %v, want exactly {pending:false}", got)
+		}
+	})
+
+	t.Run("a user without config:read is refused by RBAC", func(t *testing.T) {
+		r, _ := newTelemetryRouter(t, telemetryBundledDest)
+		rr := doConfigAsUser(t, r, configOperatorUser(), http.MethodGet, "/admin/telemetry/notice", nil)
+		if rr.Code != http.StatusForbidden {
+			t.Fatalf("operator GET notice = %d, want 403", rr.Code)
+		}
+	})
+
+	for _, dest := range []telemetry.Destination{{Kind: telemetry.KindNone}, {Kind: telemetry.KindDisabled}} {
+		t.Run("not pending with destination "+dest.Kind, func(t *testing.T) {
+			r, _ := newTelemetryRouter(t, dest)
+			if got := getNotice(t, r, telemetryAdmin(1)); got["pending"] != false || len(got) != 1 {
+				t.Fatalf("notice = %v, want exactly {pending:false}", got)
+			}
+		})
+	}
+
+	t.Run("not pending once an admin made a choice", func(t *testing.T) {
+		r, store := newTelemetryRouter(t, telemetryBundledDest)
+		rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPut, "/admin/config/telemetry",
+			map[string]bool{"sendMetrics": true, "extended": true})
+		if rr.Code != http.StatusOK {
+			t.Fatalf("PUT = %d; body=%s", rr.Code, rr.Body.String())
+		}
+		if got := getNotice(t, r, telemetryAdmin(2)); got["pending"] != false {
+			t.Fatalf("notice = %v, want not pending after an explicit choice", got)
+		}
+		if st := telemetryState(t, store); st.ConsentSource != db.TelemetryConsentAdmin {
+			t.Fatalf("consent source = %q, want admin", st.ConsentSource)
+		}
+	})
+}
+
+func TestTelemetryNotice_SeenSetsNoticeShownOnce(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+
+	if st := telemetryState(t, store); st.NoticeShownAt != "" || st.NextDueAt != "" {
+		t.Fatalf("fresh state = %+v, want no notice and no slot", st)
+	}
+	if rr := postNotice(t, r, admin, "seen"); rr.Code != http.StatusNoContent {
+		t.Fatalf("seen = %d, want 204; body=%s", rr.Code, rr.Body.String())
+	}
+	first := telemetryState(t, store)
+	if first.NoticeShownAt == "" || first.NextDueAt == "" || first.InstallID == "" {
+		t.Fatalf("state after seen = %+v, want the notice stamped, the schedule open and an install id", first)
+	}
+	if first.ConsentSource != db.TelemetryConsentDefault {
+		t.Fatalf("consent source = %q, seen must leave it as default", first.ConsentSource)
+	}
+	if acked, err := store.HasNoticeAck(context.Background(), admin.ID); err != nil || acked {
+		t.Fatalf("HasNoticeAck = %v, %v; seen must record no ack", acked, err)
+	}
+
+	if rr := postNotice(t, r, admin, "seen"); rr.Code != http.StatusNoContent {
+		t.Fatalf("second seen = %d, want 204", rr.Code)
+	}
+	if again := telemetryState(t, store); again != first {
+		t.Fatalf("a second seen changed the state: %+v then %+v", first, again)
+	}
+	if got := getNotice(t, r, admin); got["pending"] != true {
+		t.Fatal("seen alone must not dismiss the notice")
+	}
+}
+
+func TestTelemetryNotice_SeenIsANoOpWhenNotPending(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetry.Destination{Kind: telemetry.KindNone})
+	if rr := postNotice(t, r, telemetryAdmin(1), "seen"); rr.Code != http.StatusNoContent {
+		t.Fatalf("seen = %d, want 204", rr.Code)
+	}
+	if st := telemetryState(t, store); st.NoticeShownAt != "" {
+		t.Fatalf("notice_shown_at = %q, want it untouched when nothing is pending", st.NoticeShownAt)
+	}
+}
+
+func TestTelemetryNotice_KeepOnlyAcksTheCaller(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	before := telemetryConfigValue(t, store)
+
+	if rr := postNotice(t, r, admin, "keep"); rr.Code != http.StatusNoContent {
+		t.Fatalf("keep = %d, want 204; body=%s", rr.Code, rr.Body.String())
+	}
+	if got := telemetryConfigValue(t, store); got != before {
+		t.Fatalf("config = %s, keep must leave consent unchanged (was %s)", got, before)
+	}
+	if st := telemetryState(t, store); st.ConsentSource != db.TelemetryConsentDefault {
+		t.Fatalf("consent source = %q, keep must leave it as default", st.ConsentSource)
+	}
+	if acked, err := store.HasNoticeAck(context.Background(), admin.ID); err != nil || !acked {
+		t.Fatalf("HasNoticeAck = %v, %v; want the caller's ack recorded", acked, err)
+	}
+	if got := getNotice(t, r, admin); got["pending"] != false {
+		t.Fatalf("notice = %v, want it dismissed for the caller", got)
+	}
+	if got := getNotice(t, r, telemetryAdmin(2)); got["pending"] != true {
+		t.Fatalf("notice = %v, want it still pending for another admin", got)
+	}
+}
+
+func TestTelemetryNotice_ExtendedOffKeepsBasic(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	if rr := postNotice(t, r, admin, "seen"); rr.Code != http.StatusNoContent {
+		t.Fatalf("seen = %d", rr.Code)
+	}
+	if telemetryState(t, store).InstallID == "" {
+		t.Fatal("setup: seen should have created the install id")
+	}
+
+	if rr := postNotice(t, r, admin, "extended-off"); rr.Code != http.StatusNoContent {
+		t.Fatalf("extended-off = %d, want 204; body=%s", rr.Code, rr.Body.String())
+	}
+	if got := telemetryConfigValue(t, store); got != `{"sendMetrics":true,"extended":false}` {
+		t.Fatalf("config = %s, want basic on and extended off", got)
+	}
+	st := telemetryState(t, store)
+	if st.ConsentSource != db.TelemetryConsentAdmin || st.InstallID != "" || st.NextDueAt == "" {
+		t.Fatalf("state = %+v, want source admin, the ID deleted and basic reporting still scheduled", st)
+	}
+	if acked, err := store.HasNoticeAck(context.Background(), admin.ID); err != nil || !acked {
+		t.Fatalf("HasNoticeAck = %v, %v; want an ack", acked, err)
+	}
+}
+
+func TestTelemetryNotice_AllOffStopsEverything(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	if rr := postNotice(t, r, admin, "seen"); rr.Code != http.StatusNoContent {
+		t.Fatalf("seen = %d", rr.Code)
+	}
+
+	if rr := postNotice(t, r, admin, "all-off"); rr.Code != http.StatusNoContent {
+		t.Fatalf("all-off = %d, want 204; body=%s", rr.Code, rr.Body.String())
+	}
+	if got := telemetryConfigValue(t, store); got != `{"sendMetrics":false,"extended":false}` {
+		t.Fatalf("config = %s, want both tiers off", got)
+	}
+	st := telemetryState(t, store)
+	if st.ConsentSource != db.TelemetryConsentAdmin || st.InstallID != "" || st.NextDueAt != "" {
+		t.Fatalf("state = %+v, want source admin, no ID and the schedule closed", st)
+	}
+	if acked, err := store.HasNoticeAck(context.Background(), admin.ID); err != nil || !acked {
+		t.Fatalf("HasNoticeAck = %v, %v; want an ack", acked, err)
+	}
+}
+
+func TestTelemetryNotice_ActionsConflictWhenNotPending(t *testing.T) {
+	r, _ := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	if rr := postNotice(t, r, admin, "keep"); rr.Code != http.StatusNoContent {
+		t.Fatalf("keep = %d", rr.Code)
+	}
+	for _, action := range []string{"keep", "extended-off", "all-off"} {
+		if rr := postNotice(t, r, admin, action); rr.Code != http.StatusConflict {
+			t.Errorf("%s after dismissal = %d, want 409", action, rr.Code)
+		}
+	}
+
+	none, _ := newTelemetryRouter(t, telemetry.Destination{Kind: telemetry.KindNone})
+	if rr := postNotice(t, none, admin, "all-off"); rr.Code != http.StatusConflict {
+		t.Errorf("all-off with no destination = %d, want 409", rr.Code)
+	}
+}
+
+func TestTelemetryNotice_BadRequestsAndForbidden(t *testing.T) {
+	r, _ := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+
+	if rr := postNotice(t, r, admin, "explode"); rr.Code != http.StatusBadRequest {
+		t.Errorf("unknown action = %d, want 400", rr.Code)
+	}
+	req := httptest.NewRequestWithContext(auth.WithUser(context.Background(), admin),
+		http.MethodPost, "/admin/telemetry/notice", strings.NewReader("{nope"))
+	rr := httptest.NewRecorder()
+	r.ServeHTTP(rr, req)
+	if rr.Code != http.StatusBadRequest {
+		t.Errorf("malformed body = %d, want 400", rr.Code)
+	}
+	if rr := postNotice(t, r, telemetryReader(), "keep"); rr.Code != http.StatusForbidden {
+		t.Errorf("POST without config:manage = %d, want 403", rr.Code)
+	}
+}
+
+func TestTelemetryConfig_BasicOffStoresExtendedOffAndDeletesID(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	put := func(sendMetrics, extended bool) *httptest.ResponseRecorder {
+		return doConfigAsUser(t, r, admin, http.MethodPut, "/admin/config/telemetry",
+			map[string]bool{"sendMetrics": sendMetrics, "extended": extended})
+	}
+
+	if rr := put(true, true); rr.Code != http.StatusOK {
+		t.Fatalf("PUT on = %d; body=%s", rr.Code, rr.Body.String())
+	}
+	if telemetryState(t, store).InstallID == "" {
+		t.Fatal("setup: turning extended on should create the install id")
+	}
+
+	rr := put(false, true)
+	if rr.Code != http.StatusOK {
+		t.Fatalf("PUT {sendMetrics:false, extended:true} = %d, want 200; body=%s", rr.Code, rr.Body.String())
+	}
+	var resp struct {
+		Section string          `json:"section"`
+		Value   json.RawMessage `json:"value"`
+	}
+	if err := json.Unmarshal(rr.Body.Bytes(), &resp); err != nil {
+		t.Fatalf("decode response: %v", err)
+	}
+	if resp.Section != "telemetry" || string(resp.Value) != `{"sendMetrics":false,"extended":false}` {
+		t.Fatalf("response = %s, want the normalised value with extended false", rr.Body.String())
+	}
+	if got := telemetryConfigValue(t, store); got != `{"sendMetrics":false,"extended":false}` {
+		t.Fatalf("stored config = %s, want extended stored off", got)
+	}
+	st := telemetryState(t, store)
+	if st.InstallID != "" || st.NextDueAt != "" || st.ConsentSource != db.TelemetryConsentAdmin {
+		t.Fatalf("state = %+v, want the ID deleted, the schedule closed and source admin", st)
+	}
+}
+
+func TestTelemetryConfig_SaveCreatesAndDeletesInstallIDAndSetsAdminSource(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	put := func(sendMetrics, extended bool) {
+		t.Helper()
+		rr := doConfigAsUser(t, r, admin, http.MethodPut, "/admin/config/telemetry",
+			map[string]bool{"sendMetrics": sendMetrics, "extended": extended})
+		if rr.Code != http.StatusOK {
+			t.Fatalf("PUT {%v,%v} = %d; body=%s", sendMetrics, extended, rr.Code, rr.Body.String())
+		}
+	}
+
+	if telemetryState(t, store).ConsentSource != db.TelemetryConsentDefault {
+		t.Fatal("setup: a fresh install starts with source default")
+	}
+	put(true, true)
+	st := telemetryState(t, store)
+	if st.ConsentSource != db.TelemetryConsentAdmin || st.InstallID == "" || st.NextDueAt == "" {
+		t.Fatalf("after extended on: %+v, want source admin, an ID and an open schedule", st)
+	}
+	put(true, false)
+	if st := telemetryState(t, store); st.InstallID != "" || st.NextDueAt == "" {
+		t.Fatalf("after extended off: %+v, want the ID deleted and basic still scheduled", st)
+	}
+	put(true, true)
+	if again := telemetryState(t, store); again.InstallID == "" || again.InstallID == st.InstallID {
+		t.Fatalf("after extended on again: id %q (was %q), want a new one", again.InstallID, st.InstallID)
+	}
+}
+
+func TestTelemetryConfig_OperatorDisabledIsRefusedWith409(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetry.Destination{Kind: telemetry.KindDisabled})
+	before := telemetryConfigValue(t, store)
+
+	rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPut, "/admin/config/telemetry",
+		map[string]bool{"sendMetrics": false, "extended": false})
+	if rr.Code != http.StatusConflict {
+		t.Fatalf("PUT = %d, want 409; body=%s", rr.Code, rr.Body.String())
+	}
+	if !strings.Contains(rr.Body.String(), "telemetry is disabled by the operator") {
+		t.Fatalf("body = %q, want the operator-disabled message", rr.Body.String())
+	}
+	if got := telemetryConfigValue(t, store); got != before {
+		t.Fatalf("config = %s, a refused save must change nothing (was %s)", got, before)
+	}
+	if st := telemetryState(t, store); st.ConsentSource != db.TelemetryConsentDefault {
+		t.Fatalf("consent source = %q, a refused save must leave it alone", st.ConsentSource)
+	}
+}
+
+func TestTelemetryConfig_PutNeedsManagePermission(t *testing.T) {
+	r, _ := newTelemetryRouter(t, telemetryBundledDest)
+	rr := doConfigAsUser(t, r, telemetryReader(), http.MethodPut, "/admin/config/telemetry",
+		map[string]bool{"sendMetrics": false, "extended": false})
+	if rr.Code != http.StatusForbidden {
+		t.Fatalf("PUT without config:manage = %d, want 403", rr.Code)
+	}
+}
+
+// ---- GET /admin/telemetry and POST /admin/telemetry/install-id (US2, US3) ----
+
+// newTelemetryRouterFor is newTelemetryRouter with explicit settings, for
+// tests that also need the reporter's Deps (version) or its destination URL.
+func newTelemetryRouterFor(t *testing.T, settings TelemetrySettings) (*chi.Mux, *db.Store) {
+	t.Helper()
+	store, err := db.Open(context.Background(), "sqlite",
+		"file:"+uniqueResourceName("telemetry")+"?mode=memory&cache=shared&_pragma=journal_mode(WAL)")
+	if err != nil {
+		t.Fatalf("open store: %v", err)
+	}
+	t.Cleanup(func() { _ = store.Close() })
+	if err := store.Migrate(context.Background()); err != nil {
+		t.Fatalf("migrate: %v", err)
+	}
+	r := chi.NewRouter()
+	r.Use(rbac.Middleware(kube.NewRegistry("default")))
+	MountConfigWithTelemetry(r, store, nil, false, "", nil, settings)
+	MountTelemetry(r, store, settings)
+	return r, store
+}
+
+// getTelemetry calls GET /admin/telemetry as u and decodes the object. The
+// raw body is returned too, for checks on what must not appear in it.
+func getTelemetry(t *testing.T, r http.Handler, u *auth.User) (map[string]any, string) {
+	t.Helper()
+	rr := doConfigAsUser(t, r, u, http.MethodGet, "/admin/telemetry", nil)
+	if rr.Code != http.StatusOK {
+		t.Fatalf("GET /admin/telemetry = %d, want 200; body=%s", rr.Code, rr.Body.String())
+	}
+	var out map[string]any
+	if err := json.Unmarshal(rr.Body.Bytes(), &out); err != nil {
+		t.Fatalf("decode %q: %v", rr.Body.String(), err)
+	}
+	return out, rr.Body.String()
+}
+
+func putTelemetryConsent(t *testing.T, r http.Handler, sendMetrics, extended bool) {
+	t.Helper()
+	rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPut, "/admin/config/telemetry",
+		map[string]bool{"sendMetrics": sendMetrics, "extended": extended})
+	if rr.Code != http.StatusOK {
+		t.Fatalf("PUT telemetry {%v,%v} = %d; body=%s", sendMetrics, extended, rr.Code, rr.Body.String())
+	}
+}
+
+// previewExt returns the preview's ext object, or nil when there is none.
+func previewExt(t *testing.T, got map[string]any) map[string]any {
+	t.Helper()
+	preview, ok := got["preview"].(map[string]any)
+	if !ok {
+		t.Fatalf("preview = %v, want an object", got["preview"])
+	}
+	ext, _ := preview["ext"].(map[string]any)
+	return ext
+}
+
+func TestTelemetryGet_EveryDestinationKind(t *testing.T) {
+	cases := []struct {
+		name         string
+		dest         telemetry.Destination
+		host         any // the expected destination.host, nil for JSON null
+		disabled     bool
+		wantsPreview bool
+	}{
+		{"default", telemetry.Destination{Kind: telemetry.KindDefault, URL: "https://telemetry.example.org/ingest?k=secret", Host: "telemetry.example.org"}, "telemetry.example.org", false, true},
+		{"custom", telemetry.Destination{Kind: telemetry.KindCustom, URL: "http://custom.test:9000/ingest", Host: "custom.test:9000"}, "custom.test:9000", false, true},
+		{"bundled", telemetryBundledDest, "receiver.test:8080", false, true},
+		{"disabled", telemetry.Destination{Kind: telemetry.KindDisabled}, nil, true, false},
+		{"none", telemetry.Destination{Kind: telemetry.KindNone}, nil, false, false},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			r, _ := newTelemetryRouter(t, tc.dest)
+			got, raw := getTelemetry(t, r, telemetryAdmin(1))
+
+			dest, _ := got["destination"].(map[string]any)
+			if dest["kind"] != tc.dest.Kind || dest["host"] != tc.host {
+				t.Fatalf("destination = %v, want kind %q and host %v (never the path or query)", dest, tc.dest.Kind, tc.host)
+			}
+			if strings.Contains(raw, "secret") || strings.Contains(raw, "/ingest") {
+				t.Fatalf("body leaks the destination URL: %s", raw)
+			}
+			if got["operatorDisabled"] != tc.disabled {
+				t.Fatalf("operatorDisabled = %v, want %v", got["operatorDisabled"], tc.disabled)
+			}
+			// The stored choice is reported even when the operator's setting
+			// overrides it.
+			consent, _ := got["consent"].(map[string]any)
+			if consent["basic"] != true || consent["extended"] != true || consent["source"] != "default" {
+				t.Fatalf("consent = %v, want the fresh-install default", consent)
+			}
+			if tc.wantsPreview {
+				preview, ok := got["preview"].(map[string]any)
+				if !ok || preview["servers"] != float64(0) || preview["templates"] != float64(0) {
+					t.Fatalf("preview = %v, want a basic report with zero counts", got["preview"])
+				}
+				// A fresh install has no ID until the notice is seen, so the
+				// preview carries no ext part yet.
+				if _, hasExt := preview["ext"]; hasExt || got["installId"] != nil {
+					t.Fatalf("preview ext / installId = %v / %v, want none before an ID exists", preview["ext"], got["installId"])
+				}
+			} else if got["preview"] != nil {
+				t.Fatalf("preview = %v, want null for kind %s", got["preview"], tc.name)
+			}
+			status, _ := got["status"].(map[string]any)
+			if status["lastOutcome"] != "never" || status["lastAttemptAt"] != nil ||
+				status["lastSuccessAt"] != nil || status["lastIdRotationAt"] != nil {
+				t.Fatalf("status = %v, want never with every timestamp null", status)
+			}
+		})
+	}
+}
+
+func TestTelemetryGet_InstallIDAndPreviewFollowTheTiers(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+
+	putTelemetryConsent(t, r, true, true)
+	got, _ := getTelemetry(t, r, admin)
+	id := telemetryState(t, store).InstallID
+	if id == "" || got["installId"] != id {
+		t.Fatalf("installId = %v, want the stored id %q while extended is on", got["installId"], id)
+	}
+	ext := previewExt(t, got)
+	if ext == nil || ext["installId"] != id || ext["key"] == "" || ext["sentAt"] == "" {
+		t.Fatalf("preview ext = %v, want the id, the public key and a send time", ext)
+	}
+
+	putTelemetryConsent(t, r, true, false)
+	got, _ = getTelemetry(t, r, admin)
+	if got["installId"] != nil || previewExt(t, got) != nil {
+		t.Fatalf("installId / ext = %v / %v, want none while extended is off (FR-012)", got["installId"], previewExt(t, got))
+	}
+
+	putTelemetryConsent(t, r, false, false)
+	got, _ = getTelemetry(t, r, admin)
+	if got["preview"] != nil {
+		t.Fatalf("preview = %v, want null while basic is off", got["preview"])
+	}
+}
+
+func TestTelemetryGet_PreviewHonoursTheFallbackMarker(t *testing.T) {
+	dest := telemetry.Destination{Kind: telemetry.KindCustom, URL: "http://old.test/ingest", Host: "old.test"}
+	r, store := newTelemetryRouter(t, dest)
+	putTelemetryConsent(t, r, true, true)
+	if err := store.SetExtUnsupported(context.Background(),
+		time.Now().Add(24*time.Hour).UTC().Format(time.RFC3339), dest.URL); err != nil {
+		t.Fatalf("set marker: %v", err)
+	}
+	got, _ := getTelemetry(t, r, telemetryAdmin(1))
+	if previewExt(t, got) != nil {
+		t.Fatal("the preview must be basic only while the endpoint is marked as not understanding ext")
+	}
+	if consent, _ := got["consent"].(map[string]any); consent["extended"] != true || got["installId"] == nil {
+		t.Fatalf("consent / installId = %v / %v, the stored choice and the ID are unaffected", got["consent"], got["installId"])
+	}
+}
+
+func TestTelemetryGet_StatusReportsTheStoredDelivery(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	putTelemetryConsent(t, r, true, true)
+	st := telemetryState(t, store)
+	st.LastAttemptAt = "2026-10-06T09:12:44Z"
+	st.LastSuccessAt = "2026-10-05T09:12:44Z"
+	st.LastOutcome = "failed"
+	st.LastIDRotationAt = "2026-10-04T08:00:00Z"
+	if err := store.UpdateTelemetryState(context.Background(), st); err != nil {
+		t.Fatalf("update state: %v", err)
+	}
+
+	got, _ := getTelemetry(t, r, telemetryAdmin(1))
+	status, _ := got["status"].(map[string]any)
+	want := map[string]any{
+		"lastAttemptAt":    "2026-10-06T09:12:44Z",
+		"lastSuccessAt":    "2026-10-05T09:12:44Z",
+		"lastOutcome":      "failed",
+		"lastIdRotationAt": "2026-10-04T08:00:00Z",
+	}
+	if !reflect.DeepEqual(status, want) {
+		t.Fatalf("status = %v, want %v", status, want)
+	}
+}
+
+func TestTelemetryGet_NeverExposesTheSigningSecret(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	putTelemetryConsent(t, r, true, true)
+	secret, err := store.EnsureSigningSecret(context.Background())
+	if err != nil || len(secret) == 0 {
+		t.Fatalf("signing secret = %x, %v, want one created by the save", secret, err)
+	}
+	_, raw := getTelemetry(t, r, telemetryAdmin(1))
+	for _, enc := range []string{
+		base64.StdEncoding.EncodeToString(secret), base64.RawURLEncoding.EncodeToString(secret),
+		base64.RawStdEncoding.EncodeToString(secret), hex.EncodeToString(secret), "signing",
+	} {
+		if strings.Contains(raw, enc) {
+			t.Fatalf("GET /admin/telemetry leaks the signing secret (%q): %s", enc, raw)
+		}
+	}
+}
+
+func TestTelemetryGet_NeedsConfigRead(t *testing.T) {
+	r, _ := newTelemetryRouter(t, telemetryBundledDest)
+	if got, _ := getTelemetry(t, r, telemetryReader()); got["destination"] == nil {
+		t.Fatalf("a config:read holder must get the status, got %v", got)
+	}
+	if rr := doConfigAsUser(t, r, configOperatorUser(), http.MethodGet, "/admin/telemetry", nil); rr.Code != http.StatusForbidden {
+		t.Fatalf("operator GET = %d, want 403", rr.Code)
+	}
+}
+
+func TestTelemetryInstallID_ResetReplacesTheIDAndKeepsTheRest(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	admin := telemetryAdmin(1)
+	putTelemetryConsent(t, r, true, true)
+	before := telemetryState(t, store)
+	secretBefore, err := store.EnsureSigningSecret(context.Background())
+	if err != nil {
+		t.Fatalf("secret: %v", err)
+	}
+
+	rr := doConfigAsUser(t, r, admin, http.MethodPost, "/admin/telemetry/install-id", nil)
+	if rr.Code != http.StatusOK {
+		t.Fatalf("reset = %d, want 200; body=%s", rr.Code, rr.Body.String())
+	}
+	var resp map[string]string
+	if err := json.Unmarshal(rr.Body.Bytes(), &resp); err != nil || len(resp) != 1 {
+		t.Fatalf("reset body = %q (%v), want exactly {installId}", rr.Body.String(), err)
+	}
+	after := telemetryState(t, store)
+	if resp["installId"] == "" || resp["installId"] == before.InstallID || after.InstallID != resp["installId"] {
+		t.Fatalf("ids: response %q stored %q before %q, want a new id stored and returned", resp["installId"], after.InstallID, before.InstallID)
+	}
+	if after.ConsentSource != before.ConsentSource || after.NextDueAt != before.NextDueAt || after.LastIDRotationAt != "" {
+		t.Fatalf("state = %+v, want the source, the schedule and the rotation stamp unchanged (was %+v)", after, before)
+	}
+	if secretAfter, err := store.EnsureSigningSecret(context.Background()); err != nil || string(secretAfter) != string(secretBefore) {
+		t.Fatalf("a reset must keep the signing secret: %v", err)
+	}
+	got, _ := getTelemetry(t, r, admin)
+	if got["installId"] != resp["installId"] || previewExt(t, got)["installId"] != resp["installId"] {
+		t.Fatalf("GET after reset = %v, want the preview to show the new id at once", got)
+	}
+}
+
+func TestTelemetryInstallID_CreatesTheFirstIDOnAFreshInstall(t *testing.T) {
+	r, store := newTelemetryRouter(t, telemetryBundledDest)
+	// Fresh install: extended is on in the stored choice but no ID exists yet.
+	if rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPost, "/admin/telemetry/install-id", nil); rr.Code != http.StatusOK {
+		t.Fatalf("reset = %d, want 200; body=%s", rr.Code, rr.Body.String())
+	}
+	if st := telemetryState(t, store); st.InstallID == "" || st.ConsentSource != db.TelemetryConsentDefault {
+		t.Fatalf("state = %+v, want an ID and the source still default", st)
+	}
+}
+
+func TestTelemetryInstallID_RefusedWhenExtendedOffOrOperatorDisabled(t *testing.T) {
+	t.Run("extended off", func(t *testing.T) {
+		r, store := newTelemetryRouter(t, telemetryBundledDest)
+		putTelemetryConsent(t, r, true, false)
+		rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPost, "/admin/telemetry/install-id", nil)
+		if rr.Code != http.StatusConflict {
+			t.Fatalf("reset = %d, want 409; body=%s", rr.Code, rr.Body.String())
+		}
+		if telemetryState(t, store).InstallID != "" {
+			t.Fatal("a refused reset must not create an ID")
+		}
+	})
+	t.Run("basic off", func(t *testing.T) {
+		r, _ := newTelemetryRouter(t, telemetryBundledDest)
+		putTelemetryConsent(t, r, false, true)
+		if rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPost, "/admin/telemetry/install-id", nil); rr.Code != http.StatusConflict {
+			t.Fatalf("reset = %d, want 409", rr.Code)
+		}
+	})
+	t.Run("operator disabled", func(t *testing.T) {
+		r, _ := newTelemetryRouter(t, telemetry.Destination{Kind: telemetry.KindDisabled})
+		rr := doConfigAsUser(t, r, telemetryAdmin(1), http.MethodPost, "/admin/telemetry/install-id", nil)
+		if rr.Code != http.StatusConflict || !strings.Contains(rr.Body.String(), "disabled by the operator") {
+			t.Fatalf("reset = %d %q, want 409 with the operator message", rr.Code, rr.Body.String())
+		}
+	})
+	t.Run("needs config:manage", func(t *testing.T) {
+		r, _ := newTelemetryRouter(t, telemetryBundledDest)
+		if rr := doConfigAsUser(t, r, telemetryReader(), http.MethodPost, "/admin/telemetry/install-id", nil); rr.Code != http.StatusForbidden {
+			t.Fatalf("reset by a reader = %d, want 403", rr.Code)
+		}
+	})
+}
+
+// SC-006: the preview is the body the reporter POSTs, apart from the send time.
+func TestTelemetryPreview_EqualsTheBodyTheReporterPosts(t *testing.T) {
+	for _, extended := range []bool{true, false} {
+		name := "basic only"
+		if extended {
+			name = "with the extended part"
+		}
+		t.Run(name, func(t *testing.T) {
+			bodies := make(chan []byte, 4)
+			srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
+				if req.Method == http.MethodGet {
+					// The reporter asks for a proof-of-work challenge first (spec 022
+					// T105); this provider offers none.
+					http.NotFound(w, req)
+					return
+				}
+				b, _ := io.ReadAll(req.Body)
+				bodies <- b
+				w.WriteHeader(http.StatusNoContent)
+			}))
+			t.Cleanup(srv.Close)
+			dest := telemetry.Destination{Kind: telemetry.KindCustom, URL: srv.URL, Host: "receiver.test"}
+			r, store := newTelemetryRouterFor(t, TelemetrySettings{
+				Dest: dest, Interval: time.Hour, Deps: telemetry.Deps{Version: "v9.9.9"},
+			})
+			putTelemetryConsent(t, r, true, extended)
+
+			got, _ := getTelemetry(t, r, telemetryAdmin(1))
+			// The reporter runs two hours ahead, so the saved slot is due.
+			rep := telemetry.New(telemetry.Config{
+				Dest: dest, Interval: time.Hour,
+				Deps: telemetry.Deps{Store: store, Version: "v9.9.9"},
+				Now:  func() time.Time { return time.Now().Add(2 * time.Hour) },
+				Rand: func(int64) int64 { return 0 },
+			})
+			if err := rep.Tick(context.Background()); err != nil {
+				t.Fatalf("tick: %v", err)
+			}
+			var posted map[string]any
+			select {
+			case b := <-bodies:
+				if err := json.Unmarshal(b, &posted); err != nil {
+					t.Fatalf("decode posted body %q: %v", b, err)
+				}
+			case <-time.After(5 * time.Second):
+				t.Fatal("the reporter posted nothing")
+			}
+
+			preview, _ := got["preview"].(map[string]any)
+			for _, m := range []map[string]any{preview, posted} {
+				if ext, ok := m["ext"].(map[string]any); ok {
+					delete(ext, "sentAt")
+				}
+			}
+			if !reflect.DeepEqual(preview, posted) {
+				t.Fatalf("preview != posted body (ignoring ext.sentAt):\npreview %v\nposted  %v", preview, posted)
+			}
+			if _, hasExt := posted["ext"]; hasExt != extended || posted["version"] != "v9.9.9" {
+				t.Fatalf("posted = %v, want ext present = %v and the configured version", posted, extended)
+			}
+		})
+	}
+}
diff --git a/api/internal/rbac/rbac.go b/api/internal/rbac/rbac.go
index 20488f0f2..ff0cbc645 100644
--- a/api/internal/rbac/rbac.go
+++ b/api/internal/rbac/rbac.go
@@ -225,6 +225,11 @@ var rules = []rule{
 	// Mod-registry provider key secrets pair with editing the
 	// modRegistries config section.
 	{segment: "admin", prefix: "/admin/registries", perm: "config:manage"},
+	// Telemetry status and notice (spec 022): reads need config:read, writes
+	// config:manage. The notice GET handler itself answers {"pending":false}
+	// to callers without config:manage.
+	{method: "GET", segment: "admin", prefix: "/admin/telemetry", perm: "config:read"},
+	{segment: "admin", prefix: "/admin/telemetry", perm: "config:manage"},
 	{segment: "admin", perm: "*"},
 
 	// Network capture (feature 003-network-capture-sidecar): admin-only via
diff --git a/api/internal/rbac/rbac_test.go b/api/internal/rbac/rbac_test.go
index a66756a1e..d3b3aa724 100644
--- a/api/internal/rbac/rbac_test.go
+++ b/api/internal/rbac/rbac_test.go
@@ -178,6 +178,18 @@ func TestAllow(t *testing.T) {
 		{RoleOperator, "PUT", "/admin/registries/curseforge/secret", scope.DefaultCluster, false},
 		{RoleAdmin, "PUT", "/admin/registries/curseforge/secret", scope.DefaultCluster, true},
 		{RoleAdmin, "DELETE", "/admin/registries/curseforge/secret", scope.DefaultCluster, true},
+		// Telemetry notice (spec 022): reads need config:read, writes config:manage.
+		{RoleViewer, "GET", "/admin/telemetry/notice", scope.DefaultCluster, false},
+		{RoleAdmin, "GET", "/admin/telemetry/notice", scope.DefaultCluster, true},
+		{RoleViewer, "POST", "/admin/telemetry/notice", scope.DefaultCluster, false},
+		{RoleOperator, "POST", "/admin/telemetry/notice", scope.DefaultCluster, false},
+		{RoleAdmin, "POST", "/admin/telemetry/notice", scope.DefaultCluster, true},
+		// Telemetry status and install-ID reset (spec 022, prefix entries in rbac.go).
+		{RoleViewer, "GET", "/admin/telemetry", scope.DefaultCluster, false},
+		{RoleAdmin, "GET", "/admin/telemetry", scope.DefaultCluster, true},
+		{RoleViewer, "POST", "/admin/telemetry/install-id", scope.DefaultCluster, false},
+		{RoleOperator, "POST", "/admin/telemetry/install-id", scope.DefaultCluster, false},
+		{RoleAdmin, "POST", "/admin/telemetry/install-id", scope.DefaultCluster, true},
 		// Restores: read viewer+, create operator+ (backups:restore).
 		{RoleViewer, "GET", "/restores", scope.DefaultCluster, true},
 		{RoleViewer, "POST", "/restores", scope.DefaultCluster, false},
diff --git a/api/internal/telemetry/collect.go b/api/internal/telemetry/collect.go
new file mode 100644
index 000000000..6cd6552d3
--- /dev/null
+++ b/api/internal/telemetry/collect.go
@@ -0,0 +1,298 @@
+package telemetry
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"regexp"
+	"sort"
+	"time"
+
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
+
+	"github.com/GameplanePanel/gameplane/api/internal/db"
+	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// extSchema is the extended-part schema version this build emits.
+const extSchema = 1
+
+// other is the value every enumerated field falls back to.
+const other = "other"
+
+// nonDigits matches a run of non-digits, which is stripped from the
+// discovery minor version ("31+" on EKS and GKE becomes "31").
+var nonDigits = regexp.MustCompile(`[^0-9]+`)
+
+// Flags are the install settings Collect reads. They come from API flags
+// and environment, which live in package main, so the caller copies the
+// relevant values in.
+type Flags struct {
+	// CaptureEnabled mirrors --capture-enabled.
+	CaptureEnabled bool
+	// OIDCConfigured is true when the Helm OIDC issuer flag is set.
+	OIDCConfigured bool
+	// AuditWebhook is true when --audit-webhook-url is set.
+	AuditWebhook bool
+	// AuditS3 is true when both the S3 audit endpoint and bucket are set.
+	AuditS3 bool
+	// DBDriver is --db-driver, "sqlite" or "postgres".
+	DBDriver string
+	// OfficialModuleSource is --official-module-source; empty means every
+	// module counts as custom.
+	OfficialModuleSource string
+}
+
+// Deps is what Collect reads from. Kube and Store are required.
+type Deps struct {
+	Kube    *kube.Client
+	Store   *db.Store
+	Flags   Flags
+	Version string
+	// Extended asks for the extended part (the gate's extendedOn).
+	Extended bool
+	// Now returns the current time; nil means time.Now. Tests set it.
+	Now func() time.Time
+}
+
+// Collect builds the report the reporter would send now, and the same value
+// backs the admin preview. The basic counts cover the local cluster only.
+// When deps.Extended is set it also fills the extended part from the sources
+// in research R14. A field whose source can't be read yields 0, false or
+// "other" rather than an error; the only errors are a missing install ID and
+// a failure to derive the signing key, because the part can't be signed
+// without them.
+func Collect(ctx context.Context, deps Deps) (telemetryschema.Report, error) {
+	servers := listItems(ctx, deps, "servers")
+	templates := listItems(ctx, deps, "templates")
+	rep := telemetryschema.Report{
+		Version:   deps.Version,
+		Servers:   len(servers),
+		Templates: len(templates),
+	}
+	if !deps.Extended {
+		return rep, nil
+	}
+	ext, err := collectExtended(ctx, deps, servers, templates)
+	if err != nil {
+		return telemetryschema.Report{}, err
+	}
+	rep.Ext = ext
+	return rep, nil
+}
+
+// listItems lists every object of one kube.GVRs kind across namespaces. A
+// failure yields no items, so the count is 0.
+func listItems(ctx context.Context, deps Deps, kind string) []unstructured.Unstructured {
+	gvr, ok := kube.GVRs[kind]
+	if !ok || deps.Kube == nil || deps.Kube.Dynamic == nil {
+		return nil
+	}
+	list, err := deps.Kube.Dynamic.Resource(gvr).List(ctx, metav1.ListOptions{})
+	if err != nil {
+		return nil
+	}
+	return list.Items
+}
+
+// collectExtended builds the extended part and signs it with the key derived
+// from the install ID and the stored secret.
+func collectExtended(ctx context.Context, deps Deps, servers, templates []unstructured.Unstructured) (*telemetryschema.Extended, error) {
+	now := time.Now
+	if deps.Now != nil {
+		now = deps.Now
+	}
+	state, err := deps.Store.GetTelemetryState(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("collect telemetry: %w", err)
+	}
+	if state.InstallID == "" {
+		return nil, errors.New("collect telemetry: extended report needs an install id")
+	}
+	secret, err := deps.Store.EnsureSigningSecret(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("collect telemetry: %w", err)
+	}
+	priv, err := telemetryschema.DeriveKey(secret, state.InstallID)
+	if err != nil {
+		return nil, fmt.Errorf("collect telemetry: derive key: %w", err)
+	}
+
+	nodes, nodesOK := listNodes(ctx, deps)
+	gitVersion, minor := serverVersion(deps)
+	nodeBand := other
+	if nodesOK && len(nodes) > 0 {
+		nodeBand = telemetryschema.NodeBand(len(nodes))
+	}
+
+	return &telemetryschema.Extended{
+		Schema:    extSchema,
+		InstallID: state.InstallID,
+		Env: telemetryschema.Env{
+			K8s:    minor,
+			Distro: detectDistro(gitVersion, nodes),
+			Arch:   nodeArches(nodes),
+			Nodes:  nodeBand,
+		},
+		Games:    countGames(ctx, deps, servers, templates),
+		Features: collectFeatures(ctx, deps, servers),
+		Key:      telemetryschema.PublicKeyString(priv),
+		SentAt:   now().UTC().Truncate(time.Second),
+	}, nil
+}
+
+// listNodes lists the local cluster's nodes. ok is false when the call failed.
+func listNodes(ctx context.Context, deps Deps) ([]corev1.Node, bool) {
+	if deps.Kube == nil || deps.Kube.Typed == nil {
+		return nil, false
+	}
+	list, err := deps.Kube.Typed.CoreV1().Nodes().List(ctx, metav1.ListOptions{})
+	if err != nil {
+		return nil, false
+	}
+	return list.Items, true
+}
+
+// serverVersion returns the API server's gitVersion (for distro detection)
+// and its minor version as "1.N", or "other" when it can't be read or doesn't
+// fit the 1.N pattern. Non-digit suffixes such as the "+" of "31+" are
+// dropped.
+func serverVersion(deps Deps) (gitVersion, minor string) {
+	if deps.Kube == nil || deps.Kube.Typed == nil {
+		return "", other
+	}
+	v, err := deps.Kube.Typed.Discovery().ServerVersion()
+	if err != nil || v == nil {
+		return "", other
+	}
+	minor = v.Major + "." + nonDigits.ReplaceAllString(v.Minor, "")
+	if !telemetryschema.K8sMinorRE.MatchString(minor) {
+		minor = other
+	}
+	return v.GitVersion, minor
+}
+
+// nodeArches returns the sorted, unique CPU architectures of nodes. Values
+// outside the enumeration become "other", and a cluster with no readable
+// node reports ["other"] because the wire schema rejects an empty list.
+func nodeArches(nodes []corev1.Node) []string {
+	seen := map[string]bool{}
+	for i := range nodes {
+		a := nodes[i].Status.NodeInfo.Architecture
+		if a == "" {
+			continue
+		}
+		seen[telemetryschema.SanitizeEnum(telemetryschema.Arches, a)] = true
+	}
+	if len(seen) == 0 {
+		return []string{other}
+	}
+	return sortedKeys(seen)
+}
+
+// sortedKeys returns the keys of set in ascending order.
+func sortedKeys(set map[string]bool) []string {
+	out := make([]string, 0, len(set))
+	for k := range set {
+		out = append(out, k)
+	}
+	sort.Strings(out)
+	return out
+}
+
+// countGames counts GameServers per official module and the rest as custom.
+// A server whose template can't be found, or whose template isn't official
+// (see officialModule), counts as custom. Only catalog names ever appear as
+// keys.
+func countGames(ctx context.Context, deps Deps, servers, templates []unstructured.Unstructured) telemetryschema.Games {
+	labelsByTemplate := make(map[string]map[string]string, len(templates))
+	for i := range templates {
+		labelsByTemplate[templates[i].GetName()] = templates[i].GetLabels()
+	}
+	listed := map[string]bool{}
+	if deps.Kube != nil {
+		listed = listedModules(ctx, deps.Kube.Dynamic, deps.Flags.OfficialModuleSource)
+	}
+	games := telemetryschema.Games{Official: map[string]int{}}
+	for i := range servers {
+		tmplName, _, _ := unstructured.NestedString(servers[i].Object, "spec", "templateRef", "name")
+		m := officialModule(labelsByTemplate[tmplName], deps.Flags.OfficialModuleSource, listed)
+		if m == "" {
+			games.Custom++
+			continue
+		}
+		games.Official[m]++
+	}
+	return games
+}
+
+// collectFeatures reads the feature flags and bands from the local cluster
+// and the API's own configuration.
+func collectFeatures(ctx context.Context, deps Deps, servers []unstructured.Unstructured) telemetryschema.Features {
+	tunnels := map[string]bool{}
+	wake := false
+	for i := range servers {
+		if on, _, _ := unstructured.NestedBool(servers[i].Object, "spec", "idle", "wakeOnConnect"); on {
+			wake = true
+		}
+		if on, _, _ := unstructured.NestedBool(servers[i].Object, "spec", "tunnel", "enabled"); on {
+			p, _, _ := unstructured.NestedString(servers[i].Object, "spec", "tunnel", "provider")
+			tunnels[telemetryschema.SanitizeEnum(telemetryschema.Tunnels, p)] = true
+		}
+	}
+	return telemetryschema.Features{
+		WakeOnConnect:   wake,
+		Tunnels:         sortedKeys(tunnels),
+		Capture:         deps.Flags.CaptureEnabled,
+		Backups:         len(listItems(ctx, deps, "schedules")) > 0,
+		SSO:             deps.Flags.OIDCConfigured || hasSSOProvider(ctx, deps.Store),
+		AuditForwarding: deps.Flags.AuditWebhook || deps.Flags.AuditS3,
+		Clusters:        telemetryschema.ClusterBand(1 + countClusters(ctx, deps)),
+		DB:              telemetryschema.SanitizeEnum(telemetryschema.DBs, deps.Flags.DBDriver),
+		Language:        "en",
+	}
+}
+
+// countClusters counts registered Cluster CRs, 0 when they can't be listed.
+func countClusters(ctx context.Context, deps Deps) int {
+	if deps.Kube == nil || deps.Kube.Dynamic == nil {
+		return 0
+	}
+	list, err := deps.Kube.Dynamic.Resource(kube.GVRCluster).List(ctx, metav1.ListOptions{})
+	if err != nil {
+		return 0
+	}
+	return len(list.Items)
+}
+
+// hasSSOProvider reports whether the admin-managed "auth" config holds an
+// enabled oidc, google or github provider. A missing, unreadable or
+// malformed row is false.
+func hasSSOProvider(ctx context.Context, store *db.Store) bool {
+	if store == nil {
+		return false
+	}
+	raw, ok, err := store.ConfigValue(ctx, "auth")
+	if err != nil || !ok {
+		return false
+	}
+	var cfg struct {
+		Providers []struct {
+			Kind    string `json:"kind"`
+			Enabled bool   `json:"enabled"`
+		} `json:"providers"`
+	}
+	if json.Unmarshal([]byte(raw), &cfg) != nil {
+		return false
+	}
+	for _, p := range cfg.Providers {
+		if p.Enabled && (p.Kind == "oidc" || p.Kind == "google" || p.Kind == "github") {
+			return true
+		}
+	}
+	return false
+}
diff --git a/api/internal/telemetry/collect_test.go b/api/internal/telemetry/collect_test.go
new file mode 100644
index 000000000..95afceeed
--- /dev/null
+++ b/api/internal/telemetry/collect_test.go
@@ -0,0 +1,490 @@
+package telemetry
+
+import (
+	"context"
+	"errors"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
+	"k8s.io/apimachinery/pkg/runtime"
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"k8s.io/apimachinery/pkg/version"
+	fakediscovery "k8s.io/client-go/discovery/fake"
+	dynamicfake "k8s.io/client-go/dynamic/fake"
+	"k8s.io/client-go/kubernetes/fake"
+	clienttesting "k8s.io/client-go/testing"
+
+	"github.com/GameplanePanel/gameplane/api/internal/db"
+	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+const testInstallID = "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10"
+
+// collectOpts describes the fake cluster collectKubeClients builds.
+type collectOpts struct {
+	nodes      []corev1.Node
+	serverInfo *version.Info
+	dynamic    []runtime.Object
+	// nodesFail, versionFail and dynamicFail make the named calls error:
+	// dynamicFail keys are fake verbs ("list", "get").
+	nodesFail   bool
+	versionFail bool
+	dynamicFail map[string]bool
+}
+
+// collectKubeClients builds a kube.Client over the typed and dynamic fakes.
+func collectKubeClients(t *testing.T, o collectOpts) *kube.Client {
+	t.Helper()
+	cs := fake.NewSimpleClientset()
+	for i := range o.nodes {
+		if _, err := cs.CoreV1().Nodes().Create(context.Background(), &o.nodes[i], metav1.CreateOptions{}); err != nil {
+			t.Fatalf("create node: %v", err)
+		}
+	}
+	if o.serverInfo != nil {
+		cs.Discovery().(*fakediscovery.FakeDiscovery).FakedServerVersion = o.serverInfo
+	}
+	boom := func(clienttesting.Action) (bool, runtime.Object, error) {
+		return true, nil, errors.New("boom")
+	}
+	if o.nodesFail {
+		cs.PrependReactor("list", "nodes", boom)
+	}
+	if o.versionFail {
+		cs.PrependReactor("get", "version", boom)
+	}
+	dyn := dynamicfake.NewSimpleDynamicClientWithCustomListKinds(runtime.NewScheme(),
+		map[schema.GroupVersionResource]string{
+			kube.GVRs["servers"]:   "GameServerList",
+			kube.GVRs["templates"]: "GameTemplateList",
+			kube.GVRs["schedules"]: "BackupScheduleList",
+			kube.GVRCluster:        "ClusterList",
+			kube.GVRModuleSource:   "ModuleSourceList",
+		}, o.dynamic...)
+	for verb := range o.dynamicFail {
+		dyn.PrependReactor(verb, "*", boom)
+	}
+	return &kube.Client{Typed: cs, Dynamic: dyn}
+}
+
+// collectStore returns a migrated in-memory store. withID also stores the
+// test install ID.
+func collectStore(t *testing.T, withID bool) *db.Store {
+	t.Helper()
+	s, err := db.Open(t.Context(), "sqlite", ":memory:")
+	if err != nil {
+		t.Fatalf("open: %v", err)
+	}
+	t.Cleanup(func() { _ = s.Close() })
+	if err := s.Migrate(t.Context()); err != nil {
+		t.Fatalf("migrate: %v", err)
+	}
+	if withID {
+		if err := s.SetInstallID(t.Context(), testInstallID); err != nil {
+			t.Fatalf("set install id: %v", err)
+		}
+	}
+	return s
+}
+
+func putConfig(t *testing.T, s *db.Store, key, value string) {
+	t.Helper()
+	if _, err := s.DB.ExecContext(t.Context(),
+		`INSERT INTO config(key, value, updated_at) VALUES (?, ?, ?)
+		 ON CONFLICT (key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`,
+		key, value, "2026-01-01 00:00:00"); err != nil {
+		t.Fatalf("put config %q: %v", key, err)
+	}
+}
+
+func gpObject(kind, name, ns string) *unstructured.Unstructured {
+	o := &unstructured.Unstructured{}
+	o.SetAPIVersion("gameplane.local/v1alpha1")
+	o.SetKind(kind)
+	o.SetName(name)
+	if ns != "" {
+		o.SetNamespace(ns)
+	}
+	return o
+}
+
+// serverObj builds a GameServer using template tmpl. wake sets
+// spec.idle.wakeOnConnect; tunnelProvider (when non-empty) sets spec.tunnel
+// with the given enabled value.
+func serverObj(name, tmpl string, wake bool, tunnelProvider string, tunnelEnabled bool) *unstructured.Unstructured {
+	o := gpObject("GameServer", name, "gameplane-games")
+	_ = unstructured.SetNestedField(o.Object, tmpl, "spec", "templateRef", "name")
+	if wake {
+		_ = unstructured.SetNestedField(o.Object, true, "spec", "idle", "wakeOnConnect")
+	}
+	if tunnelProvider != "" {
+		_ = unstructured.SetNestedField(o.Object, tunnelEnabled, "spec", "tunnel", "enabled")
+		_ = unstructured.SetNestedField(o.Object, tunnelProvider, "spec", "tunnel", "provider")
+	}
+	return o
+}
+
+// templateObj builds a cluster-scoped GameTemplate with the given labels.
+func templateObj(name string, labels map[string]string) *unstructured.Unstructured {
+	o := gpObject("GameTemplate", name, "")
+	if labels != nil {
+		o.SetLabels(labels)
+	}
+	return o
+}
+
+// moduleTemplate builds a GameTemplate stamped the way the operator stamps a
+// module-managed one.
+func moduleTemplate(name, source, module string) *unstructured.Unstructured {
+	return templateObj(name, map[string]string{
+		labelManagedBy:    managedByModule,
+		labelModuleSource: source,
+		labelModuleName:   module,
+	})
+}
+
+func moduleSourceObj(name string, ociModules, statusModules []string) *unstructured.Unstructured {
+	o := gpObject("ModuleSource", name, "")
+	names := func(in []string) []any {
+		out := make([]any, 0, len(in))
+		for _, n := range in {
+			out = append(out, map[string]any{"name": n})
+		}
+		return out
+	}
+	if ociModules != nil {
+		_ = unstructured.SetNestedSlice(o.Object, names(ociModules), "spec", "oci", "modules")
+	}
+	if statusModules != nil {
+		_ = unstructured.SetNestedSlice(o.Object, names(statusModules), "status", "modules")
+	}
+	return o
+}
+
+func fixedNow() time.Time { return time.Date(2026, 10, 6, 9, 12, 44, 123456789, time.UTC) }
+
+func TestCollect_BasicCountsLocalClusterOnly(t *testing.T) {
+	k := collectKubeClients(t, collectOpts{dynamic: []runtime.Object{
+		serverObj("a", "t1", false, "", false),
+		serverObj("b", "t1", false, "", false),
+		templateObj("t1", nil),
+	}})
+	rep, err := Collect(t.Context(), Deps{Kube: k, Store: collectStore(t, true), Version: "v1.2.3"})
+	if err != nil {
+		t.Fatalf("collect: %v", err)
+	}
+	if rep.Version != "v1.2.3" || rep.Servers != 2 || rep.Templates != 1 {
+		t.Fatalf("basic report = %+v, want {v1.2.3 2 1}", rep)
+	}
+	if rep.Ext != nil {
+		t.Fatal("the extended part must be absent when Extended is false")
+	}
+}
+
+func TestCollect_BasicListFailureIsZeroNotError(t *testing.T) {
+	k := collectKubeClients(t, collectOpts{
+		dynamic:     []runtime.Object{serverObj("a", "t1", false, "", false)},
+		dynamicFail: map[string]bool{"list": true},
+	})
+	rep, err := Collect(t.Context(), Deps{Kube: k, Store: collectStore(t, false), Version: "v1"})
+	if err != nil {
+		t.Fatalf("collect: %v", err)
+	}
+	if rep.Servers != 0 || rep.Templates != 0 {
+		t.Fatalf("failed lists must count as 0, got %+v", rep)
+	}
+}
+
+func TestCollect_NilClients(t *testing.T) {
+	for name, k := range map[string]*kube.Client{"nil client": nil, "empty client": {}} {
+		rep, err := Collect(t.Context(), Deps{Kube: k, Store: collectStore(t, true), Version: "v1", Extended: true, Now: fixedNow})
+		if err != nil {
+			t.Fatalf("%s: collect: %v", name, err)
+		}
+		if rep.Servers != 0 || rep.Templates != 0 || rep.Ext == nil {
+			t.Fatalf("%s: report = %+v", name, rep)
+		}
+		if rep.Ext.Env.K8s != "other" || rep.Ext.Env.Nodes != "other" || !reflect.DeepEqual(rep.Ext.Env.Arch, []string{"other"}) {
+			t.Errorf("%s: env = %+v, want other fallbacks", name, rep.Ext.Env)
+		}
+	}
+}
+
+func TestCollect_ExtendedFullReport(t *testing.T) {
+	const official = "default"
+	nodes := []corev1.Node{
+		testNode("n1", nil, "", "Ubuntu 24.04", "amd64"),
+		testNode("n2", nil, "", "Ubuntu 24.04", "arm64"),
+	}
+	k := collectKubeClients(t, collectOpts{
+		nodes:      nodes,
+		serverInfo: &version.Info{Major: "1", Minor: "31+", GitVersion: "v1.31.2+k3s1"},
+		dynamic: []runtime.Object{
+			moduleSourceObj(official, []string{"minecraft-java", "terraria", "minecraft-java-evil"}, nil),
+			moduleTemplate("mc", official, "minecraft-java"),
+			moduleTemplate("tr", official, "terraria"),
+			moduleTemplate("upload-mc", "uploads", "minecraft-java"),
+			moduleTemplate("lookalike", official, "minecraft-java-evil"),
+			templateObj("manual", nil),
+			serverObj("s1", "mc", true, "", false),
+			serverObj("s2", "mc", false, "", false),
+			serverObj("s3", "tr", false, "playit", true),
+			serverObj("s4", "manual", false, "", false),
+			serverObj("s5", "ghost", false, "", false), // template does not exist
+			serverObj("s6", "mc", false, "frp", false), // tunnel configured but off
+			serverObj("s7", "upload-mc", false, "", false),
+			serverObj("s8", "lookalike", false, "", false),
+			gpObject("BackupSchedule", "nightly", "gameplane-games"),
+			gpObject("Cluster", "remote-a", ""),
+			gpObject("Cluster", "remote-b", ""),
+		},
+	})
+	store := collectStore(t, true)
+	putConfig(t, store, "auth", `{"providers":[{"name":"local","kind":"local","enabled":true},{"name":"g","kind":"google","enabled":true}]}`)
+	secret, err := store.EnsureSigningSecret(t.Context())
+	if err != nil {
+		t.Fatalf("secret: %v", err)
+	}
+	priv, err := telemetryschema.DeriveKey(secret, testInstallID)
+	if err != nil {
+		t.Fatalf("derive: %v", err)
+	}
+
+	rep, err := Collect(t.Context(), Deps{
+		Kube: k, Store: store, Version: "v0.3.0", Extended: true, Now: fixedNow,
+		Flags: Flags{
+			CaptureEnabled: true, AuditS3: true, DBDriver: "sqlite", OfficialModuleSource: official,
+		},
+	})
+	if err != nil {
+		t.Fatalf("collect: %v", err)
+	}
+	if rep.Version != "v0.3.0" || rep.Servers != 8 || rep.Templates != 5 {
+		t.Fatalf("basic part = %+v, want {v0.3.0 8 5}", rep)
+	}
+	ext := rep.Ext
+	if ext == nil {
+		t.Fatal("missing extended part")
+	}
+	if ext.Schema != 1 || ext.InstallID != testInstallID {
+		t.Errorf("schema/id = %d/%q", ext.Schema, ext.InstallID)
+	}
+	wantEnv := telemetryschema.Env{K8s: "1.31", Distro: "k3s", Arch: []string{"amd64", "arm64"}, Nodes: telemetryschema.NodeBand(2)}
+	if !reflect.DeepEqual(ext.Env, wantEnv) {
+		t.Errorf("env = %+v, want %+v", ext.Env, wantEnv)
+	}
+	wantGames := telemetryschema.Games{Official: map[string]int{"minecraft-java": 3, "terraria": 1}, Custom: 4}
+	if !reflect.DeepEqual(ext.Games, wantGames) {
+		t.Errorf("games = %+v, want %+v", ext.Games, wantGames)
+	}
+	wantFeatures := telemetryschema.Features{
+		WakeOnConnect: true, Tunnels: []string{"playit"}, Capture: true, Backups: true, SSO: true,
+		AuditForwarding: true, Clusters: telemetryschema.ClusterBand(3), DB: "sqlite", Language: "en",
+	}
+	if !reflect.DeepEqual(ext.Features, wantFeatures) {
+		t.Errorf("features = %+v, want %+v", ext.Features, wantFeatures)
+	}
+	if want := telemetryschema.PublicKeyString(priv); ext.Key != want {
+		t.Errorf("key = %q, want the key derived from the secret and install ID (%q)", ext.Key, want)
+	}
+	if want := time.Date(2026, 10, 6, 9, 12, 44, 0, time.UTC); !ext.SentAt.Equal(want) {
+		t.Errorf("sentAt = %v, want %v (UTC, whole seconds)", ext.SentAt, want)
+	}
+}
+
+func TestCollect_ExtendedFieldsFallBackWhenSourcesFail(t *testing.T) {
+	k := collectKubeClients(t, collectOpts{
+		nodesFail:   true,
+		versionFail: true,
+		dynamicFail: map[string]bool{"list": true, "get": true},
+	})
+	rep, err := Collect(t.Context(), Deps{
+		Kube: k, Store: collectStore(t, true), Version: "v1", Extended: true, Now: fixedNow,
+		Flags: Flags{DBDriver: "mysql", OfficialModuleSource: "default"},
+	})
+	if err != nil {
+		t.Fatalf("a failing source must not fail the report: %v", err)
+	}
+	ext := rep.Ext
+	if ext == nil {
+		t.Fatal("missing extended part")
+	}
+	wantEnv := telemetryschema.Env{K8s: "other", Distro: "other", Arch: []string{"other"}, Nodes: "other"}
+	if !reflect.DeepEqual(ext.Env, wantEnv) {
+		t.Errorf("env = %+v, want %+v", ext.Env, wantEnv)
+	}
+	if len(ext.Games.Official) != 0 || ext.Games.Custom != 0 {
+		t.Errorf("games = %+v, want empty", ext.Games)
+	}
+	f := ext.Features
+	if f.WakeOnConnect || f.Backups || f.SSO || f.Capture || f.AuditForwarding || len(f.Tunnels) != 0 {
+		t.Errorf("features = %+v, want everything off", f)
+	}
+	if f.Clusters != telemetryschema.ClusterBand(1) || f.DB != "other" || f.Language != "en" {
+		t.Errorf("features = %+v, want cluster band of 1, db other, language en", f)
+	}
+}
+
+func TestCollect_ExtendedErrors(t *testing.T) {
+	ctx := t.Context()
+	deps := func(s *db.Store) Deps {
+		return Deps{Kube: collectKubeClients(t, collectOpts{}), Store: s, Version: "v1", Extended: true, Now: fixedNow}
+	}
+
+	if _, err := Collect(ctx, deps(collectStore(t, false))); err == nil || !strings.Contains(err.Error(), "install id") {
+		t.Errorf("no install ID: got %v, want an install id error", err)
+	}
+
+	missing := collectStore(t, true)
+	if _, err := missing.DB.ExecContext(ctx, `DELETE FROM telemetry_state`); err != nil {
+		t.Fatalf("delete state: %v", err)
+	}
+	if _, err := Collect(ctx, deps(missing)); err == nil {
+		t.Error("a missing telemetry_state row must be an error")
+	}
+
+	badSecret := collectStore(t, true)
+	if _, err := badSecret.DB.ExecContext(ctx, `UPDATE telemetry_state SET signing_secret = '!!not base64!!'`); err != nil {
+		t.Fatalf("corrupt secret: %v", err)
+	}
+	if _, err := Collect(ctx, deps(badSecret)); err == nil {
+		t.Error("an unreadable signing secret must be an error")
+	}
+}
+
+func TestCollect_DefaultClockIsNow(t *testing.T) {
+	rep, err := Collect(t.Context(), Deps{
+		Kube: collectKubeClients(t, collectOpts{}), Store: collectStore(t, true), Version: "v1", Extended: true,
+	})
+	if err != nil {
+		t.Fatalf("collect: %v", err)
+	}
+	if d := time.Since(rep.Ext.SentAt); d < -time.Minute || d > time.Minute {
+		t.Fatalf("sentAt %v is not the current time", rep.Ext.SentAt)
+	}
+}
+
+func TestServerVersion_MinorForms(t *testing.T) {
+	cases := []struct {
+		major, minor, want string
+	}{
+		{"1", "31", "1.31"},
+		{"1", "31+", "1.31"},
+		{"1", "9", "1.9"},
+		{"1", "", "other"},
+		{"1", "1234", "other"},
+		{"2", "0", "other"},
+		{"", "", "other"},
+	}
+	for _, tc := range cases {
+		k := collectKubeClients(t, collectOpts{serverInfo: &version.Info{Major: tc.major, Minor: tc.minor, GitVersion: "v1.0.0"}})
+		git, minor := serverVersion(Deps{Kube: k})
+		if minor != tc.want || git != "v1.0.0" {
+			t.Errorf("major=%q minor=%q: got %q (git %q), want %q", tc.major, tc.minor, minor, git, tc.want)
+		}
+	}
+
+	failing := collectKubeClients(t, collectOpts{versionFail: true})
+	if git, minor := serverVersion(Deps{Kube: failing}); git != "" || minor != "other" {
+		t.Errorf("discovery error: got %q/%q, want empty/other", git, minor)
+	}
+}
+
+func TestNodeArches(t *testing.T) {
+	node := func(arch string) corev1.Node { return testNode("n", nil, "", "", arch) }
+	cases := []struct {
+		name  string
+		nodes []corev1.Node
+		want  []string
+	}{
+		{"sorted and unique", []corev1.Node{node("arm64"), node("amd64"), node("arm64")}, []string{"amd64", "arm64"}},
+		{"unknown becomes other", []corev1.Node{node("s390x"), node("sparc")}, []string{"other", "s390x"}},
+		{"empty architecture is skipped", []corev1.Node{node(""), node("amd64")}, []string{"amd64"}},
+		{"no nodes", nil, []string{"other"}},
+		{"only blank architectures", []corev1.Node{node("")}, []string{"other"}},
+	}
+	for _, tc := range cases {
+		if got := nodeArches(tc.nodes); !reflect.DeepEqual(got, tc.want) {
+			t.Errorf("%s: got %v, want %v", tc.name, got, tc.want)
+		}
+	}
+}
+
+func TestCollectFeatures_TunnelsAreSanitisedAndSorted(t *testing.T) {
+	servers := []unstructured.Unstructured{
+		*serverObj("a", "t", false, "tailscale", true),
+		*serverObj("b", "t", false, "frp", true),
+		*serverObj("c", "t", false, "tailscale", true),
+		*serverObj("d", "t", false, "my-private-relay", true),
+		*serverObj("e", "t", false, "playit", false),
+	}
+	f := collectFeatures(t.Context(), Deps{Store: collectStore(t, false), Flags: Flags{DBDriver: "postgres"}}, servers)
+	if want := []string{"frp", "other", "tailscale"}; !reflect.DeepEqual(f.Tunnels, want) {
+		t.Errorf("tunnels = %v, want %v", f.Tunnels, want)
+	}
+	if f.DB != "postgres" {
+		t.Errorf("db = %q, want postgres", f.DB)
+	}
+}
+
+func TestCollectFeatures_SSOAndAuditSources(t *testing.T) {
+	ctx := t.Context()
+	store := collectStore(t, false)
+	base := func(f Flags) telemetryschema.Features { return collectFeatures(ctx, Deps{Store: store, Flags: f}, nil) }
+
+	if f := base(Flags{}); f.SSO || f.AuditForwarding {
+		t.Errorf("nothing configured: got %+v", f)
+	}
+	if f := base(Flags{OIDCConfigured: true}); !f.SSO {
+		t.Error("the Helm OIDC flag must count as SSO")
+	}
+	if f := base(Flags{AuditWebhook: true}); !f.AuditForwarding {
+		t.Error("the audit webhook must count as audit forwarding")
+	}
+	if f := base(Flags{AuditS3: true}); !f.AuditForwarding {
+		t.Error("the S3 audit sink must count as audit forwarding")
+	}
+}
+
+func TestHasSSOProvider(t *testing.T) {
+	ctx := t.Context()
+	if hasSSOProvider(ctx, nil) {
+		t.Error("a nil store has no providers")
+	}
+	cases := []struct {
+		name string
+		raw  string // empty = no row
+		want bool
+	}{
+		{"no row", "", false},
+		{"malformed", `{not json`, false},
+		{"no providers", `{"providers":[]}`, false},
+		{"local only", `{"providers":[{"name":"local","kind":"local","enabled":true}]}`, false},
+		{"oidc disabled", `{"providers":[{"name":"o","kind":"oidc","enabled":false}]}`, false},
+		{"oidc enabled", `{"providers":[{"name":"o","kind":"oidc","enabled":true}]}`, true},
+		{"google enabled", `{"providers":[{"name":"g","kind":"google","enabled":true}]}`, true},
+		{"github enabled", `{"providers":[{"name":"h","kind":"github","enabled":true}]}`, true},
+		{"unknown kind", `{"providers":[{"name":"x","kind":"saml","enabled":true}]}`, false},
+	}
+	for _, tc := range cases {
+		store := collectStore(t, false)
+		if tc.raw != "" {
+			putConfig(t, store, "auth", tc.raw)
+		}
+		if got := hasSSOProvider(ctx, store); got != tc.want {
+			t.Errorf("%s: got %v, want %v", tc.name, got, tc.want)
+		}
+	}
+
+	closed := collectStore(t, false)
+	_ = closed.Close()
+	if hasSSOProvider(ctx, closed) {
+		t.Error("a store read error must count as no provider")
+	}
+}
diff --git a/api/internal/telemetry/consent.go b/api/internal/telemetry/consent.go
new file mode 100644
index 000000000..a027c7b1e
--- /dev/null
+++ b/api/internal/telemetry/consent.go
@@ -0,0 +1,223 @@
+package telemetry
+
+import (
+	"context"
+	"crypto/rand"
+	"database/sql"
+	"encoding/hex"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"math/big"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/api/internal/db"
+)
+
+// ErrOperatorDisabled is returned by the consent writers when the operator
+// disabled telemetry at install time (destination kind "disabled"): the
+// admin toggles are refused, whatever they say (FR-005).
+var ErrOperatorDisabled = errors.New("telemetry is disabled by the operator")
+
+// firstReportWindow caps the random delay before the first report once the
+// gate opens (research R12).
+const firstReportWindow = 15 * time.Minute
+
+// configKey is the config row that holds the admin's choice.
+const configKey = "telemetry"
+
+// Consent is the admin's stored choice, config key "telemetry".
+type Consent struct {
+	// Basic is sendMetrics.
+	Basic bool
+	// Extended is true only while Basic is true.
+	Extended bool
+}
+
+// storedConsent is Consent as stored in the config row.
+type storedConsent struct {
+	SendMetrics bool `json:"sendMetrics"`
+	Extended    bool `json:"extended"`
+}
+
+// parseConsent decodes the raw config value. An absent, empty or malformed
+// value means both tiers off, and Extended is forced off while Basic is.
+func parseConsent(raw string, present bool) Consent {
+	if !present {
+		return Consent{}
+	}
+	var c storedConsent
+	if json.Unmarshal([]byte(raw), &c) != nil {
+		return Consent{}
+	}
+	return Consent{Basic: c.SendMetrics, Extended: c.SendMetrics && c.Extended}
+}
+
+// ReadConsent reads the stored choice through the store.
+func ReadConsent(ctx context.Context, store *db.Store) (Consent, error) {
+	raw, ok, err := store.ConfigValue(ctx, configKey)
+	if err != nil {
+		return Consent{}, fmt.Errorf("read telemetry consent: %w", err)
+	}
+	return parseConsent(raw, ok), nil
+}
+
+// ReadConsentTx reads the stored choice inside tx.
+func ReadConsentTx(ctx context.Context, tx *sql.Tx) (Consent, error) {
+	raw, ok, err := db.ConfigValueTx(ctx, tx, configKey)
+	if err != nil {
+		return Consent{}, fmt.Errorf("read telemetry consent: %w", err)
+	}
+	return parseConsent(raw, ok), nil
+}
+
+// destActive reports whether the destination can receive reports at all.
+func destActive(d Destination) bool {
+	return d.Kind != KindDisabled && d.Kind != KindNone && d.URL != ""
+}
+
+// gateOpen is the report gate (data-model "Gate open"): the basic tier is
+// effectively on, and either an admin made a choice or the notice was shown.
+func gateOpen(basicOn bool, st db.TelemetryState) bool {
+	return basicOn && (st.ConsentSource != db.TelemetryConsentDefault || st.NoticeShownAt != "")
+}
+
+// stamp formats t as the RFC 3339 UTC text telemetry_state stores.
+func stamp(t time.Time) string {
+	return t.UTC().Format(time.RFC3339)
+}
+
+// randN returns a uniform value in [0, n); n <= 0 gives 0. It reads
+// crypto/rand, which keeps the jitter unpredictable across replicas.
+func randN(n int64) int64 {
+	if n <= 0 {
+		return 0
+	}
+	v, err := rand.Int(rand.Reader, big.NewInt(n))
+	if err != nil {
+		return 0
+	}
+	return v.Int64()
+}
+
+// firstDue is when the first report is due once the gate opens:
+// now + U(0, min(15m, interval/4)).
+func firstDue(now time.Time, interval time.Duration, rnd func(int64) int64) time.Time {
+	window := min(firstReportWindow, interval/4)
+	return now.Add(time.Duration(rnd(int64(window))))
+}
+
+// NewInstallID returns a random lowercase UUIDv4. It is not derived from any
+// cluster, host, network or user attribute (FR-012).
+func NewInstallID() (string, error) {
+	var b [16]byte
+	if _, err := rand.Read(b[:]); err != nil {
+		return "", fmt.Errorf("generate install id: %w", err)
+	}
+	b[6] = b[6]&0x0f | 0x40
+	b[8] = b[8]&0x3f | 0x80
+	h := hex.EncodeToString(b[:])
+	return h[0:8] + "-" + h[8:12] + "-" + h[12:16] + "-" + h[16:20] + "-" + h[20:], nil
+}
+
+// ApplyConsent records an admin choice inside tx. It is shared by the config
+// hook (source "admin") and the notice actions. In one transaction it:
+//   - writes config key telemetry (extended is forced off while basic is off)
+//   - sets consent_source to source
+//   - creates the install ID (and the signing secret) when extended is on and
+//     there is none, or clears the ID when extended is off
+//   - opens the schedule when the gate is open (keeping an existing slot), or
+//     closes it
+//
+// It returns ErrOperatorDisabled, writing nothing, when dest is disabled. A
+// non-positive interval means 24h.
+func ApplyConsent(ctx context.Context, tx *sql.Tx, dest Destination, interval time.Duration, basic, extended bool, source string) error {
+	if dest.Kind == KindDisabled {
+		return ErrOperatorDisabled
+	}
+	if interval <= 0 {
+		interval = 24 * time.Hour
+	}
+	extended = extended && basic
+	raw, err := json.Marshal(storedConsent{SendMetrics: basic, Extended: extended})
+	if err != nil {
+		return fmt.Errorf("apply consent: %w", err)
+	}
+	if err := db.UpsertConfigTx(ctx, tx, configKey, string(raw)); err != nil {
+		return fmt.Errorf("apply consent: %w", err)
+	}
+	st, err := db.GetTelemetryStateTx(ctx, tx)
+	if err != nil {
+		return fmt.Errorf("apply consent: %w", err)
+	}
+	installID := st.InstallID
+	if extended {
+		if installID == "" {
+			if installID, err = NewInstallID(); err != nil {
+				return fmt.Errorf("apply consent: %w", err)
+			}
+		}
+		if err := db.EnsureSigningSecretTx(ctx, tx); err != nil {
+			return fmt.Errorf("apply consent: %w", err)
+		}
+	} else {
+		installID = ""
+	}
+	next := ""
+	if gateOpen(destActive(dest) && basic, db.TelemetryState{ConsentSource: source, NoticeShownAt: st.NoticeShownAt}) {
+		next = st.NextDueAt
+		if next == "" {
+			next = stamp(firstDue(time.Now(), interval, randN))
+		}
+	}
+	if err := db.UpdateTelemetryConsentTx(ctx, tx, source, installID, next); err != nil {
+		return fmt.Errorf("apply consent: %w", err)
+	}
+	return nil
+}
+
+// MarkNoticeSeen records, inside tx, that the notice was rendered: it sets
+// notice_shown_at once, creates the install ID (and secret) when the stored
+// choice has extended on and there is none, and opens the schedule when the
+// gate is open and no slot is set. consent_source is unchanged. A non-positive
+// interval means 24h.
+func MarkNoticeSeen(ctx context.Context, tx *sql.Tx, dest Destination, interval time.Duration) error {
+	if interval <= 0 {
+		interval = 24 * time.Hour
+	}
+	st, err := db.GetTelemetryStateTx(ctx, tx)
+	if err != nil {
+		return fmt.Errorf("mark notice seen: %w", err)
+	}
+	now := time.Now()
+	if st.NoticeShownAt == "" {
+		st.NoticeShownAt = stamp(now)
+		if err := db.MarkNoticeShownTx(ctx, tx, st.NoticeShownAt); err != nil {
+			return fmt.Errorf("mark notice seen: %w", err)
+		}
+	}
+	c, err := ReadConsentTx(ctx, tx)
+	if err != nil {
+		return fmt.Errorf("mark notice seen: %w", err)
+	}
+	installID := st.InstallID
+	if c.Extended && installID == "" {
+		if installID, err = NewInstallID(); err != nil {
+			return fmt.Errorf("mark notice seen: %w", err)
+		}
+		if err := db.EnsureSigningSecretTx(ctx, tx); err != nil {
+			return fmt.Errorf("mark notice seen: %w", err)
+		}
+	}
+	next := st.NextDueAt
+	if next == "" && gateOpen(destActive(dest) && c.Basic, st) {
+		next = stamp(firstDue(now, interval, randN))
+	}
+	if next == st.NextDueAt && installID == st.InstallID {
+		return nil
+	}
+	if err := db.UpdateTelemetryConsentTx(ctx, tx, st.ConsentSource, installID, next); err != nil {
+		return fmt.Errorf("mark notice seen: %w", err)
+	}
+	return nil
+}
diff --git a/api/internal/telemetry/consent_test.go b/api/internal/telemetry/consent_test.go
new file mode 100644
index 000000000..62757a173
--- /dev/null
+++ b/api/internal/telemetry/consent_test.go
@@ -0,0 +1,297 @@
+package telemetry
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"regexp"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/api/internal/db"
+)
+
+var uuidV4RE = regexp.MustCompile(`^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`)
+
+var bundledDest = Destination{Kind: KindBundled, URL: "http://receiver.test/ingest", Host: "receiver.test"}
+
+// inTx runs fn in a transaction on store and commits when fn returns nil.
+func inTx(t *testing.T, store *db.Store, fn func(ctx context.Context, tx *sql.Tx) error) error {
+	t.Helper()
+	ctx := t.Context()
+	tx, err := store.DB.BeginTx(ctx, nil)
+	if err != nil {
+		t.Fatalf("begin: %v", err)
+	}
+	defer func() { _ = tx.Rollback() }()
+	if err := fn(ctx, tx); err != nil {
+		return err
+	}
+	return tx.Commit()
+}
+
+func apply(t *testing.T, store *db.Store, dest Destination, basic, extended bool, source string) error {
+	t.Helper()
+	return inTx(t, store, func(ctx context.Context, tx *sql.Tx) error {
+		return ApplyConsent(ctx, tx, dest, 24*time.Hour, basic, extended, source)
+	})
+}
+
+func storedConfig(t *testing.T, store *db.Store) string {
+	t.Helper()
+	v, ok, err := store.ConfigValue(t.Context(), "telemetry")
+	if err != nil || !ok {
+		t.Fatalf("read config: %q, %v, %v", v, ok, err)
+	}
+	return v
+}
+
+func TestApplyConsent_OperatorDisabledWritesNothing(t *testing.T) {
+	store := freshStore(t)
+	before := storedConfig(t, store)
+	err := apply(t, store, Destination{Kind: KindDisabled}, false, false, db.TelemetryConsentAdmin)
+	if !errors.Is(err, ErrOperatorDisabled) {
+		t.Fatalf("err = %v, want ErrOperatorDisabled", err)
+	}
+	if storedConfig(t, store) != before || mustState(t, store).ConsentSource != db.TelemetryConsentDefault {
+		t.Fatal("a refused save must change nothing")
+	}
+}
+
+func TestApplyConsent_ExtendedOnCreatesIDAndOpensSchedule(t *testing.T) {
+	store := freshStore(t)
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply: %v", err)
+	}
+	st := mustState(t, store)
+	if st.ConsentSource != db.TelemetryConsentAdmin || !uuidV4RE.MatchString(st.InstallID) {
+		t.Fatalf("state = %+v, want source admin and a UUIDv4 install id", st)
+	}
+	if st.NextDueAt == "" {
+		t.Fatal("an admin choice opens the schedule")
+	}
+	if secret, err := store.EnsureSigningSecret(t.Context()); err != nil || len(secret) != 32 {
+		t.Fatalf("signing secret = %d bytes, %v; want it created with the ID", len(secret), err)
+	}
+	if got := storedConfig(t, store); got != `{"sendMetrics":true,"extended":true}` {
+		t.Fatalf("config = %s", got)
+	}
+}
+
+func TestApplyConsent_BasicOffForcesExtendedOffAndClosesSchedule(t *testing.T) {
+	store := freshStore(t)
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply on: %v", err)
+	}
+	if err := apply(t, store, bundledDest, false, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply off: %v", err)
+	}
+	st := mustState(t, store)
+	if st.InstallID != "" || st.NextDueAt != "" {
+		t.Fatalf("state = %+v, want the ID deleted and the schedule closed", st)
+	}
+	if got := storedConfig(t, store); got != `{"sendMetrics":false,"extended":false}` {
+		t.Fatalf("config = %s, want extended stored off with basic", got)
+	}
+}
+
+func TestApplyConsent_ExtendedOffThenOnMakesANewID(t *testing.T) {
+	store := freshStore(t)
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply: %v", err)
+	}
+	first := mustState(t, store).InstallID
+	secretBefore, err := store.EnsureSigningSecret(t.Context())
+	if err != nil {
+		t.Fatalf("secret: %v", err)
+	}
+	if err := apply(t, store, bundledDest, true, false, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("extended off: %v", err)
+	}
+	if st := mustState(t, store); st.InstallID != "" || st.NextDueAt == "" {
+		t.Fatalf("state = %+v, want no ID but the basic schedule kept", st)
+	}
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("extended on again: %v", err)
+	}
+	second := mustState(t, store).InstallID
+	if second == "" || second == first {
+		t.Fatalf("install id after off/on = %q (was %q), want a new one", second, first)
+	}
+	secretAfter, err := store.EnsureSigningSecret(t.Context())
+	if err != nil || string(secretAfter) != string(secretBefore) {
+		t.Fatalf("the signing secret must survive an off/on cycle (err %v)", err)
+	}
+}
+
+func TestApplyConsent_DefaultSourceKeepsGateClosedUntilNoticeShown(t *testing.T) {
+	store := freshStore(t)
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentDefault); err != nil {
+		t.Fatalf("apply: %v", err)
+	}
+	if st := mustState(t, store); st.NextDueAt != "" {
+		t.Fatalf("slot = %q, want none while source is default and the notice is unseen", st.NextDueAt)
+	}
+	if err := store.MarkNoticeShown(t.Context(), "2026-10-06T09:00:00Z"); err != nil {
+		t.Fatalf("mark shown: %v", err)
+	}
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentDefault); err != nil {
+		t.Fatalf("apply after notice: %v", err)
+	}
+	if st := mustState(t, store); st.NextDueAt == "" {
+		t.Fatal("once the notice was shown the schedule opens")
+	}
+}
+
+func TestApplyConsent_KeepsAnExistingSlotAndSkipsNoDestination(t *testing.T) {
+	store := freshStore(t)
+	if err := apply(t, store, bundledDest, true, false, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply: %v", err)
+	}
+	slot := mustState(t, store).NextDueAt
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply again: %v", err)
+	}
+	if got := mustState(t, store).NextDueAt; got != slot {
+		t.Fatalf("slot = %q, want the existing %q kept", got, slot)
+	}
+
+	none := freshStore(t)
+	if err := apply(t, none, Destination{Kind: KindNone}, true, true, db.TelemetryConsentAdmin); err != nil {
+		t.Fatalf("apply with no destination: %v", err)
+	}
+	if st := mustState(t, none); st.NextDueAt != "" {
+		t.Fatalf("slot = %q, want none without a destination", st.NextDueAt)
+	}
+}
+
+func TestApplyConsent_ZeroIntervalMeansDaily(t *testing.T) {
+	store := freshStore(t)
+	err := inTx(t, store, func(ctx context.Context, tx *sql.Tx) error {
+		return ApplyConsent(ctx, tx, bundledDest, 0, true, false, db.TelemetryConsentAdmin)
+	})
+	if err != nil {
+		t.Fatalf("apply: %v", err)
+	}
+	due := mustParse(t, mustState(t, store).NextDueAt)
+	if wait := time.Until(due); wait > 15*time.Minute {
+		t.Fatalf("first slot is %v away, want within the 15m window of a 24h interval", wait)
+	}
+}
+
+func TestApplyConsent_MissingStateRowIsAnError(t *testing.T) {
+	store := freshStore(t)
+	if _, err := store.DB.ExecContext(t.Context(), `DELETE FROM telemetry_state`); err != nil {
+		t.Fatalf("delete row: %v", err)
+	}
+	if err := apply(t, store, bundledDest, true, true, db.TelemetryConsentAdmin); !errors.Is(err, sql.ErrNoRows) {
+		t.Fatalf("err = %v, want sql.ErrNoRows", err)
+	}
+}
+
+func TestMarkNoticeSeen_SetsOnceCreatesIDAndOpensSchedule(t *testing.T) {
+	store := freshStore(t) // fresh install: default source, extended on, no ID yet
+	see := func() error {
+		return inTx(t, store, func(ctx context.Context, tx *sql.Tx) error {
+			return MarkNoticeSeen(ctx, tx, bundledDest, 24*time.Hour)
+		})
+	}
+	if err := see(); err != nil {
+		t.Fatalf("seen: %v", err)
+	}
+	st := mustState(t, store)
+	if st.NoticeShownAt == "" || st.NextDueAt == "" || !uuidV4RE.MatchString(st.InstallID) {
+		t.Fatalf("state = %+v, want the notice stamped, a slot and an install id", st)
+	}
+	if st.ConsentSource != db.TelemetryConsentDefault {
+		t.Fatalf("consent source = %q, seen must not change it", st.ConsentSource)
+	}
+	if wait := mustParse(t, st.NextDueAt).Sub(mustParse(t, st.NoticeShownAt)); wait < 0 || wait > 15*time.Minute {
+		t.Fatalf("first slot is %v after the notice, want within 15m", wait)
+	}
+	if err := see(); err != nil {
+		t.Fatalf("seen again: %v", err)
+	}
+	if again := mustState(t, store); again != st {
+		t.Fatalf("a second seen changed the state: %+v then %+v", st, again)
+	}
+}
+
+func TestMarkNoticeSeen_BasicOffOrNoDestinationOpensNothing(t *testing.T) {
+	off := freshStore(t)
+	if _, err := off.DB.ExecContext(t.Context(),
+		`UPDATE config SET value = '{"sendMetrics":false,"extended":false}' WHERE key = 'telemetry'`); err != nil {
+		t.Fatalf("turn off: %v", err)
+	}
+	none := freshStore(t)
+	for name, tc := range map[string]struct {
+		store *db.Store
+		dest  Destination
+	}{"basic off": {off, bundledDest}, "no destination": {none, Destination{Kind: KindNone}}} {
+		err := inTx(t, tc.store, func(ctx context.Context, tx *sql.Tx) error {
+			return MarkNoticeSeen(ctx, tx, tc.dest, 0)
+		})
+		if err != nil {
+			t.Fatalf("%s: %v", name, err)
+		}
+		st := mustState(t, tc.store)
+		if st.NoticeShownAt == "" || st.NextDueAt != "" {
+			t.Fatalf("%s: state = %+v, want the notice stamped and no slot", name, st)
+		}
+	}
+}
+
+func TestMarkNoticeSeen_MissingStateRowIsAnError(t *testing.T) {
+	store := freshStore(t)
+	if _, err := store.DB.ExecContext(t.Context(), `DELETE FROM telemetry_state`); err != nil {
+		t.Fatalf("delete row: %v", err)
+	}
+	err := inTx(t, store, func(ctx context.Context, tx *sql.Tx) error {
+		return MarkNoticeSeen(ctx, tx, bundledDest, time.Hour)
+	})
+	if !errors.Is(err, sql.ErrNoRows) {
+		t.Fatalf("err = %v, want sql.ErrNoRows", err)
+	}
+}
+
+func TestNewInstallID_IsRandomUUIDv4(t *testing.T) {
+	seen := map[string]bool{}
+	for range 20 {
+		id, err := NewInstallID()
+		if err != nil || !uuidV4RE.MatchString(id) {
+			t.Fatalf("NewInstallID = %q, %v; want a lowercase UUIDv4", id, err)
+		}
+		if seen[id] {
+			t.Fatalf("NewInstallID repeated %q", id)
+		}
+		seen[id] = true
+	}
+}
+
+func TestFirstDueAndRandN(t *testing.T) {
+	now := time.Date(2026, 10, 6, 9, 0, 0, 0, time.UTC)
+	if got := firstDue(now, 24*time.Hour, func(n int64) int64 { return n - 1 }); got.Sub(now) >= 15*time.Minute {
+		t.Errorf("a 24h interval allows up to 15m, got %v", got.Sub(now))
+	}
+	if got := firstDue(now, time.Minute, func(n int64) int64 { return n - 1 }); got.Sub(now) >= 15*time.Second {
+		t.Errorf("a 1m interval allows up to interval/4 = 15s, got %v", got.Sub(now))
+	}
+	if got := randN(0); got != 0 {
+		t.Errorf("randN(0) = %d, want 0", got)
+	}
+	for range 50 {
+		if v := randN(10); v < 0 || v >= 10 {
+			t.Fatalf("randN(10) = %d, out of [0,10)", v)
+		}
+	}
+}
+
+func TestReadConsent_ClosedStoreIsAnError(t *testing.T) {
+	store := freshStore(t)
+	if err := store.Close(); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	if _, err := ReadConsent(t.Context(), store); err == nil {
+		t.Fatal("want an error from a closed database")
+	}
+}
diff --git a/api/internal/telemetry/destination.go b/api/internal/telemetry/destination.go
new file mode 100644
index 000000000..ed3e184ce
--- /dev/null
+++ b/api/internal/telemetry/destination.go
@@ -0,0 +1,80 @@
+package telemetry
+
+import (
+	"fmt"
+	"net/url"
+	"strings"
+)
+
+// DefaultEndpoint is the project default telemetry destination, ruled in
+// specs/022-default-telemetry-dashboard/OPEN-DECISIONS.md OD-1. It must stay
+// an https URL (hack/check-telemetry-default.sh enforces this in CI).
+const DefaultEndpoint = "https://telemetry.gameplane.net/ingest"
+
+// Destination kinds, in the order ResolveDestination considers them.
+const (
+	// KindDisabled is a hard off set by the operator; nothing is ever sent.
+	KindDisabled = "disabled"
+	// KindBundled is the chart's in-cluster receiver.
+	KindBundled = "bundled"
+	// KindCustom is an operator-supplied endpoint.
+	KindCustom = "custom"
+	// KindDefault is the project default, DefaultEndpoint.
+	KindDefault = "default"
+	// KindNone means no destination is in effect, so nothing is sent.
+	KindNone = "none"
+)
+
+// Destination is where reports go. URL is empty for the disabled and none
+// kinds. Host is the URL's host (with any port), safe to show to admins.
+type Destination struct {
+	Kind string
+	URL  string
+	Host string
+}
+
+// ResolveDestination picks the one destination for this process from the
+// operator's settings, first match wins: disabled, then bundled (an endpoint
+// plus the chart's bundled marker), then custom (any endpoint), then the
+// project default when DefaultEndpoint is set, otherwise none. The default
+// must use https; any other scheme is an error so a typo can't send reports
+// in clear text.
+func ResolveDestination(disabled bool, endpoint string, bundled bool) (Destination, error) {
+	return resolveDestination(disabled, endpoint, bundled, DefaultEndpoint)
+}
+
+// resolveDestination is ResolveDestination with the project default passed
+// in, so the default branches can be exercised without editing the constant.
+func resolveDestination(disabled bool, endpoint string, bundled bool, defaultEndpoint string) (Destination, error) {
+	endpoint = strings.TrimSpace(endpoint)
+	switch {
+	case disabled:
+		return Destination{Kind: KindDisabled}, nil
+	case endpoint != "" && bundled:
+		return Destination{Kind: KindBundled, URL: endpoint, Host: hostOf(endpoint)}, nil
+	case endpoint != "":
+		return Destination{Kind: KindCustom, URL: endpoint, Host: hostOf(endpoint)}, nil
+	case defaultEndpoint != "":
+		u, err := url.Parse(defaultEndpoint)
+		if err != nil {
+			return Destination{}, fmt.Errorf("default telemetry endpoint: %w", err)
+		}
+		if u.Scheme != "https" || u.Host == "" {
+			return Destination{}, fmt.Errorf("default telemetry endpoint %q must be an https URL", defaultEndpoint)
+		}
+		return Destination{Kind: KindDefault, URL: defaultEndpoint, Host: u.Host}, nil
+	default:
+		return Destination{Kind: KindNone}, nil
+	}
+}
+
+// hostOf returns the host of rawURL, or "" when it doesn't parse. Custom and
+// bundled endpoints keep today's behaviour of accepting any value, so a bad
+// one is not an error here.
+func hostOf(rawURL string) string {
+	u, err := url.Parse(rawURL)
+	if err != nil {
+		return ""
+	}
+	return u.Host
+}
diff --git a/api/internal/telemetry/destination_test.go b/api/internal/telemetry/destination_test.go
new file mode 100644
index 000000000..9f16b9104
--- /dev/null
+++ b/api/internal/telemetry/destination_test.go
@@ -0,0 +1,74 @@
+package telemetry
+
+import "testing"
+
+func TestResolveDestination_Table(t *testing.T) {
+	const (
+		bundledURL = "http://gameplane-telemetry-receiver.gameplane-system.svc:8080/ingest"
+		defaultURL = "https://telemetry.example.org/ingest"
+	)
+	cases := []struct {
+		name       string
+		disabled   bool
+		endpoint   string
+		bundled    bool
+		defaultURL string
+		wantKind   string
+		wantURL    string
+		wantHost   string
+		wantErr    bool
+	}{
+		{name: "disabled wins over endpoint and default", disabled: true, endpoint: "https://x.example/i", defaultURL: defaultURL, wantKind: KindDisabled},
+		{name: "disabled wins over bundled", disabled: true, endpoint: bundledURL, bundled: true, wantKind: KindDisabled},
+		{name: "bundled needs an endpoint and the marker", endpoint: bundledURL, bundled: true, defaultURL: defaultURL,
+			wantKind: KindBundled, wantURL: bundledURL, wantHost: "gameplane-telemetry-receiver.gameplane-system.svc:8080"},
+		{name: "custom keeps any scheme", endpoint: "http://collector.lan:9000/in", defaultURL: defaultURL,
+			wantKind: KindCustom, wantURL: "http://collector.lan:9000/in", wantHost: "collector.lan:9000"},
+		{name: "custom endpoint is trimmed", endpoint: "  https://c.example/i \n", wantKind: KindCustom,
+			wantURL: "https://c.example/i", wantHost: "c.example"},
+		{name: "custom with an unparsable URL is not an error", endpoint: "://bad", wantKind: KindCustom, wantURL: "://bad"},
+		{name: "default when nothing else is set", defaultURL: defaultURL,
+			wantKind: KindDefault, wantURL: defaultURL, wantHost: "telemetry.example.org"},
+		{name: "bundled marker alone does not use the default", bundled: true, defaultURL: defaultURL,
+			wantKind: KindDefault, wantURL: defaultURL, wantHost: "telemetry.example.org"},
+		{name: "none when there is no endpoint and no default", wantKind: KindNone},
+		{name: "none when only the bundled marker is set", bundled: true, wantKind: KindNone},
+		{name: "default over http is rejected", defaultURL: "http://telemetry.example.org/ingest", wantErr: true},
+		{name: "default without a host is rejected", defaultURL: "https://", wantErr: true},
+		{name: "default that does not parse is rejected", defaultURL: "%%", wantErr: true},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			got, err := resolveDestination(tc.disabled, tc.endpoint, tc.bundled, tc.defaultURL)
+			if tc.wantErr {
+				if err == nil {
+					t.Fatalf("want an error, got %+v", got)
+				}
+				return
+			}
+			if err != nil {
+				t.Fatalf("unexpected error: %v", err)
+			}
+			want := Destination{Kind: tc.wantKind, URL: tc.wantURL, Host: tc.wantHost}
+			if got != want {
+				t.Fatalf("got %+v, want %+v", got, want)
+			}
+		})
+	}
+}
+
+func TestResolveDestination_UsesProjectConstant(t *testing.T) {
+	got, err := ResolveDestination(true, "", false)
+	if err != nil || got.Kind != KindDisabled || got.URL != "" {
+		t.Fatalf("disabled: got %+v, %v", got, err)
+	}
+	got, err = ResolveDestination(false, "http://collector.lan/in", false)
+	if err != nil || got.Kind != KindCustom {
+		t.Fatalf("custom: got %+v, %v", got, err)
+	}
+	// Whatever DefaultEndpoint holds must itself resolve: empty means none,
+	// anything else must be a valid https URL.
+	if _, err := ResolveDestination(false, "", false); err != nil {
+		t.Fatalf("DefaultEndpoint %q does not resolve: %v", DefaultEndpoint, err)
+	}
+}
diff --git a/api/internal/telemetry/distro.go b/api/internal/telemetry/distro.go
new file mode 100644
index 000000000..f1edc5378
--- /dev/null
+++ b/api/internal/telemetry/distro.go
@@ -0,0 +1,54 @@
+package telemetry
+
+import (
+	"strings"
+
+	corev1 "k8s.io/api/core/v1"
+)
+
+// detectDistro names the Kubernetes distribution from signals the API can
+// already read, without any new RBAC. The first matching rule wins, in the
+// order of research R16: the server's gitVersion suffix, then well-known node
+// labels, then the node providerID prefix, then the node OS image. Anything
+// else, including plain kubeadm, is "other".
+func detectDistro(gitVersion string, nodes []corev1.Node) string {
+	for _, r := range []struct{ name, marker string }{
+		{"k3s", "+k3s"},
+		{"rke2", "+rke2"},
+		{"k0s", "+k0s"},
+		{"eks", "-eks-"},
+		{"gke", "-gke."},
+	} {
+		if strings.Contains(gitVersion, r.marker) {
+			return r.name
+		}
+	}
+	for _, r := range []struct{ name, label string }{
+		{"aks", "kubernetes.azure.com/cluster"},
+		{"openshift", "node.openshift.io/os_id"},
+		{"microk8s", "microk8s.io/cluster"},
+		{"minikube", "minikube.k8s.io/name"},
+	} {
+		for i := range nodes {
+			if _, ok := nodes[i].Labels[r.label]; ok {
+				return r.name
+			}
+		}
+	}
+	for _, r := range []struct{ name, prefix string }{
+		{"kind", "kind://"},
+		{"doks", "digitalocean://"},
+	} {
+		for i := range nodes {
+			if strings.HasPrefix(nodes[i].Spec.ProviderID, r.prefix) {
+				return r.name
+			}
+		}
+	}
+	for i := range nodes {
+		if strings.HasPrefix(nodes[i].Status.NodeInfo.OSImage, "Talos") {
+			return "talos"
+		}
+	}
+	return "other"
+}
diff --git a/api/internal/telemetry/distro_test.go b/api/internal/telemetry/distro_test.go
new file mode 100644
index 000000000..ae7690227
--- /dev/null
+++ b/api/internal/telemetry/distro_test.go
@@ -0,0 +1,71 @@
+package telemetry
+
+import (
+	"testing"
+
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+// testNode builds a Node with just the fields detectDistro and nodeArches read.
+func testNode(name string, labels map[string]string, providerID, osImage, arch string) corev1.Node {
+	return corev1.Node{
+		ObjectMeta: metav1.ObjectMeta{Name: name, Labels: labels},
+		Spec:       corev1.NodeSpec{ProviderID: providerID},
+		Status: corev1.NodeStatus{NodeInfo: corev1.NodeSystemInfo{
+			OSImage:      osImage,
+			Architecture: arch,
+		}},
+	}
+}
+
+func TestDetectDistro_EveryRow(t *testing.T) {
+	plain := testNode("n", nil, "", "Ubuntu 24.04", "amd64")
+	cases := []struct {
+		name       string
+		gitVersion string
+		nodes      []corev1.Node
+		want       string
+	}{
+		{"k3s", "v1.31.2+k3s1", []corev1.Node{plain}, "k3s"},
+		{"rke2", "v1.30.4+rke2r1", []corev1.Node{plain}, "rke2"},
+		{"k0s", "v1.31.1+k0s", []corev1.Node{plain}, "k0s"},
+		{"eks", "v1.29.4-eks-036c24b", []corev1.Node{plain}, "eks"},
+		{"gke", "v1.29.4-gke.1043002", []corev1.Node{plain}, "gke"},
+		{"aks label", "v1.30.0", []corev1.Node{testNode("n", map[string]string{"kubernetes.azure.com/cluster": "MC_x"}, "", "", "amd64")}, "aks"},
+		{"openshift label", "v1.30.0", []corev1.Node{testNode("n", map[string]string{"node.openshift.io/os_id": "rhcos"}, "", "", "amd64")}, "openshift"},
+		{"microk8s label", "v1.30.0", []corev1.Node{testNode("n", map[string]string{"microk8s.io/cluster": "true"}, "", "", "amd64")}, "microk8s"},
+		{"minikube label", "v1.30.0", []corev1.Node{testNode("n", map[string]string{"minikube.k8s.io/name": "minikube"}, "", "", "amd64")}, "minikube"},
+		{"kind providerID", "v1.31.0", []corev1.Node{testNode("n", nil, "kind://docker/kind/kind-control-plane", "", "amd64")}, "kind"},
+		{"doks providerID", "v1.30.2", []corev1.Node{testNode("n", nil, "digitalocean://123456", "", "amd64")}, "doks"},
+		{"talos osImage", "v1.31.0", []corev1.Node{testNode("n", nil, "", "Talos (v1.8.0)", "amd64")}, "talos"},
+		{"plain kubeadm is other", "v1.31.0", []corev1.Node{plain}, "other"},
+		{"no nodes and no marker is other", "", nil, "other"},
+		{"match on a later node", "v1.30.0", []corev1.Node{plain, testNode("w", nil, "kind://docker/kind/w", "", "arm64")}, "kind"},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := detectDistro(tc.gitVersion, tc.nodes); got != tc.want {
+				t.Fatalf("detectDistro(%q) = %q, want %q", tc.gitVersion, got, tc.want)
+			}
+		})
+	}
+}
+
+// The first matching row wins, in the order of research R16.
+func TestDetectDistro_Precedence(t *testing.T) {
+	kindNode := testNode("n", map[string]string{"minikube.k8s.io/name": "m"}, "kind://docker/x", "Talos", "amd64")
+	if got := detectDistro("v1.31.0+k3s1", []corev1.Node{kindNode}); got != "k3s" {
+		t.Errorf("gitVersion marker must beat labels and providerID, got %q", got)
+	}
+	if got := detectDistro("v1.31.0", []corev1.Node{kindNode}); got != "minikube" {
+		t.Errorf("a node label must beat providerID and osImage, got %q", got)
+	}
+	noLabel := testNode("n", nil, "kind://docker/x", "Talos", "amd64")
+	if got := detectDistro("v1.31.0", []corev1.Node{noLabel}); got != "kind" {
+		t.Errorf("providerID must beat osImage, got %q", got)
+	}
+	if got := detectDistro("v1.31.0+k3s1-eks-1", nil); got != "k3s" {
+		t.Errorf("k3s must be checked before eks, got %q", got)
+	}
+}
diff --git a/api/internal/telemetry/official.go b/api/internal/telemetry/official.go
new file mode 100644
index 000000000..4bfdc3990
--- /dev/null
+++ b/api/internal/telemetry/official.go
@@ -0,0 +1,75 @@
+package telemetry
+
+import (
+	"context"
+
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/apis/meta/v1/unstructured"
+	"k8s.io/client-go/dynamic"
+
+	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// Labels the operator stamps on a module-managed GameTemplate
+// (operator/api/v1alpha1/module_types.go). The API module doesn't import the
+// operator module, so the values are repeated here.
+const (
+	labelManagedBy    = "gameplane.local/managed-by"
+	labelModuleName   = "gameplane.local/module-name"
+	labelModuleSource = "gameplane.local/module-source"
+	managedByModule   = "Module"
+)
+
+// listedModules returns the module names the ModuleSource called source
+// serves: spec.oci.modules[].name plus the names in status.modules (the
+// source's indexed catalog, which is where a git source's names appear). A
+// missing source, an empty source name or any read error yields an empty set,
+// so every server then counts as custom.
+func listedModules(ctx context.Context, dyn dynamic.Interface, source string) map[string]bool {
+	out := map[string]bool{}
+	if source == "" || dyn == nil {
+		return out
+	}
+	ms, err := dyn.Resource(kube.GVRModuleSource).Get(ctx, source, metav1.GetOptions{})
+	if err != nil {
+		return out
+	}
+	if mods, found, _ := unstructured.NestedSlice(ms.Object, "spec", "oci", "modules"); found {
+		addModuleNames(out, mods)
+	}
+	if mods, found, _ := unstructured.NestedSlice(ms.Object, "status", "modules"); found {
+		addModuleNames(out, mods)
+	}
+	return out
+}
+
+// addModuleNames adds the "name" of every map entry in mods to set.
+func addModuleNames(set map[string]bool, mods []any) {
+	for _, m := range mods {
+		entry, ok := m.(map[string]any)
+		if !ok {
+			continue
+		}
+		if name, ok := entry["name"].(string); ok && name != "" {
+			set[name] = true
+		}
+	}
+}
+
+// officialModule returns the official module name a GameTemplate with these
+// labels provides, or "" when it isn't one. It is official only when it is
+// managed by a Module, comes from the official ModuleSource (source, from
+// --official-module-source), names a module that source lists, and that name
+// is in the embedded catalog. Manual templates, uploads, other sources and
+// look-alike names all return "" and are counted as custom.
+func officialModule(labels map[string]string, source string, listed map[string]bool) string {
+	if source == "" || labels[labelManagedBy] != managedByModule || labels[labelModuleSource] != source {
+		return ""
+	}
+	name := labels[labelModuleName]
+	if name == "" || !listed[name] || !telemetryschema.IsOfficial(name) {
+		return ""
+	}
+	return name
+}
diff --git a/api/internal/telemetry/official_test.go b/api/internal/telemetry/official_test.go
new file mode 100644
index 000000000..5441edfaf
--- /dev/null
+++ b/api/internal/telemetry/official_test.go
@@ -0,0 +1,113 @@
+package telemetry
+
+import (
+	"context"
+	"testing"
+
+	"k8s.io/apimachinery/pkg/runtime"
+)
+
+func TestOfficialModule_Table(t *testing.T) {
+	listed := map[string]bool{
+		"minecraft-java":       true,
+		"terraria":             true,
+		"minecraft-java-evil":  true, // listed by the source, but not in the embedded catalog
+		"private-game-by-user": true,
+	}
+	good := map[string]string{
+		labelManagedBy:    managedByModule,
+		labelModuleSource: "default",
+		labelModuleName:   "minecraft-java",
+	}
+	with := func(key, val string) map[string]string {
+		out := map[string]string{}
+		for k, v := range good {
+			out[k] = v
+		}
+		if val == "" {
+			delete(out, key)
+		} else {
+			out[key] = val
+		}
+		return out
+	}
+	cases := []struct {
+		name   string
+		labels map[string]string
+		source string
+		want   string
+	}{
+		{"official module", good, "default", "minecraft-java"},
+		{"another official module", with(labelModuleName, "terraria"), "default", "terraria"},
+		{"nil labels (manual template)", nil, "default", ""},
+		{"not managed by a module", with(labelManagedBy, ""), "default", ""},
+		{"managed by something else", with(labelManagedBy, "Helm"), "default", ""},
+		{"upload source", with(labelModuleSource, "uploads"), "default", ""},
+		{"source label missing", with(labelModuleSource, ""), "default", ""},
+		{"no official source configured", good, "", ""},
+		{"module name missing", with(labelModuleName, ""), "default", ""},
+		{"module not listed by the source", with(labelModuleName, "valheim"), "default", ""},
+		{"look-alike name outside the catalog", with(labelModuleName, "minecraft-java-evil"), "default", ""},
+		{"listed but not in the catalog", with(labelModuleName, "private-game-by-user"), "default", ""},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := officialModule(tc.labels, tc.source, listed); got != tc.want {
+				t.Fatalf("officialModule = %q, want %q", got, tc.want)
+			}
+		})
+	}
+}
+
+func TestListedModules_UnionOfSpecAndStatus(t *testing.T) {
+	src := moduleSourceObj("default", []string{"minecraft-java", "terraria"}, []string{"terraria", "valheim"})
+	k := collectKubeClients(t, collectOpts{dynamic: []runtime.Object{src}})
+	got := listedModules(context.Background(), k.Dynamic, "default")
+	for _, name := range []string{"minecraft-java", "terraria", "valheim"} {
+		if !got[name] {
+			t.Errorf("%s missing from %v", name, got)
+		}
+	}
+	if len(got) != 3 {
+		t.Errorf("got %v, want exactly three names", got)
+	}
+}
+
+func TestListedModules_EmptyOnProblems(t *testing.T) {
+	ctx := context.Background()
+	src := moduleSourceObj("default", []string{"minecraft-java"}, nil)
+	k := collectKubeClients(t, collectOpts{dynamic: []runtime.Object{src}})
+
+	if got := listedModules(ctx, k.Dynamic, ""); len(got) != 0 {
+		t.Errorf("empty source name: got %v", got)
+	}
+	if got := listedModules(ctx, nil, "default"); len(got) != 0 {
+		t.Errorf("nil client: got %v", got)
+	}
+	if got := listedModules(ctx, k.Dynamic, "absent"); len(got) != 0 {
+		t.Errorf("unknown source: got %v", got)
+	}
+
+	failing := collectKubeClients(t, collectOpts{
+		dynamic:     []runtime.Object{src},
+		dynamicFail: map[string]bool{"get": true},
+	})
+	if got := listedModules(ctx, failing.Dynamic, "default"); len(got) != 0 {
+		t.Errorf("a failing Get must yield an empty set, got %v", got)
+	}
+}
+
+func TestAddModuleNames_SkipsMalformedEntries(t *testing.T) {
+	set := map[string]bool{}
+	addModuleNames(set, []any{
+		map[string]any{"name": "terraria"},
+		map[string]any{"name": ""},
+		map[string]any{"name": 7},
+		map[string]any{"other": "x"},
+		"not-a-map",
+		nil,
+	})
+	if len(set) != 1 || !set["terraria"] {
+		t.Fatalf("got %v, want only terraria", set)
+	}
+}
diff --git a/api/internal/telemetry/telemetry.go b/api/internal/telemetry/telemetry.go
index 046535e81..f040b6951 100644
--- a/api/internal/telemetry/telemetry.go
+++ b/api/internal/telemetry/telemetry.go
@@ -1,148 +1,470 @@
-// Package telemetry implements an opt-in, off-by-default reporter that
-// periodically POSTs anonymous, aggregate usage counts to a configurable
-// endpoint. It exists so the admin "Send anonymous metrics" toggle does
-// something — previously it persisted a value nothing read.
+// Package telemetry sends the install's usage report to its resolved
+// destination (specs/022-default-telemetry-dashboard).
 //
-// Privacy: the payload carries only the control-plane version and total
-// counts. No names, namespaces, hostnames, IPs, or identifiers. Reporting
-// happens only when BOTH an endpoint is configured (operator-set) AND the
-// sendMetrics config toggle is on (admin-set) — opt-in on two axes.
+// Privacy: the basic report carries only the control-plane version and
+// total counts. The extended report adds an install ID and environment
+// categories, only while the admin's extended switch is on, and is signed.
+// Nothing is sent while the operator disabled telemetry, no destination is in
+// effect, the admin turned basic off, or (on a fresh install) before the
+// notice was shown to an admin (FR-004).
+//
+// The schedule lives in the database (telemetry_state.next_due_at), so a
+// restart never sends early and replicas sharing one database claim each
+// slot with a conditional UPDATE (research R12).
 package telemetry
 
 import (
 	"bytes"
 	"context"
 	"encoding/json"
+	"errors"
 	"fmt"
+	"io"
 	"log/slog"
 	"net/http"
+	"net/url"
 	"time"
 
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-
 	"github.com/GameplanePanel/gameplane/api/internal/db"
-	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+const (
+	// maxPoll caps how often the reporter looks at the schedule.
+	maxPoll = 5 * time.Minute
+	// baseBackoff is the wait after the first failure; it doubles per
+	// further failure up to the report interval.
+	baseBackoff = time.Hour
+	// extFallbackFor is how long the extended part is withheld from an
+	// endpoint that answered 400 to it (research R2).
+	extFallbackFor = 7 * 24 * time.Hour
+	// outcomeOK and outcomeFailed are the telemetry_state.last_outcome values.
+	outcomeOK     = "ok"
+	outcomeFailed = "failed"
+	// challengeTimeout bounds the request for a proof-of-work challenge
+	// (research R21).
+	challengeTimeout = 10 * time.Second
+	// solveMargin is how long before a challenge expires the solver must
+	// give up.
+	solveMargin = 30 * time.Second
+	// challengeTTL is how long a challenge lives when the provider's
+	// expiresAt is missing or unreadable (the receiver's fixed lifetime).
+	challengeTTL = 15 * time.Minute
+	// maxChallengeBody bounds how much of a challenge response is read.
+	maxChallengeBody = 4096
 )
 
-// Reporter periodically sends anonymous usage telemetry to a configured
-// endpoint when enabled via the admin toggle.
+// errPoWDifficulty is wrapped by the failure for a challenge whose difficulty
+// is outside 0 to telemetryschema.MaxPoWBits (FR-040).
+var errPoWDifficulty = errors.New("challenge difficulty out of range")
+
+// Config configures a Reporter.
+type Config struct {
+	// Dest is the resolved destination. Kinds disabled and none never send.
+	Dest Destination
+	// Interval is the spacing between reports; non-positive means 24h.
+	Interval time.Duration
+	// Auth, when non-empty, is sent verbatim as the Authorization header.
+	Auth string
+	// Deps is what Collect reads from. Deps.Store is required. Extended and
+	// Now are set per report by the reporter.
+	Deps Deps
+	// Client is the HTTP client; nil means one with a 15s timeout.
+	Client *http.Client
+	// Now returns the current time; nil means time.Now. Tests set it.
+	Now func() time.Time
+	// Rand returns a uniform value in [0, n); nil means math/rand/v2.
+	Rand func(n int64) int64
+}
+
+// Reporter sends telemetry reports on the persisted schedule.
 type Reporter struct {
-	store    *db.Store
-	k        *kube.Client
-	endpoint string
-	auth     string
-	version  string
+	dest     Destination
 	interval time.Duration
+	auth     string
+	deps     Deps
+	store    *db.Store
 	client   *http.Client
+	now      func() time.Time
+	rnd      func(int64) int64
 }
 
-// New builds a Reporter. auth, when non-empty, is sent verbatim as the
-// Authorization header on every report — the telemetry-receiver checks
-// it when deployed with an ingest token.
-func New(store *db.Store, k *kube.Client, endpoint, auth, version string, interval time.Duration) *Reporter {
-	if interval <= 0 {
-		interval = 24 * time.Hour
+// New builds a Reporter from cfg.
+func New(cfg Config) *Reporter {
+	if cfg.Interval <= 0 {
+		cfg.Interval = 24 * time.Hour
+	}
+	if cfg.Client == nil {
+		cfg.Client = &http.Client{Timeout: 15 * time.Second}
+	}
+	if cfg.Now == nil {
+		cfg.Now = time.Now
+	}
+	if cfg.Rand == nil {
+		cfg.Rand = randN
 	}
 	return &Reporter{
-		store:    store,
-		k:        k,
-		endpoint: endpoint,
-		auth:     auth,
-		version:  version,
-		interval: interval,
-		client:   &http.Client{Timeout: 15 * time.Second},
+		dest:     cfg.Dest,
+		interval: cfg.Interval,
+		auth:     cfg.Auth,
+		deps:     cfg.Deps,
+		store:    cfg.Deps.Store,
+		client:   cfg.Client,
+		now:      cfg.Now,
+		rnd:      cfg.Rand,
 	}
 }
 
-// payload is the anonymous, aggregate telemetry. Deliberately carries no
-// names, namespaces, hosts, or identifiers.
-type payload struct {
-	Version   string `json:"version"`
-	Servers   int    `json:"servers"`
-	Templates int    `json:"templates"`
+// pollEvery is how often Run evaluates the schedule: min(5m, interval/4).
+func (r *Reporter) pollEvery() time.Duration {
+	return max(time.Second, min(maxPoll, r.interval/4))
 }
 
-// Run reports on an interval until ctx is cancelled. It returns
-// immediately when no endpoint is configured (telemetry off).
+// Run evaluates the schedule every pollEvery until ctx is cancelled. It
+// returns at once, making no connection, when the destination is disabled or
+// none.
 func (r *Reporter) Run(ctx context.Context) {
-	if r.endpoint == "" {
-		slog.Info("telemetry disabled: no endpoint configured")
+	if !destActive(r.dest) {
+		slog.Info("telemetry off: no destination in effect", "kind", r.dest.Kind)
 		return
 	}
-	t := time.NewTicker(r.interval)
+	t := time.NewTicker(r.pollEvery())
 	defer t.Stop()
 	for {
+		if err := r.Tick(ctx); err != nil {
+			slog.Warn("telemetry report", "err", err)
+		}
 		select {
 		case <-ctx.Done():
 			return
 		case <-t.C:
-			if err := r.reportOnce(ctx); err != nil {
-				slog.Warn("telemetry report", "err", err)
-			}
 		}
 	}
 }
 
-// enabled reads the admin sendMetrics toggle on each tick so flipping it
-// in the UI takes effect without a restart.
-func (r *Reporter) enabled(ctx context.Context) bool {
-	raw, ok, err := r.store.ConfigValue(ctx, "telemetry")
-	if err != nil || !ok {
-		return false
+// Tick evaluates the schedule once. It opens or closes the gate's slot,
+// and, when a slot is due and this process wins the claim, sends one report.
+// It returns an error when the send failed (the failure is also recorded).
+func (r *Reporter) Tick(ctx context.Context) error {
+	now := r.now()
+	st, err := r.store.GetTelemetryState(ctx)
+	if err != nil {
+		return fmt.Errorf("telemetry tick: %w", err)
+	}
+	c, err := ReadConsent(ctx, r.store)
+	if err != nil {
+		return fmt.Errorf("telemetry tick: %w", err)
 	}
-	var c struct {
-		SendMetrics bool `json:"sendMetrics"`
+	if !gateOpen(destActive(r.dest) && c.Basic, st) {
+		if st.NextDueAt == "" {
+			return nil
+		}
+		if err := r.store.CloseTelemetrySchedule(ctx); err != nil {
+			return fmt.Errorf("telemetry tick: %w", err)
+		}
+		return nil
+	}
+	if st.NextDueAt == "" {
+		if _, err := r.store.OpenTelemetrySchedule(ctx, stamp(firstDue(now, r.interval, r.rnd))); err != nil {
+			return fmt.Errorf("telemetry tick: %w", err)
+		}
+		return nil
 	}
-	if json.Unmarshal([]byte(raw), &c) != nil {
+	due, perr := time.Parse(time.RFC3339, st.NextDueAt)
+	if perr != nil {
+		due = now // a corrupt slot counts as due, and the claim replaces it
+	}
+	if now.Before(due) {
+		return nil
+	}
+	return r.attempt(ctx, st, c, now)
+}
+
+// jitter returns U(0, d).
+func (r *Reporter) jitter(d time.Duration) time.Duration {
+	return time.Duration(r.rnd(int64(d)))
+}
+
+// extWithheld reports whether the extended part is withheld because this
+// endpoint answered 400 to it within the last 7 days.
+func (r *Reporter) extWithheld(st db.TelemetryState, now time.Time) bool {
+	return ExtWithheld(st, r.dest.URL, now)
+}
+
+// ExtWithheld reports whether the extended part is withheld from endpoint
+// because it answered 400 to it within the last 7 days. The reporter and the
+// admin preview both use it, so the preview shows what would be sent.
+func ExtWithheld(st db.TelemetryState, endpoint string, now time.Time) bool {
+	if st.ExtUnsupportedEndpoint != endpoint {
 		return false
 	}
-	return c.SendMetrics
+	until, err := time.Parse(time.RFC3339, st.ExtUnsupportedUntil)
+	return err == nil && now.Before(until)
 }
 
-// reportOnce collects and POSTs one telemetry sample, or does nothing
-// when the admin toggle is off.
-func (r *Reporter) reportOnce(ctx context.Context) error {
-	if !r.enabled(ctx) {
-		return nil
+// attempt claims the due slot and, if it won, builds, signs and sends one
+// report, then records the outcome.
+func (r *Reporter) attempt(ctx context.Context, st db.TelemetryState, c Consent, now time.Time) error {
+	claimed := stamp(now.Add(r.interval + r.jitter(r.interval/48)))
+	won, err := r.store.ClaimTelemetryDue(ctx, st.NextDueAt, claimed, stamp(now))
+	if err != nil {
+		return fmt.Errorf("telemetry attempt: %w", err)
+	}
+	if !won {
+		return nil // another replica sent this slot
+	}
+	rep, err := r.build(ctx, st, c.Extended && !r.extWithheld(st, now), now)
+	if err != nil {
+		return r.finish(ctx, st, claimed, err)
+	}
+	status, err := r.send(ctx, rep)
+	if err == nil && status == http.StatusBadRequest && rep.Ext != nil {
+		// The endpoint doesn't understand the extended part: re-send the
+		// basic report once and stop sending ext to it for a week.
+		basic := rep
+		basic.Ext = nil
+		status, err = r.send(ctx, basic)
+		if mErr := r.store.SetExtUnsupported(ctx, stamp(now.Add(extFallbackFor)), r.dest.URL); mErr != nil {
+			slog.Warn("telemetry fallback marker", "err", mErr)
+		}
+	} else if err == nil && status == http.StatusConflict && rep.Ext != nil {
+		// The receiver says another key claimed this install ID (FR-037):
+		// replace the ID, keep the signing secret, and re-send once. A second
+		// 409 falls through to the failure below. A 403 never gets here.
+		status, err = r.rotateAndResend(ctx, now)
+	}
+	if err == nil && (status < 200 || status > 299) {
+		err = fmt.Errorf("telemetry endpoint returned %d", status)
+	}
+	return r.finish(ctx, st, claimed, err)
+}
+
+// finish records the outcome of a claimed attempt: cause is nil on success.
+// On success the next slot is interval plus jitter after completion, so
+// reports are at least one interval apart. On failure it backs off
+// min(1h*2^n, interval). cause is returned.
+func (r *Reporter) finish(ctx context.Context, st db.TelemetryState, claimed string, cause error) error {
+	done := r.now()
+	res := db.TelemetryResult{ExpectedNext: claimed}
+	if cause == nil {
+		res.Outcome = outcomeOK
+		res.SuccessAt = stamp(done)
+		res.NextDue = stamp(done.Add(r.interval + r.jitter(r.interval/48)))
+	} else {
+		res.Outcome = outcomeFailed
+		res.Failures = st.ConsecutiveFailures + 1
+		res.NextDue = stamp(done.Add(r.backoff(st.ConsecutiveFailures)))
+	}
+	if err := r.store.RecordTelemetryResult(ctx, res); err != nil {
+		return errors.Join(cause, fmt.Errorf("telemetry attempt: %w", err))
+	}
+	return cause
+}
+
+// backoff is min(1h*2^failures, interval).
+func (r *Reporter) backoff(failures int) time.Duration {
+	d := baseBackoff
+	for i := 0; i < failures && d < r.interval; i++ {
+		d *= 2
 	}
-	p := payload{Version: r.version}
-	if n, err := r.count(ctx, "servers"); err == nil {
-		p.Servers = n
+	return min(d, r.interval)
+}
+
+// build collects the report. extended is the gate's extendedOn minus the
+// fallback marker; a fresh install is seeded with extended on and no install
+// ID yet, so the ID is created here when missing.
+func (r *Reporter) build(ctx context.Context, st db.TelemetryState, extended bool, now time.Time) (telemetryschema.Report, error) {
+	if extended && st.InstallID == "" {
+		id, err := NewInstallID()
+		if err != nil {
+			return telemetryschema.Report{}, fmt.Errorf("telemetry build: %w", err)
+		}
+		if err := r.store.SetInstallID(ctx, id); err != nil {
+			return telemetryschema.Report{}, fmt.Errorf("telemetry build: %w", err)
+		}
 	}
-	if n, err := r.count(ctx, "templates"); err == nil {
-		p.Templates = n
+	rep, err := BuildReport(ctx, r.deps, extended, now)
+	if err != nil {
+		return telemetryschema.Report{}, fmt.Errorf("telemetry build: %w", err)
 	}
-	body, err := json.Marshal(p)
+	return rep, nil
+}
+
+// BuildReport collects the report for deps at now, with the extended part
+// when extended is true. The reporter and the admin preview both call it, so
+// the preview is the report that would be sent (SC-006).
+func BuildReport(ctx context.Context, deps Deps, extended bool, now time.Time) (telemetryschema.Report, error) {
+	deps.Extended = extended
+	deps.Now = func() time.Time { return now }
+	return Collect(ctx, deps)
+}
+
+// rotateAndResend handles a 409 id_claimed: it replaces the install ID (the
+// signing secret is kept, so the new ID gets a new, unlinkable key), records
+// last_id_rotation_at, rebuilds and re-signs the extended report, and POSTs it
+// once. It returns that POST's status.
+func (r *Reporter) rotateAndResend(ctx context.Context, now time.Time) (int, error) {
+	id, err := NewInstallID()
 	if err != nil {
-		return err
+		return 0, fmt.Errorf("telemetry rotate: %w", err)
+	}
+	if err := r.store.RotateInstallID(ctx, id, stamp(now)); err != nil {
+		return 0, fmt.Errorf("telemetry rotate: %w", err)
 	}
-	req, err := http.NewRequestWithContext(ctx, http.MethodPost, r.endpoint, bytes.NewReader(body))
+	rep, err := BuildReport(ctx, r.deps, true, now)
 	if err != nil {
-		return err
+		return 0, fmt.Errorf("telemetry rotate: %w", err)
+	}
+	return r.send(ctx, rep)
+}
+
+// send encodes rep and POSTs it, signing the exact body bytes when rep
+// carries the extended part (the signature header is absent otherwise,
+// FR-038). It returns the HTTP status.
+func (r *Reporter) send(ctx context.Context, rep telemetryschema.Report) (int, error) {
+	body, err := telemetryschema.Encode(rep)
+	if err != nil {
+		return 0, fmt.Errorf("telemetry send: %w", err)
+	}
+	sig := ""
+	if rep.Ext != nil {
+		secret, err := r.store.EnsureSigningSecret(ctx)
+		if err != nil {
+			return 0, fmt.Errorf("telemetry send: %w", err)
+		}
+		priv, err := telemetryschema.DeriveKey(secret, rep.Ext.InstallID)
+		if err != nil {
+			return 0, fmt.Errorf("telemetry send: %w", err)
+		}
+		sig = telemetryschema.Sign(priv, body)
+	}
+	return r.post(ctx, body, sig)
+}
+
+// post sends one report and returns the status code. When the destination
+// offers proof-of-work challenges (research R21) each request carries a solved
+// one: the challenge is fetched fresh for every request, because challenges
+// are single use. A 428 gets one new challenge and one resend; a second 428 is
+// returned to the caller, which records it as a failed attempt. An error
+// means no request got an answer, or the challenge could not be solved.
+func (r *Reporter) post(ctx context.Context, body []byte, sig string) (int, error) {
+	status := 0
+	for range 2 {
+		header, err := r.solveChallenge(ctx)
+		if err != nil {
+			return 0, err
+		}
+		status, err = r.postOnce(ctx, body, sig, header)
+		if err != nil || status != http.StatusPreconditionRequired {
+			return status, err
+		}
+	}
+	return status, nil
+}
+
+// postOnce sends one request, with the proof-of-work header when pow is not
+// empty, and returns the status code.
+func (r *Reporter) postOnce(ctx context.Context, body []byte, sig, pow string) (int, error) {
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, r.dest.URL, bytes.NewReader(body))
+	if err != nil {
+		return 0, fmt.Errorf("telemetry post: %w", err)
 	}
 	req.Header.Set("Content-Type", "application/json")
 	if r.auth != "" {
 		req.Header.Set("Authorization", r.auth)
 	}
+	if sig != "" {
+		req.Header.Set(telemetryschema.SignatureHeader, sig)
+	}
+	if pow != "" {
+		req.Header.Set(telemetryschema.PoWHeader, pow)
+	}
 	resp, err := r.client.Do(req)
 	if err != nil {
-		return err
+		return 0, fmt.Errorf("telemetry post: %w", err)
 	}
 	defer func() { _ = resp.Body.Close() }()
-	if resp.StatusCode >= 300 {
-		return fmt.Errorf("telemetry endpoint returned %d", resp.StatusCode)
+	_, _ = io.Copy(io.Discard, io.LimitReader(resp.Body, 4096))
+	return resp.StatusCode, nil
+}
+
+// challengeReply is the body of the provider's GET /v1/challenge.
+type challengeReply struct {
+	Challenge string `json:"challenge"`
+	Bits      int    `json:"bits"`
+	ExpiresAt string `json:"expiresAt"`
+}
+
+// challengeURL is the endpoint with its last path segment replaced by
+// v1/challenge: https://host/prefix/ingest becomes
+// https://host/prefix/v1/challenge. A query or fragment is dropped.
+func challengeURL(endpoint string) (string, error) {
+	base, err := url.Parse(endpoint)
+	if err != nil {
+		return "", fmt.Errorf("telemetry challenge url: %w", err)
 	}
-	return nil
+	return base.ResolveReference(&url.URL{Path: "v1/challenge"}).String(), nil
 }
 
-func (r *Reporter) count(ctx context.Context, kind string) (int, error) {
-	gvr, ok := kube.GVRs[kind]
+// solveChallenge returns the proof-of-work header value for the next
+// request, or "" when the destination does not offer challenges (FR-040).
+// It fails, without any POST, when the challenge is harder than
+// telemetryschema.MaxPoWBits or cannot be solved before it expires. Solving
+// runs on the calling goroutine, which is the reporter's own.
+func (r *Reporter) solveChallenge(ctx context.Context) (string, error) {
+	ch, ok := r.fetchChallenge(ctx)
 	if !ok {
-		return 0, nil
+		if err := ctx.Err(); err != nil {
+			return "", fmt.Errorf("telemetry challenge: %w", err)
+		}
+		return "", nil
+	}
+	if ch.Bits < 0 || ch.Bits > telemetryschema.MaxPoWBits {
+		return "", fmt.Errorf("telemetry pow: %w: %d bits, the cap is %d", errPoWDifficulty, ch.Bits, telemetryschema.MaxPoWBits)
+	}
+	left := challengeTTL
+	if exp, perr := time.Parse(time.RFC3339, ch.ExpiresAt); perr == nil {
+		left = exp.Sub(r.now())
+	}
+	budget := left - solveMargin
+	if budget <= 0 {
+		return "", errors.New("telemetry pow: challenge expires too soon to solve")
 	}
-	list, err := r.k.Dynamic.Resource(gvr).List(ctx, metav1.ListOptions{})
+	solveCtx, cancel := context.WithTimeout(ctx, budget)
+	defer cancel()
+	nonce, err := telemetryschema.SolvePoW(solveCtx, ch.Challenge, ch.Bits)
 	if err != nil {
-		return 0, err
+		return "", fmt.Errorf("telemetry pow: %w", err)
+	}
+	return telemetryschema.FormatPoW(ch.Challenge, nonce), nil
+}
+
+// fetchChallenge asks the destination for a challenge. ok is false when it
+// offers none: any answer other than a readable 200 means the provider does
+// not require proof-of-work, and so does a request that fails (the POST that
+// follows meets the same failure and reports it). The request is a plain GET
+// without the Authorization header, with a 10-second timeout.
+func (r *Reporter) fetchChallenge(ctx context.Context) (ch challengeReply, ok bool) {
+	target, err := challengeURL(r.dest.URL)
+	if err != nil {
+		return ch, false
+	}
+	cctx, cancel := context.WithTimeout(ctx, challengeTimeout)
+	defer cancel()
+	req, err := http.NewRequestWithContext(cctx, http.MethodGet, target, nil)
+	if err != nil {
+		return ch, false
+	}
+	resp, err := r.client.Do(req)
+	if err != nil {
+		return ch, false
+	}
+	defer func() { _ = resp.Body.Close() }()
+	if resp.StatusCode != http.StatusOK {
+		return ch, false
+	}
+	if err := json.NewDecoder(io.LimitReader(resp.Body, maxChallengeBody)).Decode(&ch); err != nil || ch.Challenge == "" {
+		return challengeReply{}, false
 	}
-	return len(list.Items), nil
+	return ch, true
 }
diff --git a/api/internal/telemetry/telemetry_branches_test.go b/api/internal/telemetry/telemetry_branches_test.go
index 8647bf5a8..534065538 100644
--- a/api/internal/telemetry/telemetry_branches_test.go
+++ b/api/internal/telemetry/telemetry_branches_test.go
@@ -3,7 +3,6 @@ package telemetry
 import (
 	"context"
 	"net/http"
-	"net/http/httptest"
 	"path/filepath"
 	"testing"
 	"time"
@@ -11,8 +10,9 @@ import (
 	"github.com/GameplanePanel/gameplane/api/internal/db"
 )
 
-// bareStore is a migrated store with no telemetry config row (telStore
-// seeds one; some branches need its absence).
+// bareStore is a migrated store with no telemetry config row. Migrate seeds
+// the fresh-install default; this helper removes it so some branches behave as
+// before.
 func bareStore(ctx context.Context, t *testing.T) *db.Store {
 	t.Helper()
 	store, err := db.Open(ctx, "sqlite", "file:"+filepath.Join(t.TempDir(), "t.db"))
@@ -23,23 +23,47 @@ func bareStore(ctx context.Context, t *testing.T) *db.Store {
 	if err := store.Migrate(ctx); err != nil {
 		t.Fatalf("migrate: %v", err)
 	}
+	if _, err := store.DB.ExecContext(ctx, `DELETE FROM config WHERE key = 'telemetry'`); err != nil {
+		t.Fatalf("delete telemetry: %v", err)
+	}
 	return store
 }
 
 func TestNew_DefaultsInterval(t *testing.T) {
-	r := New(bareStore(context.Background(), t), telKube(), "http://x", "", "v1", 0)
+	r := New(Config{Deps: Deps{Store: bareStore(context.Background(), t), Kube: telKube()}, Interval: 0})
 	if r.interval != 24*time.Hour {
 		t.Fatalf("interval = %v, want the 24h default for a non-positive interval", r.interval)
 	}
+	if r.client == nil || r.now == nil || r.rnd == nil {
+		t.Fatal("New must fill the client, clock and random source defaults")
+	}
+}
+
+func TestPollEvery(t *testing.T) {
+	for _, tc := range []struct {
+		interval time.Duration
+		want     time.Duration
+	}{
+		{24 * time.Hour, 5 * time.Minute},
+		{time.Hour, 5 * time.Minute},
+		{20 * time.Minute, 5 * time.Minute},
+		{time.Minute, 15 * time.Second},
+		{time.Second, time.Second},
+	} {
+		r := New(Config{Interval: tc.interval, Deps: Deps{Store: bareStore(context.Background(), t)}})
+		if got := r.pollEvery(); got != tc.want {
+			t.Errorf("pollEvery(interval %v) = %v, want %v", tc.interval, got, tc.want)
+		}
+	}
 }
 
 func TestEnabled_Branches(t *testing.T) {
 	ctx := context.Background()
 
 	t.Run("absent config is disabled", func(t *testing.T) {
-		r := New(bareStore(ctx, t), telKube(), "http://x", "", "v1", time.Hour)
-		if r.enabled(ctx) {
-			t.Fatal("want disabled when there is no telemetry config row")
+		c, err := ReadConsent(ctx, bareStore(ctx, t))
+		if err != nil || c != (Consent{}) {
+			t.Fatalf("consent = %+v, %v; want both tiers off for a missing telemetry config row", c, err)
 		}
 	})
 
@@ -50,28 +74,92 @@ func TestEnabled_Branches(t *testing.T) {
 			"2026-01-01T00:00:00Z"); err != nil {
 			t.Fatalf("seed: %v", err)
 		}
-		r := New(store, telKube(), "http://x", "", "v1", time.Hour)
-		if r.enabled(ctx) {
-			t.Fatal("want disabled for a malformed telemetry config")
+		c, err := ReadConsent(ctx, store)
+		if err != nil || c != (Consent{}) {
+			t.Fatalf("consent = %+v, %v; want both tiers off for a malformed telemetry config", c, err)
+		}
+	})
+
+	t.Run("extended is off while basic is off", func(t *testing.T) {
+		if c := parseConsent(`{"sendMetrics":false,"extended":true}`, true); c != (Consent{}) {
+			t.Fatalf("consent = %+v, want both off", c)
+		}
+	})
+
+	t.Run("both tiers on", func(t *testing.T) {
+		if c := parseConsent(`{"sendMetrics":true,"extended":true}`, true); c != (Consent{Basic: true, Extended: true}) {
+			t.Fatalf("consent = %+v, want both on", c)
+		}
+	})
+
+	t.Run("a legacy value without extended is basic only", func(t *testing.T) {
+		if c := parseConsent(`{"sendMetrics":true}`, true); c != (Consent{Basic: true}) {
+			t.Fatalf("consent = %+v, want basic only", c)
 		}
 	})
 }
 
 func TestCount_UnknownKind(t *testing.T) {
-	r := New(bareStore(context.Background(), t), telKube(), "http://x", "", "v1", time.Hour)
-	n, err := r.count(context.Background(), "bogus")
-	if err != nil || n != 0 {
-		t.Fatalf("count(bogus) = %d, %v; want 0, nil", n, err)
+	deps := Deps{Store: bareStore(context.Background(), t), Kube: telKube()}
+	if items := listItems(context.Background(), deps, "bogus"); len(items) != 0 {
+		t.Fatalf("listItems(bogus) = %d items, want 0", len(items))
 	}
 }
 
 func TestReportOnce_EndpointErrorPropagates(t *testing.T) {
-	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
-		w.WriteHeader(http.StatusInternalServerError)
-	}))
-	defer srv.Close()
-	r := New(telStore(t, true), telKube(), srv.URL, "", "v1", time.Hour)
-	if err := r.reportOnce(context.Background()); err == nil {
+	srv, got := newSink(t)
+	got.setRespond(func(sentReport) int { return http.StatusInternalServerError })
+	r := testReporter(telStore(t, true), telKube(), srv.URL, newFakeClock())
+	if err := sendNow(t, r); err == nil {
 		t.Fatal("want an error when the telemetry endpoint returns 500")
 	}
+	if st := mustState(t, r.store); st.LastOutcome != "failed" || st.ConsecutiveFailures != 1 {
+		t.Fatalf("state = %+v, want one recorded failure", st)
+	}
+}
+
+func TestBackoff_DoublesAndCapsAtInterval(t *testing.T) {
+	r := New(Config{Interval: 24 * time.Hour, Deps: Deps{Store: bareStore(context.Background(), t)}})
+	for failures, want := range map[int]time.Duration{
+		0: time.Hour, 1: 2 * time.Hour, 2: 4 * time.Hour, 3: 8 * time.Hour,
+		4: 16 * time.Hour, 5: 24 * time.Hour, 40: 24 * time.Hour,
+	} {
+		if got := r.backoff(failures); got != want {
+			t.Errorf("backoff(%d) = %v, want %v", failures, got, want)
+		}
+	}
+	short := New(Config{Interval: time.Minute, Deps: Deps{Store: bareStore(context.Background(), t)}})
+	if got := short.backoff(0); got != time.Minute {
+		t.Errorf("backoff(0) with a 1m interval = %v, want the interval cap", got)
+	}
+}
+
+func TestExtWithheld_Branches(t *testing.T) {
+	now := time.Date(2026, 10, 6, 9, 0, 0, 0, time.UTC)
+	r := New(Config{
+		Dest: Destination{Kind: KindCustom, URL: "https://t.example/ingest"},
+		Deps: Deps{Store: bareStore(context.Background(), t)},
+	})
+	active := db.TelemetryState{
+		ExtUnsupportedEndpoint: "https://t.example/ingest",
+		ExtUnsupportedUntil:    now.Add(time.Hour).Format(time.RFC3339),
+	}
+	if !r.extWithheld(active, now) {
+		t.Error("an unexpired marker for this endpoint must withhold ext")
+	}
+	expired := active
+	expired.ExtUnsupportedUntil = now.Add(-time.Second).Format(time.RFC3339)
+	if r.extWithheld(expired, now) {
+		t.Error("an expired marker must not withhold ext")
+	}
+	other := active
+	other.ExtUnsupportedEndpoint = "https://other.example/ingest"
+	if r.extWithheld(other, now) {
+		t.Error("a marker for another endpoint must not withhold ext")
+	}
+	garbled := active
+	garbled.ExtUnsupportedUntil = "not a time"
+	if r.extWithheld(garbled, now) {
+		t.Error("an unparsable marker must not withhold ext")
+	}
 }
diff --git a/api/internal/telemetry/telemetry_pow_test.go b/api/internal/telemetry/telemetry_pow_test.go
new file mode 100644
index 000000000..b881521b8
--- /dev/null
+++ b/api/internal/telemetry/telemetry_pow_test.go
@@ -0,0 +1,440 @@
+package telemetry
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"strconv"
+	"strings"
+	"sync"
+	"testing"
+	"time"
+
+	"k8s.io/apimachinery/pkg/runtime"
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	dynamicfake "k8s.io/client-go/dynamic/fake"
+
+	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// telKubeExt returns a fake Kubernetes client with all list kinds registered,
+// needed for tests that use extended telemetry.
+func telKubeExt(objs ...runtime.Object) *kube.Client {
+	gvkr := map[schema.GroupVersionResource]string{
+		kube.GVRs["servers"]:   "GameServerList",
+		kube.GVRs["templates"]: "GameTemplateList",
+		kube.GVRs["schedules"]: "BackupScheduleList",
+		kube.GVRCluster:        "ClusterList",
+		kube.GVRModuleSource:   "ModuleSourceList",
+	}
+	dyn := dynamicfake.NewSimpleDynamicClientWithCustomListKinds(runtime.NewScheme(), gvkr, objs...)
+	return &kube.Client{Dynamic: dyn}
+}
+
+// Spec 022 US7 (T105, T106): before each POST the reporter asks the provider
+// for a proof-of-work challenge, solves it and sends the solution; a provider
+// that offers none gets reports without the header (research R21, FR-040).
+
+// powPosted is one POST the proof-of-work provider received.
+type powPosted struct {
+	path      string
+	header    string // the proof-of-work header, "" when absent
+	signature string
+	body      []byte
+	// token is the challenge the header named, and solved is whether the
+	// header carried a valid, unused solution of an issued challenge.
+	token  string
+	solved bool
+}
+
+// powProvider is a test telemetry provider that offers challenges.
+type powProvider struct {
+	mu sync.Mutex
+	// bits is the difficulty of every challenge it issues.
+	bits int
+	// getStatus, when not 0, is the status of GET /v1/challenge with an empty
+	// body (404 means the provider offers no challenges). getBody, when not
+	// empty, is sent as the body of a 200 instead of a real challenge.
+	getStatus int
+	getBody   string
+	// expiresIn is how long challenges live, counted from clock; expiresRaw,
+	// when not empty, replaces the expiresAt value.
+	clock      *fakeClock
+	expiresIn  time.Duration
+	expiresRaw string
+	// status picks the status of the n-th POST (1-based); nil means 204.
+	status func(n int, p powPosted) int
+
+	issued   map[string]bool // token to used
+	getPaths []string
+	getAuth  []string
+	posts    []powPosted
+}
+
+// newPoWProvider starts a provider with the given difficulty on a fake clock.
+func newPoWProvider(t *testing.T, clk *fakeClock, bits int) (*httptest.Server, *powProvider) {
+	t.Helper()
+	p := &powProvider{bits: bits, clock: clk, expiresIn: 15 * time.Minute, issued: map[string]bool{}}
+	srv := httptest.NewServer(http.HandlerFunc(p.serve))
+	t.Cleanup(srv.Close)
+	return srv, p
+}
+
+func (p *powProvider) serve(w http.ResponseWriter, r *http.Request) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	if r.Method == http.MethodGet {
+		p.getPaths = append(p.getPaths, r.URL.Path)
+		p.getAuth = append(p.getAuth, r.Header.Get("Authorization"))
+		switch {
+		case p.getStatus != 0:
+			w.WriteHeader(p.getStatus)
+		case p.getBody != "":
+			_, _ = io.WriteString(w, p.getBody)
+		default:
+			token := "challenge-" + strconv.Itoa(len(p.issued)+1)
+			p.issued[token] = false
+			expires := p.clock.Now().Add(p.expiresIn).UTC().Format(time.RFC3339)
+			if p.expiresRaw != "" {
+				expires = p.expiresRaw
+			}
+			_ = json.NewEncoder(w).Encode(map[string]any{"challenge": token, "bits": p.bits, "expiresAt": expires})
+		}
+		return
+	}
+	body, _ := io.ReadAll(r.Body)
+	rec := powPosted{
+		path: r.URL.Path, header: r.Header.Get(telemetryschema.PoWHeader),
+		signature: r.Header.Get(telemetryschema.SignatureHeader), body: body,
+	}
+	if token, nonce, err := telemetryschema.ParsePoW(rec.header); err == nil {
+		rec.token = token
+		used, issued := p.issued[token]
+		rec.solved = issued && !used && telemetryschema.PoWOK(token, nonce, p.bits)
+		if issued {
+			p.issued[token] = true
+		}
+	}
+	p.posts = append(p.posts, rec)
+	status := http.StatusNoContent
+	if p.status != nil {
+		status = p.status(len(p.posts), rec)
+	}
+	w.WriteHeader(status)
+}
+
+func (p *powProvider) postCount() int {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	return len(p.posts)
+}
+
+func (p *powProvider) post(i int) powPosted {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	return p.posts[i]
+}
+
+func (p *powProvider) getCount() int {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	return len(p.getPaths)
+}
+
+func TestChallengeURL(t *testing.T) {
+	for endpoint, want := range map[string]string{
+		"https://telemetry.example.com/ingest":            "https://telemetry.example.com/v1/challenge",
+		"https://telemetry.example.com/prefix/ingest":     "https://telemetry.example.com/prefix/v1/challenge",
+		"https://telemetry.example.com/a/b/c/ingest":      "https://telemetry.example.com/a/b/c/v1/challenge",
+		"https://telemetry.example.com":                   "https://telemetry.example.com/v1/challenge",
+		"https://telemetry.example.com/":                  "https://telemetry.example.com/v1/challenge",
+		"https://telemetry.example.com/prefix/":           "https://telemetry.example.com/prefix/v1/challenge",
+		"http://gameplane-telemetry-receiver:8080/ingest": "http://gameplane-telemetry-receiver:8080/v1/challenge",
+		"https://telemetry.example.com/ingest?x=1#frag":   "https://telemetry.example.com/v1/challenge",
+	} {
+		got, err := challengeURL(endpoint)
+		if err != nil || got != want {
+			t.Errorf("challengeURL(%q) = %q, %v, want %q", endpoint, got, err, want)
+		}
+	}
+	if _, err := challengeURL("http://[::1"); err == nil {
+		t.Error("challengeURL of an unparsable endpoint must fail")
+	}
+}
+
+func TestReporter_ProviderWithoutChallengesGetsReportsWithoutTheHeader(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 10)
+	prov.getStatus = http.StatusNotFound
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if prov.postCount() != 1 || prov.post(0).header != "" {
+		t.Fatalf("posts = %d header %q, want one POST with no proof-of-work header", prov.postCount(), prov.post(0).header)
+	}
+	if prov.getCount() != 1 {
+		t.Fatalf("challenge requests = %d, want 1", prov.getCount())
+	}
+	if st := mustState(t, store); st.LastOutcome != outcomeOK || st.ConsecutiveFailures != 0 {
+		t.Fatalf("state = %+v, want ok", st)
+	}
+}
+
+func TestReporter_AnyNon200ChallengeAnswerMeansNoProofOfWork(t *testing.T) {
+	for name, set := range map[string]func(*powProvider){
+		"server error":   func(p *powProvider) { p.getStatus = http.StatusInternalServerError },
+		"rate limited":   func(p *powProvider) { p.getStatus = http.StatusTooManyRequests },
+		"not JSON":       func(p *powProvider) { p.getBody = "<html>hello</html>" },
+		"no challenge":   func(p *powProvider) { p.getBody = `{"bits":3}` },
+		"truncated JSON": func(p *powProvider) { p.getBody = `{"challenge":"x"` },
+	} {
+		t.Run(name, func(t *testing.T) {
+			clk := newFakeClock()
+			srv, prov := newPoWProvider(t, clk, 10)
+			set(prov)
+			r := testReporter(telStore(t, true), telKube(), srv.URL, clk)
+			if err := sendNow(t, r); err != nil {
+				t.Fatalf("attempt: %v", err)
+			}
+			if prov.postCount() != 1 || prov.post(0).header != "" {
+				t.Fatalf("posts = %d header %q, want one POST with no header", prov.postCount(), prov.post(0).header)
+			}
+		})
+	}
+}
+
+func TestReporter_UnreachableChallengeEndpointFallsBackToThePost(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 10)
+	r := testReporter(telStore(t, true), telKube(), srv.URL, clk)
+	r.client = &http.Client{Transport: roundTripFunc(func(req *http.Request) (*http.Response, error) {
+		if req.Method == http.MethodGet {
+			return nil, errors.New("connection refused")
+		}
+		return http.DefaultTransport.RoundTrip(req)
+	})}
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if prov.postCount() != 1 || prov.post(0).header != "" {
+		t.Fatalf("posts = %d header %q, want one POST with no header", prov.postCount(), prov.post(0).header)
+	}
+}
+
+// roundTripFunc adapts a function to http.RoundTripper.
+type roundTripFunc func(*http.Request) (*http.Response, error)
+
+func (f roundTripFunc) RoundTrip(r *http.Request) (*http.Response, error) { return f(r) }
+
+func TestReporter_SolvesTheChallengeAndSendsAHeaderThatVerifies(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 10)
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL+"/prefix/ingest", clk)
+	r.auth = "Bearer secret"
+
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if prov.postCount() != 1 {
+		t.Fatalf("posts = %d, want 1", prov.postCount())
+	}
+	p := prov.post(0)
+	token, nonce, err := telemetryschema.ParsePoW(p.header)
+	if err != nil {
+		t.Fatalf("header %q does not parse: %v", p.header, err)
+	}
+	if !telemetryschema.PoWOK(token, nonce, 10) || !p.solved {
+		t.Fatalf("header %q is not a valid solution of a 10-bit challenge", p.header)
+	}
+	if p.path != "/prefix/ingest" || prov.getPaths[0] != "/prefix/v1/challenge" {
+		t.Fatalf("paths: POST %q, challenge GET %q, want /prefix/ingest and /prefix/v1/challenge", p.path, prov.getPaths[0])
+	}
+	if prov.getAuth[0] != "" {
+		t.Fatalf("the challenge request carried Authorization %q, want none", prov.getAuth[0])
+	}
+	if st := mustState(t, store); st.LastOutcome != outcomeOK || st.ConsecutiveFailures != 0 {
+		t.Fatalf("state = %+v, want ok", st)
+	}
+}
+
+func TestReporter_ZeroBitChallengeStillSendsTheHeader(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 0)
+	prov.expiresRaw = "not a time" // an unreadable expiry means the default lifetime
+	r := testReporter(telStore(t, true), telKube(), srv.URL, clk)
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if p := prov.post(0); !p.solved || p.header != p.token+":0" {
+		t.Fatalf("header %q solved %v, want %q accepted", p.header, p.solved, p.token+":0")
+	}
+}
+
+func TestReporter_428GetsOneNewChallengeAndOneResend(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 8)
+	prov.status = func(n int, _ powPosted) int {
+		if n == 1 {
+			return http.StatusPreconditionRequired
+		}
+		return http.StatusNoContent
+	}
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if prov.postCount() != 2 || prov.getCount() != 2 {
+		t.Fatalf("posts = %d, challenge requests = %d, want 2 and 2", prov.postCount(), prov.getCount())
+	}
+	first, second := prov.post(0), prov.post(1)
+	if first.token == second.token || !first.solved || !second.solved {
+		t.Fatalf("tokens %q then %q (solved %v, %v), want two different, valid solutions", first.token, second.token, first.solved, second.solved)
+	}
+	if string(first.body) != string(second.body) {
+		t.Fatal("the resend must carry the same report")
+	}
+	if st := mustState(t, store); st.LastOutcome != outcomeOK || st.ConsecutiveFailures != 0 {
+		t.Fatalf("state = %+v, want ok", st)
+	}
+}
+
+func TestReporter_SecondProofOfWorkRefusalIsFailed(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 8)
+	prov.status = func(int, powPosted) int { return http.StatusPreconditionRequired }
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+
+	if err := sendNow(t, r); err == nil {
+		t.Fatal("two 428s in a row must fail the attempt")
+	}
+	if prov.postCount() != 2 || prov.getCount() != 2 {
+		t.Fatalf("posts = %d, challenge requests = %d, want exactly 2 and 2", prov.postCount(), prov.getCount())
+	}
+	if st := mustState(t, store); st.LastOutcome != outcomeFailed || st.ConsecutiveFailures != 1 {
+		t.Fatalf("state = %+v, want failed with normal backoff", st)
+	}
+}
+
+func TestReporter_ChallengeAboveTheCapIsFailedWithoutAPost(t *testing.T) {
+	for _, bits := range []int{telemetryschema.MaxPoWBits + 1, 99, -1} {
+		t.Run(strconv.Itoa(bits), func(t *testing.T) {
+			clk := newFakeClock()
+			srv, prov := newPoWProvider(t, clk, bits)
+			store := telStore(t, true)
+			r := testReporter(store, telKube(), srv.URL, clk)
+
+			err := sendNow(t, r)
+			if !errors.Is(err, errPoWDifficulty) {
+				t.Fatalf("attempt error = %v, want errPoWDifficulty", err)
+			}
+			if prov.postCount() != 0 {
+				t.Fatalf("posts = %d, want none: the install must not solve or send", prov.postCount())
+			}
+			if st := mustState(t, store); st.LastOutcome != outcomeFailed || st.ConsecutiveFailures != 1 {
+				t.Fatalf("state = %+v, want failed with normal backoff", st)
+			}
+		})
+	}
+}
+
+func TestReporter_ChallengeThatExpiresTooSoonIsFailedWithoutAPost(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 8)
+	prov.expiresIn = solveMargin // no time left once the margin is kept
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+
+	if err := sendNow(t, r); err == nil {
+		t.Fatal("a challenge with no solving time left must fail the attempt")
+	}
+	if prov.postCount() != 0 {
+		t.Fatalf("posts = %d, want none", prov.postCount())
+	}
+	if st := mustState(t, store); st.LastOutcome != outcomeFailed {
+		t.Fatalf("state = %+v, want failed", st)
+	}
+}
+
+func TestReporter_SolvingStopsWhenTheContextIsDone(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 8)
+	r := testReporter(telStore(t, true), telKube(), srv.URL, clk)
+	ctx, cancel := context.WithCancel(context.Background())
+	cancel()
+	if _, err := r.solveChallenge(ctx); !errors.Is(err, context.Canceled) {
+		t.Fatalf("solveChallenge on a cancelled context = %v, want context.Canceled", err)
+	}
+	if prov.postCount() != 0 {
+		t.Fatalf("posts = %d, want none", prov.postCount())
+	}
+}
+
+func TestReporter_409RotationResendCarriesAFreshChallenge(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 8)
+	prov.status = func(n int, _ powPosted) int {
+		if n == 1 {
+			return http.StatusConflict
+		}
+		return http.StatusNoContent
+	}
+	store := telStoreExt(t, true, true)
+	r := testReporter(store, telKubeExt(), srv.URL, clk)
+
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if prov.postCount() != 2 || prov.getCount() != 2 {
+		t.Fatalf("posts = %d, challenge requests = %d, want the 409 and one re-POST, each with its own challenge", prov.postCount(), prov.getCount())
+	}
+	first, second := prov.post(0), prov.post(1)
+	if first.token == "" || second.token == "" || first.token == second.token {
+		t.Fatalf("tokens %q then %q, want two different challenges (they are single use)", first.token, second.token)
+	}
+	if !first.solved || !second.solved {
+		t.Fatalf("solved = %v, %v, want both valid", first.solved, second.solved)
+	}
+	if first.signature == "" || second.signature == "" || first.signature == second.signature {
+		t.Fatal("both POSTs must be signed, with different signatures after the rotation")
+	}
+	if st := mustState(t, store); st.LastOutcome != outcomeOK {
+		t.Fatalf("state = %+v, want ok", st)
+	}
+}
+
+func TestReporter_400FallbackResendCarriesAFreshChallenge(t *testing.T) {
+	clk := newFakeClock()
+	srv, prov := newPoWProvider(t, clk, 8)
+	prov.status = func(n int, _ powPosted) int {
+		if n == 1 {
+			return http.StatusBadRequest
+		}
+		return http.StatusNoContent
+	}
+	r := testReporter(telStoreExt(t, true, true), telKubeExt(), srv.URL, clk)
+
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if prov.postCount() != 2 || prov.getCount() != 2 {
+		t.Fatalf("posts = %d, challenge requests = %d, want 2 and 2", prov.postCount(), prov.getCount())
+	}
+	first, second := prov.post(0), prov.post(1)
+	if first.token == second.token || !second.solved {
+		t.Fatalf("tokens %q then %q solved %v, want a fresh, valid challenge for the basic re-send", first.token, second.token, second.solved)
+	}
+	if second.signature != "" || strings.Contains(string(second.body), `"ext"`) {
+		t.Fatal("the fallback re-send must be basic only")
+	}
+}
diff --git a/api/internal/telemetry/telemetry_rotate_test.go b/api/internal/telemetry/telemetry_rotate_test.go
new file mode 100644
index 000000000..bf9fcfb63
--- /dev/null
+++ b/api/internal/telemetry/telemetry_rotate_test.go
@@ -0,0 +1,184 @@
+package telemetry
+
+import (
+	"bytes"
+	"database/sql"
+	"errors"
+	"net/http"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// Spec 022 US7 (T084, T087): a 409 id_claimed makes the reporter replace its
+// install ID and re-send in the same attempt; a 403 never rotates.
+
+// decodeSent decodes the body of one recorded POST.
+func decodeSent(t *testing.T, s sentReport) telemetryschema.Report {
+	t.Helper()
+	rep, _, err := telemetryschema.Decode(s.body)
+	if err != nil || rep.Ext == nil {
+		t.Fatalf("decode sent body %q: ext=%v err=%v", s.body, rep.Ext != nil, err)
+	}
+	return rep
+}
+
+func TestReporter_409RotatesTheIDAndResendsInTheSameAttempt(t *testing.T) {
+	srv, got := newSink(t)
+	var calls atomic.Int32
+	got.setRespond(func(sentReport) int {
+		if calls.Add(1) == 1 {
+			return http.StatusConflict
+		}
+		return http.StatusNoContent
+	})
+	clk := newFakeClock()
+	store := telStoreExt(t, true, true)
+	secretBefore, err := store.EnsureSigningSecret(t.Context())
+	if err != nil {
+		t.Fatalf("ensure secret: %v", err)
+	}
+	r := testReporter(store, telKubeExt(), srv.URL, clk)
+
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if got.count() != 2 {
+		t.Fatalf("posts = %d, want the 409 and one re-POST in the same attempt", got.count())
+	}
+	first, second := decodeSent(t, got.at(0)), decodeSent(t, got.at(1))
+	if first.Ext.InstallID != testInstallID {
+		t.Fatalf("first POST id = %q, want the original %q", first.Ext.InstallID, testInstallID)
+	}
+	if second.Ext.InstallID == first.Ext.InstallID || second.Ext.Key == first.Ext.Key {
+		t.Fatalf("re-POST reused the id or key: %q / %q", second.Ext.InstallID, second.Ext.Key)
+	}
+	if got.at(1).signature == "" || got.at(1).signature == got.at(0).signature {
+		t.Fatal("re-POST must carry a new signature")
+	}
+	if err := telemetryschema.Verify(got.at(1).signature, second.Ext.Key, got.at(1).body); err != nil {
+		t.Fatalf("re-POST signature does not verify under its own key: %v", err)
+	}
+	priv, err := telemetryschema.DeriveKey(secretBefore, second.Ext.InstallID)
+	if err != nil {
+		t.Fatalf("derive key: %v", err)
+	}
+	if telemetryschema.PublicKeyString(priv) != second.Ext.Key {
+		t.Fatal("re-POST key is not derived from the kept signing secret and the new id")
+	}
+
+	st := mustState(t, store)
+	if st.InstallID != second.Ext.InstallID {
+		t.Fatalf("stored id = %q, want the id that was re-sent (%q)", st.InstallID, second.Ext.InstallID)
+	}
+	if want := stamp(clk.Now()); st.LastIDRotationAt != want {
+		t.Fatalf("last_id_rotation_at = %q, want %q", st.LastIDRotationAt, want)
+	}
+	if st.LastOutcome != outcomeOK || st.ConsecutiveFailures != 0 {
+		t.Fatalf("outcome = %q failures = %d, want ok and none (SC-015)", st.LastOutcome, st.ConsecutiveFailures)
+	}
+	secretAfter, err := store.EnsureSigningSecret(t.Context())
+	if err != nil || !bytes.Equal(secretAfter, secretBefore) {
+		t.Fatalf("signing secret changed across the rotation: %v", err)
+	}
+}
+
+func TestReporter_SecondConflictIsFailedAndRotatesOnlyOnce(t *testing.T) {
+	srv, got := newSink(t)
+	got.setRespond(func(sentReport) int { return http.StatusConflict })
+	clk := newFakeClock()
+	store := telStoreExt(t, true, true)
+	r := testReporter(store, telKubeExt(), srv.URL, clk)
+
+	if err := sendNow(t, r); err == nil {
+		t.Fatal("two 409s in a row must fail the attempt")
+	}
+	if got.count() != 2 {
+		t.Fatalf("posts = %d, want exactly the 409 and one re-POST", got.count())
+	}
+	first, second := decodeSent(t, got.at(0)), decodeSent(t, got.at(1))
+	st := mustState(t, store)
+	if first.Ext.InstallID != testInstallID || st.InstallID != second.Ext.InstallID || st.InstallID == testInstallID {
+		t.Fatalf("ids: first %q second %q stored %q, want one rotation only", first.Ext.InstallID, second.Ext.InstallID, st.InstallID)
+	}
+	if st.LastOutcome != outcomeFailed || st.ConsecutiveFailures != 1 || st.LastIDRotationAt == "" {
+		t.Fatalf("state = %+v, want failed, one failure and the rotation recorded", st)
+	}
+}
+
+func TestReporter_403NeverRotatesTheID(t *testing.T) {
+	srv, got := newSink(t)
+	got.setRespond(func(sentReport) int { return http.StatusForbidden })
+	store := telStoreExt(t, true, true)
+	r := testReporter(store, telKubeExt(), srv.URL, newFakeClock())
+
+	if err := sendNow(t, r); err == nil {
+		t.Fatal("a 403 must fail the attempt")
+	}
+	if got.count() != 1 {
+		t.Fatalf("posts = %d, want one (no re-POST and no basic fallback)", got.count())
+	}
+	st := mustState(t, store)
+	if st.InstallID != testInstallID || st.LastIDRotationAt != "" {
+		t.Fatalf("state = %+v, a 403 must keep the id and set no rotation", st)
+	}
+	if st.LastOutcome != outcomeFailed || st.ConsecutiveFailures != 1 {
+		t.Fatalf("outcome = %q failures = %d, want failed with normal backoff", st.LastOutcome, st.ConsecutiveFailures)
+	}
+}
+
+func TestReporter_RotationFailsWhenExtendedWentOffDuringTheSend(t *testing.T) {
+	srv, got := newSink(t)
+	store := telStoreExt(t, true, true)
+	got.setRespond(func(sentReport) int {
+		// The admin turns extended off while the report is in flight.
+		if err := store.ClearInstallID(t.Context()); err != nil {
+			t.Errorf("clear install id: %v", err)
+		}
+		return http.StatusConflict
+	})
+	r := testReporter(store, telKubeExt(), srv.URL, newFakeClock())
+
+	if err := sendNow(t, r); !errors.Is(err, sql.ErrNoRows) {
+		t.Fatalf("attempt error = %v, want the failed rotation (no ID to replace)", err)
+	}
+	if got.count() != 1 {
+		t.Fatalf("posts = %d, want no re-POST after a failed rotation", got.count())
+	}
+	st := mustState(t, store)
+	if st.InstallID != "" || st.LastIDRotationAt != "" || st.LastOutcome != outcomeFailed {
+		t.Fatalf("state = %+v, want no ID resurrected and the attempt failed", st)
+	}
+}
+
+func TestBuildReport_ExtendedFlagControlsTheExtPart(t *testing.T) {
+	store := telStoreExt(t, true, true)
+	deps := Deps{Kube: telKubeExt(), Store: store, Version: "v1.2.3"}
+	now := time.Date(2026, 10, 6, 9, 0, 0, 0, time.UTC)
+
+	basic, err := BuildReport(t.Context(), deps, false, now)
+	if err != nil || basic.Ext != nil || basic.Version != "v1.2.3" {
+		t.Fatalf("basic = %+v, %v, want a report without ext", basic, err)
+	}
+	full, err := BuildReport(t.Context(), deps, true, now)
+	if err != nil || full.Ext == nil || !full.Ext.SentAt.Equal(now) || full.Ext.InstallID != testInstallID {
+		t.Fatalf("extended = %+v, %v, want ext stamped with now and the stored id", full, err)
+	}
+}
+
+func TestExtWithheld_ExportedMatchesTheMarker(t *testing.T) {
+	now := time.Date(2026, 10, 6, 9, 0, 0, 0, time.UTC)
+	store := telStoreExt(t, true, true)
+	if err := store.SetExtUnsupported(t.Context(), stamp(now.Add(time.Hour)), "http://old"); err != nil {
+		t.Fatalf("set marker: %v", err)
+	}
+	st := mustState(t, store)
+	if !ExtWithheld(st, "http://old", now) {
+		t.Fatal("the marked endpoint must be withheld until the marker expires")
+	}
+	if ExtWithheld(st, "http://new", now) || ExtWithheld(st, "http://old", now.Add(2*time.Hour)) {
+		t.Fatal("another endpoint, or an expired marker, must not be withheld")
+	}
+}
diff --git a/api/internal/telemetry/telemetry_test.go b/api/internal/telemetry/telemetry_test.go
index 519a37c18..227e66cdb 100644
--- a/api/internal/telemetry/telemetry_test.go
+++ b/api/internal/telemetry/telemetry_test.go
@@ -3,9 +3,11 @@ package telemetry
 import (
 	"context"
 	"encoding/json"
+	"io"
 	"net/http"
 	"net/http/httptest"
 	"path/filepath"
+	"sync"
 	"testing"
 	"time"
 
@@ -16,9 +18,20 @@ import (
 
 	"github.com/GameplanePanel/gameplane/api/internal/db"
 	"github.com/GameplanePanel/gameplane/api/internal/kube"
+	"github.com/GameplanePanel/gameplane/telemetryschema"
 )
 
+// telStore returns a migrated file-backed store whose admin made an explicit
+// choice: basic is sendMetrics and extended is off. Because the source is
+// "admin", the report gate is open without the first-login notice. It
+// replaces the fresh-install default Migrate seeds.
 func telStore(t *testing.T, sendMetrics bool) *db.Store {
+	t.Helper()
+	return telStoreExt(t, sendMetrics, false)
+}
+
+// telStoreExt is telStore with an explicit extended choice.
+func telStoreExt(t *testing.T, sendMetrics, extended bool) *db.Store {
 	t.Helper()
 	store, err := db.Open(context.Background(), "sqlite", "file:"+filepath.Join(t.TempDir(), "t.db"))
 	if err != nil {
@@ -28,13 +41,37 @@ func telStore(t *testing.T, sendMetrics bool) *db.Store {
 	if err := store.Migrate(context.Background()); err != nil {
 		t.Fatalf("migrate: %v", err)
 	}
-	val, _ := json.Marshal(map[string]bool{"sendMetrics": sendMetrics})
+	val, _ := json.Marshal(map[string]bool{"sendMetrics": sendMetrics, "extended": extended})
 	if _, err := store.DB.ExecContext(context.Background(),
-		`INSERT INTO config(key, value, updated_at) VALUES ('telemetry', ?, ?)`,
+		`INSERT INTO config(key, value, updated_at) VALUES ('telemetry', ?, ?) ON CONFLICT (key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`,
 		string(val), "2026-01-01T00:00:00Z",
 	); err != nil {
 		t.Fatalf("seed config: %v", err)
 	}
+	if _, err := store.DB.ExecContext(context.Background(),
+		`UPDATE telemetry_state SET consent_source = 'admin'`); err != nil {
+		t.Fatalf("seed consent source: %v", err)
+	}
+	if extended {
+		if err := store.SetInstallID(context.Background(), testInstallID); err != nil {
+			t.Fatalf("seed install id: %v", err)
+		}
+	}
+	return store
+}
+
+// freshStore is a migrated file-backed store exactly as a fresh install
+// leaves it: consent_source "default", basic and extended on, no notice yet.
+func freshStore(t *testing.T) *db.Store {
+	t.Helper()
+	store, err := db.Open(context.Background(), "sqlite", "file:"+filepath.Join(t.TempDir(), "t.db"))
+	if err != nil {
+		t.Fatalf("open: %v", err)
+	}
+	t.Cleanup(func() { _ = store.Close() })
+	if err := store.Migrate(context.Background()); err != nil {
+		t.Fatalf("migrate: %v", err)
+	}
 	return store
 }
 
@@ -58,58 +95,628 @@ func unstr(kind, name, ns string) *unstructured.Unstructured {
 	return o
 }
 
-func TestReportOnce_EnabledPostsAnonymousCounts(t *testing.T) {
-	var got payload
+// fakeClock is a settable clock shared by a Reporter and its test.
+type fakeClock struct {
+	mu sync.Mutex
+	t  time.Time
+}
+
+func newFakeClock() *fakeClock {
+	return &fakeClock{t: time.Date(2026, 10, 6, 9, 0, 0, 0, time.UTC)}
+}
+
+func (c *fakeClock) Now() time.Time {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	return c.t
+}
+
+func (c *fakeClock) Advance(d time.Duration) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	c.t = c.t.Add(d)
+}
+
+// sentReport is one POST the test server received.
+type sentReport struct {
+	body        []byte
+	auth        string
+	signature   string
+	contentType string
+}
+
+// hasExt reports whether the body carries the extended part.
+func (s sentReport) hasExt() bool {
+	rep, _, err := telemetryschema.Decode(s.body)
+	return err == nil && rep.Ext != nil
+}
+
+// sink is a test telemetry endpoint that records every POST. respond, when
+// set, picks the status for a request (default 200).
+type sink struct {
+	mu      sync.Mutex
+	reqs    []sentReport
+	respond func(sentReport) int
+}
+
+func newSink(t *testing.T) (*httptest.Server, *sink) {
+	t.Helper()
+	s := &sink{}
 	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		_ = json.NewDecoder(r.Body).Decode(&got)
-		w.WriteHeader(http.StatusOK)
+		if r.Method == http.MethodGet {
+			// The reporter asks for a proof-of-work challenge before each POST
+			// (spec 022 T105); this provider offers none.
+			http.NotFound(w, r)
+			return
+		}
+		body, _ := io.ReadAll(r.Body)
+		rec := sentReport{
+			body:        body,
+			auth:        r.Header.Get("Authorization"),
+			signature:   r.Header.Get(telemetryschema.SignatureHeader),
+			contentType: r.Header.Get("Content-Type"),
+		}
+		s.mu.Lock()
+		s.reqs = append(s.reqs, rec)
+		respond := s.respond
+		s.mu.Unlock()
+		status := http.StatusOK
+		if respond != nil {
+			status = respond(rec)
+		}
+		w.WriteHeader(status)
 	}))
-	defer srv.Close()
+	t.Cleanup(srv.Close)
+	return srv, s
+}
+
+func (s *sink) count() int {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	return len(s.reqs)
+}
+
+func (s *sink) at(i int) sentReport {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	return s.reqs[i]
+}
+
+func (s *sink) setRespond(f func(sentReport) int) {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	s.respond = f
+}
+
+// testReporter builds a Reporter on a custom destination at url with a 24h
+// interval, the fake clock and zero jitter (every first slot is due at once).
+func testReporter(store *db.Store, k *kube.Client, url string, clk *fakeClock) *Reporter {
+	return New(Config{
+		Dest:     Destination{Kind: KindCustom, URL: url, Host: "test"},
+		Interval: 24 * time.Hour,
+		Deps:     Deps{Kube: k, Store: store, Version: "v1.2.3"},
+		Now:      clk.Now,
+		Rand:     func(int64) int64 { return 0 },
+	})
+}
+
+// sendNow opens the schedule (the first Tick) and sends the report that is
+// then due (the second Tick), returning the second Tick's error.
+func sendNow(t *testing.T, r *Reporter) error {
+	t.Helper()
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("opening tick: %v", err)
+	}
+	return r.Tick(t.Context())
+}
+
+func mustState(t *testing.T, store *db.Store) db.TelemetryState {
+	t.Helper()
+	st, err := store.GetTelemetryState(t.Context())
+	if err != nil {
+		t.Fatalf("get state: %v", err)
+	}
+	return st
+}
+
+func mustParse(t *testing.T, ts string) time.Time {
+	t.Helper()
+	v, err := time.Parse(time.RFC3339, ts)
+	if err != nil {
+		t.Fatalf("parse %q: %v", ts, err)
+	}
+	return v
+}
 
+func TestReportOnce_EnabledPostsAnonymousCounts(t *testing.T) {
+	srv, got := newSink(t)
 	k := telKube(
 		unstr("GameServer", "a", "gameplane-games"),
 		unstr("GameServer", "b", "gameplane-games"),
 		unstr("GameTemplate", "minecraft", ""),
 	)
-	r := New(telStore(t, true), k, srv.URL, "", "v1.2.3", time.Hour)
-	if err := r.reportOnce(context.Background()); err != nil {
-		t.Fatalf("reportOnce: %v", err)
+	r := testReporter(telStore(t, true), k, srv.URL, newFakeClock())
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("tick: %v", err)
+	}
+	if got.count() != 1 {
+		t.Fatalf("posts = %d, want 1", got.count())
+	}
+	rec := got.at(0)
+	rep, _, err := telemetryschema.Decode(rec.body)
+	if err != nil {
+		t.Fatalf("decode body %s: %v", rec.body, err)
+	}
+	if rep.Version != "v1.2.3" || rep.Servers != 2 || rep.Templates != 1 || rep.Ext != nil {
+		t.Fatalf("report = %+v, want a basic {v1.2.3 2 1}", rep)
+	}
+	if rec.contentType != "application/json" {
+		t.Fatalf("Content-Type = %q, want application/json", rec.contentType)
 	}
-	if got.Version != "v1.2.3" || got.Servers != 2 || got.Templates != 1 {
-		t.Fatalf("payload = %+v, want {v1.2.3 2 1}", got)
+	if rec.signature != "" {
+		t.Fatalf("a basic report must not carry the signature header, got %q", rec.signature)
+	}
+	st := mustState(t, r.store)
+	if st.LastOutcome != "ok" || st.LastSuccessAt == "" || st.ConsecutiveFailures != 0 {
+		t.Fatalf("state after success = %+v", st)
 	}
 }
 
 func TestReportOnce_SendsAuthHeader(t *testing.T) {
-	var gotAuth string
-	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		gotAuth = r.Header.Get("Authorization")
-		w.WriteHeader(http.StatusOK)
-	}))
-	defer srv.Close()
-
-	r := New(telStore(t, true), telKube(), srv.URL, "Bearer ingest-tok", "v1", time.Hour)
-	if err := r.reportOnce(context.Background()); err != nil {
-		t.Fatalf("reportOnce: %v", err)
+	srv, got := newSink(t)
+	r := testReporter(telStore(t, true), telKube(), srv.URL, newFakeClock())
+	r.auth = "Bearer ingest-tok"
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("tick: %v", err)
 	}
-	if gotAuth != "Bearer ingest-tok" {
-		t.Fatalf("Authorization = %q, want the configured token", gotAuth)
+	if got.count() != 1 || got.at(0).auth != "Bearer ingest-tok" {
+		t.Fatalf("posts = %d, Authorization = %q; want 1 post with the configured token", got.count(), got.at(0).auth)
 	}
 }
 
 func TestReportOnce_DisabledSkipsPost(t *testing.T) {
-	hit := false
-	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
-		hit = true
-		w.WriteHeader(http.StatusOK)
-	}))
-	defer srv.Close()
-
-	r := New(telStore(t, false), telKube(), srv.URL, "", "v1", time.Hour)
-	if err := r.reportOnce(context.Background()); err != nil {
-		t.Fatalf("reportOnce: %v", err)
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	r := testReporter(telStore(t, false), telKube(), srv.URL, clk)
+	for range 3 {
+		if err := r.Tick(t.Context()); err != nil {
+			t.Fatalf("tick: %v", err)
+		}
+		clk.Advance(48 * time.Hour)
 	}
-	if hit {
+	if got.count() != 0 {
 		t.Fatal("telemetry must not POST when sendMetrics is off")
 	}
+	if st := mustState(t, r.store); st.NextDueAt != "" {
+		t.Fatalf("next_due_at = %q, want it to stay NULL while the gate is closed", st.NextDueAt)
+	}
+}
+
+func TestReporter_NoPostWhileDefaultAndNoticeUnseen(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	store := freshStore(t) // consent_source default, sendMetrics and extended on
+	r := testReporter(store, telKube(), srv.URL, clk)
+	for range 5 {
+		if err := r.Tick(t.Context()); err != nil {
+			t.Fatalf("tick: %v", err)
+		}
+		clk.Advance(30 * time.Hour)
+	}
+	if got.count() != 0 {
+		t.Fatalf("posts = %d, want 0 before any admin was shown the notice (FR-004)", got.count())
+	}
+	st := mustState(t, store)
+	if st.NextDueAt != "" || st.InstallID != "" {
+		t.Fatalf("state = %+v, want no slot and no install id while the gate is closed", st)
+	}
+}
+
+func TestReporter_FirstPostWithin15MinutesOfNoticeShown(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	store := freshStore(t)
+	k := collectKubeClients(t, collectOpts{})
+	r := testReporter(store, k, srv.URL, clk)
+	r.rnd = func(n int64) int64 { return n - 1 } // the latest slot the window allows
+
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("tick before the notice: %v", err)
+	}
+	shown := clk.Now()
+	if err := store.MarkNoticeShown(t.Context(), shown.Format(time.RFC3339)); err != nil {
+		t.Fatalf("mark notice shown: %v", err)
+	}
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("tick opening the gate: %v", err)
+	}
+	due := mustParse(t, mustState(t, store).NextDueAt)
+	if wait := due.Sub(shown); wait < 0 || wait > 15*time.Minute {
+		t.Fatalf("first slot is %v after the notice, want within 15m", wait)
+	}
+	clk.Advance(14 * time.Minute)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("early tick: %v", err)
+	}
+	if got.count() != 0 {
+		t.Fatalf("posts = %d before the slot, want 0", got.count())
+	}
+	clk.Advance(2 * time.Minute)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("due tick: %v", err)
+	}
+	if got.count() != 1 {
+		t.Fatalf("posts = %d at the slot, want 1", got.count())
+	}
+
+	// A fresh install reports basic plus extended, signed with the key the
+	// report names, under the install ID the reporter created.
+	rec := got.at(0)
+	rep, _, err := telemetryschema.Decode(rec.body)
+	if err != nil || rep.Ext == nil {
+		t.Fatalf("decode %s: ext=%v err=%v, want an extended report", rec.body, rep.Ext, err)
+	}
+	if err := telemetryschema.Verify(rec.signature, rep.Ext.Key, rec.body); err != nil {
+		t.Fatalf("signature does not verify: %v", err)
+	}
+	if st := mustState(t, store); st.InstallID == "" || st.InstallID != rep.Ext.InstallID {
+		t.Fatalf("stored install id %q, report carries %q", st.InstallID, rep.Ext.InstallID)
+	}
+}
+
+func TestReporter_ExtendedOffSendsBasicOnly(t *testing.T) {
+	srv, got := newSink(t)
+	r := testReporter(telStoreExt(t, true, false), collectKubeClients(t, collectOpts{}), srv.URL, newFakeClock())
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("tick: %v", err)
+	}
+	if got.count() != 1 || got.at(0).hasExt() || got.at(0).signature != "" {
+		t.Fatalf("want one basic report without a signature, got %d posts", got.count())
+	}
+}
+
+func TestReporter_SpacingAtLeastInterval(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	r := testReporter(telStore(t, true), telKube(), srv.URL, clk)
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("first report: %v", err)
+	}
+	sentAt := clk.Now()
+	if due := mustParse(t, mustState(t, r.store).NextDueAt); due.Sub(sentAt) < 24*time.Hour {
+		t.Fatalf("next slot is %v after the send, want at least the 24h interval", due.Sub(sentAt))
+	}
+	clk.Advance(24*time.Hour - time.Second)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("tick: %v", err)
+	}
+	if got.count() != 1 {
+		t.Fatalf("posts = %d just under one interval later, want still 1", got.count())
+	}
+	clk.Advance(time.Second)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("tick: %v", err)
+	}
+	if got.count() != 2 {
+		t.Fatalf("posts = %d one interval later, want 2", got.count())
+	}
+}
+
+func TestReporter_RestartDoesNotSendEarly(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	store := telStore(t, true)
+	if err := sendNow(t, testReporter(store, telKube(), srv.URL, clk)); err != nil {
+		t.Fatalf("first report: %v", err)
+	}
+	for _, after := range []time.Duration{time.Minute, 6 * time.Hour} {
+		clk.Advance(after)
+		restarted := testReporter(store, telKube(), srv.URL, clk) // a new process, same database
+		if err := restarted.Tick(t.Context()); err != nil {
+			t.Fatalf("tick after restart: %v", err)
+		}
+	}
+	if got.count() != 1 {
+		t.Fatalf("posts = %d after restarts inside the interval, want 1", got.count())
+	}
+	clk.Advance(24 * time.Hour)
+	if err := testReporter(store, telKube(), srv.URL, clk).Tick(t.Context()); err != nil {
+		t.Fatalf("tick after the interval: %v", err)
+	}
+	if got.count() != 2 {
+		t.Fatalf("posts = %d once the interval passed, want 2", got.count())
+	}
+}
+
+func TestReporter_FallsBackToBasicOn400ThenWaitsSevenDays(t *testing.T) {
+	srv, got := newSink(t)
+	got.setRespond(func(rec sentReport) int {
+		if rec.hasExt() {
+			return http.StatusBadRequest // an old receiver rejects the unknown key
+		}
+		return http.StatusOK
+	})
+	clk := newFakeClock()
+	store := telStoreExt(t, true, true)
+	r := testReporter(store, collectKubeClients(t, collectOpts{}), srv.URL, clk)
+	start := clk.Now()
+
+	// Day 0: the extended report is refused, the basic one accepted.
+	if err := sendNow(t, r); err != nil {
+		t.Fatalf("day 0: %v", err)
+	}
+	if got.count() != 2 || !got.at(0).hasExt() || got.at(0).signature == "" {
+		t.Fatalf("day 0: want an extended signed POST first, got %d posts", got.count())
+	}
+	if got.at(1).hasExt() || got.at(1).signature != "" {
+		t.Fatal("day 0: the retry must be basic only and unsigned")
+	}
+	st := mustState(t, store)
+	if st.LastOutcome != "ok" {
+		t.Fatalf("outcome = %q, want ok (the basic report was accepted)", st.LastOutcome)
+	}
+	if want := start.Add(7 * 24 * time.Hour).Format(time.RFC3339); st.ExtUnsupportedUntil != want || st.ExtUnsupportedEndpoint != srv.URL {
+		t.Fatalf("fallback marker = %q for %q, want %q for %q", st.ExtUnsupportedUntil, st.ExtUnsupportedEndpoint, want, srv.URL)
+	}
+
+	// Days 1 to 6: one basic POST per day, no extended attempt.
+	for day := 1; day <= 6; day++ {
+		clk.Advance(24 * time.Hour)
+		before := got.count()
+		if err := r.Tick(t.Context()); err != nil {
+			t.Fatalf("day %d: %v", day, err)
+		}
+		if got.count() != before+1 || got.at(before).hasExt() {
+			t.Fatalf("day %d: want exactly one basic POST", day)
+		}
+	}
+
+	// Day 7: the marker has expired, so the extended part is tried again.
+	clk.Advance(24 * time.Hour)
+	before := got.count()
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("day 7: %v", err)
+	}
+	if got.count() != before+2 || !got.at(before).hasExt() || got.at(before+1).hasExt() {
+		t.Fatalf("day 7: want an extended attempt then a basic retry, got %d new posts", got.count()-before)
+	}
+}
+
+func TestReporter_FallbackMarkerIsPerEndpoint(t *testing.T) {
+	oldSrv, oldGot := newSink(t)
+	oldGot.setRespond(func(rec sentReport) int {
+		if rec.hasExt() {
+			return http.StatusBadRequest
+		}
+		return http.StatusOK
+	})
+	newSrv, newGot := newSink(t)
+	clk := newFakeClock()
+	store := telStoreExt(t, true, true)
+	k := collectKubeClients(t, collectOpts{})
+	if err := sendNow(t, testReporter(store, k, oldSrv.URL, clk)); err != nil {
+		t.Fatalf("old endpoint: %v", err)
+	}
+
+	// The operator points the install at another endpoint: the marker for the
+	// old one doesn't apply, so the extended part goes out again.
+	clk.Advance(24 * time.Hour)
+	if err := testReporter(store, k, newSrv.URL, clk).Tick(t.Context()); err != nil {
+		t.Fatalf("new endpoint: %v", err)
+	}
+	if newGot.count() != 1 || !newGot.at(0).hasExt() {
+		t.Fatalf("new endpoint got %d posts, want one extended report", newGot.count())
+	}
+}
+
+func TestReporter_BackoffGrowsAndCaps(t *testing.T) {
+	srv, got := newSink(t)
+	got.setRespond(func(sentReport) int { return http.StatusInternalServerError })
+	clk := newFakeClock()
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+	if err := r.Tick(t.Context()); err != nil { // opens the first slot
+		t.Fatalf("opening tick: %v", err)
+	}
+
+	want := []time.Duration{time.Hour, 2 * time.Hour, 4 * time.Hour, 8 * time.Hour, 16 * time.Hour, 24 * time.Hour, 24 * time.Hour}
+	for i, wait := range want {
+		if err := r.Tick(t.Context()); err == nil {
+			t.Fatalf("failure %d: want the send error from Tick", i+1)
+		}
+		st := mustState(t, store)
+		if st.LastOutcome != "failed" || st.ConsecutiveFailures != i+1 {
+			t.Fatalf("failure %d: state = %+v", i+1, st)
+		}
+		if backoff := mustParse(t, st.NextDueAt).Sub(clk.Now()); backoff != wait {
+			t.Fatalf("failure %d: backoff = %v, want %v", i+1, backoff, wait)
+		}
+		// Nothing is sent before the backed-off slot, and nothing is queued.
+		sent := got.count()
+		clk.Advance(wait - time.Second)
+		if err := r.Tick(t.Context()); err != nil {
+			t.Fatalf("failure %d: early tick: %v", i+1, err)
+		}
+		if got.count() != sent {
+			t.Fatalf("failure %d: sent before the backed-off slot", i+1)
+		}
+		clk.Advance(time.Second)
+	}
+
+	// Recovery resets the counter and schedules a full interval ahead.
+	got.setRespond(nil)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("recovery tick: %v", err)
+	}
+	st := mustState(t, store)
+	if st.LastOutcome != "ok" || st.ConsecutiveFailures != 0 {
+		t.Fatalf("after recovery: %+v", st)
+	}
+	if next := mustParse(t, st.NextDueAt).Sub(clk.Now()); next < 24*time.Hour {
+		t.Fatalf("next slot after recovery is %v away, want at least 24h", next)
+	}
+}
+
+func TestReporter_TwoReportersShareOneSlot(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	store := telStore(t, true)
+	a := testReporter(store, telKube(), srv.URL, clk)
+	b := testReporter(store, telKube(), srv.URL, clk)
+	if err := a.Tick(t.Context()); err != nil { // opens the slot, due now
+		t.Fatalf("opening tick: %v", err)
+	}
+
+	var wg sync.WaitGroup
+	for _, r := range []*Reporter{a, b} {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			if err := r.Tick(t.Context()); err != nil {
+				t.Errorf("tick: %v", err)
+			}
+		}()
+	}
+	wg.Wait()
+	if got.count() != 1 {
+		t.Fatalf("posts = %d from two reporters on one database, want exactly 1", got.count())
+	}
+}
+
+func TestReporter_ClaimLostMeansNoSend(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("opening tick: %v", err)
+	}
+	st := mustState(t, store)
+	// Another replica claims the slot between this one's read and its claim.
+	if _, err := store.ClaimTelemetryDue(t.Context(), st.NextDueAt, "2026-10-07T09:00:00Z", "2026-10-06T09:00:00Z"); err != nil {
+		t.Fatalf("rival claim: %v", err)
+	}
+	if err := r.attempt(t.Context(), st, Consent{Basic: true}, clk.Now()); err != nil {
+		t.Fatalf("attempt: %v", err)
+	}
+	if got.count() != 0 {
+		t.Fatalf("posts = %d after losing the claim, want 0", got.count())
+	}
+}
+
+func TestReporter_GateClosingClearsTheSlot(t *testing.T) {
+	srv, got := newSink(t)
+	clk := newFakeClock()
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, clk)
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("opening tick: %v", err)
+	}
+	if mustState(t, store).NextDueAt == "" {
+		t.Fatal("the first tick should have opened the schedule")
+	}
+	if _, err := store.DB.ExecContext(t.Context(),
+		`UPDATE config SET value = '{"sendMetrics":false,"extended":false}' WHERE key = 'telemetry'`); err != nil {
+		t.Fatalf("turn off: %v", err)
+	}
+	if err := r.Tick(t.Context()); err != nil {
+		t.Fatalf("closing tick: %v", err)
+	}
+	if got.count() != 0 || mustState(t, store).NextDueAt != "" {
+		t.Fatalf("posts = %d, slot = %q; want none and a cleared slot", got.count(), mustState(t, store).NextDueAt)
+	}
+}
+
+func TestReporter_NoDestinationNeverSends(t *testing.T) {
+	srv, got := newSink(t)
+	for _, kind := range []string{KindNone, KindDisabled} {
+		r := testReporter(telStore(t, true), telKube(), srv.URL, newFakeClock())
+		r.dest = Destination{Kind: kind}
+		if err := sendNow(t, r); err != nil {
+			t.Fatalf("%s: %v", kind, err)
+		}
+		r.Run(t.Context()) // returns at once, without a ticker
+	}
+	if got.count() != 0 {
+		t.Fatalf("posts = %d with no destination, want 0", got.count())
+	}
+}
+
+func TestReporter_RunTicksThenStopsOnCancel(t *testing.T) {
+	srv, got := newSink(t)
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), srv.URL, newFakeClock())
+	ctx, cancel := context.WithCancel(t.Context())
+	defer cancel()
+	done := make(chan struct{})
+	go func() {
+		r.Run(ctx)
+		close(done)
+	}()
+
+	// Run's first tick opens the schedule without waiting for the poll timer.
+	deadline := time.Now().Add(5 * time.Second)
+	for mustState(t, store).NextDueAt == "" {
+		if time.Now().After(deadline) {
+			t.Fatal("Run did not evaluate the schedule on start")
+		}
+		time.Sleep(10 * time.Millisecond)
+	}
+	cancel()
+	select {
+	case <-done:
+	case <-time.After(5 * time.Second):
+		t.Fatal("Run did not return after its context was cancelled")
+	}
+	if got.count() != 0 {
+		t.Fatalf("posts = %d, want 0 (the opening tick only schedules)", got.count())
+	}
+}
+
+func TestReporter_SendFailuresAreRecorded(t *testing.T) {
+	cases := map[string]string{
+		"unreachable": "http://127.0.0.1:1/ingest",
+		"bad url":     "http://%zz",
+	}
+	for name, url := range cases {
+		t.Run(name, func(t *testing.T) {
+			store := telStore(t, true)
+			r := testReporter(store, telKube(), url, newFakeClock())
+			if err := sendNow(t, r); err == nil {
+				t.Fatal("want an error")
+			}
+			if st := mustState(t, store); st.LastOutcome != "failed" || st.ConsecutiveFailures != 1 {
+				t.Fatalf("state = %+v, want a recorded failure", st)
+			}
+		})
+	}
+}
+
+func TestReporter_CollectFailureIsRecorded(t *testing.T) {
+	srv, got := newSink(t)
+	store := telStoreExt(t, true, true)
+	if _, err := store.DB.ExecContext(t.Context(), `UPDATE telemetry_state SET signing_secret = '!!not base64!!'`); err != nil {
+		t.Fatalf("corrupt secret: %v", err)
+	}
+	r := testReporter(store, collectKubeClients(t, collectOpts{}), srv.URL, newFakeClock())
+	if err := sendNow(t, r); err == nil {
+		t.Fatal("want the collection error")
+	}
+	if got.count() != 0 {
+		t.Fatalf("posts = %d, want none when the report can't be built", got.count())
+	}
+	if st := mustState(t, store); st.LastOutcome != "failed" {
+		t.Fatalf("outcome = %q, want failed", st.LastOutcome)
+	}
+}
+
+func TestReporter_TickErrorsOnClosedStore(t *testing.T) {
+	store := telStore(t, true)
+	r := testReporter(store, telKube(), "http://127.0.0.1:1", newFakeClock())
+	if err := store.Close(); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+	if err := r.Tick(t.Context()); err == nil {
+		t.Fatal("want an error from a closed database")
+	}
 }
diff --git a/api/specs.md b/api/specs.md
index 3603f55ce..b3ce7ca86 100644
--- a/api/specs.md
+++ b/api/specs.md
@@ -18,7 +18,7 @@ The api module is the REST + WebSocket gateway for Gameplane, serving the web da
 - **Module registries:** pluggable providers (CurseForge, Modrinth, Spigot, Hangar, Nexus, Steam, Thunderstore, Factorio, GitHub, UMod); live lookup + caching
 - **Multi-cluster dispatch:** `?cluster=` selector routes requests to remote clusters via registered kubeconfigs; home cluster is `local`
 - **Unified reads:** `/fleet/*` aggregates only the caller's authorized resources across registered clusters, with explicit target identities, target permissions, partial failures and bounded work; it does not schedule or mutate resources.
-- **Telemetry:** opt-in anonymous daily usage metrics (version, server count, template count) POSTed to admin-configured endpoint
+- **Telemetry:** daily usage reports POSTed to the resolved destination (operator hard-off, bundled receiver, custom endpoint, or the project's default receiver). Two admin-consented tiers: basic (`version`, `servers`, `templates`) and extended (random install ID, environment categories, game and feature counts, signing key, send time; reports are signed). New installs share both tiers by default once the first-login notice has been shown to an admin; nothing is sent before then. The schedule and consent source live in `telemetry_state` (migration 015), so restarts never send early and replicas share one schedule. When the destination offers proof-of-work challenges (`GET /v1/challenge`), the reporter solves one per request (a challenge above 26 bits is refused)
 
 ## Non-goals / boundaries
 
@@ -58,7 +58,7 @@ api/
 - **handlers:** 23+ route groups (Audit, AuthProviderSecrets, Capture, Cluster, ClusterActions, Clusters, Config, Destinations, Events, Lifecycle, ModIDs, ModSources, Modules, ModUpdates, Notifications, Ownership, PodEvents, Registry, RegistrySecrets, Resources, Roles, SystemLogs, Users, WebSocket Mount)
 - **auth:** SessionStore (CSRF + expiry), Local (argon2id password check), OIDC (provider registry + claim mapping), Registry (auth provider discovery per request)
 - **rbac:** Middleware (namespace/cluster-scoped permission check + owner/collaborator fallback), rule table (method/path -> permission), catalog (permission definitions)
-- **db:** driver-selectable (modernc.org/sqlite or pgx/v5 via postgres build tag), migrations (001-012 per dialect in `migrations/sqlite/` and `migrations/postgres/`; 013+ shared and portable in `migrations/common/`), Store (query interface); queries use `?` placeholders, rebound to `$n` by the Postgres connection (`db.Rebind`)
+- **db:** driver-selectable (modernc.org/sqlite or pgx/v5 via postgres build tag), migrations (001-012 per dialect in `migrations/sqlite/` and `migrations/postgres/`; 013+ shared and portable in `migrations/common/`), Store (query interface); queries use `?` placeholders, rebound to `$n` by the Postgres connection (`db.Rebind`); migration 015 (`migrations/common/015_telemetry_state.sql`) adds `telemetry_state` (singleton row: consent source, install ID, notice shown time, report schedule `next_due_at`/`last_attempt_at`/`last_success_at`, `last_outcome`, `consecutive_failures`, extended-fallback fields `ext_unsupported_until`/`ext_unsupported_endpoint`, `signing_secret`, `last_id_rotation_at`; seeded in Go by `Store.Migrate` from the existing `telemetry` config value) and `telemetry_notice_acks` (one row per admin who dismissed the notice: `user_id`, `acked_at`, `action`; rows are removed in Go when the user is deleted)
 - **kube:** Client (K8s API wrapper), Registry (per-cluster clients from Cluster CRDs), watch (cluster-config sync)
 - **audit:** Auditor (insert to DB + distribute to sinks), webhook sink (POST JSON to URL), S3 sink (object storage), hash-chain (detect tampering)
 - **notify:** Notifier (watch GameServer/Backup/Restore status, format + deliver to sinks), sinks (Discord, Slack, SMTP, webhook)
@@ -66,7 +66,7 @@ api/
 - **registry:** provider types (each implements Search, Details, Manifest, Download), Set (versioned provider pool with key fallback)
 - **scope:** ResolveNamespace (extract from path or default), ResolveCluster (validate `?cluster=` against registry)
 - **httperr:** classify error type to safe HTTP status + message; preserve full error server-side
-- **telemetry:** daily metrics reporter (version, server/template counts)
+- **telemetry:** destination resolution (`ResolveDestination`), consent, report collection and preview (`BuildReport`), the scheduled reporter (Ed25519 signing, proof-of-work solving, install-ID rotation on `409 id_claimed`)
 
 ## External interface / contracts
 
@@ -78,8 +78,8 @@ Two subcommands:
    - **Core flags:** `--addr`, `--metrics-addr`, `--db-driver`, `--db-dsn`, `--log-level`
    - **OIDC flags** (install-time, Helm-seeded): `--oidc-issuer`, `--oidc-client-id`, `--oidc-client-secret`, `--oidc-redirect-url`, `--oidc-display-name` (login button label, no hostname — pre-auth surface), `--oidc-groups-claim` (configurable claim name, defaults to "groups"), `--oidc-default-role` (default for unmapped users: "", "viewer", "operator", "admin", or "deny"), `--oidc-role-mapping-admin` (comma-separated group names for admin role), `--oidc-role-mapping-operator`, `--oidc-role-mapping-viewer`. All have `GAMEPLANE_OIDC_*` env fallbacks (preferred over flags for credentials).
    - **Storage class (report-only):** `--game-data-storage-class` — echoed in `GET /admin/config`'s `installTimeSettings.gameDataStorageClass`, read-only, unaffected by overrides.
-   - **Other flags:** `--audit-*`, `--agent-*`, `--namespace`, `--cluster-ops`, `--cluster-external-address` (node-routable API server address used in the join command and downloaded kubeconfig instead of the in-cluster ClusterIP; empty = in-cluster address), `--update-channel`, `--curseforge-api-key`, `--telemetry-*`, `--capture-enabled`, `--capture-default-max-duration` (only these two are CLI flags; default/max retention and default max size are `GAMEPLANE_CAPTURE_*`-env-only, no flag)
-   - Env overrides via GAMEPLANE_* vars (credentials come from env only, never flags)
+   - **Other flags:** `--audit-*`, `--agent-*`, `--namespace`, `--cluster-ops`, `--cluster-external-address` (node-routable API server address used in the join command and downloaded kubeconfig instead of the in-cluster ClusterIP; empty = in-cluster address), `--update-channel`, `--curseforge-api-key`, `--telemetry-endpoint` (empty = the project's default receiver), `--telemetry-disabled` (hard off, whatever the admin toggles say), `--telemetry-interval` (default 24h, minimum 1m), `--official-module-source` (name of the official ModuleSource, so telemetry can tell official modules from custom ones; empty = every module counts as custom), `--capture-enabled`, `--capture-default-max-duration` (only these two are CLI flags; default/max retention and default max size are `GAMEPLANE_CAPTURE_*`-env-only, no flag)
+   - Env overrides via GAMEPLANE_* vars (credentials come from env only, never flags); telemetry also reads env-only `GAMEPLANE_TELEMETRY_AUTH` (ingest token sent verbatim as the Authorization header) and `GAMEPLANE_TELEMETRY_BUNDLED` (set only by the chart when it wires the bundled receiver)
    - Initialize: database + migrations, K8s client, auth (local + OIDC with Helm-seeded provider synthesis), audit (sinks), notifier, cluster watch, telemetry, session GC, capture config
    - Routes all mounted at startup; chi router with security middleware (secure headers, body limit, audit, session auth, RBAC, rate limiting); MountCapture wires capture endpoints
 
@@ -171,6 +171,10 @@ The HTTP server listens on `:8000` (configurable) with these route groups. Prome
 - `/admin/audit/export` — GET: streams the full matching audit trail as a download, `?format=csv` (default) or `?format=json`; optional filters `since`/`until` (RFC3339 timestamps, inclusive), `actor` (case-insensitive substring), `method` (`GET`/`POST`/`PUT`/`PATCH`/`DELETE`), and `status` (class `2xx`/`4xx`/`5xx`); an unrecognised `format`, `method`, or `status` value returns 400. CSV header, in column order: `id, ts, actor, method, path, target, status, ip, reason`. JSON is a top-level array of the same `audit.Event` objects `/admin/audit` returns.
 - `/admin/config` — GET/PATCH: global settings (OIDC, notifications, telemetry, module upload limits, etc.)
 - **instanceName field:** The `instanceName` field on `/admin/config` is optional; when omitted or empty, notifications fall back to "Gameplane" as the instance identifier.
+- `/admin/telemetry` — GET (`config:read`): destination (`kind` default|custom|bundled|disabled|none, `host` only, null for disabled/none), `operatorDisabled`, stored `consent` (`basic`, `extended`, `source`), `installId` (null while extended is off), `preview` (the exact report the reporter would send now, built by `telemetry.BuildReport`; null when basic is off or nothing would be sent) and delivery `status` (`lastAttemptAt`, `lastSuccessAt`, `lastOutcome` never|ok|failed, `lastIdRotationAt`). The signing secret and failure details are never returned
+- `/admin/telemetry/install-id` — POST (`config:manage`): replace the install ID, keep the signing secret and schedule; returns `{"installId"}`; 409 when extended is off or the operator disabled telemetry
+- `/admin/telemetry/notice` — GET (`config:read`; returns `{"pending":false}` unless the caller also holds `config:manage`): whether the first-login notice is pending for the caller, with destination host and the exact basic/extended field lists; POST (`config:manage`) `{"action": "seen"|"keep"|"extended-off"|"all-off"}` records the caller's dismissal (`seen` only sets the notice-shown time and opens the report schedule, recording no ack), 204 on success, 409 when not pending (except `seen`) or the operator disabled telemetry. RBAC entries sit before the `/admin/*` fallback in `rbac.go`
+- The telemetry consent itself is saved through `PUT /admin/config/telemetry` (`{"sendMetrics": bool, "extended": bool}`; `sendMetrics:false` forces `extended:false`; 409 when the operator disabled telemetry). The save runs in one transaction with the consent source, install ID and schedule updates
 - `/admin/notifications` — PATCH config + test-send to sinks
 - `/admin/auth` — PATCH identity-provider secrets
 - `/admin/registries/{provider}/secret` — PATCH mod-registry API keys
diff --git a/charts/gameplane/templates/NOTES.txt b/charts/gameplane/templates/NOTES.txt
new file mode 100644
index 000000000..05742eea5
--- /dev/null
+++ b/charts/gameplane/templates/NOTES.txt
@@ -0,0 +1,26 @@
+{{- /*
+  Spec 022 install notes. Both warnings read the receiver keys through
+  guards (F-214): after `helm upgrade --reuse-values` from beta.8 the
+  persistence and dashboard blocks are absent.
+*/ -}}
+{{- $r := .Values.api.telemetry.receiver }}
+{{- $receiverDeployed := and (eq (include "gameplane.apiEnabled" .) "true") $r.enabled (not .Values.api.telemetry.endpoint) }}
+{{- $persistence := $r.persistence | default dict }}
+{{- $persistenceEnabled := ternary $persistence.enabled false (hasKey $persistence "enabled") }}
+{{- $dashboard := $r.dashboard | default dict }}
+{{- $dashboardToken := $dashboard.tokenSecretRef | default dict }}
+{{- if and $receiverDeployed .Values.serviceMonitors.enabled (not $dashboardToken.name) }}
+
+WARNING: serviceMonitors.enabled and the bundled telemetry receiver are on,
+but api.telemetry.receiver.dashboard.tokenSecretRef.name is empty. The
+receiver serves /metrics only on its dashboard listener, behind a Bearer
+token, so no receiver ServiceMonitor was rendered. Create a Secret holding
+the token and set api.telemetry.receiver.dashboard.tokenSecretRef.name to
+scrape the receiver.
+{{- end }}
+{{- if and $receiverDeployed (not $persistenceEnabled) }}
+
+WARNING: api.telemetry.receiver.persistence.enabled is false. The bundled
+telemetry receiver stores its aggregates in an emptyDir, so all of them are
+lost whenever its pod restarts.
+{{- end }}
diff --git a/charts/gameplane/templates/api.yaml b/charts/gameplane/templates/api.yaml
index f7084421b..9d14271ba 100644
--- a/charts/gameplane/templates/api.yaml
+++ b/charts/gameplane/templates/api.yaml
@@ -328,6 +328,18 @@ spec:
             - --telemetry-endpoint={{ $telemetryURL }}
             {{- end }}
             {{- /*
+            Spec 022 (F-214): enabled and interval are absent after `helm
+            upgrade --reuse-values` from beta.8, so they are read through
+            hasKey. enabled defaults to true; false is the hard off switch.
+            */}}
+            {{- $telemetry := .Values.api.telemetry }}
+            {{- if not (ternary $telemetry.enabled true (hasKey $telemetry "enabled")) }}
+            - --telemetry-disabled
+            {{- end }}
+            {{- if .Values.defaultModuleSource.enabled }}
+            - --official-module-source={{ .Values.defaultModuleSource.name | default "default" }}
+            {{- end }}
+            {{- /*
             An explicit updates.channel always wins. Otherwise derive it so
             the dashboard doesn't lie: "edge" when the images actually
             deployed track the rolling :edge build (image.tag=edge, or —
@@ -384,6 +396,14 @@ spec:
                   name: {{ .Values.api.audit.s3.credentialsSecretRef.name }}
                   key:  {{ .Values.api.audit.s3.credentialsSecretRef.secretKeyKey }}
             {{- end }}
+            {{- if and (not .Values.api.telemetry.endpoint) .Values.api.telemetry.receiver.enabled }}
+            - name: GAMEPLANE_TELEMETRY_BUNDLED
+              value: "true"
+            {{- end }}
+            {{- with (.Values.api.telemetry.interval | default "") }}
+            - name: GAMEPLANE_TELEMETRY_INTERVAL
+              value: {{ . | quote }}
+            {{- end }}
             {{- if .Values.api.telemetry.authSecretRef.name }}
             - name: GAMEPLANE_TELEMETRY_AUTH
               valueFrom:
diff --git a/charts/gameplane/templates/servicemonitors.yaml b/charts/gameplane/templates/servicemonitors.yaml
index 5366842c9..03bde412e 100644
--- a/charts/gameplane/templates/servicemonitors.yaml
+++ b/charts/gameplane/templates/servicemonitors.yaml
@@ -46,16 +46,18 @@ spec:
     - { port: metrics, interval: 30s, path: /metrics }
 ---
 {{- /*
-  F-217: the telemetry-receiver renders no ServiceMonitor at all today
-  (its /ingest+/metrics listener is otherwise only reachable from the API
-  pod, see the NetworkPolicy in telemetry-receiver.yaml). Only render this
-  when the receiver itself is actually deployed (same condition as
-  telemetry-receiver.yaml) — a ServiceMonitor for a Service that doesn't
-  exist just leaves Prometheus with a permanently-down target. The
+  F-217: the telemetry-receiver serves /metrics only on its dashboard
+  listener (port 8081, Bearer auth with the dashboard token), so this
+  renders only when the receiver itself is deployed (same condition as
+  telemetry-receiver.yaml) AND dashboard.tokenSecretRef.name is set: without
+  a token Prometheus would hold a permanently-down target (NOTES.txt warns).
+  The key is read through guards (F-214). The
   trailing `---` stays inside this block (not after it) so skipping it
   doesn't leave a stray empty document ahead of the PodMonitor below.
 */}}
-{{- if and .Values.api.telemetry.receiver.enabled (not .Values.api.telemetry.endpoint) }}
+{{- $receiverDashboard := .Values.api.telemetry.receiver.dashboard | default dict }}
+{{- $receiverToken := $receiverDashboard.tokenSecretRef | default dict }}
+{{- if and .Values.api.telemetry.receiver.enabled (not .Values.api.telemetry.endpoint) $receiverToken.name }}
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
@@ -70,7 +72,12 @@ spec:
   selector:
     matchLabels: { app.kubernetes.io/name: gameplane-telemetry-receiver }
   endpoints:
-    - { port: http, interval: 30s, path: /metrics }
+    - port: dashboard
+      interval: 30s
+      path: /metrics
+      bearerTokenSecret:
+        name: {{ $receiverToken.name }}
+        key: {{ $receiverToken.key | default "token" }}
 ---
 {{- end }}
 {{- end }}
diff --git a/charts/gameplane/templates/telemetry-receiver.yaml b/charts/gameplane/templates/telemetry-receiver.yaml
index f5d93f96f..4e8255fbc 100644
--- a/charts/gameplane/templates/telemetry-receiver.yaml
+++ b/charts/gameplane/templates/telemetry-receiver.yaml
@@ -5,6 +5,65 @@
        condition in api.yaml). */ -}}
 {{- if and (eq (include "gameplane.apiEnabled" .) "true") .Values.api.telemetry.receiver.enabled (not .Values.api.telemetry.endpoint) }}
 {{- $r := .Values.api.telemetry.receiver }}
+{{- /*
+  Every key added after v0.2.0-beta.8 may be absent after `helm upgrade
+  --reuse-values` (F-214), so each is read through a guard: a missing block
+  becomes an empty dict, and hasKey (not `default`) keeps an explicit 0 or
+  false the operator set. Absent keys fall back to the values.yaml defaults.
+  In particular: an absent persistence block (an upgrade with --reuse-values
+  from beta.8) counts as disabled, so the upgrade adds no PVC.
+*/}}
+{{- $persistence := $r.persistence | default dict }}
+{{- $persistenceEnabled := ternary $persistence.enabled false (hasKey $persistence "enabled") }}
+{{- $dashboard := $r.dashboard | default dict }}
+{{- $dashboardToken := $dashboard.tokenSecretRef | default dict }}
+{{- $pepper := $r.pepperSecretRef | default dict }}
+{{- $publicSummary := $r.publicSummary | default dict }}
+{{- if and $persistenceEnabled (gt (int $r.replicas) 1) }}
+{{- fail "api.telemetry.receiver.replicas must be 1 while api.telemetry.receiver.persistence.enabled is true: the SQLite store has a single writer" }}
+{{- end }}
+{{- if and (hasKey $r "retentionDays") (lt (int $r.retentionDays) 365) }}
+{{- fail "api.telemetry.receiver.retentionDays must be at least 365 (spec 022 OD-3)" }}
+{{- end }}
+{{- if and (hasKey $r "activityExpiryDays") (lt (int $r.activityExpiryDays) 31) }}
+{{- fail "api.telemetry.receiver.activityExpiryDays must be at least 31 (spec 022 OD-4)" }}
+{{- end }}
+{{- /*
+  Proof-of-work (spec 022 FR-039, R21, OD-5). The whole block may be absent
+  after --reuse-values from a release before it (F-214); absent keys fall
+  back to the values.yaml defaults, with proof-of-work off.
+*/}}
+{{- $pow := $r.ingestPow | default dict }}
+{{- $powEnabled := ternary $pow.enabled false (hasKey $pow "enabled") }}
+{{- $powTarget := ternary $pow.targetPerMinute 60 (hasKey $pow "targetPerMinute") }}
+{{- $powMin := ternary $pow.minBits 0 (hasKey $pow "minBits") }}
+{{- $powMax := ternary $pow.maxBits 22 (hasKey $pow "maxBits") }}
+{{- if lt (int64 $powTarget) 1 }}
+{{- fail "api.telemetry.receiver.ingestPow.targetPerMinute must be at least 1 (spec 022 OD-5)" }}
+{{- end }}
+{{- if gt (int64 $powMax) 26 }}
+{{- fail "api.telemetry.receiver.ingestPow.maxBits must be at most 26, the hardest challenge an install solves (spec 022 OD-5)" }}
+{{- end }}
+{{- if lt (int64 $powMax) (int64 $powMin) }}
+{{- fail "api.telemetry.receiver.ingestPow.maxBits must be at least minBits (spec 022 OD-5)" }}
+{{- end }}
+{{- if $persistenceEnabled }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: gameplane-telemetry-receiver-data
+  namespace: {{ .Release.Namespace }}
+  labels: {{- include "gameplane.labels" . | nindent 4 }}
+spec:
+  accessModes: [ReadWriteOnce]
+  {{- with $persistence.storageClassName }}
+  storageClassName: {{ . | quote }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ $persistence.size | default "1Gi" | quote }}
+---
+{{- end }}
 # Anonymous-usage-telemetry collector. The API POSTs its daily
 # {version, servers, templates} report here; this validates it and
 # exposes aggregate Prometheus metrics. It touches no Kubernetes API, so
@@ -17,6 +76,10 @@ metadata:
   labels: {{- include "gameplane.labels" . | nindent 4 }}
 spec:
   replicas: {{ $r.replicas }}
+  # One writer owns the SQLite file, so a rollout must stop the old pod
+  # before the new one starts.
+  strategy:
+    type: Recreate
   selector:
     matchLabels: { app.kubernetes.io/name: gameplane-telemetry-receiver }
   template:
@@ -28,6 +91,9 @@ spec:
       securityContext:
         runAsNonRoot: true
         runAsUser: 65532
+        # The image is distroless nonroot (UID 65532); fsGroup makes the
+        # PVC (or emptyDir) mounted at /data writable by that user.
+        fsGroup: 65532
         seccompProfile: { type: RuntimeDefault }
       containers:
         - name: receiver
@@ -35,6 +101,42 @@ spec:
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           env:
             - { name: LISTEN_ADDR, value: ":8080" }
+            - { name: DATA_DIR, value: "/data" }
+            - name: PUBLIC_SUMMARY
+              value: {{ ($publicSummary.enabled | default false) | quote }}
+            - name: RETENTION_DAYS
+              value: {{ (ternary $r.retentionDays 730 (hasKey $r "retentionDays")) | int64 | quote }}
+            - name: ACTIVITY_EXPIRY_DAYS
+              value: {{ (ternary $r.activityExpiryDays 90 (hasKey $r "activityExpiryDays")) | int64 | quote }}
+            - name: INGEST_SOURCE_DAILY_LIMIT
+              value: {{ (ternary $r.ingestSourceDailyLimit 20 (hasKey $r "ingestSourceDailyLimit")) | int64 | quote }}
+            {{- with $r.trustedProxyCIDRs }}
+            - name: TRUSTED_PROXY_CIDRS
+              value: {{ join "," . | quote }}
+            {{- end }}
+            - name: INGEST_POW
+              value: {{ $powEnabled | quote }}
+            - name: INGEST_POW_TARGET_PER_MIN
+              value: {{ $powTarget | int64 | quote }}
+            - name: INGEST_POW_MIN_BITS
+              value: {{ $powMin | int64 | quote }}
+            - name: INGEST_POW_MAX_BITS
+              value: {{ $powMax | int64 | quote }}
+            {{- if $dashboardToken.name }}
+            # The dashboard listener only starts when this is set.
+            - name: DASHBOARD_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $dashboardToken.name }}
+                  key:  {{ $dashboardToken.key | default "token" }}
+            {{- end }}
+            {{- if $pepper.name }}
+            - name: ID_PEPPER
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $pepper.name }}
+                  key:  {{ $pepper.key | default "pepper" }}
+            {{- end }}
             {{- if .Values.api.telemetry.authSecretRef.name }}
             # Require the same shared token the API sends as its
             # Authorization header, so the receiver rejects POSTs from
@@ -48,6 +150,9 @@ spec:
             {{- end }}
           ports:
             - { name: http, containerPort: 8080 }
+            {{- if $dashboardToken.name }}
+            - { name: dashboard, containerPort: 8081 }
+            {{- end }}
           livenessProbe:  { httpGet: { path: /healthz, port: http }, initialDelaySeconds: 5 }
           readinessProbe: { httpGet: { path: /healthz, port: http }, initialDelaySeconds: 2 }
           resources: {{ toYaml $r.resources | nindent 12 }}
@@ -55,6 +160,17 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
             capabilities: { drop: [ALL] }
+          volumeMounts:
+            - { name: data, mountPath: /data }
+      volumes:
+        - name: data
+          {{- if $persistenceEnabled }}
+          persistentVolumeClaim:
+            claimName: gameplane-telemetry-receiver-data
+          {{- else }}
+          # Persistence is disabled: aggregates are lost when the pod restarts.
+          emptyDir: {}
+          {{- end }}
       {{- with .Values.image.pullSecrets }}
       imagePullSecrets: {{- toYaml . | nindent 8 }}
       {{- end }}
@@ -71,6 +187,9 @@ spec:
   selector: { app.kubernetes.io/name: gameplane-telemetry-receiver }
   ports:
     - { name: http, port: 8080, targetPort: http }
+    {{- if $dashboardToken.name }}
+    - { name: dashboard, port: 8081, targetPort: dashboard }
+    {{- end }}
 {{- if .Values.networkPolicies.enabled }}
 ---
 apiVersion: networking.k8s.io/v1
@@ -93,17 +212,20 @@ spec:
         - protocol: TCP
           port: 8080
     {{- /*
-      F-217: /metrics shares this listener/port with /ingest, and until now
-      the only ingress rule was "from the API pod", so no in-cluster
-      Prometheus could ever reach /metrics regardless of the ServiceMonitor
-      above. /ingest still requires AUTH_TOKEN (see the receiver's
-      Deployment env above), so widening this rule to the operator's
-      configured Prometheus namespace doesn't expose it to unauthenticated
-      writes — it only lets that namespace's pods reach the port at all.
-      Rendered only once an operator actually names their Prometheus
-      namespace via serviceMonitors.scrapeNamespaceSelector; left empty,
-      this stays exactly as restrictive as before.
+      Port 8080 (/ingest) admits only the API pod. /metrics lives on the
+      dashboard listener (8081) behind Bearer auth, so the dashboard port is
+      opened only when a dashboard token is named: first to the operator's
+      dashboard.ingressFrom peers, then (F-217) to the Prometheus namespace
+      named via serviceMonitors.scrapeNamespaceSelector. With no peers
+      configured, port-forward still works.
     */}}
+    {{- if $dashboardToken.name }}
+    {{- with $dashboard.ingressFrom }}
+    - from: {{- toYaml . | nindent 8 }}
+      ports:
+        - protocol: TCP
+          port: 8081
+    {{- end }}
     {{- with .Values.serviceMonitors.scrapeNamespaceSelector }}
     {{- if $.Values.serviceMonitors.enabled }}
     - from:
@@ -111,7 +233,8 @@ spec:
             {{- toYaml . | nindent 12 }}
       ports:
         - protocol: TCP
-          port: 8080
+          port: 8081
+    {{- end }}
     {{- end }}
     {{- end }}
 {{- end }}
diff --git a/charts/gameplane/values.yaml b/charts/gameplane/values.yaml
index b8a49bf3b..c3b85ff2f 100644
--- a/charts/gameplane/values.yaml
+++ b/charts/gameplane/values.yaml
@@ -234,15 +234,23 @@ api:
         accessKeyKey: access-key   # key containing the access key ID
         secretKeyKey: secret-key    # key containing the secret access key
 
-  # Anonymous usage telemetry ({version, servers, templates} once a day —
-  # see docs/install.md). Two independent gates: the admin toggle in the
-  # dashboard decides WHETHER anything is sent, this block decides WHERE.
-  # With endpoint empty and receiver.enabled false (the defaults),
-  # telemetry is off entirely.
+  # Anonymous usage telemetry (see docs/install.md). Two independent gates:
+  # the admin switches in the dashboard decide WHETHER anything is sent, this
+  # block decides WHETHER it may be sent at all (enabled) and WHERE it goes
+  # (endpoint, receiver).
   telemetry:
-    # External receiver URL, e.g. https://telemetry.example.com/ingest.
-    # Setting it disables the receiver auto-wiring below.
+    # false = hard off: the API never sends telemetry, whatever the admin
+    # switches say. This is the single setting for air-gapped and
+    # privacy-sensitive clusters. The bundled receiver, if enabled below, is
+    # still deployed.
+    enabled: true
+    # Where reports are sent. Empty means the project's default provider
+    # (https://telemetry.gameplane.net/ingest, compiled into the API); set a URL such as
+    # https://telemetry.example.com/ingest to send reports to your own
+    # receiver instead. Setting it disables the receiver auto-wiring below.
     endpoint: ""
+    # Testing only: the spacing between reports. Don't change in production.
+    interval: 24h
     # Optional shared ingest token, sourced from a Secret (never a flag).
     # The API sends it verbatim as the Authorization header and the
     # bundled receiver requires it — recommended when the receiver is
@@ -256,8 +264,56 @@ api:
     # pointed at it automatically.
     receiver:
       enabled: false
+      # Must stay 1 while persistence is enabled: the SQLite file on the PVC
+      # has a single writer, so the template fails the render otherwise.
       replicas: 1
       resources: {}
+      # Aggregate storage (SQLite on a PVC mounted at /data). With
+      # persistence disabled an emptyDir is used instead and every
+      # aggregate is lost when the pod restarts.
+      persistence:
+        enabled: true
+        size: 1Gi
+        storageClassName: ""
+      # Private dashboard (spec 022). The dashboard listener only starts when
+      # tokenSecretRef.name names a Secret holding the dashboard token.
+      dashboard:
+        tokenSecretRef:
+          name: ""
+          key: token
+        # Extra NetworkPolicy peers allowed to reach the dashboard port
+        # (port-forward works without any). Each item is a NetworkPolicyPeer,
+        # e.g. {namespaceSelector: {matchLabels: {team: ops}}}.
+        ingressFrom: []
+      # Serve the public aggregate counters on GET /v1/summary.
+      publicSummary:
+        enabled: false
+      # Optional HMAC pepper for install IDs, sourced from a Secret. Empty
+      # name = the receiver generates one and keeps it in its database.
+      pepperSecretRef:
+        name: ""
+        key: pepper
+      # Daily aggregate retention in days. Minimum 365 (the receiver
+      # refuses to start below that).
+      retentionDays: 730
+      # Per-install activity record expiry in days. Minimum 31.
+      activityExpiryDays: 90
+      # Accepted reports per source address per UTC day; 0 = unlimited.
+      ingestSourceDailyLimit: 20
+      # CIDRs whose X-Forwarded-For header is trusted for the source address.
+      trustedProxyCIDRs: []
+      # Proof-of-work on report ingestion (spec 022 FR-039, OD-5). Off by
+      # default; a provider turns it on for a public endpoint. While on,
+      # every report must carry a solved challenge from GET /v1/challenge.
+      # The difficulty is 0 bits (or minBits) up to targetPerMinute
+      # challenges a minute, rises with the request rate up to maxBits, and
+      # falls one bit every 5 minutes. Installs refuse challenges above 26
+      # bits, so maxBits may not exceed 26.
+      ingestPow:
+        enabled: false
+        targetPerMinute: 60
+        minBits: 0
+        maxBits: 22
 
   oidc:
     enabled: false
@@ -521,8 +577,11 @@ serviceMonitors:
   # expressions/labels) identifying the namespace your Prometheus runs in.
   # Only used, when non-empty, to open NetworkPolicy exceptions so that
   # Prometheus can reach the agent's metrics port 9090 (F-216; rationale in
-  # agent/specs.md) and the telemetry-receiver's /metrics on its normal
-  # port (F-217) when networkPolicies.enabled is also true. Required
+  # agent/specs.md) and the telemetry-receiver's /metrics on its
+  # dashboard port 8081 (F-217; /metrics is served there with Bearer auth,
+  # so the receiver ServiceMonitor also needs
+  # api.telemetry.receiver.dashboard.tokenSecretRef.name) when
+  # networkPolicies.enabled is also true. Required
   # alongside enabled: true whenever networkPolicies.enabled is also true;
   # left empty, both stay unreachable to Prometheus even though their
   # ServiceMonitor/PodMonitor objects are rendered. Example:
diff --git a/deploy/kind/e2e.sh b/deploy/kind/e2e.sh
index 3f9f85dfc..a16fa6ac7 100755
--- a/deploy/kind/e2e.sh
+++ b/deploy/kind/e2e.sh
@@ -8,7 +8,7 @@
 # Diffs from dev-up (deploy/kind/up.sh):
 #   - Single-node cluster (faster boot, sufficient for E2E coverage).
 #   - Skips ingress-nginx (the dashboard isn't exercised here).
-#   - Loads pre-built gameplane-test/{operator,api,agent,sentinel,capture-sidecar,fakeoidc}:<tag>
+#   - Loads pre-built gameplane-test/{operator,api,agent,sentinel,capture-sidecar,telemetry-receiver,fakeoidc}:<tag>
 #     images (and gameplane-test/gameprobe:<tag> when present).
 #   - Helm install with --wait so pods are Ready before tests start.
 #
@@ -163,8 +163,8 @@ EOF
     install_metallb
     apply_metallb_pools
 
-    echo "loading gameplane-test/{operator,api,agent,sentinel,capture-sidecar}:${TAG} images into kind"
-    for img in operator api agent sentinel capture-sidecar; do
+    echo "loading gameplane-test/{operator,api,agent,sentinel,capture-sidecar,telemetry-receiver}:${TAG} images into kind"
+    for img in operator api agent sentinel capture-sidecar telemetry-receiver; do
         if ! docker image inspect "gameplane-test/${img}:${TAG}" >/dev/null 2>&1; then
             echo "  missing local image gameplane-test/${img}:${TAG} — building"
             docker build -t "gameplane-test/${img}:${TAG}" -f "${REPO}/${img}/Dockerfile" "${REPO}"
@@ -298,6 +298,8 @@ EOF
     # Disable the web front end: the suite drives the API directly via
     # port-forward (never the browser), so building/loading the nginx image
     # would only add minutes, and `--wait` would block on an unloaded image.
+    # Deploy the bundled telemetry receiver and point the API at it: never let
+    # CI or dev installs reach the project provider (spec 022 R17).
     helm upgrade --install gameplane "${CHART_DIR}" \
         --namespace gameplane-system --create-namespace \
         --set "image.registry=gameplane-test" \
@@ -318,6 +320,7 @@ EOF
         --set "operator.addressManager=metallb" \
         --set "operator.gameDataStorage.storageClassName=gameplane-e2e-install-default" \
         --set "defaultModuleSource.enabled=false" \
+        --set "api.telemetry.receiver.enabled=true" \
         --wait --timeout 5m
 
     echo
diff --git a/design-export/MANIFEST.md b/design-export/MANIFEST.md
index 565631385..8de051893 100644
--- a/design-export/MANIFEST.md
+++ b/design-export/MANIFEST.md
@@ -2500,6 +2500,29 @@ Server Settings gets a "Game configuration" section (edit `spec.config` from the
 - **Screenshots:** `Export(ids, "png", …, {scale: 2})`.
 - **Re-exported for the sub-nav change:** PNGs of `swxkJ`, `E0ypH`, `J5pjJ3`, `ugDSa`, `i1bLR`, `KaRFX`, `Y5cmvI`, `VfB0Y`, `i8wib`, `xCJlu`, `RodrS`, `VctzT`, `iLm38`, `QpEvu`, `XR0f9`, `nGJE1`, `dhPtX`, `tSOeI`, `y3YcQ`, `EKJyM`, `IMSD5`, `gWqMD` and `EV8mp`; JSON of `Y5cmvI` and `J5pjJ3` (they were out of date with the canvas).
 
+## Spec 022 telemetry notice and settings (2026-10-07)
+
+T041 and T052 of `specs/022-default-telemetry-dashboard/`. New frames sit in an empty region below the Admin Settings row (x 11480–21120, y 25404–28584); no existing frame changed. Destination hosts are samples while OD-1 is unruled: their text nodes are named `host (SAMPLE, OD-1 unruled)` (default) and `host (SAMPLE)` (bundled).
+
+| Object ID | Name | Change |
+| --- | --- | --- |
+| `lh8p8` | Gameplane/Telemetry Notice Banner | **New** reusable component, modelled on the Safe Mode Banner (`DAz77`) in the accent tone with a lucide `info` icon. Headline "Anonymous usage metrics are on for this install.", the destination host line, a basic field column and an extended field column that says a random install ID is included, the actions "Keep sharing", "Turn off extended" and "Turn off all", and the links "Open Telemetry settings" and "Data-handling statement" (`TELEMETRY_STATEMENT_URL`). No dismiss button. |
+| `zj5a3` | Screen/Dashboard Home — Telemetry notice (default) | **New.** Copy of `j24cXg` (1380 tall) with the banner at the top of the body, default destination (sample host `telemetry.example.org`). |
+| `GR1G9` | Screen/Dashboard Home — Telemetry notice (bundled) | **New.** As `zj5a3`, bundled in-cluster receiver (sample host `gameplane-telemetry-receiver.gameplane.svc`). |
+| `l7TRz9` | Screen/Admin Settings — Telemetry (default) | **New.** Copy of `uoxQW`. Subtitle names the install ID. Destination line, basic and extended switches on, install-ID row with "Reset ID", read-only next-report preview JSON, status "ok". |
+| `r0heh` | Screen/Admin Settings — Telemetry (custom) | **New.** Custom destination; status "failed" plus the line "Install ID replaced on Oct 4, 2026: the destination reported it was in use by another key." |
+| `cDiNb` | Screen/Admin Settings — Telemetry (bundled) | **New.** Bundled destination; basic on, extended off, install-ID row dimmed ("No install ID while extended metrics are off."), Reset ID dimmed; status "never". |
+| `DBQyF` | Screen/Admin Settings — Telemetry (disabled) | **New.** Both switches off and dimmed, warning message "Telemetry is disabled by the operator.", Save dimmed. |
+| `K5XinZ` | Screen/Admin Settings — Telemetry (none) | **New.** No destination; basic switch off and enabled, extended dimmed; no preview or status. |
+| `yrxK2` | Screen/Admin Settings — Telemetry (Reset ID confirm) | **New.** Copy of `l7TRz9` with a 40% scrim and an AlertDialog/Danger instance: "Reset install ID?", Cancel / Reset ID. |
+
+- **JSON:** made with `Print(JSON.stringify(Get(id, {depth: 30, includePathGeometry: true})))`, length-checked against the canvas and re-serialized with `jq .`. Zero `"..."` elisions, and `jq empty` passes.
+- **Screenshots:** `Export(ids, "png", …, {scale: 2})`.
+- **Text wrap fix (2026-10-07, after review by the maintainer):** in `U8Zugm` the title (`p6wdYs`), destination suffix (`w4oMww`) and both field descriptions (`js01h`, `WW2ac`) now use `textGrowth: fixed-width` with `width: fill_container`, so long text wraps inside the banner instead of running past it (most visible on `woRBK`, the bundled host). Re-exported: JSON of `U8Zugm`; PNGs of `U8Zugm`, `jmcmS` and `woRBK`. The screens' JSON is unchanged (they hold only instance overrides).
+- **OD-1 ruled (2026-10-07):** telemetry.gameplane.net is the default endpoint per OPEN-DECISIONS OD-1. Updated text nodes: `jhnKn` in `U8Zugm`; `jhnKn` in the `t6Wzr` instance override in `jmcmS`; `i6gVPJ` in `TEBym`; `J98Oe` in `oqm73`. Names updated from `host (SAMPLE, OD-1 unruled)` to `host`. Re-exported: JSON and PNG of `U8Zugm`, `jmcmS`, `TEBym`, `oqm73`.
+- **Reset ID button icon removed (2026-10-07):** removed the plus icon from the resetIdBtn component instances in the Admin Settings screens. The button component's default plus icon is now hidden with `descendants: {"X3iEI": {"enabled": false}}` on all instances (VATLE in DtjyL, P8V7X8 in uwPVC, qq0qa in oqm73, and AILYr in TEBym). Re-exported JSON and PNG for TEBym, DtjyL, uwPVC, oqm73.
+- **Rebuilt in the master merge (2026-10-07):** master's `design.pen` (with `FBiMN` and the `qFLfB` rename from PR #584) was taken as the base and these frames were re-created on it from their exports, so their ids changed: `U8Zugm` → `lh8p8`, `jmcmS` → `zj5a3`, `woRBK` → `GR1G9`, `TEBym` → `l7TRz9`, `DtjyL` → `r0heh`, `uwPVC` → `cDiNb`, `Rvv6z` → `DBQyF`, `RT8lU` → `K5XinZ`, `oqm73` → `yrxK2`. The rebuilt JSON equals the previous export with ids remapped (length and FNV-1a hash checked against the canvas; the hidden rows of the bundled, disabled and none screens carry the x/y/width the canvas now computes for them). The PNGs were re-exported: the two Dashboard Home screens now show the banner's actions row below both metric columns, where the previous PNGs held a stale layout of the same JSON. Internal node ids named in the notes above refer to the pre-merge file.
+
 ## Share Start recovery (PR #584, 2026-10-07)
 
 | Object ID | Name | Change |
diff --git a/design-export/json/DBQyF.json b/design-export/json/DBQyF.json
new file mode 100644
index 000000000..4d01b247f
--- /dev/null
+++ b/design-export/json/DBQyF.json
@@ -0,0 +1,523 @@
+{
+  "type": "frame",
+  "id": "DBQyF",
+  "x": 16400,
+  "y": 25404,
+  "name": "Screen/Admin Settings — Telemetry (disabled)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 641,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "jb2it",
+      "type": "ref",
+      "ref": "kKFX9",
+      "height": "fill_container",
+      "descendants": {
+        "iTbd8": {
+          "fill": "#00000000"
+        },
+        "iTbd8/ghUsw": {
+          "fill": "$foreground/foreground"
+        },
+        "iTbd8/bpSQ7": {
+          "fill": "$foreground/foreground"
+        },
+        "ya5KB": {
+          "fill": "$accent/soft"
+        },
+        "ya5KB/Sr2Q5": {
+          "fill": "$accent/soft-foreground"
+        },
+        "ya5KB/Ra9NK": {
+          "fill": "$accent/soft-foreground"
+        }
+      }
+    },
+    {
+      "type": "frame",
+      "id": "CZLXz",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "L5CeQ",
+          "type": "ref",
+          "ref": "gu5WY",
+          "width": "fill_container",
+          "descendants": {
+            "Gl7AY": {
+              "content": "Settings"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "ZHjUq",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 24,
+          "children": [
+            {
+              "id": "WaQzQ",
+              "type": "ref",
+              "ref": "xCDF7",
+              "width": "fill_container",
+              "descendants": {
+                "spCmk": {
+                  "content": "Admin settings"
+                },
+                "VbHwU": {
+                  "content": "Platform-wide configuration for this Gameplane instance."
+                },
+                "TgdLz": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "gnNvq",
+              "name": "Settings Layout",
+              "width": "fill_container",
+              "height": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "id": "wQExX",
+                  "type": "ref",
+                  "ref": "Mp7Ep",
+                  "name": "Settings Nav",
+                  "width": 220,
+                  "descendants": {
+                    "eIjoV": {
+                      "fill": "#00000000"
+                    },
+                    "ZPLSA": {
+                      "fill": "$surface/secondary"
+                    }
+                  }
+                },
+                {
+                  "id": "jigMQ",
+                  "type": "ref",
+                  "ref": "XDZ0E",
+                  "name": "Settings Panel",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "id": "uhp7C",
+                      "type": "ref",
+                      "ref": "FRpsu",
+                      "name": "Card Header",
+                      "descendants": {
+                        "fuZHB": {
+                          "content": "Telemetry"
+                        },
+                        "BZG9o": {
+                          "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                        }
+                      }
+                    },
+                    {
+                      "type": "frame",
+                      "id": "T4JamN",
+                      "name": "Card Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "EGOdH",
+                          "name": "destinationRow",
+                          "width": "fill_container",
+                          "fill": "$warning/soft",
+                          "cornerRadius": 8,
+                          "gap": 12,
+                          "padding": 12,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "ZXcWt",
+                              "name": "destIcon",
+                              "width": 20,
+                              "height": 20,
+                              "icon": "shield-off",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$warning/soft-foreground"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ax0Ht",
+                              "name": "destText",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "MC4kp",
+                                  "name": "destTitle",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Telemetry is disabled by the operator.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "Ipare",
+                                  "name": "destDetail",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "No data of either kind is sent and no telemetry destination is contacted, whatever the switches below say. Only an operator can change this, at install time.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "Wcah8",
+                              "type": "ref",
+                              "ref": "eg3vM",
+                              "name": "destChip",
+                              "descendants": {
+                                "S2JwD": {
+                                  "content": "Disabled"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "s8V4RQ",
+                          "name": "telemetryRow",
+                          "opacity": 0.5,
+                          "width": "fill_container",
+                          "gap": 16,
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "aD3WD",
+                              "name": "labelCol",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "e8KSRm",
+                                  "name": "Label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Send basic usage metrics",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "UqkyC",
+                                  "name": "Description",
+                                  "fill": "$muted",
+                                  "content": "Gameplane version, number of servers and number of templates.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "pv6u1",
+                              "type": "ref",
+                              "ref": "rh2QH",
+                              "name": "basicSwitch"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "d6UNY",
+                          "name": "extendedRow",
+                          "opacity": 0.5,
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "klsL5",
+                              "name": "extRowInner",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "PksiU",
+                                  "name": "extLabelCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "eF5fz",
+                                      "name": "extLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send extended usage metrics",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "mFzAM",
+                                      "name": "extDescription",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "lKdlx",
+                                  "type": "ref",
+                                  "ref": "rh2QH",
+                                  "name": "extendedSwitch"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "Q5cSk8",
+                          "x": 0,
+                          "y": 218,
+                          "name": "installIdRow",
+                          "enabled": false,
+                          "width": "fill_container(856)",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "QUqUt",
+                              "name": "installIdCol",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "c62rOD",
+                                  "name": "installIdLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "Cec0C",
+                                  "name": "installIdValue",
+                                  "fill": "$foreground/foreground",
+                                  "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "wxRQV",
+                                  "name": "installIdHelp",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "BnNus",
+                              "type": "ref",
+                              "ref": "d5N3W3",
+                              "name": "resetIdBtn",
+                              "descendants": {
+                                "i3zB62/zMNkR": {
+                                  "content": "Reset ID"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "wyQ2s",
+                          "name": "previewBlock",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "dDFBA",
+                              "name": "previewLabel",
+                              "fill": "$foreground/foreground",
+                              "content": "Next report preview",
+                              "fontFamily": "Inter",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "d791Wi",
+                              "name": "previewHelp",
+                              "fill": "$muted",
+                              "content": "Exactly what the next report contains. Read-only.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "thVid",
+                              "name": "previewCode",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "stroke": "$border/border",
+                              "strokeWidth": 1,
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "padding": [
+                                12,
+                                16
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "c1wLHW",
+                                  "name": "previewJson",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Nothing to preview: telemetry is disabled by the operator.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Geist",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "h4t9WP",
+                          "x": 0,
+                          "y": 395,
+                          "name": "statusRow",
+                          "enabled": false,
+                          "width": "fill_container(856)",
+                          "gap": 8,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "xpROA",
+                              "name": "statusIcon",
+                              "width": 14,
+                              "height": 14,
+                              "icon": "circle-check",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$success/soft-foreground"
+                            },
+                            {
+                              "type": "text",
+                              "id": "U0Eb0P",
+                              "name": "statusText",
+                              "fill": "$foreground/foreground",
+                              "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "qHqUB",
+                      "name": "Card Actions",
+                      "width": "fill_container",
+                      "justifyContent": "end",
+                      "children": [
+                        {
+                          "id": "Eq31M",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Btn Save Changes",
+                          "opacity": 0.5,
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "enabled": false
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Save changes"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/GR1G9.json b/design-export/json/GR1G9.json
new file mode 100644
index 000000000..ae7ee2b70
--- /dev/null
+++ b/design-export/json/GR1G9.json
@@ -0,0 +1,1349 @@
+{
+  "type": "frame",
+  "id": "GR1G9",
+  "x": 14760,
+  "y": 27204,
+  "name": "Screen/Dashboard Home — Telemetry notice (bundled)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 1380,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "O7GOL",
+      "type": "ref",
+      "ref": "kKFX9",
+      "name": "App Sidebar",
+      "height": "fill_container"
+    },
+    {
+      "type": "frame",
+      "id": "q8Uej",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "F9uobE",
+          "type": "ref",
+          "ref": "gu5WY",
+          "name": "Top Bar",
+          "width": "fill_container",
+          "descendants": {
+            "Gb27k": {
+              "fontFamily": "$typography/font-sans"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "RrWXd",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 32,
+          "children": [
+            {
+              "id": "rj03O",
+              "type": "ref",
+              "ref": "lh8p8",
+              "name": "Telemetry Notice",
+              "width": "fill_container",
+              "descendants": {
+                "dzZwq": {
+                  "content": "gameplane-telemetry-receiver.gameplane.svc",
+                  "name": "host (SAMPLE)"
+                },
+                "jCJTc": {
+                  "content": ", the receiver bundled with this install. Reports stay inside your cluster."
+                }
+              }
+            },
+            {
+              "id": "VyEYQ",
+              "type": "ref",
+              "ref": "xCDF7",
+              "name": "Page Header",
+              "width": "fill_container",
+              "descendants": {
+                "VbHwU": {
+                  "content": "Your game servers and resources across authorized locations."
+                },
+                "TgdLz": {
+                  "children": [
+                    {
+                      "id": "bI3je",
+                      "type": "ref",
+                      "ref": "tpKRk",
+                      "name": "Create Server Button",
+                      "descendants": {
+                        "q58In/Xpn7K": {
+                          "library": "lucide",
+                          "icon": "plus"
+                        },
+                        "q58In/U6q13B": {
+                          "content": "Create server"
+                        }
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "id": "Dc5TC",
+              "type": "ref",
+              "ref": "AT7ya",
+              "name": "Dashboard location filter",
+              "width": 240,
+              "context": "Optional location filter; All locations combines authorized inventory.",
+              "descendants": {
+                "cFsFk": {
+                  "content": "All locations",
+                  "fill": "$foreground/foreground"
+                }
+              }
+            },
+            {
+              "id": "A5HcX",
+              "type": "ref",
+              "ref": "YF85x",
+              "name": "Stats Row",
+              "width": "fill_container",
+              "descendants": {
+                "m20CHt/QdcEm": {
+                  "fill": "#000000"
+                },
+                "pkvT2/QdcEm": {
+                  "fill": "$chart/stat"
+                },
+                "FlXsH/QdcEm": {
+                  "fill": "$chart/stat"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "Z6jyj",
+              "name": "Row2",
+              "width": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "ENX9Y",
+                  "name": "Fleet Status Card",
+                  "width": "fill_container",
+                  "height": 372,
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border/border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "e6D5J",
+                      "name": "Header",
+                      "width": "fill_container",
+                      "justifyContent": "space_between",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "dX1T5",
+                          "name": "title",
+                          "fill": "$foreground/foreground",
+                          "content": "Fleet status",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "u0G1MU",
+                          "name": "link",
+                          "fill": "$muted",
+                          "content": "1 servers",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "ZcBsE",
+                      "name": "Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "ugMqf",
+                          "name": "Health Bar",
+                          "clip": true,
+                          "width": "fill_container",
+                          "height": 8,
+                          "fill": "$default/default",
+                          "cornerRadius": 999,
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "id": "sPxJn",
+                              "name": "Running Segment",
+                              "fill": "$success/success",
+                              "width": "fill_container",
+                              "height": 8
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "D6Jupi",
+                          "name": "Legend",
+                          "gap": 20,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "wqlmt",
+                              "name": "legend-Running 1",
+                              "gap": 6,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "b7HqI",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "GHX30",
+                                  "name": "label",
+                                  "fill": "$muted",
+                                  "content": "Running 1",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "eUDfB",
+                              "name": "legend-Stopped 0",
+                              "gap": 6,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "HI5Td",
+                                  "name": "dot",
+                                  "fill": "$muted",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "Ga3Nd",
+                                  "name": "label",
+                                  "fill": "$muted",
+                                  "content": "Stopped 0",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "PlhV4",
+                              "name": "legend-Failed 0",
+                              "gap": 6,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "Q5FRz0",
+                                  "name": "dot",
+                                  "fill": "$danger/danger",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "kmn6P",
+                                  "name": "label",
+                                  "fill": "$muted",
+                                  "content": "Failed 0",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "dgLC2",
+                          "name": "Attention Section",
+                          "width": "fill_container",
+                          "stroke": "$border/border",
+                          "strokeWidth": {
+                            "top": 1
+                          },
+                          "strokeAlignment": "inner",
+                          "layout": "vertical",
+                          "gap": 12,
+                          "padding": [
+                            16,
+                            0,
+                            0,
+                            0
+                          ],
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "B1HSUR",
+                              "name": "attnLabel",
+                              "fill": "$muted",
+                              "content": "NEEDS ATTENTION",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 10,
+                              "fontWeight": "500",
+                              "letterSpacing": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "XrCOg",
+                              "name": "healthyRow",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "Uc7Gc",
+                                  "name": "check",
+                                  "width": 16,
+                                  "height": 16,
+                                  "icon": "circle-check",
+                                  "library": "lucide",
+                                  "fill": "$success/success"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "JFJZx",
+                                  "name": "healthyLabel",
+                                  "fill": "$muted",
+                                  "content": "Everything looks healthy.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "wQFe0",
+                  "name": "Cluster Resources Card",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border/border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "RBzCd",
+                      "name": "Header",
+                      "width": "fill_container",
+                      "justifyContent": "space_between",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "RQqqG",
+                          "name": "title",
+                          "fill": "$foreground/foreground",
+                          "content": "Cluster resources",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "X4V95B",
+                          "name": "link",
+                          "fill": "$accent/accent",
+                          "content": "View cluster",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "kjAUx",
+                      "name": "Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "NvvbZ",
+                          "name": "Meters",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "GnpUm",
+                              "name": "CPU Meter",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 4,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "eONo0",
+                                  "name": "CPU Row",
+                                  "width": "fill_container",
+                                  "justifyContent": "space_between",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "JxbI7",
+                                      "name": "CPU Label",
+                                      "fill": "$muted",
+                                      "content": "CPU",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "WYkDf",
+                                      "name": "CPU Pct",
+                                      "fill": "$foreground/foreground",
+                                      "content": "0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "C6OJo",
+                                  "name": "CPU Bar",
+                                  "clip": true,
+                                  "width": "fill_container",
+                                  "height": 6,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 999,
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": 999,
+                                      "id": "yG4gE",
+                                      "name": "CPU Fill",
+                                      "fill": "$accent/accent",
+                                      "width": 0,
+                                      "height": 6
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "l009rk",
+                                  "name": "CPU Sub",
+                                  "fill": "$muted",
+                                  "content": "0 / 12 cores",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "rTJqh",
+                              "name": "Memory Meter",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 4,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "Hu1G6",
+                                  "name": "Memory Row",
+                                  "width": "fill_container",
+                                  "justifyContent": "space_between",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "YZJLv",
+                                      "name": "Memory Label",
+                                      "fill": "$muted",
+                                      "content": "Memory",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "MP6GS",
+                                      "name": "Memory Pct",
+                                      "fill": "$foreground/foreground",
+                                      "content": "0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "VPvVF",
+                                  "name": "Memory Bar",
+                                  "clip": true,
+                                  "width": "fill_container",
+                                  "height": 6,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 999,
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": 999,
+                                      "id": "MukLA",
+                                      "name": "Memory Fill",
+                                      "fill": "$accent/accent",
+                                      "width": 0,
+                                      "height": 6
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "l1DSuW",
+                                  "name": "Memory Sub",
+                                  "fill": "$muted",
+                                  "content": "0 B / 41 GB",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "UxbGM",
+                              "name": "Storage Meter",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 4,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "H1AfzY",
+                                  "name": "Storage Row",
+                                  "width": "fill_container",
+                                  "justifyContent": "space_between",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "nOUxN",
+                                      "name": "Storage Label",
+                                      "fill": "$muted",
+                                      "content": "Storage",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "G3Lpz",
+                                      "name": "Storage Pct",
+                                      "fill": "$foreground/foreground",
+                                      "content": "25%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "IDDuf",
+                                  "name": "Storage Bar",
+                                  "clip": true,
+                                  "width": "fill_container",
+                                  "height": 6,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 999,
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": 999,
+                                      "id": "STiGN",
+                                      "name": "Storage Fill",
+                                      "fill": "$success/success",
+                                      "width": 110,
+                                      "height": 6
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "H0Io3J",
+                          "name": "Nodes Section",
+                          "width": "fill_container",
+                          "stroke": "$border/border",
+                          "strokeWidth": {
+                            "top": 1
+                          },
+                          "strokeAlignment": "inner",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "padding": [
+                            16,
+                            0,
+                            0,
+                            0
+                          ],
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "OEaZr",
+                              "name": "nodesLabel",
+                              "fill": "$muted",
+                              "content": "NODES",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 10,
+                              "fontWeight": "500",
+                              "letterSpacing": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "lwjSY",
+                              "name": "Node kubelab-control",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "Dwcel",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "OUMiG",
+                                  "name": "name",
+                                  "fill": "$foreground/foreground",
+                                  "content": "kubelab-control",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "UP0qr",
+                                  "name": "meta",
+                                  "fill": "$muted",
+                                  "content": "0 pods · cpu 0%",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ZcZng",
+                              "name": "Node kubelab-worker-1",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "KhH6P",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "n8EFt",
+                                  "name": "name",
+                                  "fill": "$foreground/foreground",
+                                  "content": "kubelab-worker-1",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "LOgVF",
+                                  "name": "meta",
+                                  "fill": "$muted",
+                                  "content": "0 pods · cpu 0%",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Zf5lJ",
+                              "name": "Node kubelab-worker-2",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "qZljR",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "YW9QB",
+                                  "name": "name",
+                                  "fill": "$foreground/foreground",
+                                  "content": "kubelab-worker-2",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "OP98d",
+                                  "name": "meta",
+                                  "fill": "$muted",
+                                  "content": "0 pods · cpu 0%",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "sW8cJ",
+              "name": "Row3",
+              "width": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "lQ9GL",
+                  "name": "Central audit activity",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "NAugs",
+                      "name": "Central audit scope",
+                      "fill": "$muted",
+                      "content": "Central Gameplane audit activity",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "l5q0j",
+                      "name": "Recent Activity Card",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "qLKyP",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "qjUgW",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Recent activity",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "D4451",
+                              "name": "link",
+                              "fill": "$accent/accent",
+                              "content": "View all",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "HzLFF",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "WJ0bg",
+                              "name": "anonymous created-4h ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "EMapf",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "d4jMS",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "MuQeY",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "yps5n",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "NEnAQ",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "S8oW3",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "4h ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "JsY8j",
+                              "name": "admin created-18h ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "TurTP",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "u8Qks",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "m50ubv",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "EkV3J",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "admin created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "zSLBZ",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /servers",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "rTfEb",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "18h ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Mxfl0",
+                              "name": "anonymous created-22h ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "S9q3k",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "TYuis",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "e1lo31",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "ucppN",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "QddRu",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "t0Y6V",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "22h ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "hpmri",
+                              "name": "anonymous created-1d ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "mXJFx",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "KnnKk",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "lSme8",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "SBjrl",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "ZkXuD",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "btIk1",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "1d ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "l6D3NG",
+                              "name": "anonymous created-1d ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "gEcki",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "TJUXX",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "wyy4o",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "H18z3",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "N4s2yN",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "T8r0yY",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "1d ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "ugPLs",
+                  "name": "Recent Backups Card",
+                  "width": "fill_container",
+                  "height": 353,
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border/border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "hYoyr",
+                      "name": "Header",
+                      "width": "fill_container",
+                      "justifyContent": "space_between",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "i9jhMf",
+                          "name": "title",
+                          "fill": "$foreground/foreground",
+                          "content": "Recent backups",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "uRvCC",
+                          "name": "link",
+                          "fill": "$accent/accent",
+                          "content": "View all",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "v0DIq",
+                      "name": "Content",
+                      "width": "fill_container",
+                      "height": "fill_container",
+                      "layout": "vertical",
+                      "padding": [
+                        40,
+                        24
+                      ],
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "C17hb",
+                          "name": "empty",
+                          "fill": "$muted",
+                          "content": "No backups yet.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/K5XinZ.json b/design-export/json/K5XinZ.json
new file mode 100644
index 000000000..b4f96b5b2
--- /dev/null
+++ b/design-export/json/K5XinZ.json
@@ -0,0 +1,521 @@
+{
+  "type": "frame",
+  "id": "K5XinZ",
+  "x": 18040,
+  "y": 25404,
+  "name": "Screen/Admin Settings — Telemetry (none)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 605,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "vrJqn",
+      "type": "ref",
+      "ref": "kKFX9",
+      "height": "fill_container",
+      "descendants": {
+        "iTbd8": {
+          "fill": "#00000000"
+        },
+        "iTbd8/ghUsw": {
+          "fill": "$foreground/foreground"
+        },
+        "iTbd8/bpSQ7": {
+          "fill": "$foreground/foreground"
+        },
+        "ya5KB": {
+          "fill": "$accent/soft"
+        },
+        "ya5KB/Sr2Q5": {
+          "fill": "$accent/soft-foreground"
+        },
+        "ya5KB/Ra9NK": {
+          "fill": "$accent/soft-foreground"
+        }
+      }
+    },
+    {
+      "type": "frame",
+      "id": "ZDPAQ",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "aaM6h",
+          "type": "ref",
+          "ref": "gu5WY",
+          "width": "fill_container",
+          "descendants": {
+            "Gl7AY": {
+              "content": "Settings"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "MSfvx",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 24,
+          "children": [
+            {
+              "id": "K6vVa",
+              "type": "ref",
+              "ref": "xCDF7",
+              "width": "fill_container",
+              "descendants": {
+                "spCmk": {
+                  "content": "Admin settings"
+                },
+                "VbHwU": {
+                  "content": "Platform-wide configuration for this Gameplane instance."
+                },
+                "TgdLz": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "M4Uamg",
+              "name": "Settings Layout",
+              "width": "fill_container",
+              "height": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "id": "KnZmD",
+                  "type": "ref",
+                  "ref": "Mp7Ep",
+                  "name": "Settings Nav",
+                  "width": 220,
+                  "descendants": {
+                    "eIjoV": {
+                      "fill": "#00000000"
+                    },
+                    "ZPLSA": {
+                      "fill": "$surface/secondary"
+                    }
+                  }
+                },
+                {
+                  "id": "jXdYm",
+                  "type": "ref",
+                  "ref": "XDZ0E",
+                  "name": "Settings Panel",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "id": "ZjXwf",
+                      "type": "ref",
+                      "ref": "FRpsu",
+                      "name": "Card Header",
+                      "descendants": {
+                        "fuZHB": {
+                          "content": "Telemetry"
+                        },
+                        "BZG9o": {
+                          "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                        }
+                      }
+                    },
+                    {
+                      "type": "frame",
+                      "id": "usPX3",
+                      "name": "Card Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "FR1sB",
+                          "name": "destinationRow",
+                          "width": "fill_container",
+                          "fill": "$surface/secondary",
+                          "cornerRadius": 8,
+                          "gap": 12,
+                          "padding": 12,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "Lf5Va",
+                              "name": "destIcon",
+                              "width": 20,
+                              "height": 20,
+                              "icon": "circle-slash",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$accent/soft-foreground"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Irbib",
+                              "name": "destText",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "t67L2",
+                                  "name": "destTitle",
+                                  "fill": "$foreground/foreground",
+                                  "content": "No telemetry destination configured.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "NHeZ1",
+                                  "name": "destDetail",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Nothing is sent. An operator can set a custom or bundled destination at install time.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "TGqWC",
+                              "type": "ref",
+                              "ref": "KmZnF",
+                              "name": "destChip",
+                              "descendants": {
+                                "xZ9ah": {
+                                  "content": "No destination"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "u5uN6",
+                          "name": "telemetryRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "qKiFo",
+                              "name": "labelCol",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "E3CsS",
+                                  "name": "Label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Send basic usage metrics",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "w7LUN",
+                                  "name": "Description",
+                                  "fill": "$muted",
+                                  "content": "Gameplane version, number of servers and number of templates.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "L9Gg2H",
+                              "type": "ref",
+                              "ref": "rh2QH",
+                              "name": "basicSwitch"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "YZ8M5",
+                          "name": "extendedRow",
+                          "opacity": 0.5,
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "MEKOs",
+                              "name": "extRowInner",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "G8uxgg",
+                                  "name": "extLabelCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "yop7K",
+                                      "name": "extLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send extended usage metrics",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "DT5P1",
+                                      "name": "extDescription",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Turn on basic usage metrics to enable extended usage metrics.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "dy9DZ",
+                                  "type": "ref",
+                                  "ref": "rh2QH",
+                                  "name": "extendedSwitch"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "j18F4n",
+                          "x": 0,
+                          "y": 182,
+                          "name": "installIdRow",
+                          "enabled": false,
+                          "width": "fill_container(856)",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "Y1pNB",
+                              "name": "installIdCol",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "VY8NU",
+                                  "name": "installIdLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "a9Y6S",
+                                  "name": "installIdValue",
+                                  "fill": "$foreground/foreground",
+                                  "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "KNGZo",
+                                  "name": "installIdHelp",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "Xe5vb",
+                              "type": "ref",
+                              "ref": "d5N3W3",
+                              "name": "resetIdBtn",
+                              "descendants": {
+                                "i3zB62/zMNkR": {
+                                  "content": "Reset ID"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "a13SoT",
+                          "name": "previewBlock",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "acf1z",
+                              "name": "previewLabel",
+                              "fill": "$foreground/foreground",
+                              "content": "Next report preview",
+                              "fontFamily": "Inter",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "kjTTh",
+                              "name": "previewHelp",
+                              "fill": "$muted",
+                              "content": "Exactly what the next report contains. Read-only.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "o5GCW",
+                              "name": "previewCode",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "stroke": "$border/border",
+                              "strokeWidth": 1,
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "padding": [
+                                12,
+                                16
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "ZZcKL",
+                                  "name": "previewJson",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Nothing to preview: no destination is configured.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Geist",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "Q3IStt",
+                          "x": 0,
+                          "y": 359,
+                          "name": "statusRow",
+                          "enabled": false,
+                          "width": "fill_container(856)",
+                          "gap": 8,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "U6DNh",
+                              "name": "statusIcon",
+                              "width": 14,
+                              "height": 14,
+                              "icon": "circle-check",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$success/soft-foreground"
+                            },
+                            {
+                              "type": "text",
+                              "id": "Vlhfy",
+                              "name": "statusText",
+                              "fill": "$foreground/foreground",
+                              "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "MxFTb",
+                      "name": "Card Actions",
+                      "width": "fill_container",
+                      "justifyContent": "end",
+                      "children": [
+                        {
+                          "id": "oHhoP",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Btn Save Changes",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "enabled": false
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Save changes"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/cDiNb.json b/design-export/json/cDiNb.json
new file mode 100644
index 000000000..1e3029806
--- /dev/null
+++ b/design-export/json/cDiNb.json
@@ -0,0 +1,531 @@
+{
+  "type": "frame",
+  "id": "cDiNb",
+  "x": 14760,
+  "y": 25404,
+  "name": "Screen/Admin Settings — Telemetry (bundled)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 777,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "SZqT4",
+      "type": "ref",
+      "ref": "kKFX9",
+      "height": "fill_container",
+      "descendants": {
+        "iTbd8": {
+          "fill": "#00000000"
+        },
+        "iTbd8/ghUsw": {
+          "fill": "$foreground/foreground"
+        },
+        "iTbd8/bpSQ7": {
+          "fill": "$foreground/foreground"
+        },
+        "ya5KB": {
+          "fill": "$accent/soft"
+        },
+        "ya5KB/Sr2Q5": {
+          "fill": "$accent/soft-foreground"
+        },
+        "ya5KB/Ra9NK": {
+          "fill": "$accent/soft-foreground"
+        }
+      }
+    },
+    {
+      "type": "frame",
+      "id": "BPHgi",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "g5b2At",
+          "type": "ref",
+          "ref": "gu5WY",
+          "width": "fill_container",
+          "descendants": {
+            "Gl7AY": {
+              "content": "Settings"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "mvBQN",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 24,
+          "children": [
+            {
+              "id": "BxiQJ",
+              "type": "ref",
+              "ref": "xCDF7",
+              "width": "fill_container",
+              "descendants": {
+                "spCmk": {
+                  "content": "Admin settings"
+                },
+                "VbHwU": {
+                  "content": "Platform-wide configuration for this Gameplane instance."
+                },
+                "TgdLz": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "qxsMk",
+              "name": "Settings Layout",
+              "width": "fill_container",
+              "height": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "id": "x3FpWK",
+                  "type": "ref",
+                  "ref": "Mp7Ep",
+                  "name": "Settings Nav",
+                  "width": 220,
+                  "descendants": {
+                    "eIjoV": {
+                      "fill": "#00000000"
+                    },
+                    "ZPLSA": {
+                      "fill": "$surface/secondary"
+                    }
+                  }
+                },
+                {
+                  "id": "j3yT8",
+                  "type": "ref",
+                  "ref": "XDZ0E",
+                  "name": "Settings Panel",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "id": "MecVG",
+                      "type": "ref",
+                      "ref": "FRpsu",
+                      "name": "Card Header",
+                      "descendants": {
+                        "fuZHB": {
+                          "content": "Telemetry"
+                        },
+                        "BZG9o": {
+                          "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                        }
+                      }
+                    },
+                    {
+                      "type": "frame",
+                      "id": "qm0J5",
+                      "name": "Card Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "HSFqE",
+                          "name": "destinationRow",
+                          "width": "fill_container",
+                          "fill": "$surface/secondary",
+                          "cornerRadius": 8,
+                          "gap": 12,
+                          "padding": 12,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "taRYg",
+                              "name": "destIcon",
+                              "width": 20,
+                              "height": 20,
+                              "icon": "house",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$accent/soft-foreground"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "LQx4P",
+                              "name": "destText",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "W1Opd",
+                                  "name": "host (SAMPLE)",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Sending to gameplane-telemetry-receiver.gameplane.svc",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "gGGWe",
+                                  "name": "destDetail",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "The receiver bundled with this install. Reports stay inside your cluster.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "cMhI7",
+                              "type": "ref",
+                              "ref": "UOoQW",
+                              "name": "destChip",
+                              "descendants": {
+                                "YXoPG": {
+                                  "content": "Bundled"
+                                }
+                              }
+                            },
+                            {
+                              "type": "text",
+                              "id": "ICsn1",
+                              "name": "destStatement",
+                              "fill": "$foreground/link",
+                              "content": "Data-handling statement",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "600"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "uLcI7",
+                          "name": "telemetryRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "BtYr7",
+                              "name": "labelCol",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "p9Uxb",
+                                  "name": "Label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Send basic usage metrics",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "KQPv9",
+                                  "name": "Description",
+                                  "fill": "$muted",
+                                  "content": "Gameplane version, number of servers and number of templates.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "p25s6",
+                              "type": "ref",
+                              "ref": "hl7R3",
+                              "name": "basicSwitch"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "g9uOK",
+                          "name": "extendedRow",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "ErWqF",
+                              "name": "extRowInner",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "CWscr",
+                                  "name": "extLabelCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "LwD9N",
+                                      "name": "extLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send extended usage metrics",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "nVxtQ",
+                                      "name": "extDescription",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "cwXJ3",
+                                  "type": "ref",
+                                  "ref": "rh2QH",
+                                  "name": "extendedSwitch"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "QRgzv",
+                          "name": "installIdRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "bbsik",
+                              "name": "installIdCol",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "JV3Lq",
+                                  "name": "installIdLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "qHRdo",
+                                  "name": "installIdValue",
+                                  "fill": "$muted",
+                                  "content": "No install ID while extended metrics are off.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "QUQwC",
+                                  "x": 0,
+                                  "y": 37,
+                                  "name": "installIdHelp",
+                                  "enabled": false,
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container(740)",
+                                  "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "PD8Zb",
+                              "type": "ref",
+                              "ref": "d5N3W3",
+                              "name": "resetIdBtn",
+                              "opacity": 0.5,
+                              "descendants": {
+                                "X3iEI": {
+                                  "enabled": false
+                                },
+                                "i3zB62/zMNkR": {
+                                  "content": "Reset ID"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "Xah7Q",
+                          "name": "previewBlock",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "x4Za32",
+                              "name": "previewLabel",
+                              "fill": "$foreground/foreground",
+                              "content": "Next report preview",
+                              "fontFamily": "Inter",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "s1Z4Ct",
+                              "name": "previewHelp",
+                              "fill": "$muted",
+                              "content": "Exactly what the next report contains. Read-only.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "TIblz",
+                              "name": "previewCode",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "stroke": "$border/border",
+                              "strokeWidth": 1,
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "padding": [
+                                12,
+                                16
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "X6n3I",
+                                  "name": "previewJson",
+                                  "fill": "$foreground/foreground",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 5,\n  \"templates\": 7\n}",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "NZYIA",
+                          "name": "statusRow",
+                          "width": "fill_container",
+                          "gap": 8,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "bR4pr",
+                              "name": "statusIcon",
+                              "width": 14,
+                              "height": 14,
+                              "icon": "clock",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$muted"
+                            },
+                            {
+                              "type": "text",
+                              "id": "SKyZx",
+                              "name": "statusText",
+                              "fill": "$muted",
+                              "content": "No report sent yet.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "R77io",
+                      "name": "Card Actions",
+                      "width": "fill_container",
+                      "justifyContent": "end",
+                      "children": [
+                        {
+                          "id": "V7JPh",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Btn Save Changes",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "enabled": false
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Save changes"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/l7TRz9.json b/design-export/json/l7TRz9.json
new file mode 100644
index 000000000..50ade602e
--- /dev/null
+++ b/design-export/json/l7TRz9.json
@@ -0,0 +1,527 @@
+{
+  "type": "frame",
+  "id": "l7TRz9",
+  "x": 11480,
+  "y": 25404,
+  "name": "Screen/Admin Settings — Telemetry (default)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 1031,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "VJan2",
+      "type": "ref",
+      "ref": "kKFX9",
+      "height": "fill_container",
+      "descendants": {
+        "iTbd8": {
+          "fill": "#00000000"
+        },
+        "iTbd8/ghUsw": {
+          "fill": "$foreground/foreground"
+        },
+        "iTbd8/bpSQ7": {
+          "fill": "$foreground/foreground"
+        },
+        "ya5KB": {
+          "fill": "$accent/soft"
+        },
+        "ya5KB/Sr2Q5": {
+          "fill": "$accent/soft-foreground"
+        },
+        "ya5KB/Ra9NK": {
+          "fill": "$accent/soft-foreground"
+        }
+      }
+    },
+    {
+      "type": "frame",
+      "id": "f0b9q",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "YCCTY",
+          "type": "ref",
+          "ref": "gu5WY",
+          "width": "fill_container",
+          "descendants": {
+            "Gl7AY": {
+              "content": "Settings"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "KDu8M",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 24,
+          "children": [
+            {
+              "id": "ckrv3",
+              "type": "ref",
+              "ref": "xCDF7",
+              "width": "fill_container",
+              "descendants": {
+                "spCmk": {
+                  "content": "Admin settings"
+                },
+                "VbHwU": {
+                  "content": "Platform-wide configuration for this Gameplane instance."
+                },
+                "TgdLz": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "aRwmV",
+              "name": "Settings Layout",
+              "width": "fill_container",
+              "height": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "id": "bBTbp",
+                  "type": "ref",
+                  "ref": "Mp7Ep",
+                  "name": "Settings Nav",
+                  "width": 220,
+                  "descendants": {
+                    "eIjoV": {
+                      "fill": "#00000000"
+                    },
+                    "ZPLSA": {
+                      "fill": "$surface/secondary"
+                    }
+                  }
+                },
+                {
+                  "id": "k6Yt5",
+                  "type": "ref",
+                  "ref": "XDZ0E",
+                  "name": "Settings Panel",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "id": "eJnTo",
+                      "type": "ref",
+                      "ref": "FRpsu",
+                      "name": "Card Header",
+                      "descendants": {
+                        "fuZHB": {
+                          "content": "Telemetry"
+                        },
+                        "BZG9o": {
+                          "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                        }
+                      }
+                    },
+                    {
+                      "type": "frame",
+                      "id": "akS4L",
+                      "name": "Card Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "viQWf",
+                          "name": "destinationRow",
+                          "width": "fill_container",
+                          "fill": "$surface/secondary",
+                          "cornerRadius": 8,
+                          "gap": 12,
+                          "padding": 12,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "H0uGxR",
+                              "name": "destIcon",
+                              "width": 20,
+                              "height": 20,
+                              "icon": "globe",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$accent/soft-foreground"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "jXaCa",
+                              "name": "destText",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "FkDph",
+                                  "name": "host",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Sending to telemetry.gameplane.net",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "VcHN2",
+                                  "name": "destDetail",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "The Gameplane project's telemetry service.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "GXzqz",
+                              "type": "ref",
+                              "ref": "kGH2O",
+                              "name": "destChip",
+                              "descendants": {
+                                "O1PqF5": {
+                                  "content": "Project default"
+                                }
+                              }
+                            },
+                            {
+                              "type": "text",
+                              "id": "kz2Hz",
+                              "name": "destStatement",
+                              "fill": "$foreground/link",
+                              "content": "Data-handling statement",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "600"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "oiqgN",
+                          "name": "telemetryRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "a5Gz9E",
+                              "name": "labelCol",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "w6elN",
+                                  "name": "Label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Send basic usage metrics",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "oOnYs",
+                                  "name": "Description",
+                                  "fill": "$muted",
+                                  "content": "Gameplane version, number of servers and number of templates.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "mt1Jr",
+                              "type": "ref",
+                              "ref": "hl7R3",
+                              "name": "basicSwitch"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "iDkU7",
+                          "name": "extendedRow",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "G3kwa",
+                              "name": "extRowInner",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "eqcqd",
+                                  "name": "extLabelCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "l5jHVa",
+                                      "name": "extLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send extended usage metrics",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "mCOpV",
+                                      "name": "extDescription",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "p9TqED",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "extendedSwitch"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "G6UKye",
+                          "name": "installIdRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "N8PiP7",
+                              "name": "installIdCol",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "nQFKU",
+                                  "name": "installIdLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "G1enxe",
+                                  "name": "installIdValue",
+                                  "fill": "$foreground/foreground",
+                                  "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "iOxRj",
+                                  "name": "installIdHelp",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "RYoue",
+                              "type": "ref",
+                              "ref": "d5N3W3",
+                              "name": "resetIdBtn",
+                              "descendants": {
+                                "X3iEI": {
+                                  "enabled": false
+                                },
+                                "i3zB62/zMNkR": {
+                                  "content": "Reset ID"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "cvxBf",
+                          "name": "previewBlock",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "fl698",
+                              "name": "previewLabel",
+                              "fill": "$foreground/foreground",
+                              "content": "Next report preview",
+                              "fontFamily": "Inter",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "MUfXb",
+                              "name": "previewHelp",
+                              "fill": "$muted",
+                              "content": "Exactly what the next report contains. Read-only.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "tRekr",
+                              "name": "previewCode",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "stroke": "$border/border",
+                              "strokeWidth": 1,
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "padding": [
+                                12,
+                                16
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "Q5r0x",
+                                  "name": "previewJson",
+                                  "fill": "$foreground/foreground",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 3,\n  \"templates\": 7,\n  \"ext\": {\n    \"schema\": 1,\n    \"installId\": \"3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10\",\n    \"env\": { \"k8s\": \"1.31\", \"distro\": \"k3s\", \"arch\": [\"amd64\"], \"nodes\": \"1\" },\n    \"games\": { \"official\": { \"minecraft-java\": 2, \"terraria\": 1 }, \"custom\": 0 },\n    \"features\": {\n      \"wakeOnConnect\": true, \"tunnels\": [\"playit\"], \"capture\": false,\n      \"backups\": true, \"sso\": false, \"auditForwarding\": false,\n      \"clusters\": \"1\", \"db\": \"sqlite\", \"language\": \"en\"\n    },\n    \"key\": \"pV0mY3Qn8wK2b7cXlR4sTt9uJ1eHaZ6dFgQmNoP5rSk\",\n    \"sentAt\": \"2026-10-06T09:12:44Z\"\n  }\n}",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "xUV9o",
+                          "name": "statusRow",
+                          "width": "fill_container",
+                          "gap": 8,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "r8eVe",
+                              "name": "statusIcon",
+                              "width": 14,
+                              "height": 14,
+                              "icon": "circle-check",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$success/soft-foreground"
+                            },
+                            {
+                              "type": "text",
+                              "id": "v07BWT",
+                              "name": "statusText",
+                              "fill": "$foreground/foreground",
+                              "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "vvERC",
+                      "name": "Card Actions",
+                      "width": "fill_container",
+                      "justifyContent": "end",
+                      "children": [
+                        {
+                          "id": "XzN1k",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Btn Save Changes",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "enabled": false
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Save changes"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/lh8p8.json b/design-export/json/lh8p8.json
new file mode 100644
index 000000000..4bcfb7289
--- /dev/null
+++ b/design-export/json/lh8p8.json
@@ -0,0 +1,268 @@
+{
+  "type": "frame",
+  "id": "lh8p8",
+  "x": 11480,
+  "y": 27204,
+  "name": "Gameplane/Telemetry Notice Banner",
+  "reusable": true,
+  "width": 1100,
+  "fill": "$accent/soft",
+  "cornerRadius": 8,
+  "stroke": "$accent/soft-foreground",
+  "strokeWidth": 1,
+  "strokeAlignment": "inner",
+  "gap": 12,
+  "padding": 16,
+  "children": [
+    {
+      "type": "icon",
+      "id": "jnKcH",
+      "name": "tnIcon",
+      "width": 20,
+      "height": 20,
+      "icon": "info",
+      "library": "lucide",
+      "fill": "$accent/soft-foreground"
+    },
+    {
+      "type": "frame",
+      "id": "TOsXx",
+      "name": "tnContents",
+      "width": "fill_container",
+      "layout": "vertical",
+      "gap": 12,
+      "children": [
+        {
+          "type": "text",
+          "id": "xfEiQ",
+          "name": "tnTitle",
+          "fill": "$accent/soft-foreground",
+          "textGrowth": "fixed-width",
+          "width": "fill_container",
+          "content": "Anonymous usage metrics are on for this install.",
+          "lineHeight": 1.5,
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 14,
+          "fontWeight": "600"
+        },
+        {
+          "type": "frame",
+          "id": "WIzDP",
+          "name": "tnDestRow",
+          "width": "fill_container",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "f6sfW",
+              "name": "destLabel",
+              "fill": "$foreground/foreground",
+              "content": "Reports are sent to",
+              "lineHeight": 1.5,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            },
+            {
+              "type": "text",
+              "id": "dzZwq",
+              "name": "host",
+              "fill": "$accent/soft-foreground",
+              "content": "telemetry.gameplane.net",
+              "lineHeight": 1.5,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "jCJTc",
+              "name": "tnDestSuffix",
+              "fill": "$foreground/foreground",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": ", the Gameplane project's telemetry service.",
+              "lineHeight": 1.5,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "JJ906",
+          "name": "tnFieldCols",
+          "width": "fill_container",
+          "gap": 24,
+          "children": [
+            {
+              "type": "frame",
+              "id": "kLCfk",
+              "name": "tnBasic",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "yC32k",
+                  "name": "basicLabel",
+                  "fill": "$foreground/foreground",
+                  "content": "Basic metrics",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "D0wKt",
+                  "name": "basicDesc",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Gameplane version, number of servers, number of templates.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "nB5zt",
+              "name": "tnExtended",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "d6ULPb",
+                  "name": "extLabel",
+                  "fill": "$foreground/foreground",
+                  "content": "Extended metrics",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "Aj65h",
+                  "name": "extDesc",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Kubernetes version, distribution, CPU architecture and node-count band; servers per official game module (others counted as custom); which optional features are in use; and a random install ID.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Qs5j2",
+          "name": "tnActions",
+          "width": "fill_container",
+          "gap": 8,
+          "alignItems": "center",
+          "children": [
+            {
+              "id": "lFiXj",
+              "type": "ref",
+              "ref": "z9ShNE",
+              "name": "tnKeep",
+              "descendants": {
+                "nWTJb": {
+                  "enabled": false
+                },
+                "IVgQ8/U1xvSo": {
+                  "content": "Keep sharing"
+                }
+              }
+            },
+            {
+              "id": "tgQa9",
+              "type": "ref",
+              "ref": "d5N3W3",
+              "name": "tnExtOff",
+              "descendants": {
+                "X3iEI": {
+                  "enabled": false
+                },
+                "i3zB62/zMNkR": {
+                  "content": "Turn off extended"
+                }
+              }
+            },
+            {
+              "id": "nF9qA",
+              "type": "ref",
+              "ref": "d5N3W3",
+              "name": "tnAllOff",
+              "descendants": {
+                "X3iEI": {
+                  "enabled": false
+                },
+                "i3zB62/zMNkR": {
+                  "content": "Turn off all"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "aXQdE",
+              "name": "spacer",
+              "width": "fill_container",
+              "height": 1
+            },
+            {
+              "type": "frame",
+              "id": "Sstlp",
+              "name": "tnLinks",
+              "gap": 10,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "EimG7",
+                  "name": "tnOpenSettings",
+                  "fill": "$foreground/link",
+                  "content": "Open Telemetry settings",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "Ayd49",
+                  "name": "sep1",
+                  "fill": "$muted",
+                  "content": "·",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "text",
+                  "id": "BaWOS",
+                  "name": "tnStatement",
+                  "fill": "$foreground/link",
+                  "content": "Data-handling statement",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "600"
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/r0heh.json b/design-export/json/r0heh.json
new file mode 100644
index 000000000..41cf95266
--- /dev/null
+++ b/design-export/json/r0heh.json
@@ -0,0 +1,557 @@
+{
+  "type": "frame",
+  "id": "r0heh",
+  "x": 13120,
+  "y": 25404,
+  "name": "Screen/Admin Settings — Telemetry (custom)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 1032,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "K4Pd5",
+      "type": "ref",
+      "ref": "kKFX9",
+      "height": "fill_container",
+      "descendants": {
+        "iTbd8": {
+          "fill": "#00000000"
+        },
+        "iTbd8/ghUsw": {
+          "fill": "$foreground/foreground"
+        },
+        "iTbd8/bpSQ7": {
+          "fill": "$foreground/foreground"
+        },
+        "ya5KB": {
+          "fill": "$accent/soft"
+        },
+        "ya5KB/Sr2Q5": {
+          "fill": "$accent/soft-foreground"
+        },
+        "ya5KB/Ra9NK": {
+          "fill": "$accent/soft-foreground"
+        }
+      }
+    },
+    {
+      "type": "frame",
+      "id": "p1Tm5",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "wJcHv",
+          "type": "ref",
+          "ref": "gu5WY",
+          "width": "fill_container",
+          "descendants": {
+            "Gl7AY": {
+              "content": "Settings"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "WeNcI",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 24,
+          "children": [
+            {
+              "id": "T3U3l2",
+              "type": "ref",
+              "ref": "xCDF7",
+              "width": "fill_container",
+              "descendants": {
+                "spCmk": {
+                  "content": "Admin settings"
+                },
+                "VbHwU": {
+                  "content": "Platform-wide configuration for this Gameplane instance."
+                },
+                "TgdLz": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "wcqSm",
+              "name": "Settings Layout",
+              "width": "fill_container",
+              "height": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "id": "VjSvS",
+                  "type": "ref",
+                  "ref": "Mp7Ep",
+                  "name": "Settings Nav",
+                  "width": 220,
+                  "descendants": {
+                    "eIjoV": {
+                      "fill": "#00000000"
+                    },
+                    "ZPLSA": {
+                      "fill": "$surface/secondary"
+                    }
+                  }
+                },
+                {
+                  "id": "zMflH",
+                  "type": "ref",
+                  "ref": "XDZ0E",
+                  "name": "Settings Panel",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "id": "D0Ayp4",
+                      "type": "ref",
+                      "ref": "FRpsu",
+                      "name": "Card Header",
+                      "descendants": {
+                        "fuZHB": {
+                          "content": "Telemetry"
+                        },
+                        "BZG9o": {
+                          "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                        }
+                      }
+                    },
+                    {
+                      "type": "frame",
+                      "id": "gfaY0",
+                      "name": "Card Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "O4y4o",
+                          "name": "destinationRow",
+                          "width": "fill_container",
+                          "fill": "$surface/secondary",
+                          "cornerRadius": 8,
+                          "gap": 12,
+                          "padding": 12,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "dNVYp",
+                              "name": "destIcon",
+                              "width": 20,
+                              "height": 20,
+                              "icon": "server",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$accent/soft-foreground"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "dT5O6",
+                              "name": "destText",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "G6EK4E",
+                                  "name": "destTitle",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Sending to telemetry.corp.example.net",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "ODx5q",
+                                  "name": "destDetail",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Custom destination set by your operator. Nothing is sent to the Gameplane project.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "o0rbrv",
+                              "type": "ref",
+                              "ref": "KmZnF",
+                              "name": "destChip",
+                              "descendants": {
+                                "xZ9ah": {
+                                  "content": "Custom"
+                                }
+                              }
+                            },
+                            {
+                              "type": "text",
+                              "id": "gByiC",
+                              "name": "destStatement",
+                              "fill": "$foreground/link",
+                              "content": "Data-handling statement",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "600"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "v1QNq",
+                          "name": "telemetryRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "z0pC9U",
+                              "name": "labelCol",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "B0NSMJ",
+                                  "name": "Label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Send basic usage metrics",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "EWyuE",
+                                  "name": "Description",
+                                  "fill": "$muted",
+                                  "content": "Gameplane version, number of servers and number of templates.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "Wq49L",
+                              "type": "ref",
+                              "ref": "hl7R3",
+                              "name": "basicSwitch"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "VHN8K",
+                          "name": "extendedRow",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "vhhM8",
+                              "name": "extRowInner",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "yYPjK",
+                                  "name": "extLabelCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "v1im4",
+                                      "name": "extLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send extended usage metrics",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "VwFtD",
+                                      "name": "extDescription",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "z1Fib",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "extendedSwitch"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "u3paX",
+                          "name": "installIdRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "KXAIF",
+                              "name": "installIdCol",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "XucpG",
+                                  "name": "installIdLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "e7wvLd",
+                                  "name": "installIdValue",
+                                  "fill": "$foreground/foreground",
+                                  "content": "b7e04d12-5a3c-4f98-8d6e-21c9a0f4e7b3",
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "QBqy8",
+                                  "name": "installIdHelp",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "JR2Iq",
+                              "type": "ref",
+                              "ref": "d5N3W3",
+                              "name": "resetIdBtn",
+                              "descendants": {
+                                "X3iEI": {
+                                  "enabled": false
+                                },
+                                "i3zB62/zMNkR": {
+                                  "content": "Reset ID"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "nKoLh",
+                          "name": "previewBlock",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "svgri",
+                              "name": "previewLabel",
+                              "fill": "$foreground/foreground",
+                              "content": "Next report preview",
+                              "fontFamily": "Inter",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "tMdnR",
+                              "name": "previewHelp",
+                              "fill": "$muted",
+                              "content": "Exactly what the next report contains. Read-only.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "l5laXN",
+                              "name": "previewCode",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "stroke": "$border/border",
+                              "strokeWidth": 1,
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "padding": [
+                                12,
+                                16
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "A8lYG",
+                                  "name": "previewJson",
+                                  "fill": "$foreground/foreground",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 11,\n  \"templates\": 9,\n  \"ext\": {\n    \"schema\": 1,\n    \"installId\": \"b7e04d12-5a3c-4f98-8d6e-21c9a0f4e7b3\",\n    \"env\": { \"k8s\": \"1.30\", \"distro\": \"rke2\", \"arch\": [\"amd64\", \"arm64\"], \"nodes\": \"4-10\" },\n    \"games\": { \"official\": { \"minecraft-java\": 6, \"valheim\": 4 }, \"custom\": 1 },\n    \"features\": {\n      \"wakeOnConnect\": true, \"tunnels\": [\"tailscale\"], \"capture\": false,\n      \"backups\": true, \"sso\": true, \"auditForwarding\": true,\n      \"clusters\": \"2-3\", \"db\": \"postgres\", \"language\": \"en\"\n    },\n    \"key\": \"Zk4t8Wq1nB6xYv3LmP0cRs7dEhJaUo2FgTiNyQ5bXwA\",\n    \"sentAt\": \"2026-10-06T09:12:44Z\"\n  }\n}",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "gs2kZ",
+                          "name": "statusRow",
+                          "width": "fill_container",
+                          "gap": 8,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "uqAgT",
+                              "name": "statusIcon",
+                              "width": 14,
+                              "height": 14,
+                              "icon": "triangle-alert",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$warning/soft-foreground"
+                            },
+                            {
+                              "type": "text",
+                              "id": "S1oY8",
+                              "name": "statusText",
+                              "fill": "$foreground/foreground",
+                              "content": "Last attempt failed, will retry. Last successful report: Oct 5, 2026, 09:10 UTC.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "HA1Kb",
+                              "name": "idReplacedRow",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "U0DP6",
+                                  "name": "idReplacedIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "info",
+                                  "library": "lucide",
+                                  "fill": "$accent/soft-foreground"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "VLMbI",
+                                  "name": "idReplacedText",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID replaced on Oct 4, 2026: the destination reported it was in use by another key.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "i4F3Q",
+                      "name": "Card Actions",
+                      "width": "fill_container",
+                      "justifyContent": "end",
+                      "children": [
+                        {
+                          "id": "KLwdf",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Btn Save Changes",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "enabled": false
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Save changes"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/yrxK2.json b/design-export/json/yrxK2.json
new file mode 100644
index 000000000..a35ed7306
--- /dev/null
+++ b/design-export/json/yrxK2.json
@@ -0,0 +1,563 @@
+{
+  "type": "frame",
+  "id": "yrxK2",
+  "x": 19680,
+  "y": 25404,
+  "name": "Screen/Admin Settings — Telemetry (Reset ID confirm)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 1031,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "SyZg9",
+      "type": "ref",
+      "ref": "kKFX9",
+      "height": "fill_container",
+      "descendants": {
+        "iTbd8": {
+          "fill": "#00000000"
+        },
+        "iTbd8/ghUsw": {
+          "fill": "$foreground/foreground"
+        },
+        "iTbd8/bpSQ7": {
+          "fill": "$foreground/foreground"
+        },
+        "ya5KB": {
+          "fill": "$accent/soft"
+        },
+        "ya5KB/Sr2Q5": {
+          "fill": "$accent/soft-foreground"
+        },
+        "ya5KB/Ra9NK": {
+          "fill": "$accent/soft-foreground"
+        }
+      }
+    },
+    {
+      "type": "frame",
+      "id": "qv0OX",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "h84EC",
+          "type": "ref",
+          "ref": "gu5WY",
+          "width": "fill_container",
+          "descendants": {
+            "Gl7AY": {
+              "content": "Settings"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "GcIdA",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 24,
+          "children": [
+            {
+              "id": "b1lOS",
+              "type": "ref",
+              "ref": "xCDF7",
+              "width": "fill_container",
+              "descendants": {
+                "spCmk": {
+                  "content": "Admin settings"
+                },
+                "VbHwU": {
+                  "content": "Platform-wide configuration for this Gameplane instance."
+                },
+                "TgdLz": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "Ibs1J",
+              "name": "Settings Layout",
+              "width": "fill_container",
+              "height": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "id": "MNnEE",
+                  "type": "ref",
+                  "ref": "Mp7Ep",
+                  "name": "Settings Nav",
+                  "width": 220,
+                  "descendants": {
+                    "eIjoV": {
+                      "fill": "#00000000"
+                    },
+                    "ZPLSA": {
+                      "fill": "$surface/secondary"
+                    }
+                  }
+                },
+                {
+                  "id": "vGL2p",
+                  "type": "ref",
+                  "ref": "XDZ0E",
+                  "name": "Settings Panel",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "id": "Mtz0y",
+                      "type": "ref",
+                      "ref": "FRpsu",
+                      "name": "Card Header",
+                      "descendants": {
+                        "fuZHB": {
+                          "content": "Telemetry"
+                        },
+                        "BZG9o": {
+                          "content": "Anonymous usage metrics help us prioritize work."
+                        }
+                      }
+                    },
+                    {
+                      "type": "frame",
+                      "id": "VTiD2",
+                      "name": "Card Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "ORKLU",
+                          "name": "destinationRow",
+                          "width": "fill_container",
+                          "fill": "$surface/secondary",
+                          "cornerRadius": 8,
+                          "gap": 12,
+                          "padding": 12,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "HbRz7",
+                              "name": "destIcon",
+                              "width": 20,
+                              "height": 20,
+                              "icon": "globe",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$accent/soft-foreground"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "wHkVS",
+                              "name": "destText",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "zBl0v",
+                                  "name": "destTitle",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Sending to telemetry.gameplane.net",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "e4DXS",
+                                  "name": "destDetail",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "The Gameplane project's telemetry service.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "nJfig",
+                              "type": "ref",
+                              "ref": "kGH2O",
+                              "name": "destChip",
+                              "descendants": {
+                                "O1PqF5": {
+                                  "content": "Project default"
+                                }
+                              }
+                            },
+                            {
+                              "type": "text",
+                              "id": "dpfwv",
+                              "name": "destStatement",
+                              "fill": "$foreground/link",
+                              "content": "Data-handling statement",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "600"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "s3NIhS",
+                          "name": "telemetryRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "go2el",
+                              "name": "labelCol",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "whKB6",
+                                  "name": "Label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Send basic usage metrics",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "EGc8u",
+                                  "name": "Description",
+                                  "fill": "$muted",
+                                  "content": "Gameplane version, number of servers and number of templates.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "ZbFLM",
+                              "type": "ref",
+                              "ref": "hl7R3",
+                              "name": "basicSwitch"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "PBYzs",
+                          "name": "extendedRow",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "sCZf3",
+                              "name": "extRowInner",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "Mfuhy",
+                                  "name": "extLabelCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "aWWNb",
+                                      "name": "extLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send extended usage metrics",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "UMdYk",
+                                      "name": "extDescription",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "tOUx0",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "extendedSwitch"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "CVSFy",
+                          "name": "installIdRow",
+                          "width": "fill_container",
+                          "gap": 16,
+                          "padding": [
+                            0,
+                            0,
+                            0,
+                            24
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "H3mIM",
+                              "name": "installIdCol",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 2,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "zYBBg",
+                                  "name": "installIdLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Install ID",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "T8oP2F",
+                                  "name": "installIdValue",
+                                  "fill": "$foreground/foreground",
+                                  "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "bjBd7",
+                                  "name": "installIdHelp",
+                                  "fill": "$muted",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "id": "iAK13",
+                              "type": "ref",
+                              "ref": "d5N3W3",
+                              "name": "resetIdBtn",
+                              "descendants": {
+                                "X3iEI": {
+                                  "enabled": false
+                                },
+                                "i3zB62/zMNkR": {
+                                  "content": "Reset ID"
+                                }
+                              }
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "qfypH",
+                          "name": "previewBlock",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "c4Gkg",
+                              "name": "previewLabel",
+                              "fill": "$foreground/foreground",
+                              "content": "Next report preview",
+                              "fontFamily": "Inter",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "UWltB",
+                              "name": "previewHelp",
+                              "fill": "$muted",
+                              "content": "Exactly what the next report contains. Read-only.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "frame",
+                              "id": "DW45f",
+                              "name": "previewCode",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "stroke": "$border/border",
+                              "strokeWidth": 1,
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "padding": [
+                                12,
+                                16
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "OxLcj",
+                                  "name": "previewJson",
+                                  "fill": "$foreground/foreground",
+                                  "textGrowth": "fixed-width",
+                                  "width": "fill_container",
+                                  "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 3,\n  \"templates\": 7,\n  \"ext\": {\n    \"schema\": 1,\n    \"installId\": \"3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10\",\n    \"env\": { \"k8s\": \"1.31\", \"distro\": \"k3s\", \"arch\": [\"amd64\"], \"nodes\": \"1\" },\n    \"games\": { \"official\": { \"minecraft-java\": 2, \"terraria\": 1 }, \"custom\": 0 },\n    \"features\": {\n      \"wakeOnConnect\": true, \"tunnels\": [\"playit\"], \"capture\": false,\n      \"backups\": true, \"sso\": false, \"auditForwarding\": false,\n      \"clusters\": \"1\", \"db\": \"sqlite\", \"language\": \"en\"\n    },\n    \"key\": \"pV0mY3Qn8wK2b7cXlR4sTt9uJ1eHaZ6dFgQmNoP5rSk\",\n    \"sentAt\": \"2026-10-06T09:12:44Z\"\n  }\n}",
+                                  "lineHeight": 1.5,
+                                  "fontFamily": "$typography/font-mono",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "FpkUc",
+                          "name": "statusRow",
+                          "width": "fill_container",
+                          "gap": 8,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "icon",
+                              "id": "Hb6X1",
+                              "name": "statusIcon",
+                              "width": 14,
+                              "height": 14,
+                              "icon": "circle-check",
+                              "library": "Material Symbols Rounded",
+                              "fill": "$success/soft-foreground"
+                            },
+                            {
+                              "type": "text",
+                              "id": "oIV6b",
+                              "name": "statusText",
+                              "fill": "$foreground/foreground",
+                              "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                              "fontFamily": "Inter",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "qIBwu",
+                      "name": "Card Actions",
+                      "width": "fill_container",
+                      "justifyContent": "end",
+                      "children": [
+                        {
+                          "id": "K2cB7L",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Btn Save Changes",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "enabled": false
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Save changes"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "PWcdt",
+      "layoutPosition": "absolute",
+      "x": 0,
+      "y": 0,
+      "name": "resetScrim",
+      "width": 1440,
+      "height": 1031,
+      "fill": "#00000066",
+      "layout": "vertical",
+      "justifyContent": "center",
+      "alignItems": "center",
+      "children": [
+        {
+          "id": "g69jZL",
+          "type": "ref",
+          "ref": "TzRet",
+          "name": "Reset ID confirm",
+          "descendants": {
+            "ocSbw": {
+              "content": "Reset install ID?"
+            },
+            "rs23G": {
+              "content": "This replaces your random install ID 3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10 with a new one. The old ID is never sent again, and the destination cannot link the old and new IDs. The next report is sent under the new ID."
+            },
+            "RAlJp": {
+              "content": "Cancel"
+            },
+            "i56eAy": {
+              "content": "Reset ID"
+            }
+          }
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/json/zj5a3.json b/design-export/json/zj5a3.json
new file mode 100644
index 000000000..710238b1e
--- /dev/null
+++ b/design-export/json/zj5a3.json
@@ -0,0 +1,1349 @@
+{
+  "type": "frame",
+  "id": "zj5a3",
+  "x": 13120,
+  "y": 27204,
+  "name": "Screen/Dashboard Home — Telemetry notice (default)",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 1380,
+  "fill": "$background/background",
+  "children": [
+    {
+      "id": "PxCc3",
+      "type": "ref",
+      "ref": "kKFX9",
+      "name": "App Sidebar",
+      "height": "fill_container"
+    },
+    {
+      "type": "frame",
+      "id": "bp3OL",
+      "name": "Main",
+      "width": "fill_container",
+      "height": "fill_container",
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "id": "vSp7k",
+          "type": "ref",
+          "ref": "gu5WY",
+          "name": "Top Bar",
+          "width": "fill_container",
+          "descendants": {
+            "Gb27k": {
+              "fontFamily": "$typography/font-sans"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "fz58Y",
+          "name": "Body",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "gap": 24,
+          "padding": 32,
+          "children": [
+            {
+              "id": "hCjBQ",
+              "type": "ref",
+              "ref": "lh8p8",
+              "name": "Telemetry Notice",
+              "width": "fill_container",
+              "descendants": {
+                "dzZwq": {
+                  "content": "telemetry.gameplane.net",
+                  "name": "host"
+                },
+                "jCJTc": {
+                  "content": ", the Gameplane project's telemetry service."
+                }
+              }
+            },
+            {
+              "id": "xh7ww",
+              "type": "ref",
+              "ref": "xCDF7",
+              "name": "Page Header",
+              "width": "fill_container",
+              "descendants": {
+                "VbHwU": {
+                  "content": "Your game servers and resources across authorized locations."
+                },
+                "TgdLz": {
+                  "children": [
+                    {
+                      "id": "mTzRU",
+                      "type": "ref",
+                      "ref": "tpKRk",
+                      "name": "Create Server Button",
+                      "descendants": {
+                        "q58In/Xpn7K": {
+                          "library": "lucide",
+                          "icon": "plus"
+                        },
+                        "q58In/U6q13B": {
+                          "content": "Create server"
+                        }
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "id": "K3F7v",
+              "type": "ref",
+              "ref": "AT7ya",
+              "name": "Dashboard location filter",
+              "width": 240,
+              "context": "Optional location filter; All locations combines authorized inventory.",
+              "descendants": {
+                "cFsFk": {
+                  "content": "All locations",
+                  "fill": "$foreground/foreground"
+                }
+              }
+            },
+            {
+              "id": "gz2vP",
+              "type": "ref",
+              "ref": "YF85x",
+              "name": "Stats Row",
+              "width": "fill_container",
+              "descendants": {
+                "m20CHt/QdcEm": {
+                  "fill": "#000000"
+                },
+                "pkvT2/QdcEm": {
+                  "fill": "$chart/stat"
+                },
+                "FlXsH/QdcEm": {
+                  "fill": "$chart/stat"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "cqhug",
+              "name": "Row2",
+              "width": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "NRr9X",
+                  "name": "Fleet Status Card",
+                  "width": "fill_container",
+                  "height": 372,
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border/border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "dg2VY",
+                      "name": "Header",
+                      "width": "fill_container",
+                      "justifyContent": "space_between",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "HMyb7",
+                          "name": "title",
+                          "fill": "$foreground/foreground",
+                          "content": "Fleet status",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "XXrLg",
+                          "name": "link",
+                          "fill": "$muted",
+                          "content": "1 servers",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "oqSbh",
+                      "name": "Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "D3Yex",
+                          "name": "Health Bar",
+                          "clip": true,
+                          "width": "fill_container",
+                          "height": 8,
+                          "fill": "$default/default",
+                          "cornerRadius": 999,
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "id": "TO30o",
+                              "name": "Running Segment",
+                              "fill": "$success/success",
+                              "width": "fill_container",
+                              "height": 8
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "kYaLY",
+                          "name": "Legend",
+                          "gap": 20,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "LvQn3",
+                              "name": "legend-Running 1",
+                              "gap": 6,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "jrucE",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "p1H79e",
+                                  "name": "label",
+                                  "fill": "$muted",
+                                  "content": "Running 1",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "IH9RZ",
+                              "name": "legend-Stopped 0",
+                              "gap": 6,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "r0nSx",
+                                  "name": "dot",
+                                  "fill": "$muted",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "DDmOy",
+                                  "name": "label",
+                                  "fill": "$muted",
+                                  "content": "Stopped 0",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "I6mrG",
+                              "name": "legend-Failed 0",
+                              "gap": 6,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "iLeE6",
+                                  "name": "dot",
+                                  "fill": "$danger/danger",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "cfRcE",
+                                  "name": "label",
+                                  "fill": "$muted",
+                                  "content": "Failed 0",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "DDXsp",
+                          "name": "Attention Section",
+                          "width": "fill_container",
+                          "stroke": "$border/border",
+                          "strokeWidth": {
+                            "top": 1
+                          },
+                          "strokeAlignment": "inner",
+                          "layout": "vertical",
+                          "gap": 12,
+                          "padding": [
+                            16,
+                            0,
+                            0,
+                            0
+                          ],
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "OMtsl",
+                              "name": "attnLabel",
+                              "fill": "$muted",
+                              "content": "NEEDS ATTENTION",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 10,
+                              "fontWeight": "500",
+                              "letterSpacing": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "LXG8k",
+                              "name": "healthyRow",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "jPq2V",
+                                  "name": "check",
+                                  "width": 16,
+                                  "height": 16,
+                                  "icon": "circle-check",
+                                  "library": "lucide",
+                                  "fill": "$success/success"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "WDpub",
+                                  "name": "healthyLabel",
+                                  "fill": "$muted",
+                                  "content": "Everything looks healthy.",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "pLUNS",
+                  "name": "Cluster Resources Card",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border/border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "yOlKQ",
+                      "name": "Header",
+                      "width": "fill_container",
+                      "justifyContent": "space_between",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "Qk2q8",
+                          "name": "title",
+                          "fill": "$foreground/foreground",
+                          "content": "Cluster resources",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "EPIHR",
+                          "name": "link",
+                          "fill": "$accent/accent",
+                          "content": "View cluster",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "GEYNd",
+                      "name": "Content",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "vF4ot",
+                          "name": "Meters",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "Ggykh",
+                              "name": "CPU Meter",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 4,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "Kr88b",
+                                  "name": "CPU Row",
+                                  "width": "fill_container",
+                                  "justifyContent": "space_between",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "h9MjN9",
+                                      "name": "CPU Label",
+                                      "fill": "$muted",
+                                      "content": "CPU",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "I6RpH",
+                                      "name": "CPU Pct",
+                                      "fill": "$foreground/foreground",
+                                      "content": "0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "E6WE6m",
+                                  "name": "CPU Bar",
+                                  "clip": true,
+                                  "width": "fill_container",
+                                  "height": 6,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 999,
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": 999,
+                                      "id": "e1rjs",
+                                      "name": "CPU Fill",
+                                      "fill": "$accent/accent",
+                                      "width": 0,
+                                      "height": 6
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "DwEjp",
+                                  "name": "CPU Sub",
+                                  "fill": "$muted",
+                                  "content": "0 / 12 cores",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "pecFX",
+                              "name": "Memory Meter",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 4,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "m6U5Mq",
+                                  "name": "Memory Row",
+                                  "width": "fill_container",
+                                  "justifyContent": "space_between",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "GDVyA",
+                                      "name": "Memory Label",
+                                      "fill": "$muted",
+                                      "content": "Memory",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "KonJs",
+                                      "name": "Memory Pct",
+                                      "fill": "$foreground/foreground",
+                                      "content": "0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "v3nSG5",
+                                  "name": "Memory Bar",
+                                  "clip": true,
+                                  "width": "fill_container",
+                                  "height": 6,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 999,
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": 999,
+                                      "id": "fOM5A",
+                                      "name": "Memory Fill",
+                                      "fill": "$accent/accent",
+                                      "width": 0,
+                                      "height": 6
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "njEGI",
+                                  "name": "Memory Sub",
+                                  "fill": "$muted",
+                                  "content": "0 B / 41 GB",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "PiQH5",
+                              "name": "Storage Meter",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 4,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "VFy66",
+                                  "name": "Storage Row",
+                                  "width": "fill_container",
+                                  "justifyContent": "space_between",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "raekr",
+                                      "name": "Storage Label",
+                                      "fill": "$muted",
+                                      "content": "Storage",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "ZeuDV",
+                                      "name": "Storage Pct",
+                                      "fill": "$foreground/foreground",
+                                      "content": "25%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "omSap",
+                                  "name": "Storage Bar",
+                                  "clip": true,
+                                  "width": "fill_container",
+                                  "height": 6,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 999,
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": 999,
+                                      "id": "UedLK",
+                                      "name": "Storage Fill",
+                                      "fill": "$success/success",
+                                      "width": 110,
+                                      "height": 6
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "IWgvk",
+                          "name": "Nodes Section",
+                          "width": "fill_container",
+                          "stroke": "$border/border",
+                          "strokeWidth": {
+                            "top": 1
+                          },
+                          "strokeAlignment": "inner",
+                          "layout": "vertical",
+                          "gap": 8,
+                          "padding": [
+                            16,
+                            0,
+                            0,
+                            0
+                          ],
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "Ys5im",
+                              "name": "nodesLabel",
+                              "fill": "$muted",
+                              "content": "NODES",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 10,
+                              "fontWeight": "500",
+                              "letterSpacing": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "t55MW",
+                              "name": "Node kubelab-control",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "S4OL1",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "x3scf",
+                                  "name": "name",
+                                  "fill": "$foreground/foreground",
+                                  "content": "kubelab-control",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "vsngF",
+                                  "name": "meta",
+                                  "fill": "$muted",
+                                  "content": "0 pods · cpu 0%",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "n723ny",
+                              "name": "Node kubelab-worker-1",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "NKzVP",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "VQLrM",
+                                  "name": "name",
+                                  "fill": "$foreground/foreground",
+                                  "content": "kubelab-worker-1",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "ESfx6",
+                                  "name": "meta",
+                                  "fill": "$muted",
+                                  "content": "0 pods · cpu 0%",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "g2cJ4",
+                              "name": "Node kubelab-worker-2",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "ellipse",
+                                  "id": "v1aW9",
+                                  "name": "dot",
+                                  "fill": "$success/success",
+                                  "width": 8,
+                                  "height": 8
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "NxE0t",
+                                  "name": "name",
+                                  "fill": "$foreground/foreground",
+                                  "content": "kubelab-worker-2",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "WCx9m",
+                                  "name": "meta",
+                                  "fill": "$muted",
+                                  "content": "0 pods · cpu 0%",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "J7ZYVN",
+              "name": "Row3",
+              "width": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "K8p3TH",
+                  "name": "Central audit activity",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "YS2uu",
+                      "name": "Central audit scope",
+                      "fill": "$muted",
+                      "content": "Central Gameplane audit activity",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "IhEu2",
+                      "name": "Recent Activity Card",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "bUuCK",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "V6LuQD",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Recent activity",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "a5VbzV",
+                              "name": "link",
+                              "fill": "$accent/accent",
+                              "content": "View all",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "W0p8pu",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "eAC5T",
+                              "name": "anonymous created-4h ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "ViwcI",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "lciyY",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "hh61z",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "CT4pX",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "xsdZ4",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "r75RcD",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "4h ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "bul6Z",
+                              "name": "admin created-18h ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "dUviB",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "hVsy7",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "EOHQr",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "HMjal",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "admin created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "Y9R0c2",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /servers",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "i60vAz",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "18h ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "nxuKK",
+                              "name": "anonymous created-22h ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "zNIzy",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "qypFe",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "B4jH3m",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "QZFNp",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "otBBJ",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "M48Ze",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "22h ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "W6hX1O",
+                              "name": "anonymous created-1d ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "YBw2I",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "jYZhF",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "kXmT3",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "z09x3a",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "B01Xa",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "jMU20",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "1d ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "g9CMr",
+                              "name": "anonymous created-1d ago",
+                              "width": "fill_container",
+                              "gap": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "RoY79",
+                                  "name": "iconBox",
+                                  "width": 28,
+                                  "height": 28,
+                                  "fill": "$default/default",
+                                  "cornerRadius": 6,
+                                  "justifyContent": "center",
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "z1ImCY",
+                                      "name": "plus",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "plus",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "tOx2y",
+                                  "name": "textCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "ldBF7",
+                                      "name": "title",
+                                      "fill": "$foreground/foreground",
+                                      "content": "anonymous created",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "H2Fxj6",
+                                      "name": "path",
+                                      "fill": "$muted",
+                                      "content": "POST /auth/login",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "EyWlk",
+                                  "name": "time",
+                                  "fill": "$muted",
+                                  "content": "1d ago",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "L6QZba",
+                  "name": "Recent Backups Card",
+                  "width": "fill_container",
+                  "height": 353,
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border/border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "uUt7L",
+                      "name": "Header",
+                      "width": "fill_container",
+                      "justifyContent": "space_between",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "xNVj0",
+                          "name": "title",
+                          "fill": "$foreground/foreground",
+                          "content": "Recent backups",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "AhXv3",
+                          "name": "link",
+                          "fill": "$accent/accent",
+                          "content": "View all",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "n4Rzpy",
+                      "name": "Content",
+                      "width": "fill_container",
+                      "height": "fill_container",
+                      "layout": "vertical",
+                      "padding": [
+                        40,
+                        24
+                      ],
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "qfhEB",
+                          "name": "empty",
+                          "fill": "$muted",
+                          "content": "No backups yet.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/design-export/screenshots/DBQyF.png b/design-export/screenshots/DBQyF.png
new file mode 100644
index 000000000..e4e2816cb
Binary files /dev/null and b/design-export/screenshots/DBQyF.png differ
diff --git a/design-export/screenshots/GR1G9.png b/design-export/screenshots/GR1G9.png
new file mode 100644
index 000000000..e0d7b72f5
Binary files /dev/null and b/design-export/screenshots/GR1G9.png differ
diff --git a/design-export/screenshots/K5XinZ.png b/design-export/screenshots/K5XinZ.png
new file mode 100644
index 000000000..b7aa1729e
Binary files /dev/null and b/design-export/screenshots/K5XinZ.png differ
diff --git a/design-export/screenshots/cDiNb.png b/design-export/screenshots/cDiNb.png
new file mode 100644
index 000000000..3e78cc12e
Binary files /dev/null and b/design-export/screenshots/cDiNb.png differ
diff --git a/design-export/screenshots/l7TRz9.png b/design-export/screenshots/l7TRz9.png
new file mode 100644
index 000000000..5c533c30c
Binary files /dev/null and b/design-export/screenshots/l7TRz9.png differ
diff --git a/design-export/screenshots/lh8p8.png b/design-export/screenshots/lh8p8.png
new file mode 100644
index 000000000..ccbffb81b
Binary files /dev/null and b/design-export/screenshots/lh8p8.png differ
diff --git a/design-export/screenshots/r0heh.png b/design-export/screenshots/r0heh.png
new file mode 100644
index 000000000..e374a7ee0
Binary files /dev/null and b/design-export/screenshots/r0heh.png differ
diff --git a/design-export/screenshots/yrxK2.png b/design-export/screenshots/yrxK2.png
new file mode 100644
index 000000000..e783f8a45
Binary files /dev/null and b/design-export/screenshots/yrxK2.png differ
diff --git a/design-export/screenshots/zj5a3.png b/design-export/screenshots/zj5a3.png
new file mode 100644
index 000000000..f85e382e1
Binary files /dev/null and b/design-export/screenshots/zj5a3.png differ
diff --git a/design.pen b/design.pen
index 24c5c6cab..7adf0f426 100644
--- a/design.pen
+++ b/design.pen
@@ -122945,6 +122945,6194 @@
           }
         }
       ]
+    },
+    {
+      "type": "frame",
+      "id": "lh8p8",
+      "x": 11480,
+      "y": 27204,
+      "name": "Gameplane/Telemetry Notice Banner",
+      "reusable": true,
+      "width": 1100,
+      "fill": "$accent/soft",
+      "cornerRadius": 8,
+      "stroke": "$accent/soft-foreground",
+      "strokeWidth": 1,
+      "strokeAlignment": "inner",
+      "gap": 12,
+      "padding": 16,
+      "children": [
+        {
+          "type": "icon",
+          "id": "jnKcH",
+          "name": "tnIcon",
+          "width": 20,
+          "height": 20,
+          "icon": "info",
+          "library": "lucide",
+          "fill": "$accent/soft-foreground"
+        },
+        {
+          "type": "frame",
+          "id": "TOsXx",
+          "name": "tnContents",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 12,
+          "children": [
+            {
+              "type": "text",
+              "id": "xfEiQ",
+              "name": "tnTitle",
+              "fill": "$accent/soft-foreground",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": "Anonymous usage metrics are on for this install.",
+              "lineHeight": 1.5,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "600"
+            },
+            {
+              "type": "frame",
+              "id": "WIzDP",
+              "name": "tnDestRow",
+              "width": "fill_container",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "f6sfW",
+                  "name": "destLabel",
+                  "fill": "$foreground/foreground",
+                  "content": "Reports are sent to",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "text",
+                  "id": "dzZwq",
+                  "name": "host",
+                  "fill": "$accent/soft-foreground",
+                  "content": "telemetry.gameplane.net",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "jCJTc",
+                  "name": "tnDestSuffix",
+                  "fill": "$foreground/foreground",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": ", the Gameplane project's telemetry service.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "JJ906",
+              "name": "tnFieldCols",
+              "width": "fill_container",
+              "gap": 24,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "kLCfk",
+                  "name": "tnBasic",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "yC32k",
+                      "name": "basicLabel",
+                      "fill": "$foreground/foreground",
+                      "content": "Basic metrics",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "D0wKt",
+                      "name": "basicDesc",
+                      "fill": "$muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Gameplane version, number of servers, number of templates.",
+                      "lineHeight": 1.5,
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "nB5zt",
+                  "name": "tnExtended",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "d6ULPb",
+                      "name": "extLabel",
+                      "fill": "$foreground/foreground",
+                      "content": "Extended metrics",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "Aj65h",
+                      "name": "extDesc",
+                      "fill": "$muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Kubernetes version, distribution, CPU architecture and node-count band; servers per official game module (others counted as custom); which optional features are in use; and a random install ID.",
+                      "lineHeight": 1.5,
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Qs5j2",
+              "name": "tnActions",
+              "width": "fill_container",
+              "gap": 8,
+              "alignItems": "center",
+              "children": [
+                {
+                  "id": "lFiXj",
+                  "type": "ref",
+                  "ref": "z9ShNE",
+                  "name": "tnKeep",
+                  "descendants": {
+                    "nWTJb": {
+                      "enabled": false
+                    },
+                    "IVgQ8/U1xvSo": {
+                      "content": "Keep sharing"
+                    }
+                  }
+                },
+                {
+                  "id": "tgQa9",
+                  "type": "ref",
+                  "ref": "d5N3W3",
+                  "name": "tnExtOff",
+                  "descendants": {
+                    "X3iEI": {
+                      "enabled": false
+                    },
+                    "i3zB62/zMNkR": {
+                      "content": "Turn off extended"
+                    }
+                  }
+                },
+                {
+                  "id": "nF9qA",
+                  "type": "ref",
+                  "ref": "d5N3W3",
+                  "name": "tnAllOff",
+                  "descendants": {
+                    "X3iEI": {
+                      "enabled": false
+                    },
+                    "i3zB62/zMNkR": {
+                      "content": "Turn off all"
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "aXQdE",
+                  "name": "spacer",
+                  "width": "fill_container",
+                  "height": 1
+                },
+                {
+                  "type": "frame",
+                  "id": "Sstlp",
+                  "name": "tnLinks",
+                  "gap": 10,
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "EimG7",
+                      "name": "tnOpenSettings",
+                      "fill": "$foreground/link",
+                      "content": "Open Telemetry settings",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "Ayd49",
+                      "name": "sep1",
+                      "fill": "$muted",
+                      "content": "·",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "BaWOS",
+                      "name": "tnStatement",
+                      "fill": "$foreground/link",
+                      "content": "Data-handling statement",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "600"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "zj5a3",
+      "x": 13120,
+      "y": 27204,
+      "name": "Screen/Dashboard Home — Telemetry notice (default)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 1380,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "PxCc3",
+          "type": "ref",
+          "ref": "kKFX9",
+          "name": "App Sidebar",
+          "height": "fill_container"
+        },
+        {
+          "type": "frame",
+          "id": "bp3OL",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "vSp7k",
+              "type": "ref",
+              "ref": "gu5WY",
+              "name": "Top Bar",
+              "width": "fill_container",
+              "descendants": {
+                "Gb27k": {
+                  "fontFamily": "$typography/font-sans"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "fz58Y",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "fill": "$background/background",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 32,
+              "children": [
+                {
+                  "id": "hCjBQ",
+                  "type": "ref",
+                  "ref": "lh8p8",
+                  "name": "Telemetry Notice",
+                  "width": "fill_container",
+                  "descendants": {
+                    "dzZwq": {
+                      "content": "telemetry.gameplane.net",
+                      "name": "host"
+                    },
+                    "jCJTc": {
+                      "content": ", the Gameplane project's telemetry service."
+                    }
+                  }
+                },
+                {
+                  "id": "xh7ww",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "name": "Page Header",
+                  "width": "fill_container",
+                  "descendants": {
+                    "VbHwU": {
+                      "content": "Your game servers and resources across authorized locations."
+                    },
+                    "TgdLz": {
+                      "children": [
+                        {
+                          "id": "mTzRU",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Create Server Button",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "library": "lucide",
+                              "icon": "plus"
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Create server"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  }
+                },
+                {
+                  "id": "K3F7v",
+                  "type": "ref",
+                  "ref": "AT7ya",
+                  "name": "Dashboard location filter",
+                  "width": 240,
+                  "context": "Optional location filter; All locations combines authorized inventory.",
+                  "descendants": {
+                    "cFsFk": {
+                      "content": "All locations",
+                      "fill": "$foreground/foreground"
+                    }
+                  }
+                },
+                {
+                  "id": "gz2vP",
+                  "type": "ref",
+                  "ref": "YF85x",
+                  "name": "Stats Row",
+                  "width": "fill_container",
+                  "descendants": {
+                    "m20CHt/QdcEm": {
+                      "fill": "#000000"
+                    },
+                    "pkvT2/QdcEm": {
+                      "fill": "$chart/stat"
+                    },
+                    "FlXsH/QdcEm": {
+                      "fill": "$chart/stat"
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "cqhug",
+                  "name": "Row2",
+                  "width": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "NRr9X",
+                      "name": "Fleet Status Card",
+                      "width": "fill_container",
+                      "height": 372,
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "dg2VY",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "HMyb7",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Fleet status",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "XXrLg",
+                              "name": "link",
+                              "fill": "$muted",
+                              "content": "1 servers",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "oqSbh",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "D3Yex",
+                              "name": "Health Bar",
+                              "clip": true,
+                              "width": "fill_container",
+                              "height": 8,
+                              "fill": "$default/default",
+                              "cornerRadius": 999,
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "id": "TO30o",
+                                  "name": "Running Segment",
+                                  "fill": "$success/success",
+                                  "width": "fill_container",
+                                  "height": 8
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "kYaLY",
+                              "name": "Legend",
+                              "gap": 20,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "LvQn3",
+                                  "name": "legend-Running 1",
+                                  "gap": 6,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "jrucE",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "p1H79e",
+                                      "name": "label",
+                                      "fill": "$muted",
+                                      "content": "Running 1",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "IH9RZ",
+                                  "name": "legend-Stopped 0",
+                                  "gap": 6,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "r0nSx",
+                                      "name": "dot",
+                                      "fill": "$muted",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "DDmOy",
+                                      "name": "label",
+                                      "fill": "$muted",
+                                      "content": "Stopped 0",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "I6mrG",
+                                  "name": "legend-Failed 0",
+                                  "gap": 6,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "iLeE6",
+                                      "name": "dot",
+                                      "fill": "$danger/danger",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "cfRcE",
+                                      "name": "label",
+                                      "fill": "$muted",
+                                      "content": "Failed 0",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "DDXsp",
+                              "name": "Attention Section",
+                              "width": "fill_container",
+                              "stroke": "$border/border",
+                              "strokeWidth": {
+                                "top": 1
+                              },
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "gap": 12,
+                              "padding": [
+                                16,
+                                0,
+                                0,
+                                0
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "OMtsl",
+                                  "name": "attnLabel",
+                                  "fill": "$muted",
+                                  "content": "NEEDS ATTENTION",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "500",
+                                  "letterSpacing": 1
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "LXG8k",
+                                  "name": "healthyRow",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "jPq2V",
+                                      "name": "check",
+                                      "width": 16,
+                                      "height": 16,
+                                      "icon": "circle-check",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "WDpub",
+                                      "name": "healthyLabel",
+                                      "fill": "$muted",
+                                      "content": "Everything looks healthy.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "pLUNS",
+                      "name": "Cluster Resources Card",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "yOlKQ",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "Qk2q8",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Cluster resources",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "EPIHR",
+                              "name": "link",
+                              "fill": "$accent/accent",
+                              "content": "View cluster",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "GEYNd",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "vF4ot",
+                              "name": "Meters",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "Ggykh",
+                                  "name": "CPU Meter",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "Kr88b",
+                                      "name": "CPU Row",
+                                      "width": "fill_container",
+                                      "justifyContent": "space_between",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "h9MjN9",
+                                          "name": "CPU Label",
+                                          "fill": "$muted",
+                                          "content": "CPU",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "I6RpH",
+                                          "name": "CPU Pct",
+                                          "fill": "$foreground/foreground",
+                                          "content": "0%",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "E6WE6m",
+                                      "name": "CPU Bar",
+                                      "clip": true,
+                                      "width": "fill_container",
+                                      "height": 6,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 999,
+                                      "children": [
+                                        {
+                                          "type": "rectangle",
+                                          "cornerRadius": 999,
+                                          "id": "e1rjs",
+                                          "name": "CPU Fill",
+                                          "fill": "$accent/accent",
+                                          "width": 0,
+                                          "height": 6
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "DwEjp",
+                                      "name": "CPU Sub",
+                                      "fill": "$muted",
+                                      "content": "0 / 12 cores",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 10,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "pecFX",
+                                  "name": "Memory Meter",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "m6U5Mq",
+                                      "name": "Memory Row",
+                                      "width": "fill_container",
+                                      "justifyContent": "space_between",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "GDVyA",
+                                          "name": "Memory Label",
+                                          "fill": "$muted",
+                                          "content": "Memory",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "KonJs",
+                                          "name": "Memory Pct",
+                                          "fill": "$foreground/foreground",
+                                          "content": "0%",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "v3nSG5",
+                                      "name": "Memory Bar",
+                                      "clip": true,
+                                      "width": "fill_container",
+                                      "height": 6,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 999,
+                                      "children": [
+                                        {
+                                          "type": "rectangle",
+                                          "cornerRadius": 999,
+                                          "id": "fOM5A",
+                                          "name": "Memory Fill",
+                                          "fill": "$accent/accent",
+                                          "width": 0,
+                                          "height": 6
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "njEGI",
+                                      "name": "Memory Sub",
+                                      "fill": "$muted",
+                                      "content": "0 B / 41 GB",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 10,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "PiQH5",
+                                  "name": "Storage Meter",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "VFy66",
+                                      "name": "Storage Row",
+                                      "width": "fill_container",
+                                      "justifyContent": "space_between",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "raekr",
+                                          "name": "Storage Label",
+                                          "fill": "$muted",
+                                          "content": "Storage",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "ZeuDV",
+                                          "name": "Storage Pct",
+                                          "fill": "$foreground/foreground",
+                                          "content": "25%",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "omSap",
+                                      "name": "Storage Bar",
+                                      "clip": true,
+                                      "width": "fill_container",
+                                      "height": 6,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 999,
+                                      "children": [
+                                        {
+                                          "type": "rectangle",
+                                          "cornerRadius": 999,
+                                          "id": "UedLK",
+                                          "name": "Storage Fill",
+                                          "fill": "$success/success",
+                                          "width": 110,
+                                          "height": 6
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "IWgvk",
+                              "name": "Nodes Section",
+                              "width": "fill_container",
+                              "stroke": "$border/border",
+                              "strokeWidth": {
+                                "top": 1
+                              },
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "padding": [
+                                16,
+                                0,
+                                0,
+                                0
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "Ys5im",
+                                  "name": "nodesLabel",
+                                  "fill": "$muted",
+                                  "content": "NODES",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "500",
+                                  "letterSpacing": 1
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "t55MW",
+                                  "name": "Node kubelab-control",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "S4OL1",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "x3scf",
+                                      "name": "name",
+                                      "fill": "$foreground/foreground",
+                                      "content": "kubelab-control",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "vsngF",
+                                      "name": "meta",
+                                      "fill": "$muted",
+                                      "content": "0 pods · cpu 0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "n723ny",
+                                  "name": "Node kubelab-worker-1",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "NKzVP",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "VQLrM",
+                                      "name": "name",
+                                      "fill": "$foreground/foreground",
+                                      "content": "kubelab-worker-1",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "ESfx6",
+                                      "name": "meta",
+                                      "fill": "$muted",
+                                      "content": "0 pods · cpu 0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "g2cJ4",
+                                  "name": "Node kubelab-worker-2",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "v1aW9",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "NxE0t",
+                                      "name": "name",
+                                      "fill": "$foreground/foreground",
+                                      "content": "kubelab-worker-2",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "WCx9m",
+                                      "name": "meta",
+                                      "fill": "$muted",
+                                      "content": "0 pods · cpu 0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "J7ZYVN",
+                  "name": "Row3",
+                  "width": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "K8p3TH",
+                      "name": "Central audit activity",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "YS2uu",
+                          "name": "Central audit scope",
+                          "fill": "$muted",
+                          "content": "Central Gameplane audit activity",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "frame",
+                          "id": "IhEu2",
+                          "name": "Recent Activity Card",
+                          "width": "fill_container",
+                          "fill": "$surface/surface",
+                          "cornerRadius": "$radius/3xl",
+                          "stroke": "$border/border",
+                          "strokeWidth": 1,
+                          "strokeAlignment": "inner",
+                          "effect": {
+                            "type": "shadow",
+                            "shadowType": "outer",
+                            "color": "#0000000A",
+                            "offset": {
+                              "x": 0,
+                              "y": 2
+                            },
+                            "blur": 4
+                          },
+                          "layout": "vertical",
+                          "gap": 12,
+                          "padding": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "bUuCK",
+                              "name": "Header",
+                              "width": "fill_container",
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "V6LuQD",
+                                  "name": "title",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Recent activity",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "a5VbzV",
+                                  "name": "link",
+                                  "fill": "$accent/accent",
+                                  "content": "View all",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "W0p8pu",
+                              "name": "Content",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "eAC5T",
+                                  "name": "anonymous created-4h ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "ViwcI",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "lciyY",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "hh61z",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "CT4pX",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "xsdZ4",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "r75RcD",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "4h ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "bul6Z",
+                                  "name": "admin created-18h ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "dUviB",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "hVsy7",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "EOHQr",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "HMjal",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "admin created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "Y9R0c2",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /servers",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "i60vAz",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "18h ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "nxuKK",
+                                  "name": "anonymous created-22h ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "zNIzy",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "qypFe",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "B4jH3m",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "QZFNp",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "otBBJ",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "M48Ze",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "22h ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "W6hX1O",
+                                  "name": "anonymous created-1d ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "YBw2I",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "jYZhF",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "kXmT3",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "z09x3a",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "B01Xa",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "jMU20",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "1d ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "g9CMr",
+                                  "name": "anonymous created-1d ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "RoY79",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "z1ImCY",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "tOx2y",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "ldBF7",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "H2Fxj6",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "EyWlk",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "1d ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "L6QZba",
+                      "name": "Recent Backups Card",
+                      "width": "fill_container",
+                      "height": 353,
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "uUt7L",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "xNVj0",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Recent backups",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "AhXv3",
+                              "name": "link",
+                              "fill": "$accent/accent",
+                              "content": "View all",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "n4Rzpy",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "height": "fill_container",
+                          "layout": "vertical",
+                          "padding": [
+                            40,
+                            24
+                          ],
+                          "justifyContent": "center",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "qfhEB",
+                              "name": "empty",
+                              "fill": "$muted",
+                              "content": "No backups yet.",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "l7TRz9",
+      "x": 11480,
+      "y": 25404,
+      "name": "Screen/Admin Settings — Telemetry (default)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 1031,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "VJan2",
+          "type": "ref",
+          "ref": "kKFX9",
+          "height": "fill_container",
+          "descendants": {
+            "iTbd8": {
+              "fill": "#00000000"
+            },
+            "iTbd8/ghUsw": {
+              "fill": "$foreground/foreground"
+            },
+            "iTbd8/bpSQ7": {
+              "fill": "$foreground/foreground"
+            },
+            "ya5KB": {
+              "fill": "$accent/soft"
+            },
+            "ya5KB/Sr2Q5": {
+              "fill": "$accent/soft-foreground"
+            },
+            "ya5KB/Ra9NK": {
+              "fill": "$accent/soft-foreground"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "f0b9q",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "YCCTY",
+              "type": "ref",
+              "ref": "gu5WY",
+              "width": "fill_container",
+              "descendants": {
+                "Gl7AY": {
+                  "content": "Settings"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "KDu8M",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 24,
+              "children": [
+                {
+                  "id": "ckrv3",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "width": "fill_container",
+                  "descendants": {
+                    "spCmk": {
+                      "content": "Admin settings"
+                    },
+                    "VbHwU": {
+                      "content": "Platform-wide configuration for this Gameplane instance."
+                    },
+                    "TgdLz": {
+                      "enabled": false
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "aRwmV",
+                  "name": "Settings Layout",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "id": "bBTbp",
+                      "type": "ref",
+                      "ref": "Mp7Ep",
+                      "name": "Settings Nav",
+                      "width": 220,
+                      "descendants": {
+                        "eIjoV": {
+                          "fill": "#00000000"
+                        },
+                        "ZPLSA": {
+                          "fill": "$surface/secondary"
+                        }
+                      }
+                    },
+                    {
+                      "id": "k6Yt5",
+                      "type": "ref",
+                      "ref": "XDZ0E",
+                      "name": "Settings Panel",
+                      "width": "fill_container",
+                      "children": [
+                        {
+                          "id": "eJnTo",
+                          "type": "ref",
+                          "ref": "FRpsu",
+                          "name": "Card Header",
+                          "descendants": {
+                            "fuZHB": {
+                              "content": "Telemetry"
+                            },
+                            "BZG9o": {
+                              "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                            }
+                          }
+                        },
+                        {
+                          "type": "frame",
+                          "id": "akS4L",
+                          "name": "Card Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "viQWf",
+                              "name": "destinationRow",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "gap": 12,
+                              "padding": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "H0uGxR",
+                                  "name": "destIcon",
+                                  "width": 20,
+                                  "height": 20,
+                                  "icon": "globe",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$accent/soft-foreground"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "jXaCa",
+                                  "name": "destText",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "FkDph",
+                                      "name": "host",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Sending to telemetry.gameplane.net",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "VcHN2",
+                                      "name": "destDetail",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "The Gameplane project's telemetry service.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "GXzqz",
+                                  "type": "ref",
+                                  "ref": "kGH2O",
+                                  "name": "destChip",
+                                  "descendants": {
+                                    "O1PqF5": {
+                                      "content": "Project default"
+                                    }
+                                  }
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "kz2Hz",
+                                  "name": "destStatement",
+                                  "fill": "$foreground/link",
+                                  "content": "Data-handling statement",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "600"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "oiqgN",
+                              "name": "telemetryRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "a5Gz9E",
+                                  "name": "labelCol",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "w6elN",
+                                      "name": "Label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send basic usage metrics",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "oOnYs",
+                                      "name": "Description",
+                                      "fill": "$muted",
+                                      "content": "Gameplane version, number of servers and number of templates.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "mt1Jr",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "basicSwitch"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "iDkU7",
+                              "name": "extendedRow",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "G3kwa",
+                                  "name": "extRowInner",
+                                  "width": "fill_container",
+                                  "gap": 16,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "eqcqd",
+                                      "name": "extLabelCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "l5jHVa",
+                                          "name": "extLabel",
+                                          "fill": "$foreground/foreground",
+                                          "content": "Send extended usage metrics",
+                                          "fontFamily": "Inter",
+                                          "fontSize": 14,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "mCOpV",
+                                          "name": "extDescription",
+                                          "fill": "$muted",
+                                          "textGrowth": "fixed-width",
+                                          "width": "fill_container",
+                                          "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                          "lineHeight": 1.5,
+                                          "fontFamily": "Inter",
+                                          "fontSize": 12,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "id": "p9TqED",
+                                      "type": "ref",
+                                      "ref": "hl7R3",
+                                      "name": "extendedSwitch"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "G6UKye",
+                              "name": "installIdRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "N8PiP7",
+                                  "name": "installIdCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "nQFKU",
+                                      "name": "installIdLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "G1enxe",
+                                      "name": "installIdValue",
+                                      "fill": "$foreground/foreground",
+                                      "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "iOxRj",
+                                      "name": "installIdHelp",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "RYoue",
+                                  "type": "ref",
+                                  "ref": "d5N3W3",
+                                  "name": "resetIdBtn",
+                                  "descendants": {
+                                    "X3iEI": {
+                                      "enabled": false
+                                    },
+                                    "i3zB62/zMNkR": {
+                                      "content": "Reset ID"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "cvxBf",
+                              "name": "previewBlock",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "fl698",
+                                  "name": "previewLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Next report preview",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "MUfXb",
+                                  "name": "previewHelp",
+                                  "fill": "$muted",
+                                  "content": "Exactly what the next report contains. Read-only.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "tRekr",
+                                  "name": "previewCode",
+                                  "width": "fill_container",
+                                  "fill": "$surface/secondary",
+                                  "cornerRadius": 8,
+                                  "stroke": "$border/border",
+                                  "strokeWidth": 1,
+                                  "strokeAlignment": "inner",
+                                  "layout": "vertical",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "Q5r0x",
+                                      "name": "previewJson",
+                                      "fill": "$foreground/foreground",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 3,\n  \"templates\": 7,\n  \"ext\": {\n    \"schema\": 1,\n    \"installId\": \"3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10\",\n    \"env\": { \"k8s\": \"1.31\", \"distro\": \"k3s\", \"arch\": [\"amd64\"], \"nodes\": \"1\" },\n    \"games\": { \"official\": { \"minecraft-java\": 2, \"terraria\": 1 }, \"custom\": 0 },\n    \"features\": {\n      \"wakeOnConnect\": true, \"tunnels\": [\"playit\"], \"capture\": false,\n      \"backups\": true, \"sso\": false, \"auditForwarding\": false,\n      \"clusters\": \"1\", \"db\": \"sqlite\", \"language\": \"en\"\n    },\n    \"key\": \"pV0mY3Qn8wK2b7cXlR4sTt9uJ1eHaZ6dFgQmNoP5rSk\",\n    \"sentAt\": \"2026-10-06T09:12:44Z\"\n  }\n}",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "xUV9o",
+                              "name": "statusRow",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "r8eVe",
+                                  "name": "statusIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "circle-check",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$success/soft-foreground"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "v07BWT",
+                                  "name": "statusText",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "vvERC",
+                          "name": "Card Actions",
+                          "width": "fill_container",
+                          "justifyContent": "end",
+                          "children": [
+                            {
+                              "id": "XzN1k",
+                              "type": "ref",
+                              "ref": "tpKRk",
+                              "name": "Btn Save Changes",
+                              "descendants": {
+                                "q58In/Xpn7K": {
+                                  "enabled": false
+                                },
+                                "q58In/U6q13B": {
+                                  "content": "Save changes"
+                                }
+                              }
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "GR1G9",
+      "x": 14760,
+      "y": 27204,
+      "name": "Screen/Dashboard Home — Telemetry notice (bundled)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 1380,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "O7GOL",
+          "type": "ref",
+          "ref": "kKFX9",
+          "name": "App Sidebar",
+          "height": "fill_container"
+        },
+        {
+          "type": "frame",
+          "id": "q8Uej",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "F9uobE",
+              "type": "ref",
+              "ref": "gu5WY",
+              "name": "Top Bar",
+              "width": "fill_container",
+              "descendants": {
+                "Gb27k": {
+                  "fontFamily": "$typography/font-sans"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "RrWXd",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "fill": "$background/background",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 32,
+              "children": [
+                {
+                  "id": "rj03O",
+                  "type": "ref",
+                  "ref": "lh8p8",
+                  "name": "Telemetry Notice",
+                  "width": "fill_container",
+                  "descendants": {
+                    "dzZwq": {
+                      "content": "gameplane-telemetry-receiver.gameplane.svc",
+                      "name": "host (SAMPLE)"
+                    },
+                    "jCJTc": {
+                      "content": ", the receiver bundled with this install. Reports stay inside your cluster."
+                    }
+                  }
+                },
+                {
+                  "id": "VyEYQ",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "name": "Page Header",
+                  "width": "fill_container",
+                  "descendants": {
+                    "VbHwU": {
+                      "content": "Your game servers and resources across authorized locations."
+                    },
+                    "TgdLz": {
+                      "children": [
+                        {
+                          "id": "bI3je",
+                          "type": "ref",
+                          "ref": "tpKRk",
+                          "name": "Create Server Button",
+                          "descendants": {
+                            "q58In/Xpn7K": {
+                              "library": "lucide",
+                              "icon": "plus"
+                            },
+                            "q58In/U6q13B": {
+                              "content": "Create server"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  }
+                },
+                {
+                  "id": "Dc5TC",
+                  "type": "ref",
+                  "ref": "AT7ya",
+                  "name": "Dashboard location filter",
+                  "width": 240,
+                  "context": "Optional location filter; All locations combines authorized inventory.",
+                  "descendants": {
+                    "cFsFk": {
+                      "content": "All locations",
+                      "fill": "$foreground/foreground"
+                    }
+                  }
+                },
+                {
+                  "id": "A5HcX",
+                  "type": "ref",
+                  "ref": "YF85x",
+                  "name": "Stats Row",
+                  "width": "fill_container",
+                  "descendants": {
+                    "m20CHt/QdcEm": {
+                      "fill": "#000000"
+                    },
+                    "pkvT2/QdcEm": {
+                      "fill": "$chart/stat"
+                    },
+                    "FlXsH/QdcEm": {
+                      "fill": "$chart/stat"
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "Z6jyj",
+                  "name": "Row2",
+                  "width": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "ENX9Y",
+                      "name": "Fleet Status Card",
+                      "width": "fill_container",
+                      "height": 372,
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "e6D5J",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "dX1T5",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Fleet status",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "u0G1MU",
+                              "name": "link",
+                              "fill": "$muted",
+                              "content": "1 servers",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "ZcBsE",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "ugMqf",
+                              "name": "Health Bar",
+                              "clip": true,
+                              "width": "fill_container",
+                              "height": 8,
+                              "fill": "$default/default",
+                              "cornerRadius": 999,
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "id": "sPxJn",
+                                  "name": "Running Segment",
+                                  "fill": "$success/success",
+                                  "width": "fill_container",
+                                  "height": 8
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "D6Jupi",
+                              "name": "Legend",
+                              "gap": 20,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "wqlmt",
+                                  "name": "legend-Running 1",
+                                  "gap": 6,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "b7HqI",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "GHX30",
+                                      "name": "label",
+                                      "fill": "$muted",
+                                      "content": "Running 1",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "eUDfB",
+                                  "name": "legend-Stopped 0",
+                                  "gap": 6,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "HI5Td",
+                                      "name": "dot",
+                                      "fill": "$muted",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "Ga3Nd",
+                                      "name": "label",
+                                      "fill": "$muted",
+                                      "content": "Stopped 0",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "PlhV4",
+                                  "name": "legend-Failed 0",
+                                  "gap": 6,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "Q5FRz0",
+                                      "name": "dot",
+                                      "fill": "$danger/danger",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "kmn6P",
+                                      "name": "label",
+                                      "fill": "$muted",
+                                      "content": "Failed 0",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "dgLC2",
+                              "name": "Attention Section",
+                              "width": "fill_container",
+                              "stroke": "$border/border",
+                              "strokeWidth": {
+                                "top": 1
+                              },
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "gap": 12,
+                              "padding": [
+                                16,
+                                0,
+                                0,
+                                0
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "B1HSUR",
+                                  "name": "attnLabel",
+                                  "fill": "$muted",
+                                  "content": "NEEDS ATTENTION",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "500",
+                                  "letterSpacing": 1
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "XrCOg",
+                                  "name": "healthyRow",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "Uc7Gc",
+                                      "name": "check",
+                                      "width": 16,
+                                      "height": 16,
+                                      "icon": "circle-check",
+                                      "library": "lucide",
+                                      "fill": "$success/success"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "JFJZx",
+                                      "name": "healthyLabel",
+                                      "fill": "$muted",
+                                      "content": "Everything looks healthy.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "wQFe0",
+                      "name": "Cluster Resources Card",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "RBzCd",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "RQqqG",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Cluster resources",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "X4V95B",
+                              "name": "link",
+                              "fill": "$accent/accent",
+                              "content": "View cluster",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "kjAUx",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "NvvbZ",
+                              "name": "Meters",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "GnpUm",
+                                  "name": "CPU Meter",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "eONo0",
+                                      "name": "CPU Row",
+                                      "width": "fill_container",
+                                      "justifyContent": "space_between",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "JxbI7",
+                                          "name": "CPU Label",
+                                          "fill": "$muted",
+                                          "content": "CPU",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "WYkDf",
+                                          "name": "CPU Pct",
+                                          "fill": "$foreground/foreground",
+                                          "content": "0%",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "C6OJo",
+                                      "name": "CPU Bar",
+                                      "clip": true,
+                                      "width": "fill_container",
+                                      "height": 6,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 999,
+                                      "children": [
+                                        {
+                                          "type": "rectangle",
+                                          "cornerRadius": 999,
+                                          "id": "yG4gE",
+                                          "name": "CPU Fill",
+                                          "fill": "$accent/accent",
+                                          "width": 0,
+                                          "height": 6
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "l009rk",
+                                      "name": "CPU Sub",
+                                      "fill": "$muted",
+                                      "content": "0 / 12 cores",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 10,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "rTJqh",
+                                  "name": "Memory Meter",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "Hu1G6",
+                                      "name": "Memory Row",
+                                      "width": "fill_container",
+                                      "justifyContent": "space_between",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "YZJLv",
+                                          "name": "Memory Label",
+                                          "fill": "$muted",
+                                          "content": "Memory",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "MP6GS",
+                                          "name": "Memory Pct",
+                                          "fill": "$foreground/foreground",
+                                          "content": "0%",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "VPvVF",
+                                      "name": "Memory Bar",
+                                      "clip": true,
+                                      "width": "fill_container",
+                                      "height": 6,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 999,
+                                      "children": [
+                                        {
+                                          "type": "rectangle",
+                                          "cornerRadius": 999,
+                                          "id": "MukLA",
+                                          "name": "Memory Fill",
+                                          "fill": "$accent/accent",
+                                          "width": 0,
+                                          "height": 6
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "l1DSuW",
+                                      "name": "Memory Sub",
+                                      "fill": "$muted",
+                                      "content": "0 B / 41 GB",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 10,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "UxbGM",
+                                  "name": "Storage Meter",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "H1AfzY",
+                                      "name": "Storage Row",
+                                      "width": "fill_container",
+                                      "justifyContent": "space_between",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "nOUxN",
+                                          "name": "Storage Label",
+                                          "fill": "$muted",
+                                          "content": "Storage",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "G3Lpz",
+                                          "name": "Storage Pct",
+                                          "fill": "$foreground/foreground",
+                                          "content": "25%",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "IDDuf",
+                                      "name": "Storage Bar",
+                                      "clip": true,
+                                      "width": "fill_container",
+                                      "height": 6,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 999,
+                                      "children": [
+                                        {
+                                          "type": "rectangle",
+                                          "cornerRadius": 999,
+                                          "id": "STiGN",
+                                          "name": "Storage Fill",
+                                          "fill": "$success/success",
+                                          "width": 110,
+                                          "height": 6
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "H0Io3J",
+                              "name": "Nodes Section",
+                              "width": "fill_container",
+                              "stroke": "$border/border",
+                              "strokeWidth": {
+                                "top": 1
+                              },
+                              "strokeAlignment": "inner",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "padding": [
+                                16,
+                                0,
+                                0,
+                                0
+                              ],
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "OEaZr",
+                                  "name": "nodesLabel",
+                                  "fill": "$muted",
+                                  "content": "NODES",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 10,
+                                  "fontWeight": "500",
+                                  "letterSpacing": 1
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "lwjSY",
+                                  "name": "Node kubelab-control",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "Dwcel",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "OUMiG",
+                                      "name": "name",
+                                      "fill": "$foreground/foreground",
+                                      "content": "kubelab-control",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "UP0qr",
+                                      "name": "meta",
+                                      "fill": "$muted",
+                                      "content": "0 pods · cpu 0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ZcZng",
+                                  "name": "Node kubelab-worker-1",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "KhH6P",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "n8EFt",
+                                      "name": "name",
+                                      "fill": "$foreground/foreground",
+                                      "content": "kubelab-worker-1",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "LOgVF",
+                                      "name": "meta",
+                                      "fill": "$muted",
+                                      "content": "0 pods · cpu 0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Zf5lJ",
+                                  "name": "Node kubelab-worker-2",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "ellipse",
+                                      "id": "qZljR",
+                                      "name": "dot",
+                                      "fill": "$success/success",
+                                      "width": 8,
+                                      "height": 8
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "YW9QB",
+                                      "name": "name",
+                                      "fill": "$foreground/foreground",
+                                      "content": "kubelab-worker-2",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "OP98d",
+                                      "name": "meta",
+                                      "fill": "$muted",
+                                      "content": "0 pods · cpu 0%",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "sW8cJ",
+                  "name": "Row3",
+                  "width": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "lQ9GL",
+                      "name": "Central audit activity",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "NAugs",
+                          "name": "Central audit scope",
+                          "fill": "$muted",
+                          "content": "Central Gameplane audit activity",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "frame",
+                          "id": "l5q0j",
+                          "name": "Recent Activity Card",
+                          "width": "fill_container",
+                          "fill": "$surface/surface",
+                          "cornerRadius": "$radius/3xl",
+                          "stroke": "$border/border",
+                          "strokeWidth": 1,
+                          "strokeAlignment": "inner",
+                          "effect": {
+                            "type": "shadow",
+                            "shadowType": "outer",
+                            "color": "#0000000A",
+                            "offset": {
+                              "x": 0,
+                              "y": 2
+                            },
+                            "blur": 4
+                          },
+                          "layout": "vertical",
+                          "gap": 12,
+                          "padding": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "qLKyP",
+                              "name": "Header",
+                              "width": "fill_container",
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "qjUgW",
+                                  "name": "title",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Recent activity",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "D4451",
+                                  "name": "link",
+                                  "fill": "$accent/accent",
+                                  "content": "View all",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "HzLFF",
+                              "name": "Content",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "WJ0bg",
+                                  "name": "anonymous created-4h ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "EMapf",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "d4jMS",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "MuQeY",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "yps5n",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "NEnAQ",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "S8oW3",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "4h ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "JsY8j",
+                                  "name": "admin created-18h ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "TurTP",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "u8Qks",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "m50ubv",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "EkV3J",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "admin created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "zSLBZ",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /servers",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "rTfEb",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "18h ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Mxfl0",
+                                  "name": "anonymous created-22h ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "S9q3k",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "TYuis",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "e1lo31",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "ucppN",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "QddRu",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "t0Y6V",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "22h ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "hpmri",
+                                  "name": "anonymous created-1d ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "mXJFx",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "KnnKk",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "lSme8",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "SBjrl",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "ZkXuD",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "btIk1",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "1d ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "l6D3NG",
+                                  "name": "anonymous created-1d ago",
+                                  "width": "fill_container",
+                                  "gap": 12,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "gEcki",
+                                      "name": "iconBox",
+                                      "width": 28,
+                                      "height": 28,
+                                      "fill": "$default/default",
+                                      "cornerRadius": 6,
+                                      "justifyContent": "center",
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "icon",
+                                          "id": "TJUXX",
+                                          "name": "plus",
+                                          "width": 14,
+                                          "height": 14,
+                                          "icon": "plus",
+                                          "library": "lucide",
+                                          "fill": "$success/success"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "frame",
+                                      "id": "wyy4o",
+                                      "name": "textCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "H18z3",
+                                          "name": "title",
+                                          "fill": "$foreground/foreground",
+                                          "content": "anonymous created",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 14,
+                                          "fontWeight": "600"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "N4s2yN",
+                                          "name": "path",
+                                          "fill": "$muted",
+                                          "content": "POST /auth/login",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "T8r0yY",
+                                      "name": "time",
+                                      "fill": "$muted",
+                                      "content": "1d ago",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "ugPLs",
+                      "name": "Recent Backups Card",
+                      "width": "fill_container",
+                      "height": 353,
+                      "fill": "$surface/surface",
+                      "cornerRadius": "$radius/3xl",
+                      "stroke": "$border/border",
+                      "strokeWidth": 1,
+                      "strokeAlignment": "inner",
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000A",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      },
+                      "layout": "vertical",
+                      "gap": 12,
+                      "padding": 16,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "hYoyr",
+                          "name": "Header",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "i9jhMf",
+                              "name": "title",
+                              "fill": "$foreground/foreground",
+                              "content": "Recent backups",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "text",
+                              "id": "uRvCC",
+                              "name": "link",
+                              "fill": "$accent/accent",
+                              "content": "View all",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 12,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "v0DIq",
+                          "name": "Content",
+                          "width": "fill_container",
+                          "height": "fill_container",
+                          "layout": "vertical",
+                          "padding": [
+                            40,
+                            24
+                          ],
+                          "justifyContent": "center",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "C17hb",
+                              "name": "empty",
+                              "fill": "$muted",
+                              "content": "No backups yet.",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 14,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "r0heh",
+      "x": 13120,
+      "y": 25404,
+      "name": "Screen/Admin Settings — Telemetry (custom)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 1032,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "K4Pd5",
+          "type": "ref",
+          "ref": "kKFX9",
+          "height": "fill_container",
+          "descendants": {
+            "iTbd8": {
+              "fill": "#00000000"
+            },
+            "iTbd8/ghUsw": {
+              "fill": "$foreground/foreground"
+            },
+            "iTbd8/bpSQ7": {
+              "fill": "$foreground/foreground"
+            },
+            "ya5KB": {
+              "fill": "$accent/soft"
+            },
+            "ya5KB/Sr2Q5": {
+              "fill": "$accent/soft-foreground"
+            },
+            "ya5KB/Ra9NK": {
+              "fill": "$accent/soft-foreground"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "p1Tm5",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "wJcHv",
+              "type": "ref",
+              "ref": "gu5WY",
+              "width": "fill_container",
+              "descendants": {
+                "Gl7AY": {
+                  "content": "Settings"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "WeNcI",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 24,
+              "children": [
+                {
+                  "id": "T3U3l2",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "width": "fill_container",
+                  "descendants": {
+                    "spCmk": {
+                      "content": "Admin settings"
+                    },
+                    "VbHwU": {
+                      "content": "Platform-wide configuration for this Gameplane instance."
+                    },
+                    "TgdLz": {
+                      "enabled": false
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "wcqSm",
+                  "name": "Settings Layout",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "id": "VjSvS",
+                      "type": "ref",
+                      "ref": "Mp7Ep",
+                      "name": "Settings Nav",
+                      "width": 220,
+                      "descendants": {
+                        "eIjoV": {
+                          "fill": "#00000000"
+                        },
+                        "ZPLSA": {
+                          "fill": "$surface/secondary"
+                        }
+                      }
+                    },
+                    {
+                      "id": "zMflH",
+                      "type": "ref",
+                      "ref": "XDZ0E",
+                      "name": "Settings Panel",
+                      "width": "fill_container",
+                      "children": [
+                        {
+                          "id": "D0Ayp4",
+                          "type": "ref",
+                          "ref": "FRpsu",
+                          "name": "Card Header",
+                          "descendants": {
+                            "fuZHB": {
+                              "content": "Telemetry"
+                            },
+                            "BZG9o": {
+                              "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                            }
+                          }
+                        },
+                        {
+                          "type": "frame",
+                          "id": "gfaY0",
+                          "name": "Card Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "O4y4o",
+                              "name": "destinationRow",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "gap": 12,
+                              "padding": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "dNVYp",
+                                  "name": "destIcon",
+                                  "width": 20,
+                                  "height": 20,
+                                  "icon": "server",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$accent/soft-foreground"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "dT5O6",
+                                  "name": "destText",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "G6EK4E",
+                                      "name": "destTitle",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Sending to telemetry.corp.example.net",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "ODx5q",
+                                      "name": "destDetail",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Custom destination set by your operator. Nothing is sent to the Gameplane project.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "o0rbrv",
+                                  "type": "ref",
+                                  "ref": "KmZnF",
+                                  "name": "destChip",
+                                  "descendants": {
+                                    "xZ9ah": {
+                                      "content": "Custom"
+                                    }
+                                  }
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "gByiC",
+                                  "name": "destStatement",
+                                  "fill": "$foreground/link",
+                                  "content": "Data-handling statement",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "600"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "v1QNq",
+                              "name": "telemetryRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "z0pC9U",
+                                  "name": "labelCol",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "B0NSMJ",
+                                      "name": "Label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send basic usage metrics",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "EWyuE",
+                                      "name": "Description",
+                                      "fill": "$muted",
+                                      "content": "Gameplane version, number of servers and number of templates.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "Wq49L",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "basicSwitch"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "VHN8K",
+                              "name": "extendedRow",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "vhhM8",
+                                  "name": "extRowInner",
+                                  "width": "fill_container",
+                                  "gap": 16,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "yYPjK",
+                                      "name": "extLabelCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "v1im4",
+                                          "name": "extLabel",
+                                          "fill": "$foreground/foreground",
+                                          "content": "Send extended usage metrics",
+                                          "fontFamily": "Inter",
+                                          "fontSize": 14,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "VwFtD",
+                                          "name": "extDescription",
+                                          "fill": "$muted",
+                                          "textGrowth": "fixed-width",
+                                          "width": "fill_container",
+                                          "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                          "lineHeight": 1.5,
+                                          "fontFamily": "Inter",
+                                          "fontSize": 12,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "id": "z1Fib",
+                                      "type": "ref",
+                                      "ref": "hl7R3",
+                                      "name": "extendedSwitch"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "u3paX",
+                              "name": "installIdRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "KXAIF",
+                                  "name": "installIdCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "XucpG",
+                                      "name": "installIdLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "e7wvLd",
+                                      "name": "installIdValue",
+                                      "fill": "$foreground/foreground",
+                                      "content": "b7e04d12-5a3c-4f98-8d6e-21c9a0f4e7b3",
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "QBqy8",
+                                      "name": "installIdHelp",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "JR2Iq",
+                                  "type": "ref",
+                                  "ref": "d5N3W3",
+                                  "name": "resetIdBtn",
+                                  "descendants": {
+                                    "X3iEI": {
+                                      "enabled": false
+                                    },
+                                    "i3zB62/zMNkR": {
+                                      "content": "Reset ID"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "nKoLh",
+                              "name": "previewBlock",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "svgri",
+                                  "name": "previewLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Next report preview",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "tMdnR",
+                                  "name": "previewHelp",
+                                  "fill": "$muted",
+                                  "content": "Exactly what the next report contains. Read-only.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "l5laXN",
+                                  "name": "previewCode",
+                                  "width": "fill_container",
+                                  "fill": "$surface/secondary",
+                                  "cornerRadius": 8,
+                                  "stroke": "$border/border",
+                                  "strokeWidth": 1,
+                                  "strokeAlignment": "inner",
+                                  "layout": "vertical",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "A8lYG",
+                                      "name": "previewJson",
+                                      "fill": "$foreground/foreground",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 11,\n  \"templates\": 9,\n  \"ext\": {\n    \"schema\": 1,\n    \"installId\": \"b7e04d12-5a3c-4f98-8d6e-21c9a0f4e7b3\",\n    \"env\": { \"k8s\": \"1.30\", \"distro\": \"rke2\", \"arch\": [\"amd64\", \"arm64\"], \"nodes\": \"4-10\" },\n    \"games\": { \"official\": { \"minecraft-java\": 6, \"valheim\": 4 }, \"custom\": 1 },\n    \"features\": {\n      \"wakeOnConnect\": true, \"tunnels\": [\"tailscale\"], \"capture\": false,\n      \"backups\": true, \"sso\": true, \"auditForwarding\": true,\n      \"clusters\": \"2-3\", \"db\": \"postgres\", \"language\": \"en\"\n    },\n    \"key\": \"Zk4t8Wq1nB6xYv3LmP0cRs7dEhJaUo2FgTiNyQ5bXwA\",\n    \"sentAt\": \"2026-10-06T09:12:44Z\"\n  }\n}",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "gs2kZ",
+                              "name": "statusRow",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "uqAgT",
+                                  "name": "statusIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "triangle-alert",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$warning/soft-foreground"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "S1oY8",
+                                  "name": "statusText",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Last attempt failed, will retry. Last successful report: Oct 5, 2026, 09:10 UTC.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "HA1Kb",
+                                  "name": "idReplacedRow",
+                                  "width": "fill_container",
+                                  "gap": 8,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "icon",
+                                      "id": "U0DP6",
+                                      "name": "idReplacedIcon",
+                                      "width": 14,
+                                      "height": 14,
+                                      "icon": "info",
+                                      "library": "lucide",
+                                      "fill": "$accent/soft-foreground"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "VLMbI",
+                                      "name": "idReplacedText",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID replaced on Oct 4, 2026: the destination reported it was in use by another key.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "i4F3Q",
+                          "name": "Card Actions",
+                          "width": "fill_container",
+                          "justifyContent": "end",
+                          "children": [
+                            {
+                              "id": "KLwdf",
+                              "type": "ref",
+                              "ref": "tpKRk",
+                              "name": "Btn Save Changes",
+                              "descendants": {
+                                "q58In/Xpn7K": {
+                                  "enabled": false
+                                },
+                                "q58In/U6q13B": {
+                                  "content": "Save changes"
+                                }
+                              }
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "cDiNb",
+      "x": 14760,
+      "y": 25404,
+      "name": "Screen/Admin Settings — Telemetry (bundled)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 777,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "SZqT4",
+          "type": "ref",
+          "ref": "kKFX9",
+          "height": "fill_container",
+          "descendants": {
+            "iTbd8": {
+              "fill": "#00000000"
+            },
+            "iTbd8/ghUsw": {
+              "fill": "$foreground/foreground"
+            },
+            "iTbd8/bpSQ7": {
+              "fill": "$foreground/foreground"
+            },
+            "ya5KB": {
+              "fill": "$accent/soft"
+            },
+            "ya5KB/Sr2Q5": {
+              "fill": "$accent/soft-foreground"
+            },
+            "ya5KB/Ra9NK": {
+              "fill": "$accent/soft-foreground"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "BPHgi",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "g5b2At",
+              "type": "ref",
+              "ref": "gu5WY",
+              "width": "fill_container",
+              "descendants": {
+                "Gl7AY": {
+                  "content": "Settings"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "mvBQN",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 24,
+              "children": [
+                {
+                  "id": "BxiQJ",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "width": "fill_container",
+                  "descendants": {
+                    "spCmk": {
+                      "content": "Admin settings"
+                    },
+                    "VbHwU": {
+                      "content": "Platform-wide configuration for this Gameplane instance."
+                    },
+                    "TgdLz": {
+                      "enabled": false
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "qxsMk",
+                  "name": "Settings Layout",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "id": "x3FpWK",
+                      "type": "ref",
+                      "ref": "Mp7Ep",
+                      "name": "Settings Nav",
+                      "width": 220,
+                      "descendants": {
+                        "eIjoV": {
+                          "fill": "#00000000"
+                        },
+                        "ZPLSA": {
+                          "fill": "$surface/secondary"
+                        }
+                      }
+                    },
+                    {
+                      "id": "j3yT8",
+                      "type": "ref",
+                      "ref": "XDZ0E",
+                      "name": "Settings Panel",
+                      "width": "fill_container",
+                      "children": [
+                        {
+                          "id": "MecVG",
+                          "type": "ref",
+                          "ref": "FRpsu",
+                          "name": "Card Header",
+                          "descendants": {
+                            "fuZHB": {
+                              "content": "Telemetry"
+                            },
+                            "BZG9o": {
+                              "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                            }
+                          }
+                        },
+                        {
+                          "type": "frame",
+                          "id": "qm0J5",
+                          "name": "Card Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "HSFqE",
+                              "name": "destinationRow",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "gap": 12,
+                              "padding": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "taRYg",
+                                  "name": "destIcon",
+                                  "width": 20,
+                                  "height": 20,
+                                  "icon": "house",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$accent/soft-foreground"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "LQx4P",
+                                  "name": "destText",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "W1Opd",
+                                      "name": "host (SAMPLE)",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Sending to gameplane-telemetry-receiver.gameplane.svc",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "gGGWe",
+                                      "name": "destDetail",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "The receiver bundled with this install. Reports stay inside your cluster.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "cMhI7",
+                                  "type": "ref",
+                                  "ref": "UOoQW",
+                                  "name": "destChip",
+                                  "descendants": {
+                                    "YXoPG": {
+                                      "content": "Bundled"
+                                    }
+                                  }
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "ICsn1",
+                                  "name": "destStatement",
+                                  "fill": "$foreground/link",
+                                  "content": "Data-handling statement",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "600"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "uLcI7",
+                              "name": "telemetryRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "BtYr7",
+                                  "name": "labelCol",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "p9Uxb",
+                                      "name": "Label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send basic usage metrics",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "KQPv9",
+                                      "name": "Description",
+                                      "fill": "$muted",
+                                      "content": "Gameplane version, number of servers and number of templates.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "p25s6",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "basicSwitch"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "g9uOK",
+                              "name": "extendedRow",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "ErWqF",
+                                  "name": "extRowInner",
+                                  "width": "fill_container",
+                                  "gap": 16,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "CWscr",
+                                      "name": "extLabelCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "LwD9N",
+                                          "name": "extLabel",
+                                          "fill": "$foreground/foreground",
+                                          "content": "Send extended usage metrics",
+                                          "fontFamily": "Inter",
+                                          "fontSize": 14,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "nVxtQ",
+                                          "name": "extDescription",
+                                          "fill": "$muted",
+                                          "textGrowth": "fixed-width",
+                                          "width": "fill_container",
+                                          "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                          "lineHeight": 1.5,
+                                          "fontFamily": "Inter",
+                                          "fontSize": 12,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "id": "cwXJ3",
+                                      "type": "ref",
+                                      "ref": "rh2QH",
+                                      "name": "extendedSwitch"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "QRgzv",
+                              "name": "installIdRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "bbsik",
+                                  "name": "installIdCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "JV3Lq",
+                                      "name": "installIdLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "qHRdo",
+                                      "name": "installIdValue",
+                                      "fill": "$muted",
+                                      "content": "No install ID while extended metrics are off.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "QUQwC",
+                                      "x": 0,
+                                      "y": 37,
+                                      "name": "installIdHelp",
+                                      "enabled": false,
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container(740)",
+                                      "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "PD8Zb",
+                                  "type": "ref",
+                                  "ref": "d5N3W3",
+                                  "name": "resetIdBtn",
+                                  "opacity": 0.5,
+                                  "descendants": {
+                                    "X3iEI": {
+                                      "enabled": false
+                                    },
+                                    "i3zB62/zMNkR": {
+                                      "content": "Reset ID"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Xah7Q",
+                              "name": "previewBlock",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "x4Za32",
+                                  "name": "previewLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Next report preview",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "s1Z4Ct",
+                                  "name": "previewHelp",
+                                  "fill": "$muted",
+                                  "content": "Exactly what the next report contains. Read-only.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "TIblz",
+                                  "name": "previewCode",
+                                  "width": "fill_container",
+                                  "fill": "$surface/secondary",
+                                  "cornerRadius": 8,
+                                  "stroke": "$border/border",
+                                  "strokeWidth": 1,
+                                  "strokeAlignment": "inner",
+                                  "layout": "vertical",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "X6n3I",
+                                      "name": "previewJson",
+                                      "fill": "$foreground/foreground",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 5,\n  \"templates\": 7\n}",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "NZYIA",
+                              "name": "statusRow",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "bR4pr",
+                                  "name": "statusIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "clock",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$muted"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "SKyZx",
+                                  "name": "statusText",
+                                  "fill": "$muted",
+                                  "content": "No report sent yet.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "R77io",
+                          "name": "Card Actions",
+                          "width": "fill_container",
+                          "justifyContent": "end",
+                          "children": [
+                            {
+                              "id": "V7JPh",
+                              "type": "ref",
+                              "ref": "tpKRk",
+                              "name": "Btn Save Changes",
+                              "descendants": {
+                                "q58In/Xpn7K": {
+                                  "enabled": false
+                                },
+                                "q58In/U6q13B": {
+                                  "content": "Save changes"
+                                }
+                              }
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "DBQyF",
+      "x": 16400,
+      "y": 25404,
+      "name": "Screen/Admin Settings — Telemetry (disabled)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 641,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "jb2it",
+          "type": "ref",
+          "ref": "kKFX9",
+          "height": "fill_container",
+          "descendants": {
+            "iTbd8": {
+              "fill": "#00000000"
+            },
+            "iTbd8/ghUsw": {
+              "fill": "$foreground/foreground"
+            },
+            "iTbd8/bpSQ7": {
+              "fill": "$foreground/foreground"
+            },
+            "ya5KB": {
+              "fill": "$accent/soft"
+            },
+            "ya5KB/Sr2Q5": {
+              "fill": "$accent/soft-foreground"
+            },
+            "ya5KB/Ra9NK": {
+              "fill": "$accent/soft-foreground"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "CZLXz",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "L5CeQ",
+              "type": "ref",
+              "ref": "gu5WY",
+              "width": "fill_container",
+              "descendants": {
+                "Gl7AY": {
+                  "content": "Settings"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "ZHjUq",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 24,
+              "children": [
+                {
+                  "id": "WaQzQ",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "width": "fill_container",
+                  "descendants": {
+                    "spCmk": {
+                      "content": "Admin settings"
+                    },
+                    "VbHwU": {
+                      "content": "Platform-wide configuration for this Gameplane instance."
+                    },
+                    "TgdLz": {
+                      "enabled": false
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "gnNvq",
+                  "name": "Settings Layout",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "id": "wQExX",
+                      "type": "ref",
+                      "ref": "Mp7Ep",
+                      "name": "Settings Nav",
+                      "width": 220,
+                      "descendants": {
+                        "eIjoV": {
+                          "fill": "#00000000"
+                        },
+                        "ZPLSA": {
+                          "fill": "$surface/secondary"
+                        }
+                      }
+                    },
+                    {
+                      "id": "jigMQ",
+                      "type": "ref",
+                      "ref": "XDZ0E",
+                      "name": "Settings Panel",
+                      "width": "fill_container",
+                      "children": [
+                        {
+                          "id": "uhp7C",
+                          "type": "ref",
+                          "ref": "FRpsu",
+                          "name": "Card Header",
+                          "descendants": {
+                            "fuZHB": {
+                              "content": "Telemetry"
+                            },
+                            "BZG9o": {
+                              "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                            }
+                          }
+                        },
+                        {
+                          "type": "frame",
+                          "id": "T4JamN",
+                          "name": "Card Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "EGOdH",
+                              "name": "destinationRow",
+                              "width": "fill_container",
+                              "fill": "$warning/soft",
+                              "cornerRadius": 8,
+                              "gap": 12,
+                              "padding": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "ZXcWt",
+                                  "name": "destIcon",
+                                  "width": 20,
+                                  "height": 20,
+                                  "icon": "shield-off",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$warning/soft-foreground"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ax0Ht",
+                                  "name": "destText",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "MC4kp",
+                                      "name": "destTitle",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Telemetry is disabled by the operator.",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "Ipare",
+                                      "name": "destDetail",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "No data of either kind is sent and no telemetry destination is contacted, whatever the switches below say. Only an operator can change this, at install time.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "Wcah8",
+                                  "type": "ref",
+                                  "ref": "eg3vM",
+                                  "name": "destChip",
+                                  "descendants": {
+                                    "S2JwD": {
+                                      "content": "Disabled"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "s8V4RQ",
+                              "name": "telemetryRow",
+                              "opacity": 0.5,
+                              "width": "fill_container",
+                              "gap": 16,
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "aD3WD",
+                                  "name": "labelCol",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "e8KSRm",
+                                      "name": "Label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send basic usage metrics",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "UqkyC",
+                                      "name": "Description",
+                                      "fill": "$muted",
+                                      "content": "Gameplane version, number of servers and number of templates.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "pv6u1",
+                                  "type": "ref",
+                                  "ref": "rh2QH",
+                                  "name": "basicSwitch"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "d6UNY",
+                              "name": "extendedRow",
+                              "opacity": 0.5,
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "klsL5",
+                                  "name": "extRowInner",
+                                  "width": "fill_container",
+                                  "gap": 16,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "PksiU",
+                                      "name": "extLabelCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "eF5fz",
+                                          "name": "extLabel",
+                                          "fill": "$foreground/foreground",
+                                          "content": "Send extended usage metrics",
+                                          "fontFamily": "Inter",
+                                          "fontSize": 14,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "mFzAM",
+                                          "name": "extDescription",
+                                          "fill": "$muted",
+                                          "textGrowth": "fixed-width",
+                                          "width": "fill_container",
+                                          "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                          "lineHeight": 1.5,
+                                          "fontFamily": "Inter",
+                                          "fontSize": 12,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "id": "lKdlx",
+                                      "type": "ref",
+                                      "ref": "rh2QH",
+                                      "name": "extendedSwitch"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Q5cSk8",
+                              "x": 0,
+                              "y": 218,
+                              "name": "installIdRow",
+                              "enabled": false,
+                              "width": "fill_container(856)",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "QUqUt",
+                                  "name": "installIdCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "c62rOD",
+                                      "name": "installIdLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "Cec0C",
+                                      "name": "installIdValue",
+                                      "fill": "$foreground/foreground",
+                                      "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "wxRQV",
+                                      "name": "installIdHelp",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "BnNus",
+                                  "type": "ref",
+                                  "ref": "d5N3W3",
+                                  "name": "resetIdBtn",
+                                  "descendants": {
+                                    "i3zB62/zMNkR": {
+                                      "content": "Reset ID"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "wyQ2s",
+                              "name": "previewBlock",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "dDFBA",
+                                  "name": "previewLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Next report preview",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "d791Wi",
+                                  "name": "previewHelp",
+                                  "fill": "$muted",
+                                  "content": "Exactly what the next report contains. Read-only.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "thVid",
+                                  "name": "previewCode",
+                                  "width": "fill_container",
+                                  "fill": "$surface/secondary",
+                                  "cornerRadius": 8,
+                                  "stroke": "$border/border",
+                                  "strokeWidth": 1,
+                                  "strokeAlignment": "inner",
+                                  "layout": "vertical",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "c1wLHW",
+                                      "name": "previewJson",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Nothing to preview: telemetry is disabled by the operator.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Geist",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "h4t9WP",
+                              "x": 0,
+                              "y": 395,
+                              "name": "statusRow",
+                              "enabled": false,
+                              "width": "fill_container(856)",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "xpROA",
+                                  "name": "statusIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "circle-check",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$success/soft-foreground"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "U0Eb0P",
+                                  "name": "statusText",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "qHqUB",
+                          "name": "Card Actions",
+                          "width": "fill_container",
+                          "justifyContent": "end",
+                          "children": [
+                            {
+                              "id": "Eq31M",
+                              "type": "ref",
+                              "ref": "tpKRk",
+                              "name": "Btn Save Changes",
+                              "opacity": 0.5,
+                              "descendants": {
+                                "q58In/Xpn7K": {
+                                  "enabled": false
+                                },
+                                "q58In/U6q13B": {
+                                  "content": "Save changes"
+                                }
+                              }
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "K5XinZ",
+      "x": 18040,
+      "y": 25404,
+      "name": "Screen/Admin Settings — Telemetry (none)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 605,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "vrJqn",
+          "type": "ref",
+          "ref": "kKFX9",
+          "height": "fill_container",
+          "descendants": {
+            "iTbd8": {
+              "fill": "#00000000"
+            },
+            "iTbd8/ghUsw": {
+              "fill": "$foreground/foreground"
+            },
+            "iTbd8/bpSQ7": {
+              "fill": "$foreground/foreground"
+            },
+            "ya5KB": {
+              "fill": "$accent/soft"
+            },
+            "ya5KB/Sr2Q5": {
+              "fill": "$accent/soft-foreground"
+            },
+            "ya5KB/Ra9NK": {
+              "fill": "$accent/soft-foreground"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "ZDPAQ",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "aaM6h",
+              "type": "ref",
+              "ref": "gu5WY",
+              "width": "fill_container",
+              "descendants": {
+                "Gl7AY": {
+                  "content": "Settings"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "MSfvx",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 24,
+              "children": [
+                {
+                  "id": "K6vVa",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "width": "fill_container",
+                  "descendants": {
+                    "spCmk": {
+                      "content": "Admin settings"
+                    },
+                    "VbHwU": {
+                      "content": "Platform-wide configuration for this Gameplane instance."
+                    },
+                    "TgdLz": {
+                      "enabled": false
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "M4Uamg",
+                  "name": "Settings Layout",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "id": "KnZmD",
+                      "type": "ref",
+                      "ref": "Mp7Ep",
+                      "name": "Settings Nav",
+                      "width": 220,
+                      "descendants": {
+                        "eIjoV": {
+                          "fill": "#00000000"
+                        },
+                        "ZPLSA": {
+                          "fill": "$surface/secondary"
+                        }
+                      }
+                    },
+                    {
+                      "id": "jXdYm",
+                      "type": "ref",
+                      "ref": "XDZ0E",
+                      "name": "Settings Panel",
+                      "width": "fill_container",
+                      "children": [
+                        {
+                          "id": "ZjXwf",
+                          "type": "ref",
+                          "ref": "FRpsu",
+                          "name": "Card Header",
+                          "descendants": {
+                            "fuZHB": {
+                              "content": "Telemetry"
+                            },
+                            "BZG9o": {
+                              "content": "Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
+                            }
+                          }
+                        },
+                        {
+                          "type": "frame",
+                          "id": "usPX3",
+                          "name": "Card Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "FR1sB",
+                              "name": "destinationRow",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "gap": 12,
+                              "padding": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "Lf5Va",
+                                  "name": "destIcon",
+                                  "width": 20,
+                                  "height": 20,
+                                  "icon": "circle-slash",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$accent/soft-foreground"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Irbib",
+                                  "name": "destText",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "t67L2",
+                                      "name": "destTitle",
+                                      "fill": "$foreground/foreground",
+                                      "content": "No telemetry destination configured.",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "NHeZ1",
+                                      "name": "destDetail",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Nothing is sent. An operator can set a custom or bundled destination at install time.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "TGqWC",
+                                  "type": "ref",
+                                  "ref": "KmZnF",
+                                  "name": "destChip",
+                                  "descendants": {
+                                    "xZ9ah": {
+                                      "content": "No destination"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "u5uN6",
+                              "name": "telemetryRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "qKiFo",
+                                  "name": "labelCol",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "E3CsS",
+                                      "name": "Label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send basic usage metrics",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "w7LUN",
+                                      "name": "Description",
+                                      "fill": "$muted",
+                                      "content": "Gameplane version, number of servers and number of templates.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "L9Gg2H",
+                                  "type": "ref",
+                                  "ref": "rh2QH",
+                                  "name": "basicSwitch"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "YZ8M5",
+                              "name": "extendedRow",
+                              "opacity": 0.5,
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "MEKOs",
+                                  "name": "extRowInner",
+                                  "width": "fill_container",
+                                  "gap": 16,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "G8uxgg",
+                                      "name": "extLabelCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "yop7K",
+                                          "name": "extLabel",
+                                          "fill": "$foreground/foreground",
+                                          "content": "Send extended usage metrics",
+                                          "fontFamily": "Inter",
+                                          "fontSize": 14,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "DT5P1",
+                                          "name": "extDescription",
+                                          "fill": "$muted",
+                                          "textGrowth": "fixed-width",
+                                          "width": "fill_container",
+                                          "content": "Turn on basic usage metrics to enable extended usage metrics.",
+                                          "lineHeight": 1.5,
+                                          "fontFamily": "Inter",
+                                          "fontSize": 12,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "id": "dy9DZ",
+                                      "type": "ref",
+                                      "ref": "rh2QH",
+                                      "name": "extendedSwitch"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "j18F4n",
+                              "x": 0,
+                              "y": 182,
+                              "name": "installIdRow",
+                              "enabled": false,
+                              "width": "fill_container(856)",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "Y1pNB",
+                                  "name": "installIdCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "VY8NU",
+                                      "name": "installIdLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "a9Y6S",
+                                      "name": "installIdValue",
+                                      "fill": "$foreground/foreground",
+                                      "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "KNGZo",
+                                      "name": "installIdHelp",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "Xe5vb",
+                                  "type": "ref",
+                                  "ref": "d5N3W3",
+                                  "name": "resetIdBtn",
+                                  "descendants": {
+                                    "i3zB62/zMNkR": {
+                                      "content": "Reset ID"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "a13SoT",
+                              "name": "previewBlock",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "acf1z",
+                                  "name": "previewLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Next report preview",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "kjTTh",
+                                  "name": "previewHelp",
+                                  "fill": "$muted",
+                                  "content": "Exactly what the next report contains. Read-only.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "o5GCW",
+                                  "name": "previewCode",
+                                  "width": "fill_container",
+                                  "fill": "$surface/secondary",
+                                  "cornerRadius": 8,
+                                  "stroke": "$border/border",
+                                  "strokeWidth": 1,
+                                  "strokeAlignment": "inner",
+                                  "layout": "vertical",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "ZZcKL",
+                                      "name": "previewJson",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Nothing to preview: no destination is configured.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Geist",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Q3IStt",
+                              "x": 0,
+                              "y": 359,
+                              "name": "statusRow",
+                              "enabled": false,
+                              "width": "fill_container(856)",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "U6DNh",
+                                  "name": "statusIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "circle-check",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$success/soft-foreground"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "Vlhfy",
+                                  "name": "statusText",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "MxFTb",
+                          "name": "Card Actions",
+                          "width": "fill_container",
+                          "justifyContent": "end",
+                          "children": [
+                            {
+                              "id": "oHhoP",
+                              "type": "ref",
+                              "ref": "tpKRk",
+                              "name": "Btn Save Changes",
+                              "descendants": {
+                                "q58In/Xpn7K": {
+                                  "enabled": false
+                                },
+                                "q58In/U6q13B": {
+                                  "content": "Save changes"
+                                }
+                              }
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "yrxK2",
+      "x": 19680,
+      "y": 25404,
+      "name": "Screen/Admin Settings — Telemetry (Reset ID confirm)",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 1031,
+      "fill": "$background/background",
+      "children": [
+        {
+          "id": "SyZg9",
+          "type": "ref",
+          "ref": "kKFX9",
+          "height": "fill_container",
+          "descendants": {
+            "iTbd8": {
+              "fill": "#00000000"
+            },
+            "iTbd8/ghUsw": {
+              "fill": "$foreground/foreground"
+            },
+            "iTbd8/bpSQ7": {
+              "fill": "$foreground/foreground"
+            },
+            "ya5KB": {
+              "fill": "$accent/soft"
+            },
+            "ya5KB/Sr2Q5": {
+              "fill": "$accent/soft-foreground"
+            },
+            "ya5KB/Ra9NK": {
+              "fill": "$accent/soft-foreground"
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "qv0OX",
+          "name": "Main",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "children": [
+            {
+              "id": "h84EC",
+              "type": "ref",
+              "ref": "gu5WY",
+              "width": "fill_container",
+              "descendants": {
+                "Gl7AY": {
+                  "content": "Settings"
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "GcIdA",
+              "name": "Body",
+              "width": "fill_container",
+              "height": "fill_container",
+              "layout": "vertical",
+              "gap": 24,
+              "padding": 24,
+              "children": [
+                {
+                  "id": "b1lOS",
+                  "type": "ref",
+                  "ref": "xCDF7",
+                  "width": "fill_container",
+                  "descendants": {
+                    "spCmk": {
+                      "content": "Admin settings"
+                    },
+                    "VbHwU": {
+                      "content": "Platform-wide configuration for this Gameplane instance."
+                    },
+                    "TgdLz": {
+                      "enabled": false
+                    }
+                  }
+                },
+                {
+                  "type": "frame",
+                  "id": "Ibs1J",
+                  "name": "Settings Layout",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "gap": 24,
+                  "children": [
+                    {
+                      "id": "MNnEE",
+                      "type": "ref",
+                      "ref": "Mp7Ep",
+                      "name": "Settings Nav",
+                      "width": 220,
+                      "descendants": {
+                        "eIjoV": {
+                          "fill": "#00000000"
+                        },
+                        "ZPLSA": {
+                          "fill": "$surface/secondary"
+                        }
+                      }
+                    },
+                    {
+                      "id": "vGL2p",
+                      "type": "ref",
+                      "ref": "XDZ0E",
+                      "name": "Settings Panel",
+                      "width": "fill_container",
+                      "children": [
+                        {
+                          "id": "Mtz0y",
+                          "type": "ref",
+                          "ref": "FRpsu",
+                          "name": "Card Header",
+                          "descendants": {
+                            "fuZHB": {
+                              "content": "Telemetry"
+                            },
+                            "BZG9o": {
+                              "content": "Anonymous usage metrics help us prioritize work."
+                            }
+                          }
+                        },
+                        {
+                          "type": "frame",
+                          "id": "VTiD2",
+                          "name": "Card Content",
+                          "width": "fill_container",
+                          "layout": "vertical",
+                          "gap": 16,
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "ORKLU",
+                              "name": "destinationRow",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "cornerRadius": 8,
+                              "gap": 12,
+                              "padding": 12,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "HbRz7",
+                                  "name": "destIcon",
+                                  "width": 20,
+                                  "height": 20,
+                                  "icon": "globe",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$accent/soft-foreground"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "wHkVS",
+                                  "name": "destText",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "zBl0v",
+                                      "name": "destTitle",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Sending to telemetry.gameplane.net",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "e4DXS",
+                                      "name": "destDetail",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "The Gameplane project's telemetry service.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "nJfig",
+                                  "type": "ref",
+                                  "ref": "kGH2O",
+                                  "name": "destChip",
+                                  "descendants": {
+                                    "O1PqF5": {
+                                      "content": "Project default"
+                                    }
+                                  }
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "dpfwv",
+                                  "name": "destStatement",
+                                  "fill": "$foreground/link",
+                                  "content": "Data-handling statement",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "600"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "s3NIhS",
+                              "name": "telemetryRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "go2el",
+                                  "name": "labelCol",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "whKB6",
+                                      "name": "Label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Send basic usage metrics",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "EGc8u",
+                                      "name": "Description",
+                                      "fill": "$muted",
+                                      "content": "Gameplane version, number of servers and number of templates.",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "ZbFLM",
+                                  "type": "ref",
+                                  "ref": "hl7R3",
+                                  "name": "basicSwitch"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "PBYzs",
+                              "name": "extendedRow",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "sCZf3",
+                                  "name": "extRowInner",
+                                  "width": "fill_container",
+                                  "gap": 16,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "Mfuhy",
+                                      "name": "extLabelCol",
+                                      "width": "fill_container",
+                                      "layout": "vertical",
+                                      "gap": 2,
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "aWWNb",
+                                          "name": "extLabel",
+                                          "fill": "$foreground/foreground",
+                                          "content": "Send extended usage metrics",
+                                          "fontFamily": "Inter",
+                                          "fontSize": 14,
+                                          "fontWeight": "normal"
+                                        },
+                                        {
+                                          "type": "text",
+                                          "id": "UMdYk",
+                                          "name": "extDescription",
+                                          "fill": "$muted",
+                                          "textGrowth": "fixed-width",
+                                          "width": "fill_container",
+                                          "content": "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID.",
+                                          "lineHeight": 1.5,
+                                          "fontFamily": "Inter",
+                                          "fontSize": 12,
+                                          "fontWeight": "normal"
+                                        }
+                                      ]
+                                    },
+                                    {
+                                      "id": "tOUx0",
+                                      "type": "ref",
+                                      "ref": "hl7R3",
+                                      "name": "extendedSwitch"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "CVSFy",
+                              "name": "installIdRow",
+                              "width": "fill_container",
+                              "gap": 16,
+                              "padding": [
+                                0,
+                                0,
+                                0,
+                                24
+                              ],
+                              "justifyContent": "space_between",
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "H3mIM",
+                                  "name": "installIdCol",
+                                  "width": "fill_container",
+                                  "layout": "vertical",
+                                  "gap": 2,
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "zYBBg",
+                                      "name": "installIdLabel",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Install ID",
+                                      "fontFamily": "Inter",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "T8oP2F",
+                                      "name": "installIdValue",
+                                      "fill": "$foreground/foreground",
+                                      "content": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    },
+                                    {
+                                      "type": "text",
+                                      "id": "bjBd7",
+                                      "name": "installIdHelp",
+                                      "fill": "$muted",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "Random and anonymous. Reset it to start reporting under a new ID; the old ID is never sent again.",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "Inter",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "id": "iAK13",
+                                  "type": "ref",
+                                  "ref": "d5N3W3",
+                                  "name": "resetIdBtn",
+                                  "descendants": {
+                                    "X3iEI": {
+                                      "enabled": false
+                                    },
+                                    "i3zB62/zMNkR": {
+                                      "content": "Reset ID"
+                                    }
+                                  }
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "qfypH",
+                              "name": "previewBlock",
+                              "width": "fill_container",
+                              "layout": "vertical",
+                              "gap": 8,
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "c4Gkg",
+                                  "name": "previewLabel",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Next report preview",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 14,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "UWltB",
+                                  "name": "previewHelp",
+                                  "fill": "$muted",
+                                  "content": "Exactly what the next report contains. Read-only.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "DW45f",
+                                  "name": "previewCode",
+                                  "width": "fill_container",
+                                  "fill": "$surface/secondary",
+                                  "cornerRadius": 8,
+                                  "stroke": "$border/border",
+                                  "strokeWidth": 1,
+                                  "strokeAlignment": "inner",
+                                  "layout": "vertical",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "OxLcj",
+                                      "name": "previewJson",
+                                      "fill": "$foreground/foreground",
+                                      "textGrowth": "fixed-width",
+                                      "width": "fill_container",
+                                      "content": "{\n  \"version\": \"0.3.0\",\n  \"servers\": 3,\n  \"templates\": 7,\n  \"ext\": {\n    \"schema\": 1,\n    \"installId\": \"3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10\",\n    \"env\": { \"k8s\": \"1.31\", \"distro\": \"k3s\", \"arch\": [\"amd64\"], \"nodes\": \"1\" },\n    \"games\": { \"official\": { \"minecraft-java\": 2, \"terraria\": 1 }, \"custom\": 0 },\n    \"features\": {\n      \"wakeOnConnect\": true, \"tunnels\": [\"playit\"], \"capture\": false,\n      \"backups\": true, \"sso\": false, \"auditForwarding\": false,\n      \"clusters\": \"1\", \"db\": \"sqlite\", \"language\": \"en\"\n    },\n    \"key\": \"pV0mY3Qn8wK2b7cXlR4sTt9uJ1eHaZ6dFgQmNoP5rSk\",\n    \"sentAt\": \"2026-10-06T09:12:44Z\"\n  }\n}",
+                                      "lineHeight": 1.5,
+                                      "fontFamily": "$typography/font-mono",
+                                      "fontSize": 12,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "FpkUc",
+                              "name": "statusRow",
+                              "width": "fill_container",
+                              "gap": 8,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "icon",
+                                  "id": "Hb6X1",
+                                  "name": "statusIcon",
+                                  "width": 14,
+                                  "height": 14,
+                                  "icon": "circle-check",
+                                  "library": "Material Symbols Rounded",
+                                  "fill": "$success/soft-foreground"
+                                },
+                                {
+                                  "type": "text",
+                                  "id": "oIV6b",
+                                  "name": "statusText",
+                                  "fill": "$foreground/foreground",
+                                  "content": "Last report sent successfully on Oct 6, 2026, 09:12 UTC.",
+                                  "fontFamily": "Inter",
+                                  "fontSize": 12,
+                                  "fontWeight": "normal"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "qIBwu",
+                          "name": "Card Actions",
+                          "width": "fill_container",
+                          "justifyContent": "end",
+                          "children": [
+                            {
+                              "id": "K2cB7L",
+                              "type": "ref",
+                              "ref": "tpKRk",
+                              "name": "Btn Save Changes",
+                              "descendants": {
+                                "q58In/Xpn7K": {
+                                  "enabled": false
+                                },
+                                "q58In/U6q13B": {
+                                  "content": "Save changes"
+                                }
+                              }
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "PWcdt",
+          "layoutPosition": "absolute",
+          "x": 0,
+          "y": 0,
+          "name": "resetScrim",
+          "width": 1440,
+          "height": 1031,
+          "fill": "#00000066",
+          "layout": "vertical",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "id": "g69jZL",
+              "type": "ref",
+              "ref": "TzRet",
+              "name": "Reset ID confirm",
+              "descendants": {
+                "ocSbw": {
+                  "content": "Reset install ID?"
+                },
+                "rs23G": {
+                  "content": "This replaces your random install ID 3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10 with a new one. The old ID is never sent again, and the destination cannot link the old and new IDs. The next report is sent under the new ID."
+                },
+                "RAlJp": {
+                  "content": "Cancel"
+                },
+                "i56eAy": {
+                  "content": "Reset ID"
+                }
+              }
+            }
+          ]
+        }
+      ]
     }
   ],
   "themes": {
diff --git a/docker-bake.hcl b/docker-bake.hcl
index d68662619..0efeedfdd 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -1,10 +1,10 @@
 # Bake definition for the e2e images (used by .github/actions/e2e-images).
-# `docker buildx bake --load e2e` builds all six concurrently — the
+# `docker buildx bake --load e2e` builds all seven concurrently —
 # compile steps are independent, so this cuts image-build wall time versus
 # sequential `docker build`s. Tags match what `make e2e-images` produces
 # and what deploy/kind/e2e.sh loads.
 group "e2e" {
-  targets = ["e2e-operator", "e2e-api", "e2e-agent", "e2e-sentinel", "e2e-capture-sidecar", "e2e-fakeoidc"]
+  targets = ["e2e-operator", "e2e-api", "e2e-agent", "e2e-sentinel", "e2e-capture-sidecar", "e2e-telemetry-receiver", "e2e-fakeoidc"]
 }
 
 target "e2e-operator" {
@@ -37,6 +37,14 @@ target "e2e-capture-sidecar" {
   tags       = ["gameplane-test/capture-sidecar:e2e"]
 }
 
+# The bundled telemetry receiver every e2e cluster deploys (deploy/kind/e2e.sh
+# sets api.telemetry.receiver.enabled=true, spec 022 R17).
+target "e2e-telemetry-receiver" {
+  context    = "."
+  dockerfile = "telemetry-receiver/Dockerfile"
+  tags       = ["gameplane-test/telemetry-receiver:e2e"]
+}
+
 # The fake OIDC issuer every e2e bucket's cluster bring-up points the
 # api Deployment's --oidc-issuer at (deploy/kind/e2e.sh), so it lives in
 # the base "e2e" group rather than being an opt-in target like gameprobe.
diff --git a/docs/agent-architecture.md b/docs/agent-architecture.md
index 7bc68b795..30f794204 100644
--- a/docs/agent-architecture.md
+++ b/docs/agent-architecture.md
@@ -27,6 +27,7 @@ This document is the **first stop** for AI agents modifying or extending Gamepla
 | **Tunnel** | `tunnel/specs.md` | Relay client supervisor for integrating with external tunnels (frp, Tailscale, playit). |
 | **Audit-Syslog-Bridge** | `audit-syslog-bridge/specs.md` | Relay forwarding HTTP JSON audit events to external syslog servers. |
 | **Telemetry-Receiver** | `telemetry-receiver/specs.md` | Ingests and processes anonymous usage telemetry from the API. |
+| **Telemetryschema** | `telemetryschema/specs.md` | Shared telemetry report contract (types, enumerations, strict decode, official module catalog, report signing) used by the API and the telemetry-receiver. |
 | **MCP-Server** | `mcp-server/specs.md` | Read-only Model Context Protocol server exposing cluster state to AI tools. |
 | **Svcutil** | `svcutil/specs.md` | Shared stdlib-only env and graceful-shutdown helpers used by backend components. |
 
diff --git a/docs/architecture.md b/docs/architecture.md
index ee221103a..cc9ccb2fe 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -405,9 +405,18 @@ for the registration flow.
   sentinel uses a generic packets-in-window heuristic instead. See `gameproto/`.
 - **API → audit-syslog-bridge**: HTTP-JSON webhook; the bridge forwards plaintext or TLS syslog to the collector
   for the audit trail, enabled via `api.audit.webhook.syslogBridge.enabled`.
-- **API → telemetry-receiver**: the anonymous daily usage report
-  (admin-toggle gated), auto-wired via `api.telemetry.receiver.enabled` or
-  aimed at an external URL via `api.telemetry.endpoint`.
+- **API → telemetry-receiver**: the daily usage report, in a basic tier
+  (version, server and template counts) and an extended tier (adds a random
+  install ID, environment, game and feature categories, and an Ed25519
+  signature). New installs send both by default after a first-login notice;
+  each tier has its own admin toggle, and `api.telemetry.enabled=false`
+  disables sending entirely. An empty `api.telemetry.endpoint` means the
+  project's default receiver (`telemetry.gameplane.net`); the bundled receiver
+  (`api.telemetry.receiver.enabled`) and any other URL replace it. The
+  receiver keeps daily aggregates in SQLite, serves a token-protected
+  dashboard on a separate port, and can expose a public five-count summary.
+  See [install.md](install.md#telemetry) and
+  [telemetry-provider.md](telemetry-provider.md).
 - **Operator → capture-sidecar [optional]**: network packet capture sidecar
   injected into game pods as an ephemeral container; captures AF_PACKET frames
   matching a BPF filter to PCAPNG output, exposed via mTLS on port `:9091`.
diff --git a/docs/dependencies.md b/docs/dependencies.md
index b6db502b1..791b5e12d 100644
--- a/docs/dependencies.md
+++ b/docs/dependencies.md
@@ -1,9 +1,9 @@
 # Dependency report
 
 This is a component-by-component inventory of Gameplane's third-party
-dependencies and why each one is there. It covers all 15 Go modules that
-share `go.work` (`netguard`, `gameaction`, `gameproto`, `svcutil`,
-`operator`, `api`, `agent`, `audit-syslog-bridge` [optional],
+dependencies and why each one is there. It covers all 16 Go modules that
+share `go.work` (`netguard`, `gameaction`, `gameproto`, `telemetryschema`,
+`svcutil`, `operator`, `api`, `agent`, `audit-syslog-bridge` [optional],
 `telemetry-receiver` [optional], `sentinel` [optional],
 `capture-sidecar` [optional], `tunnel` [optional], `gp-module`,
 `mcp-server` [optional], `test/e2e`), the
@@ -39,6 +39,7 @@ were added and verified on **2026-09-26**.
 | `netguard/` | Go | 0 (stdlib only) | Shared SSRF dial-guard used by the operator and agent |
 | `gameaction/` | Go | 0 (stdlib only) | Shared console-injection guard + command-template renderer used by the agent and API |
 | `gameproto/` | Go | 0 (stdlib only) | Shared Minecraft/Terraria handshake classifier used by sentinel |
+| `telemetryschema/` | Go | 0 (stdlib only) | Shared telemetry report contract (types, strict decoder, official module catalog, report signing) used by the API reporter and the telemetry receiver |
 | `svcutil/` | Go | 0 (stdlib only) | Shared env-parsing + graceful-shutdown helpers (no active importers yet) |
 | `operator/` | Go | 19 | controller-runtime reconciler for the 8 CRDs; module OCI pull/verify, git/OCI fetch, restic-backup scheduling |
 | `api/` | Go | 17 | chi REST + WebSocket gateway: auth (local + OIDC), RBAC, K8s client, SQLite/Postgres persistence, notifications |
@@ -103,6 +104,22 @@ Imported by:
 
 Also a local `replace` module (`replace github.com/GameplanePanel/gameplane/gameproto => ../gameproto` in `sentinel/go.mod`); same Dockerfile `COPY` requirement as netguard.
 
+### telemetryschema
+
+`telemetryschema/go.mod` has **no `require` block at all** — it imports only the
+Go standard library (`bytes`, `crypto/ed25519`, `crypto/hkdf`, `crypto/rand`,
+`crypto/sha256`, `embed`, `encoding/base64`, `encoding/hex`, `encoding/json`,
+`errors`, `fmt`, `io`, `math`, `regexp`, `slices`, `sort`, `strings`, `time`). It
+is the shared telemetry report contract: the basic and extended report types,
+the fixed category enumerations and band functions, the strict decoder, the
+embedded official-module catalog, and Ed25519 report signing.
+
+Imported by (spec 022, in progress):
+- `telemetry-receiver/` — to decode and validate reports (`Decode`) and to verify signatures (`Verify`).
+- `api/` — to build, encode and sign the reporter's payload and the admin preview.
+
+Both importers use a local `replace` module (`replace github.com/GameplanePanel/gameplane/telemetryschema => ../telemetryschema`); the same Dockerfile `COPY` requirement as netguard applies.
+
 ### svcutil
 
 `svcutil/go.mod` has **no `require` block at all** — stdlib only
diff --git a/docs/install.md b/docs/install.md
index b3383a910..92e313d18 100644
--- a/docs/install.md
+++ b/docs/install.md
@@ -267,7 +267,8 @@ on `:8090`. Three **off-by-default** chart toggles wire these into a
 Prometheus-Operator stack (e.g. kube-prometheus-stack):
 
 - `serviceMonitors.enabled` — `ServiceMonitor`s so Prometheus scrapes the
-  operator, API, and telemetry-receiver (when deployed), plus a `PodMonitor`
+  operator, API, and telemetry-receiver (when deployed with a dashboard
+  token; its `/metrics` needs that token), plus a `PodMonitor`
   that scrapes per-GameServer agent metrics from game pods in
   `gamesNamespace` on their plain, named `metrics` containerPort (`9090`,
   declared by the operator's `buildAgentContainer`; no TLS, no client cert —
@@ -277,8 +278,10 @@ Prometheus-Operator stack (e.g. kube-prometheus-stack):
   whenever `networkPolicies.enabled` is also `true`. Without it, both the
   games-namespace default-deny policy (agent metrics port `9090` is not
   admitted from any namespace by default) and the telemetry-receiver's
-  `NetworkPolicy` (admitted only from the API pod) leave the `PodMonitor`
-  and `ServiceMonitor` targets unreachable even though they render.
+  `NetworkPolicy` (its metrics port `8081` admits only
+  `api.telemetry.receiver.dashboard.ingressFrom` peers) leave the
+  `PodMonitor` and `ServiceMonitor` targets unreachable even though they
+  render.
 - `prometheusRules.enabled` — a `PrometheusRule` of operator alerts.
 - `grafanaDashboards.enabled` — a Grafana dashboard `ConfigMap` the Grafana
   sidecar auto-imports (relabel via `grafanaDashboards.labels` if your sidecar
@@ -422,21 +425,116 @@ a slow or down sink never blocks or fails a request.
 
 ### Telemetry
 
-Gameplane can report anonymous usage once a day: `{version, servers,
-templates}` — no names, namespaces, hostnames, or identifiers. Two
-independent gates must both open before anything is sent: the admin
-toggle (**Admin Settings → Telemetry → Send anonymous usage metrics**,
-off by default) decides *whether*, and the chart decides *where*. With no
-destination configured (the default), the reporter never runs.
+Gameplane can send two tiers of usage reports, about once a day. Both are
+described below, so you can decide before you install.
+
+**What is sent**
+
+- **Basic** — exactly three fields: `version` (the Gameplane version),
+  `servers` (how many GameServers exist) and `templates` (how many
+  GameTemplates exist). No names, namespaces, hostnames, or addresses.
+- **Extended** — the basic fields plus the following, and nothing else:
+  - a random **install ID** (a UUID generated on your install; it is not
+    derived from your cluster, host, network, or users)
+  - environment: Kubernetes minor version (for example `1.31`), a
+    distribution category (`k3s`, `rke2`, `k0s`, `eks`, `gke`, `aks`,
+    `openshift`, `microk8s`, `minikube`, `kind`, `doks`, `talos` or
+    `other`), node CPU architectures, and a node-count band (`1`, `2-3`,
+    `4-10`, `11-50`, `51+`)
+  - game usage: a server count for each module from the official catalog,
+    plus one combined `custom` count for every other module (custom
+    module names are never sent)
+  - feature adoption: wake-on-connect (yes/no), relay tunnel types in use
+    (`frp`, `tailscale`, `playit`), packet capture enabled (yes/no),
+    backups configured on any server (yes/no), single sign-on (yes/no),
+    audit forwarding (yes/no), a registered-cluster band (`1`, `2-3`,
+    `4-10`, `11+`), the database kind (`sqlite` or `postgres`) and the UI
+    language
+  - the install's public signing key and the time the report was sent
+
+Every extended value comes from a fixed set of categories or bands, or is
+a number, the install ID, the public key or the send time. A value that
+doesn't fit is sent as `other`. Extended reports are signed with a key
+derived from a random secret that never leaves your install combined with
+the install ID, so nobody can report under your ID with a different key.
+Signing proves which key sent a report; it does not prove the install is
+real. The install ID is pseudonymous: it lets the receiver tell that two
+reports came from the same install, and it is deleted when you turn
+extended off. See [Security](security.md#telemetry) for the threat model.
+
+**Defaults**
+
+| Install | Basic | Extended |
+|---|---|---|
+| New install with a destination in effect | on | on |
+| Existing install that saved a basic choice | keeps that choice | off |
+| Existing install that never saved a choice | off | off |
+
+On a new install, the first admin to sign in sees a notice that lists both
+tiers and names the destination. No report is sent until an admin has seen
+the notice. After that, **Admin Settings → Telemetry** shows the
+destination, a preview of the exact next report (including the install
+ID), the last attempt, separate basic and extended toggles, and an
+install-ID reset. Turning basic off turns extended off with it. The
+operator's install-time `api.telemetry.enabled=false` always wins over the
+toggles.
+
+The project's data-handling statement, including how long the project
+keeps data (daily aggregates for 24 months; per-install activity records
+expire after 90 days without a report) is at
+<https://gameplane.net/telemetry/>.
+
+> **Upgrading?** Installs that already had **Send anonymous usage
+> metrics** switched on, while no destination was configured, saved that
+> choice but it had no effect. After upgrading to the release that adds
+> the project's default receiver (`telemetry.gameplane.net`), those installs
+> start sending **basic** reports to it. Extended stays off until an admin turns it on. If you do
+> not want that, set `api.telemetry.enabled=false` before you upgrade, or
+> turn the toggle off in Admin Settings. Installs that already pointed at
+> a custom `api.telemetry.endpoint` or the bundled receiver keep sending
+> only there, never to the project's default receiver. Installs that
+> never saved a choice stay off.
+
+**Where reports go, and how to change it**
+
+- `api.telemetry.enabled` — set to `false` for a hard off: the API never
+  sends telemetry, whatever the admin toggles say, and no first-login
+  notice is shown. Use this for air-gapped and privacy-sensitive
+  clusters.
 
+  ```sh
+  helm upgrade ... --set api.telemetry.enabled=false
+  ```
+
+- `api.telemetry.endpoint` — when empty (the default), reports go to the
+  project's default receiver, `https://telemetry.gameplane.net/ingest`. Set a
+  URL to send them to your own receiver instead (e.g.
+  `https://telemetry.example.com/ingest`); it replaces the default and never
+  also sends to it. An install whose endpoint was already
+  set keeps working unchanged.
 - `api.telemetry.receiver.enabled` — deploy the bundled
-  [telemetry-receiver](../telemetry-receiver/README.md) [optional] next to the API
-  and point the API at it automatically. It logs each report and exposes
-  aggregate Prometheus metrics (`gameplane_telemetry_reports_total` by
-  version, fleet-size histograms) on its `/metrics`.
-- `api.telemetry.endpoint` — send reports to an external receiver URL
-  instead (e.g. `https://telemetry.example.com/ingest`); setting it
-  overrides the receiver auto-wiring.
+  [telemetry-receiver](../telemetry-receiver/README.md) [optional] next to
+  the API and point the API at it automatically (when `endpoint` is
+  empty). The bundled receiver stores daily aggregates in a PVC
+  (`api.telemetry.receiver.persistence.enabled`, default `true`, 1Gi; the
+  chart runs a single replica while persistence is on). It serves
+  aggregate figures on a private dashboard and, optionally, a public
+  summary; see the next two options. To run a receiver for other
+  installs, see the [provider runbook](telemetry-provider.md).
+- `api.telemetry.receiver.dashboard.tokenSecretRef` — name a Secret (key
+  `token` by default) holding the dashboard token. With a token set, the
+  receiver starts a dashboard listener on port `8081` that you reach by
+  `kubectl port-forward` (or from peers listed in
+  `api.telemetry.receiver.dashboard.ingressFrom`). Without a token there
+  is no dashboard. The same token (as a Bearer token) protects the
+  receiver's `/metrics`, which moved to this port.
+- `api.telemetry.receiver.publicSummary.enabled` — set `true` to enable
+  `GET /v1/summary`, a public, unauthenticated endpoint that returns only
+  five headline counts. Off by default.
+- `api.telemetry.receiver.retentionDays` (default `730`, minimum `365`)
+  and `api.telemetry.receiver.activityExpiryDays` (default `90`, minimum
+  `31`) — how long the receiver keeps daily aggregates and per-install
+  activity records. Lower values fail rendering.
 - `api.telemetry.authSecretRef` — optional shared ingest token, sourced
   from a Secret. The API sends it verbatim as the `Authorization` header
   and the bundled receiver requires it — recommended when the receiver is
@@ -445,11 +543,19 @@ destination configured (the default), the reporter never runs.
   ```sh
   kubectl -n gameplane-system create secret generic telemetry-ingest \
     --from-literal=token='Bearer some-long-random-string'
+  kubectl -n gameplane-system create secret generic telemetry-dashboard \
+    --from-literal=token="$(openssl rand -base64 32)"
   helm upgrade ... \
     --set api.telemetry.receiver.enabled=true \
-    --set api.telemetry.authSecretRef.name=telemetry-ingest
+    --set api.telemetry.authSecretRef.name=telemetry-ingest \
+    --set api.telemetry.receiver.dashboard.tokenSecretRef.name=telemetry-dashboard
+  kubectl -n gameplane-system port-forward svc/gameplane-telemetry-receiver 8081:8081
   ```
 
+  Then open `http://localhost:8081` and sign in with the dashboard token.
+  The receiver's session cookie is `Secure`, so use a browser that treats
+  `localhost` as a secure origin or put TLS in front.
+
 ## Installing a module
 
 The chart ships two `ModuleSource`s: `default` (pulls pre-built bundles from the
diff --git a/docs/security.md b/docs/security.md
index fd9b8cecc..ad6c20002 100644
--- a/docs/security.md
+++ b/docs/security.md
@@ -9,7 +9,8 @@ point. Assume:
 - cluster-internal attackers may land a pod in `gameplane-games` via a
   compromised game image (Minecraft plugins, Valheim mods, etc.),
 - the game pods themselves should be treated as low-trust,
-- a dashboard user with only `servers:read` must not be able to read game passwords (RCON, admin or server passwords) out of a GameServer.
+- a dashboard user with only `servers:read` must not be able to read game passwords (RCON, admin or server passwords) out of a GameServer,
+- a usage-telemetry receiver is reachable by anyone on the internet, so it must stay safe when fed hostile or invented reports, and must never reveal figures to an unauthenticated viewer (see [Telemetry](#telemetry)).
 
 ## Authentication
 
@@ -728,6 +729,162 @@ a self-hosted API-key reviewer:
 The review is advisory — a human reviewer must still validate changes before merge
 — and the tool can be disabled at any time via GitHub's app management UI.
 
+## Telemetry
+
+Usage telemetry has two ends, each with its own trust boundary. For what
+is sent and how to turn it off, see [install.md](install.md#telemetry).
+For running a receiver, see [telemetry-provider.md](telemetry-provider.md).
+The project's data-handling statement is at
+<https://gameplane.net/telemetry/>.
+
+### Public unauthenticated ingest and summary
+
+A receiver's `/ingest` is open to the internet by design: installs have no
+project-issued credential, so it cannot require one. (A self-hosted
+receiver can require `AUTH_TOKEN`; the project's default receiver cannot.)
+Anyone can therefore post reports. Defences:
+
+- strict decoding: one JSON object, no duplicate or unknown keys, a 16 KiB
+  body cap, and every string matched against a pattern or a fixed list, so
+  hostile text can't create unbounded categories or reach the dashboard
+- a per-source daily limit on accepted reports (`INGEST_SOURCE_DAILY_LIMIT`,
+  default `20`, tolerant of shared NAT) and a rate limit on the public
+  summary, both held in memory only
+- optional proof-of-work (`INGEST_POW`, off by default; see below), which
+  raises the cost of bulk reports in proportion to the request rate
+- only daily aggregates and expiring activity records are stored; raw
+  reports and source addresses are never written to disk
+
+`GET /v1/summary` is off unless `PUBLIC_SUMMARY=true`. It returns five
+fixed counts and nothing else: no breakdown, no per-day series, no install
+ID. It is cached and rate-limited so public polling can't degrade ingest.
+
+What this does not stop: someone can invent installs and send fabricated
+basic reports, within the per-source limits. Figures are approximate and
+self-reported, and the dashboard labels them that way.
+
+### Proof-of-work on ingest
+
+When a receiver sets `INGEST_POW=true`, `/ingest` requires a solved
+challenge from `GET /v1/challenge` in the `Gameplane-Telemetry-PoW` header.
+Challenges are HMAC-signed with a key held only in the receiver's memory,
+expire after 15 minutes and work once. The difficulty is `INGEST_POW_MIN_BITS` (default zero) while at most
+than `INGEST_POW_TARGET_PER_MIN` challenges a minute are issued, then rises
+with the rate (up to `INGEST_POW_MAX_BITS`, at most 26) and falls one bit per
+five minutes. The check runs before the body is read, so a refused report
+costs the receiver one HMAC and one hash, and it answers `428`
+(`pow_required` or `pow_invalid`) or, when its used-challenge set (1,000,000
+entries) is full, `503 pow_busy`. Challenge requests have their own
+per-source limit.
+
+What it stops: cheap bulk fabrication. The work a flood must do grows
+faster than its rate, while an install sending one report a day pays
+nothing under normal load and a few seconds during a flood. It also
+needs no per-install secret, so it works against an attacker who holds many
+source addresses, which the per-source limits do not.
+
+What it does not stop:
+- a determined or well-resourced sender: SHA-256 is cheap on GPUs and
+  dedicated hardware, so it deters volume, not a patient attacker
+- fabricated installs: solving a challenge proves work was done, not that an
+  install exists, so invented installs remain possible and figures stay
+  approximate
+- many sources raising the difficulty for everyone: the difficulty is
+  global and capped by `INGEST_POW_MAX_BITS`; the per-source challenge limit
+  only stops a single source doing it alone
+- anything on the dashboard login: it has no proof-of-work (the dashboard
+  uses no JavaScript); its defence is the credential minimum below
+
+Proof-of-work does not replace signing or the per-source daily limit; all
+three apply. A restart drops the challenge key and the used set, so
+outstanding challenges fail once and installs retry with a new one.
+
+### The pseudonymous install ID
+
+The extended tier carries a random UUID. It is pseudonymous, not anonymous:
+it links one install's reports over time. It is never derived from the
+cluster, host, network or users; it is kept only on the install; an admin
+can reset it at any time (the install then looks new to the receiver, and
+the old ID lapses); and it is deleted when extended is turned off. The
+receiver stores only `HMAC-SHA256(pepper, installID)` and never stores an
+extended attribute (environment, games, features) next to it; those exist
+only as daily aggregates.
+
+### Signing: what it does and doesn't stop
+
+Every extended report is signed (Ed25519) with a key derived from a random
+secret kept in the install's database combined with the install ID. The
+secret and private key never leave the install. The receiver binds an
+install ID to the first valid key that uses it (the claim) and then
+refuses, changing no stored data:
+
+- a bad or missing signature (`403 bad_signature`)
+- a send time outside `[now - 36h, now + 1h]` (`403 stale`)
+- a different key for a claimed ID (`409 id_claimed`)
+- a send time not later than the last accepted one (`403 replay`)
+
+Signing stops impersonation of an existing install and replayed reports.
+It does not stop fabricated installs: anyone can generate a new ID and key
+pair, so a flood of invented installs is limited only by the per-source
+limits. A claim lasts as long as the activity record (90 days without a
+report by default), then the ID can be claimed again. If the receiver says
+an ID is claimed by another key, the install replaces its ID and resends
+once; any other refusal never rotates the ID.
+
+### Dashboard authentication and the refusal invariant
+
+The receiver's dashboard runs on its own listener (`:8081`), started only
+when `DASHBOARD_TOKEN` is set; with no token there is no dashboard. Keep
+that port off the public internet (the chart's NetworkPolicy admits only
+configured peers). It uses one operator token from a Secret, which must be
+at least 32 characters (generate it from 32 random bytes); the receiver
+refuses to start with a shorter one. Per-source login limits can be
+outrun by anyone holding many IPv6 `/64`s, so the token's length, not the
+limiter, is what makes guessing infeasible:
+
+- browser login compares the token in constant time and sets an
+  `HttpOnly; Secure; SameSite=Strict` session cookie valid 12 hours; login
+  and logout also require a same-origin `Origin`; logins are limited to 5
+  per minute per source
+- scripts can send `Authorization: Bearer <token>`; `/metrics` accepts only
+  the Bearer token
+- the cookie key is derived from the token, so replacing the token
+  invalidates every session and loses no data
+- every dashboard response carries a strict `Content-Security-Policy`, with
+  no inline script or style, and `Cache-Control: no-store`
+
+**Refusal invariant:** an unauthenticated response never contains a figure,
+a date other than page chrome, a version, category or module name, or
+anything that varies with whether data exists. A wrong token gets the same
+"Invalid credentials" login page whether or not the receiver is empty, and
+an unauthenticated JSON request gets `401 {"error":"unauthorized"}`. CI
+compares the unauthenticated response against the login page of an empty
+receiver.
+
+### Source-address handling
+
+The receiver uses the TCP peer address as the source for limits. It trusts
+`X-Forwarded-For` only when the peer is inside `TRUSTED_PROXY_CIDRS`
+(empty by default), so a client can't pick its own source by setting the
+header. IPv4 addresses and IPv6 `/64` prefixes are treated as one source
+each. Sources live in memory only (capped at 100,000 per limiter,
+least-recently-used evicted), are never logged to the database, and
+counters reset at UTC midnight. If you run behind a proxy and leave
+`TRUSTED_PROXY_CIDRS` empty, every client shares the proxy's address and
+the per-source limits throttle everyone together.
+
+### The pepper
+
+`ID_PEPPER` keys the HMAC that turns an install ID into the stored
+activity-record key, so a stored value can't be matched to an ID taken
+from an install without the pepper. If unset, the receiver generates one
+on first start and keeps it in its database, so it is as exposed as the
+database file. Set it from a Secret to keep it out of backups of the
+database. Changing the pepper makes every existing record unmatchable: all
+installs look new for one day and their activity history is lost; no
+install is locked out. See
+[telemetry-provider.md](telemetry-provider.md#rotating-secrets).
+
 ## API cluster-wide pod list
 
 The API's `<release>-api-read` ClusterRole grants `list` on Pods in **every**
@@ -784,6 +941,11 @@ Secrets Gameplane reads or creates, by convention:
   `gameplane.local/notification-sink=true` in the control-plane namespace
   (user-supplied; referenced by name from Admin Settings → Notifications, read
   by the API at delivery time — see [notifications](notifications.md)).
+- telemetry receiver credentials — `api.telemetry.receiver.dashboard.tokenSecretRef`
+  (dashboard and `/metrics` token, at least 32 characters) and `api.telemetry.receiver.pepperSecretRef`
+  (install-ID pepper), both user-supplied and injected as env vars
+  (`DASHBOARD_TOKEN`, `ID_PEPPER`), never flags. See
+  [telemetry-provider.md](telemetry-provider.md#rotating-secrets).
 
 Rotation: deleting the `-rcon` secret triggers a reconciliation and
 generates a fresh password on the next pod restart.
diff --git a/docs/telemetry-provider.md b/docs/telemetry-provider.md
new file mode 100644
index 000000000..ebec85dd4
--- /dev/null
+++ b/docs/telemetry-provider.md
@@ -0,0 +1,702 @@
+# Running a telemetry provider
+
+This is the runbook for running a Gameplane telemetry receiver for other
+installs: the project maintainers' own default receiver
+(`telemetry.gameplane.net`), or one you host yourself. It covers deployment, TLS, secrets, retention, metrics and
+backups. It is a runbook only; the repository ships no infrastructure
+code for the project's receiver.
+
+For what installs send, see [install.md](install.md#telemetry). For the
+threat model, see [security.md](security.md#telemetry). For the receiver's
+behaviour and metrics, see
+[`telemetry-receiver/README.md`](../telemetry-receiver/README.md). The
+project's data-handling statement is at
+<https://gameplane.net/telemetry/>.
+
+## Listeners at a glance
+
+| Listener | Variable (default) | Serves | Exposure |
+|---|---|---|---|
+| Public | `LISTEN_ADDR` (`:8080`) | `POST /ingest`, `GET /v1/summary` (only when `PUBLIC_SUMMARY=true`), `GET /v1/challenge` (only when `INGEST_POW=true`), `GET /healthz` | Public internet, behind TLS |
+| Dashboard | `DASHBOARD_LISTEN_ADDR` (`:8081`) | login page, dashboard, `/api/v1/views`, `/metrics`, static assets | Private network only |
+
+The dashboard listener starts only when `DASHBOARD_TOKEN` is set. The
+public listener answers `404` for `/metrics`.
+
+## Deploy the image
+
+The receiver is a single static binary in a distroless, non-root image:
+
+```sh
+docker run -d --name telemetry-receiver \
+  -p 127.0.0.1:8080:8080 -p 127.0.0.1:8081:8081 \
+  -v telemetry-data:/data \
+  -e DATA_DIR=/data \
+  -e DASHBOARD_TOKEN="$(cat dashboard-token)" \
+  -e ID_PEPPER="$(cat id-pepper)" \
+  -e PUBLIC_SUMMARY=true \
+  ghcr.io/gameplanepanel/gameplane/telemetry-receiver:edge
+```
+
+Notes:
+
+- Use a release tag instead of `edge` in production.
+- The image runs as UID/GID `65532` with a read-only-friendly layout. The
+  `/data` volume must be writable by that user.
+- Without `DATA_DIR` the receiver keeps everything in memory, logs a
+  warning, and loses it all on restart. Always set it for a real provider.
+- Run **one replica** only. The database is a single SQLite file; two
+  processes on it will conflict. Use a recreate rollout, not a rolling one.
+- Kubernetes: see [Deploy on Kubernetes](#deploy-on-kubernetes) for complete
+  manifests for a standalone provider. The chart's receiver
+  (`api.telemetry.receiver.enabled=true`) renders the same Deployment shape,
+  with a PVC at `/data`, a `Recreate` strategy and NetworkPolicies, and is
+  the right choice for a receiver bundled next to one Gameplane install.
+
+### Configuration
+
+| Variable | Default | Meaning |
+|---|---|---|
+| `LISTEN_ADDR` | `:8080` | Public listener. |
+| `DASHBOARD_LISTEN_ADDR` | `:8081` | Dashboard listener. |
+| `DASHBOARD_TOKEN` | *(empty)* | Dashboard credential, from a Secret. Empty means no dashboard listener. When set it must be at least 32 characters, or the receiver exits at startup. See [Secrets](#secrets). |
+| `AUTH_TOKEN` | *(empty)* | Ingest token. Leave empty on a public provider: installs have no credential to present. |
+| `DATA_DIR` | *(empty)* | SQLite directory. Empty means in-memory. |
+| `PUBLIC_SUMMARY` | `false` | Enables `GET /v1/summary`. |
+| `TRUSTED_PROXY_CIDRS` | *(empty)* | Comma-separated CIDRs whose `X-Forwarded-For` is trusted. |
+| `INGEST_SOURCE_DAILY_LIMIT` | `20` | Accepted reports per source per UTC day. `0` means unlimited. |
+| `RETENTION_DAYS` | `730` | Daily aggregate retention. Minimum `365`. |
+| `ACTIVITY_EXPIRY_DAYS` | `90` | Activity record expiry. Minimum `31`. |
+| `ID_PEPPER` | *(empty)* | HMAC pepper for install IDs, from a Secret. Empty means one is generated and kept in the database. |
+| `INGEST_POW` | `false` | Requires proof-of-work on `/ingest` and serves `/v1/challenge`. See [Proof-of-work on ingest](#proof-of-work-on-ingest). |
+| `INGEST_POW_TARGET_PER_MIN` | `60` | Normal challenge rate: no work is required at or below it. Must be at least `1`. |
+| `INGEST_POW_MIN_BITS` | `0` | Lowest difficulty issued. Must not be negative. |
+| `INGEST_POW_MAX_BITS` | `22` | Highest difficulty issued. At least `INGEST_POW_MIN_BITS` and at most `26`. |
+
+A value below a minimum, a malformed `TRUSTED_PROXY_CIDRS` entry, an
+unparsable number, a `DASHBOARD_TOKEN` shorter than 32 characters or an
+`INGEST_POW_MAX_BITS` outside its range stops the receiver at start with an
+error.
+
+## Deploy on Kubernetes
+
+This section sets up a standalone provider in its own namespace, `gameplane-telemetry`. It follows the shape of the project's provider at `telemetry.gameplane.net`: Cloudflare's proxy in front, Traefik on k3s as the ingress, a certificate from cert-manager through a Cloudflare DNS-01 challenge, a private dashboard and proof-of-work.
+
+Other ingress controllers and CDNs work the same way. The parts to adapt are the Ingress annotations, the NetworkPolicy peer and `TRUSTED_PROXY_CIDRS`. The repository ships no manifests for this, so copy the ones below. For a receiver that serves a single Gameplane install, use the chart instead (`api.telemetry.receiver.enabled=true`).
+
+### Prerequisites
+
+- k3s (or any cluster) with Traefik as the ingress controller in `kube-system`, configured to trust Cloudflare's forwarded headers. `forwardedHeaders.trustedIPs` on the `web` and `websecure` entry points must list Cloudflare's ranges, and Traefik must see Cloudflare's address as the peer (for example `service.spec.externalTrafficPolicy: Local` with ServiceLB). The [client address check](#check-the-client-address) below confirms both.
+- cert-manager.
+- The zone (`gameplane.net` here) on Cloudflare, and a Cloudflare API token with Zone:DNS:Edit and Zone:Zone:Read on it.
+- A CNI that enforces NetworkPolicies (the kube-router that ships with k3s does).
+
+### 1. Namespace, secrets and trusted proxies
+
+```sh
+kubectl create namespace gameplane-telemetry
+
+# Dashboard token: 32 random bytes = 44 base64 characters (the receiver refuses fewer than 32).
+kubectl -n gameplane-telemetry create secret generic telemetry-dashboard \
+  --from-literal=token="$(openssl rand -base64 32)"
+
+# ID pepper: set it before the first report and never lose it (see Rotating secrets).
+kubectl -n gameplane-telemetry create secret generic telemetry-pepper \
+  --from-literal=pepper="$(openssl rand -base64 32)"
+
+# Trusted proxies: the cluster's pod CIDR (where Traefik runs) plus Cloudflare's published ranges.
+# CHANGE ME if your cluster is not on the k3s default.
+# Check with: kubectl get nodes -o jsonpath='{.items[*].spec.podCIDR}'
+POD_CIDR=10.42.0.0/16
+CF_RANGES=$( { curl -fsS https://www.cloudflare.com/ips-v4; echo; curl -fsS https://www.cloudflare.com/ips-v6; } | grep . | paste -sd, - )
+kubectl -n gameplane-telemetry create configmap telemetry-trusted-proxies \
+  --from-literal=cidrs="${POD_CIDR},${CF_RANGES}" \
+  --dry-run=client -o yaml | kubectl apply -f -
+
+# Check the result: the pod CIDR first, then Cloudflare's IPv4 and IPv6 ranges
+# (for example 10.42.0.0/16,173.245.48.0/20,...,2400:cb00::/32,...).
+kubectl -n gameplane-telemetry get configmap telemetry-trusted-proxies -o jsonpath='{.data.cidrs}'; echo
+```
+
+The list is a static copy. Cloudflare changes its ranges rarely; when it does, rerun the last two commands and restart the receiver with `kubectl -n gameplane-telemetry rollout restart deploy/telemetry-receiver`, because the variable is read at start. Update Traefik's `forwardedHeaders.trustedIPs` the same way. If you prefer, set `TRUSTED_PROXY_CIDRS` as a literal `value:` in the Deployment instead of the ConfigMap reference; the receiver reads only the environment variable. [How the client address is resolved](#5-how-the-client-address-is-resolved) explains why the list matters. For the token and pepper, see [Secrets](#secrets) and [Rotating secrets](#rotating-secrets).
+
+### 2. Certificate issuer (cert-manager DNS-01 through Cloudflare)
+
+Skip this step if you already have a ClusterIssuer for the zone. Otherwise store the Cloudflare API token and create the issuer:
+
+```sh
+# CHANGE ME: your Cloudflare API token.
+kubectl -n cert-manager create secret generic cloudflare-api-token \
+  --from-literal=api-token='<cloudflare-api-token>'
+```
+
+```yaml
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-cloudflare
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: you@example.com              # CHANGE ME
+    privateKeySecretRef:
+      name: letsencrypt-cloudflare-account
+    solvers:
+      - dns01:
+          cloudflare:
+            apiTokenSecretRef:
+              name: cloudflare-api-token
+              key: api-token
+        selector:
+          dnsZones: [gameplane.net]     # CHANGE ME: your zone
+```
+
+DNS-01 works with the Cloudflare proxy on, because validation never goes through the proxied hostname.
+
+### 3. Receiver, Service, Ingress and NetworkPolicy
+
+Save the following as `telemetry-provider.yaml` and apply it with `kubectl apply -f telemetry-provider.yaml`. It holds five documents: the volume, the receiver, its Service, the Ingress and the NetworkPolicy.
+
+```yaml
+# 1. Storage: the SQLite database lives here (/data/telemetry.db).
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: telemetry-receiver-data
+  namespace: gameplane-telemetry
+spec:
+  accessModes: [ReadWriteOnce]
+  # storageClassName: fast-ssd   # CHANGE ME, or omit to use the cluster default
+  resources:
+    requests:
+      storage: 1Gi
+---
+# 2. The receiver. One replica and Recreate: one process owns the SQLite file.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: telemetry-receiver
+  namespace: gameplane-telemetry
+  labels:
+    app.kubernetes.io/name: telemetry-receiver
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: telemetry-receiver
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: telemetry-receiver
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65532
+        fsGroup: 65532
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: receiver
+          image: ghcr.io/gameplanepanel/gameplane/telemetry-receiver:edge   # CHANGE ME: pin a release tag
+          imagePullPolicy: Always   # edge moves; use IfNotPresent once you pin a release tag
+          env:
+            - { name: LISTEN_ADDR, value: ":8080" }
+            - { name: DATA_DIR, value: "/data" }
+            - name: DASHBOARD_TOKEN
+              valueFrom:
+                secretKeyRef: { name: telemetry-dashboard, key: token }
+            - name: ID_PEPPER
+              valueFrom:
+                secretKeyRef: { name: telemetry-pepper, key: pepper }
+            - name: TRUSTED_PROXY_CIDRS
+              valueFrom:
+                configMapKeyRef: { name: telemetry-trusted-proxies, key: cidrs }
+            - { name: PUBLIC_SUMMARY, value: "true" }
+            - { name: RETENTION_DAYS, value: "730" }
+            - { name: ACTIVITY_EXPIRY_DAYS, value: "90" }
+            - { name: INGEST_SOURCE_DAILY_LIMIT, value: "20" }
+            - { name: INGEST_POW, value: "true" }
+            - { name: INGEST_POW_TARGET_PER_MIN, value: "60" }
+            - { name: INGEST_POW_MIN_BITS, value: "0" }
+            - { name: INGEST_POW_MAX_BITS, value: "22" }
+          ports:
+            - { name: http, containerPort: 8080 }
+            - { name: dashboard, containerPort: 8081 }
+          livenessProbe:
+            httpGet: { path: /healthz, port: http }
+            initialDelaySeconds: 5
+          readinessProbe:
+            httpGet: { path: /healthz, port: http }
+            initialDelaySeconds: 2
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: [ALL]
+          volumeMounts:
+            - { name: data, mountPath: /data }
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: telemetry-receiver-data
+---
+# 3. Service: ingest is public (through the Ingress), the dashboard stays cluster-internal.
+apiVersion: v1
+kind: Service
+metadata:
+  name: telemetry-receiver
+  namespace: gameplane-telemetry
+  labels:
+    app.kubernetes.io/name: telemetry-receiver
+spec:
+  selector:
+    app.kubernetes.io/name: telemetry-receiver
+  ports:
+    - { name: ingest, port: 8080, targetPort: http }
+    - { name: dashboard, port: 8081, targetPort: dashboard }
+---
+# 4. Ingress for Traefik: publishes only the public listener's routes, never :8081.
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: telemetry-receiver
+  namespace: gameplane-telemetry
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-cloudflare
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts: [telemetry.gameplane.net]            # CHANGE ME
+      secretName: telemetry-gameplane-net-tls
+  rules:
+    - host: telemetry.gameplane.net               # CHANGE ME
+      http:
+        paths:
+          - { path: /ingest,       pathType: Exact, backend: { service: { name: telemetry-receiver, port: { name: ingest } } } }
+          - { path: /v1/challenge, pathType: Exact, backend: { service: { name: telemetry-receiver, port: { name: ingest } } } }
+          - { path: /v1/summary,   pathType: Exact, backend: { service: { name: telemetry-receiver, port: { name: ingest } } } }
+          - { path: /healthz,      pathType: Exact, backend: { service: { name: telemetry-receiver, port: { name: ingest } } } }
+---
+# 5. NetworkPolicy: 8080 only from the Traefik pods, 8081 only from the
+#    monitoring namespace (kubectl port-forward is not affected), no egress.
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: telemetry-receiver
+  namespace: gameplane-telemetry
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: telemetry-receiver
+  policyTypes: [Ingress, Egress]
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: kube-system
+          podSelector:
+            matchLabels:
+              app.kubernetes.io/name: traefik
+      ports:
+        - { protocol: TCP, port: 8080 }
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: monitoring   # CHANGE ME, or remove this rule
+      ports:
+        - { protocol: TCP, port: 8081 }
+  # The receiver makes no outbound connections: no DNS, no Kubernetes API, no other service.
+  egress: []
+```
+
+Key points:
+
+- Values to change are marked `# CHANGE ME`: the image tag, the storage class, the hostname (in the Ingress `tls` and `rules`), the ClusterIssuer email and zone, the Cloudflare API token, the monitoring namespace, and `POD_CIDR` if your cluster is not on the k3s default. Also replace `telemetry.gameplane.net` in the Cloudflare rule and in the Verify commands.
+- The provider features (dashboard, signed extended reports, proof-of-work) ship in the first release after v0.3.0. Pin that release or a later one. A v0.3.0 or older receiver has no dashboard and no `/v1/challenge`, and answers 400 to extended reports, so installs fall back to basic-only reports for 7 days.
+- `edge` follows master. If you run it, keep `imagePullPolicy: Always` so that a restart pulls the latest build; with `IfNotPresent` a node keeps the image it already has.
+- One replica with `Recreate`, because SQLite has a single writer. `fsGroup: 65532` makes `/data` writable for the distroless nonroot user.
+- `AUTH_TOKEN` is deliberately unset: a public provider accepts reports from any install.
+- `ID_PEPPER` is recommended. Without it the receiver generates a pepper and stores it in the database, so it is lost with the volume.
+- Proof-of-work is on with the defaults (target 60 challenges per minute, 0 to 22 bits). See [Proof-of-work on ingest](#proof-of-work-on-ingest) to tune it.
+- `PUBLIC_SUMMARY` is on, so `/v1/summary` is routed. If you turn it off, remove that path from the Ingress.
+- If the probes fail after the NetworkPolicy is applied (some CNIs block the node's own probe traffic), add an `ipBlock` for your node addresses to the 8080 rule.
+
+### 4. Cloudflare settings
+
+1. DNS: add an `A` record (and an `AAAA` record if you have IPv6) named `telemetry` that points at the cluster's public address, set to **Proxied** (orange cloud).
+2. SSL/TLS encryption mode: **Full (strict)**. The origin presents the cert-manager certificate.
+3. Bot protection: installs send plain HTTP POSTs with no browser, so a challenge page breaks them (they record `failed` and retry). Keep **Bot Fight Mode** off for the zone, because on the Free plan it cannot be skipped per hostname. Add a WAF custom rule `(http.host eq "telemetry.gameplane.net")` with the action **Skip** for Super Bot Fight Mode, Browser Integrity Check and Security Level (and managed rules, if they challenge it).
+4. Caching: add no "Cache Everything" rule for this hostname. `/v1/challenge` sends `Cache-Control: no-store`, and `/ingest` is a POST.
+5. Managed Transforms: keep **Remove visitor IP headers** off. It strips `X-Forwarded-For`, and every install would then share one source address.
+6. Optional: add a Cloudflare rate-limiting rule on `/ingest` as a first line of defense in front of proof-of-work.
+7. Optional: allow only Cloudflare's ranges to reach port 443 on the origin (host firewall, or Authenticated Origin Pulls), so that nobody can bypass the rules above.
+
+### 5. How the client address is resolved
+
+The receiver rate-limits per source address, so it needs the install's address, not the proxy's. An install connects to Cloudflare, which adds `X-Forwarded-For: <install>`. Traefik trusts Cloudflare's ranges, keeps that header and appends the Cloudflare edge address, so the receiver sees `X-Forwarded-For: <install>, <cloudflare>`. The TCP peer of the receiver is the Traefik pod, inside the pod CIDR.
+
+When the peer is inside `TRUSTED_PROXY_CIDRS`, the receiver takes the right-most `X-Forwarded-For` entry that is not itself trusted. That is why the list needs both the pod CIDR (for Traefik) and Cloudflare's ranges (to skip the edge address). Without Cloudflare's ranges, every install is attributed to one of a handful of edge addresses, and the per-source limits (20 reports a day, and the `/v1/challenge` burst) throttle all installs together.
+
+A client outside Cloudflare's ranges cannot choose its source address. Anything it puts in `X-Forwarded-For` stays to the left of the real entry and is ignored, and proof-of-work still applies to every request. A request that bypasses Cloudflare reaches Traefik from an untrusted address, so Traefik drops its `X-Forwarded-For`. An unparsable header falls back to the peer address. The address is used only in memory for rate limiting and is never stored; see [Source addresses and `TRUSTED_PROXY_CIDRS`](#source-addresses-and-trusted_proxy_cidrs).
+
+For a provider without a CDN, trust only the ingress controller's pod CIDR.
+
+### 6. Verify
+
+```sh
+kubectl -n gameplane-telemetry rollout status deploy/telemetry-receiver
+# Expect READY True.
+kubectl -n gameplane-telemetry get certificate telemetry-gameplane-net-tls
+# Expect: ok
+curl -fsS https://telemetry.gameplane.net/healthz
+# The public counters.
+curl -fsS https://telemetry.gameplane.net/v1/summary
+# A challenge (proof-of-work is on).
+curl -fsS https://telemetry.gameplane.net/v1/challenge
+# Expect 404: the metrics port 8081 is not routed.
+curl -sS -o /dev/null -w '%{http_code}\n' https://telemetry.gameplane.net/metrics
+```
+
+#### Check the client address
+
+The receiver never logs addresses, so check what Traefik forwards with a throwaway echo service on the same host, then delete it:
+
+```sh
+kubectl -n gameplane-telemetry create deployment whoami --image=traefik/whoami
+kubectl -n gameplane-telemetry expose deployment whoami --port 80
+kubectl -n gameplane-telemetry create ingress whoami --class=traefik \
+  --rule="telemetry.gameplane.net/whoami-check=whoami:80,tls=telemetry-gameplane-net-tls" \
+  --annotation traefik.ingress.kubernetes.io/router.entrypoints=websecure
+kubectl -n gameplane-telemetry rollout status deploy/whoami
+# If Traefik answers 404, it has not picked up the route yet: retry after a few seconds.
+curl -fsS https://telemetry.gameplane.net/whoami-check | grep -i x-forwarded-for
+# expect: X-Forwarded-For: <your public IP>, <a Cloudflare address>
+kubectl -n gameplane-telemetry delete ingress,service,deployment whoami
+```
+
+The NetworkPolicy selects only the receiver pods, so the whoami pod is reachable. If the first entry is not your public address, or only one address appears, Traefik is not trusting Cloudflare or does not see Cloudflare's address as the peer. Fix that before going live.
+
+#### Open the dashboard
+
+The dashboard on `:8081` is never routed. Reach it with a port-forward and sign in with the dashboard token:
+
+```sh
+kubectl -n gameplane-telemetry port-forward svc/telemetry-receiver 8081:8081
+# in another terminal, print the token:
+kubectl -n gameplane-telemetry get secret telemetry-dashboard -o jsonpath='{.data.token}' | base64 -d
+```
+
+Open `http://localhost:8081`. The session cookie is `Secure`, and browsers treat `localhost` as a secure origin, so sign-in works over plain HTTP there.
+
+### 7. Scrape metrics (optional)
+
+This needs the Prometheus Operator. The ServiceMonitor reads the same token Secret, and the NetworkPolicy above admits the `monitoring` namespace on 8081 only.
+
+```yaml
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: telemetry-receiver
+  namespace: gameplane-telemetry
+  # labels: { release: my-prometheus }   # CHANGE ME, if your Prometheus selects ServiceMonitors by label
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: telemetry-receiver
+  endpoints:
+    - port: dashboard
+      interval: 30s
+      path: /metrics
+      bearerTokenSecret:
+        name: telemetry-dashboard
+        key: token
+```
+
+### Upgrade and back up
+
+**Upgrade:** change the image tag in the manifest and run `kubectl apply -f telemetry-provider.yaml`. On `edge` with `imagePullPolicy: Always`, run `kubectl -n gameplane-telemetry rollout restart deploy/telemetry-receiver` instead. The Recreate strategy stops the old pod before the new one starts, so ingest returns 503 for a few seconds. Installs retry the next day or on their own backoff.
+
+**Back up first:** take a snapshot of the PVC, or stop the receiver (`kubectl -n gameplane-telemetry scale deploy/telemetry-receiver --replicas=0`) and copy the `/data` folder. See [Back up and restore `telemetry.db`](#back-up-and-restore-telemetrydb) for details.
+
+**Secret rotation:** update the Secret, then restart with `kubectl -n gameplane-telemetry rollout restart deploy/telemetry-receiver`. See [Rotating secrets](#rotating-secrets) for the effects.
+
+## TLS in front of `:8080`
+
+The receiver speaks plain HTTP. Installs only send reports over `https`,
+so terminate TLS in front of the public listener with a reverse proxy,
+ingress controller or load balancer, and forward to `:8080`.
+
+- Forward only `/ingest`, `/v1/summary`, `/healthz` and, when proof-of-work
+  is on, `/v1/challenge`. Do not publish `:8081`.
+- Keep the request body limit at or above 16 KiB (the receiver rejects
+  anything larger with `413`).
+- Pass the client address in `X-Forwarded-For` and set
+  `TRUSTED_PROXY_CIDRS` (below).
+
+## Keep `:8081` private
+
+The dashboard shows every aggregate and `/metrics`. Reach it over a private
+network, a VPN or `kubectl port-forward`, never a public route. In
+Kubernetes, the chart's NetworkPolicy admits port 8081 only from peers in
+`api.telemetry.receiver.dashboard.ingressFrom` (plus the Prometheus
+namespace when `serviceMonitors.scrapeNamespaceSelector` is set); with no
+peers, `kubectl port-forward` still works. The session cookie is `Secure`,
+so a browser needs `https` (or `localhost`) to keep a login.
+
+## Secrets
+
+Create both from Secrets, not literals in a manifest.
+
+```sh
+# 32 random bytes: 44 characters in base64 (64 with `openssl rand -hex 32`).
+kubectl -n gameplane-system create secret generic telemetry-dashboard \
+  --from-literal=token="$(openssl rand -base64 32)"
+kubectl -n gameplane-system create secret generic telemetry-pepper \
+  --from-literal=pepper="$(openssl rand -base64 32)"
+```
+
+With the chart: `api.telemetry.receiver.dashboard.tokenSecretRef.name` and
+`api.telemetry.receiver.pepperSecretRef.name` (key `token` and `pepper` by
+default). They reach the pod as `DASHBOARD_TOKEN` and `ID_PEPPER`.
+
+- `DASHBOARD_TOKEN` is the one credential for the dashboard, its JSON
+  views and `/metrics`. Generate it from 32 random bytes, as above. The
+  receiver refuses to start when the token is set but shorter than 32
+  characters (it counts characters, not bytes), because the per-source
+  login limit can be outrun by someone holding many IPv6 `/64`s and the
+  token's length is what makes guessing infeasible. A rotated token must
+  meet the same minimum, or the restart fails.
+- `ID_PEPPER` keys the HMAC that turns an install ID into the stored
+  record key. If you leave it unset, the receiver generates one on first
+  start and stores it in the database. Set it explicitly when you want the
+  pepper to survive a lost database or to stay out of database backups.
+  Set it **before** the first report arrives: changing it later has the
+  effect described below.
+
+### Rotating secrets
+
+<a id="rotating-secrets"></a>
+
+| Secret | Rotate by | Effect |
+|---|---|---|
+| `DASHBOARD_TOKEN` | Update the Secret and restart the receiver. | Every browser session is invalidated (the cookie key derives from the token), scripts need the new token, and Prometheus needs the new Bearer token. No stored data is lost. |
+| `ID_PEPPER` | Update the Secret and restart the receiver. | Stored activity records no longer match any install ID. For the next day, every install looks new (new-install counts spike and lapsed counts are wrong for the 30 days that follow), unique-install and by-install views lose their history, and ID claims are forgotten, so installs re-claim on their next report. No install is rejected and no daily aggregate changes. Rotate only after a compromise. |
+
+Installs themselves are never affected by either rotation: they keep their
+install IDs and signing keys. Neither rotation touches `AUTH_TOKEN`; rotate
+that separately on the receiver and in `GAMEPLANE_TELEMETRY_AUTH` on each
+install (only relevant for a private provider).
+
+## Public summary
+
+Set `PUBLIC_SUMMARY=true` (chart: `api.telemetry.receiver.publicSummary.enabled`)
+to enable `GET /v1/summary` on the public listener. It needs no credentials
+and returns exactly five keys:
+
+```json
+{
+  "asOf": "2026-10-05",
+  "reportsLatestDay": 412,
+  "reports30d": 11873,
+  "reportsTotal": 98211,
+  "activeInstalls30d": 1290
+}
+```
+
+It is served from a snapshot refreshed at most every 5 minutes, with
+`Cache-Control: public, max-age=3600`, an `ETag` and
+`Access-Control-Allow-Origin: *`, and is rate-limited per source. The
+project's default receiver (`https://telemetry.gameplane.net/v1/summary`)
+enables it; it is off by default elsewhere.
+
+## Proof-of-work on ingest
+
+<a id="proof-of-work-on-ingest"></a>
+
+`/ingest` is open to the internet, so a flood of fabricated reports costs
+the sender nothing but bandwidth. Proof-of-work makes the cost grow with the
+request rate while normal traffic pays nothing. It is off by default. Turn it
+on for a public provider; leave it off for a private or bundled receiver.
+
+### Enable it
+
+- Standalone: set `INGEST_POW=true`. The receiver then serves
+  `GET /v1/challenge` and answers `428` to any `/ingest` without a valid
+  solved challenge.
+- Chart: `api.telemetry.receiver.ingestPow.enabled=true`, with
+  `targetPerMinute`, `minBits` and `maxBits` for the three tuning
+  variables below. The chart refuses to render when `targetPerMinute` is
+  below `1`, `maxBits` is above `26` or `maxBits` is below `minBits`.
+- Route `/v1/challenge` through your TLS proxy next to `/ingest`. It has its
+  own per-source limit (10 per minute, burst 5).
+- Installs that run an API without proof-of-work support cannot solve a
+  challenge and are refused with `428 pow_required`. Installs that find no
+  challenge endpoint (any answer other than `200`) send without it, which
+  is why it is safe to leave off.
+
+How it works: each install asks for a challenge, finds a number so that
+`SHA-256(challenge ":" number)` starts with the requested count of zero
+bits, and sends the answer in the `Gameplane-Telemetry-PoW` header. A
+challenge is valid for 15 minutes and for one report. Verification happens
+before the body is read, so a refused report costs the receiver one HMAC and
+one hash. The challenge key and the set of used challenges are in memory: a
+restart invalidates outstanding challenges, and installs recover with one
+automatic retry.
+
+### Tune it from `/metrics`
+
+Difficulty depends on `r`, the challenges issued in the last 60 seconds, and
+`INGEST_POW_TARGET_PER_MIN` (`T`). At or below `T` the difficulty is
+`INGEST_POW_MIN_BITS` (default `0`: no work). Above it, it is
+`ceil(2 * log2(r / T))`, capped at `INGEST_POW_MAX_BITS`; it rises at once and
+falls one bit every five minutes. An install's expected work is about
+`2^bits` hashes, and installs refuse anything above 26 bits.
+
+Each daily report asks for one challenge, so challenges per minute are
+about reports per minute (a retry after `428` asks for another). To choose
+`INGEST_POW_TARGET_PER_MIN`:
+
+1. Run for a few days with `INGEST_POW=true` and defaults.
+2. Read the busiest normal minute from
+   `gameplane_telemetry_pow_challenges_total`, for example
+   `max_over_time(rate(gameplane_telemetry_pow_challenges_total[1m])[7d:]) * 60`.
+3. Set the target a little above it, so ordinary peaks cost nothing and
+   only a real surge raises the difficulty.
+
+Read the result with the gauge `gameplane_telemetry_pow_bits`: it is the
+difficulty a challenge issued now would carry. A gauge that sits at your
+`INGEST_POW_MIN_BITS` means traffic is normal. A gauge that stays raised
+means traffic is above the target (the gauge counts the next challenge too,
+so it can read `1` when the last minute was exactly at the target). Watch
+alongside it:
+
+| Series | What it tells you |
+|---|---|
+| `gameplane_telemetry_pow_challenges_total` | Challenges issued; its rate is the `r` that drives difficulty. |
+| `gameplane_telemetry_refused_total{reason="pow_required"}` | Reports with no solution: older installs, scripts, or a flood that skips the challenge. |
+| `gameplane_telemetry_refused_total{reason="pow_invalid"}` | Bad, expired, reused or under-difficulty solutions. A burst right after a restart is normal. |
+| `gameplane_telemetry_refused_total{reason="pow_busy"}` | The used-challenge set (1,000,000 entries) is full; reports get `503` with `Retry-After: 60`. Not seen in normal use. |
+| `gameplane_telemetry_rate_limited_total{route="challenge"}` | One source requested challenges faster than 10 a minute. |
+
+Under attack, respond from the provider side with no install upgrade: lower
+`INGEST_POW_TARGET_PER_MIN` or raise `INGEST_POW_MIN_BITS` and restart the
+receiver. Many sources can still push the difficulty to
+`INGEST_POW_MAX_BITS`; that costs a legitimate install at most a few
+seconds of work per daily report, and it decays when the flood stops.
+
+## Source addresses and `TRUSTED_PROXY_CIDRS`
+
+Per-source limits use the TCP peer address. Behind a reverse proxy, every
+request would otherwise come from the proxy, and the limits
+(`INGEST_SOURCE_DAILY_LIMIT`, default 20 accepted reports per source per
+UTC day) would throttle all installs together. Set `TRUSTED_PROXY_CIDRS`
+to the proxy's address range (comma-separated, for example
+`10.0.0.0/8,192.168.0.0/16`, using your real range). The receiver then
+reads `X-Forwarded-For`, but only when the peer is inside those ranges, so a
+client can't forge its source. Leave it empty if the receiver is directly
+exposed. Addresses are held in memory only, and never stored. Behind a CDN such as Cloudflare, add the CDN's published ranges too (see [How the client address is resolved](#5-how-the-client-address-is-resolved)).
+
+## Retention
+
+| Setting | Default | Minimum | Covers |
+|---|---|---|---|
+| `RETENTION_DAYS` | `730` (24 months) | `365` | Daily aggregates. Older days are deleted by an hourly sweep. |
+| `ACTIVITY_EXPIRY_DAYS` | `90` | `31` | Per-install activity records (transformed ID, key fingerprint, first and last seen, last send time, last version). An ID's claim expires with its record. |
+
+The activity expiry must stay above 30 days because the dashboard's
+"lapsed" figure looks back 30 days. The summary's "total reports" counter
+is kept separately and survives retention sweeps. If you publish a
+data-handling statement, state the values you configured.
+
+## Scrape `/metrics` with the token
+
+Metrics are on the dashboard listener only and need the dashboard token as
+a Bearer token. Existing series keep their names; new ones:
+`gameplane_telemetry_duplicates_total`,
+`gameplane_telemetry_rate_limited_total{route}` (`ingest`, `login`,
+`summary`, `challenge`),
+`gameplane_telemetry_extended_reports_total`,
+`gameplane_telemetry_refused_total{reason}` (`bad_signature`, `stale`,
+`id_claimed`, `replay`, `pow_required`, `pow_invalid`, `pow_busy`),
+`gameplane_telemetry_pow_challenges_total` and the gauge
+`gameplane_telemetry_pow_bits`. The two proof-of-work series are always
+exported; `pow_bits` is `0` while `INGEST_POW` is off.
+
+Prometheus scrape config:
+
+```yaml
+scrape_configs:
+  - job_name: telemetry-receiver
+    metrics_path: /metrics
+    authorization:
+      type: Bearer
+      credentials_file: /etc/prometheus/secrets/telemetry-dashboard-token
+    static_configs:
+      - targets: ["telemetry-receiver.internal:8081"]
+```
+
+With the chart and Prometheus Operator, `serviceMonitors.enabled=true`
+renders a `ServiceMonitor` for the `dashboard` port with the token Secret
+as `bearerTokenSecret`, but only when
+`api.telemetry.receiver.dashboard.tokenSecretRef.name` is set. Without a
+token, the chart renders no `ServiceMonitor` and prints a warning in the
+install notes. Check manually with:
+
+```sh
+curl -H "Authorization: Bearer $DASHBOARD_TOKEN" http://localhost:8081/metrics
+```
+
+A request without the header gets `401 {"error":"unauthorized"}`.
+
+## Back up and restore `telemetry.db`
+
+All durable state is one SQLite database, `$DATA_DIR/telemetry.db`, in WAL
+mode (with `telemetry.db-wal` and `telemetry.db-shm` beside it while the
+receiver runs). It holds the daily aggregates, the activity records and,
+unless you set `ID_PEPPER`, the pepper.
+
+**Back up**
+
+- Prefer a consistent snapshot: snapshot the volume, or stop the receiver
+  (scale to 0) and copy the whole `DATA_DIR`, including the `-wal` and
+  `-shm` files if present.
+- Or, with the `sqlite3` CLI on a copy host and the receiver running:
+  `sqlite3 /data/telemetry.db ".backup '/backup/telemetry-$(date +%F).db'"`.
+  Do not `cp` the main file alone while the receiver is writing.
+- Treat backups as sensitive: they contain the activity records and
+  possibly the pepper. Encrypt them and keep them as short-lived as your
+  retention allows.
+
+**Restore**
+
+1. Stop the receiver (scale to 0).
+2. Replace `telemetry.db` in `DATA_DIR` with the backup, and delete any
+   stale `telemetry.db-wal` and `telemetry.db-shm`.
+3. Make sure `ID_PEPPER` is the same value as when the backup was taken (or
+   unset, if the pepper is stored in the database). A different pepper
+   behaves like a rotation: see [Rotating secrets](#rotating-secrets).
+4. Start the receiver and check `/healthz` and the dashboard.
+
+Reports received between the backup and the restore are lost; installs
+send again within a day, and per-day deduplication keeps the counts right.
+Losing the database with no backup restarts all history; installs just
+re-claim their IDs on their next report.
+
+## Checklist
+
+- [ ] TLS terminates in front of `:8080`; only `/ingest`, `/v1/summary`,
+  `/healthz` and (with proof-of-work on) `/v1/challenge` are routed.
+- [ ] `:8081` is reachable only from a private network.
+- [ ] `DATA_DIR` is a persistent volume; one replica.
+- [ ] `DASHBOARD_TOKEN` (at least 32 characters, from 32 random bytes) and
+  `ID_PEPPER` come from Secrets.
+- [ ] A public provider has `INGEST_POW=true`, and `INGEST_POW_TARGET_PER_MIN`
+  sits just above your busiest normal minute.
+- [ ] `TRUSTED_PROXY_CIDRS` matches your proxy.
+- [ ] Prometheus scrapes `:8081/metrics` with the Bearer token.
+- [ ] Backups of `telemetry.db` are scheduled and a restore has been
+  rehearsed.
+- [ ] The data-handling statement states your retention values.
diff --git a/go.work b/go.work
index 96d05a6d2..69a166196 100644
--- a/go.work
+++ b/go.work
@@ -13,6 +13,7 @@ use (
 	./operator
 	./sentinel
 	./svcutil
+	./telemetryschema
 	./telemetry-receiver
 	./test/e2e
 	./tunnel
diff --git a/hack/auto_label.py b/hack/auto_label.py
index ca68ad8d2..6aff61c12 100755
--- a/hack/auto_label.py
+++ b/hack/auto_label.py
@@ -62,6 +62,7 @@
     "tunnel": "area: optional-components",
     "audit-syslog-bridge": "area: optional-components",
     "telemetry-receiver": "area: optional-components",
+    "telemetryschema": "area: shared",
 }
 
 AREA_BY_FILE = {
diff --git a/hack/check-telemetry-catalog.sh b/hack/check-telemetry-catalog.sh
new file mode 100755
index 000000000..ca4f275b1
--- /dev/null
+++ b/hack/check-telemetry-catalog.sh
@@ -0,0 +1,72 @@
+#!/bin/sh
+# check-telemetry-catalog.sh: Verify that telemetryschema/catalog.txt lists
+# exactly the official modules in charts/gameplane/values.yaml
+# (defaultModuleSource.oci.modules), in the same order (spec 022, research R15).
+#
+# Purpose:
+#   The telemetry receiver folds any game name that is not in the embedded
+#   catalog into "custom". If the chart's official module list and the catalog
+#   drift apart, a new official module would be counted as custom. This check
+#   fails make lint and CI on any difference.
+#
+# To fix a failure, make catalog.txt match the chart list (one name per line,
+#   same order, no blank lines) and keep telemetryschema tests in step.
+#
+# Test overrides:
+#   VALUES_FILE:  values.yaml to read (default: charts/gameplane/values.yaml)
+#   CATALOG_FILE: catalog to compare (default: telemetryschema/catalog.txt)
+#
+# Exit codes:
+#   0 = catalog.txt matches values.yaml
+#   1 = mismatch (the diff is printed), or a file is missing or yields no modules
+
+set -eu
+
+ROOT=$(cd "$(dirname "$0")/.." && pwd)
+VALUES_FILE=${VALUES_FILE:-$ROOT/charts/gameplane/values.yaml}
+CATALOG_FILE=${CATALOG_FILE:-$ROOT/telemetryschema/catalog.txt}
+
+# extract_modules prints the names under defaultModuleSource.oci.modules, one
+# per line. It is a line-based scan keyed on the chart's fixed indentation:
+# a top-level key at column 0, "oci:" at 2 spaces, "modules:" at 4 spaces and
+# list items "- name" at 6 spaces.
+extract_modules() {
+    awk '
+        /^defaultModuleSource:/ { top = 1; next }
+        top && /^[^ #]/ { exit }
+        top && /^  [A-Za-z]/ { oci = ($0 ~ /^  oci:/); mods = 0; next }
+        top && oci && /^    modules:/ { mods = 1; next }
+        top && oci && mods && /^      - / {
+            name = $0
+            sub(/^      - /, "", name)
+            sub(/[ \t]*#.*$/, "", name)
+            sub(/[ \t]+$/, "", name)
+            print name
+            next
+        }
+        top && oci && mods && /^    [A-Za-z]/ { mods = 0 }
+    ' "$1"
+}
+
+for f in "$VALUES_FILE" "$CATALOG_FILE"; do
+    if [ ! -f "$f" ]; then
+        echo "check-telemetry-catalog: $f not found" >&2
+        exit 1
+    fi
+done
+
+expected=$(mktemp)
+trap 'rm -f "$expected"' EXIT HUP INT TERM
+extract_modules "$VALUES_FILE" >"$expected"
+
+if [ ! -s "$expected" ]; then
+    echo "check-telemetry-catalog: no modules found under defaultModuleSource.oci.modules in $VALUES_FILE" >&2
+    exit 1
+fi
+
+if diff -u "$expected" "$CATALOG_FILE" >&2; then
+    echo "check-telemetry-catalog: catalog.txt matches values.yaml ($(wc -l <"$expected" | tr -d ' ') modules)"
+    exit 0
+fi
+echo "check-telemetry-catalog: telemetryschema/catalog.txt differs from defaultModuleSource.oci.modules in values.yaml (- values.yaml, + catalog.txt)" >&2
+exit 1
diff --git a/hack/check-telemetry-default.sh b/hack/check-telemetry-default.sh
new file mode 100755
index 000000000..7bc27c0af
--- /dev/null
+++ b/hack/check-telemetry-default.sh
@@ -0,0 +1,44 @@
+#!/bin/sh
+# check-telemetry-default.sh: fail unless the project default telemetry
+# destination is set to an https URL (spec 022, research R13).
+#
+# api/internal/telemetry/destination.go holds DefaultEndpoint, the one place
+# the project URL lives. OPEN-DECISIONS OD-1 is ruled (2026-10-07), so this
+# check passes; it keeps enforcing that the default stays an https URL (FR-002,
+# FR-009). It runs as its own CI job (telemetry-default-gate); it is
+# deliberately not part of `make lint`.
+#
+# Exit codes:
+#   0 = DefaultEndpoint is non-empty and starts with https://
+#   1 = it is empty, not https, or the constant could not be found
+
+set -eu
+
+cd "$(dirname "$0")/.."
+file="${TELEMETRY_DESTINATION_FILE:-api/internal/telemetry/destination.go}"
+
+if [ ! -r "$file" ]; then
+	echo "check-telemetry-default: cannot read $file" >&2
+	exit 1
+fi
+
+line=$(grep -E '^const DefaultEndpoint = "' "$file" || true)
+if [ -z "$line" ]; then
+	echo "check-telemetry-default: no 'const DefaultEndpoint = \"...\"' line in $file" >&2
+	exit 1
+fi
+
+value=$(printf '%s\n' "$line" | sed -e 's/^const DefaultEndpoint = "//' -e 's/".*$//')
+case "$value" in
+https://?*)
+	echo "check-telemetry-default: DefaultEndpoint is set ($value)"
+	;;
+"")
+	echo "check-telemetry-default: DefaultEndpoint is empty; it must be the project's https ingest URL (OPEN-DECISIONS OD-1)" >&2
+	exit 1
+	;;
+*)
+	echo "check-telemetry-default: DefaultEndpoint must start with https:// (got: $value)" >&2
+	exit 1
+	;;
+esac
diff --git a/specs/022-default-telemetry-dashboard/OPEN-DECISIONS.md b/specs/022-default-telemetry-dashboard/OPEN-DECISIONS.md
new file mode 100644
index 000000000..49381ba3a
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/OPEN-DECISIONS.md
@@ -0,0 +1,104 @@
+# Open Decisions
+
+**Status**: 0 open; 5 ruled (OD-2, OD-3 and OD-4 on 2026-10-06, OD-1 and OD-5 on 2026-10-07).
+
+Per CLAUDE.md rule 10, an open value MUST NOT be committed as a settled contract in code, chart defaults or docs until it is ruled here.
+
+---
+
+### OD-1: Default telemetry domain
+
+**Status**: RULED (2026-10-07, user)
+
+**Question**: Which domain (and ingest path) is the project's default telemetry destination?
+
+**Why it matters**: FR-001 needs a concrete default. FR-002 forbids shipping a placeholder. Until this is ruled, the default stays unset, stock installs keep today's behavior, and the opt-out default (FR-003) has no effect.
+
+**Context**: the project website has no custom domain yet. It is served from GitHub Pages at `valgulnecron.github.io/gameplane-website` (`website/src/config.ts`: `CUSTOM_DOMAIN` is undefined). GitHub Pages is static hosting, so it can't receive reports.
+
+**Options**:
+1. Register one project domain and use `telemetry.<domain>`. The website can move to the same domain later.
+2. A dedicated domain used only for telemetry.
+
+**Recommended default**: (1). A host users already know from the docs looks more trustworthy in the first-login notice and the Admin Settings destination line (FR-004, FR-017), and there is only one domain to register and renew.
+
+**Ruling (2026-10-07, user)**: the project domain is `gameplane.net`. The default telemetry destination host is `telemetry.gameplane.net`, so `telemetry.DefaultEndpoint = "https://telemetry.gameplane.net/ingest"` (the receiver serves `POST /ingest`, `GET /v1/challenge` and `GET /v1/summary`). The website moves to `gameplane.net`, so the data-handling statement URL (OD-2) is `https://gameplane.net/telemetry/`. The website-side changes (`CUSTOM_DOMAIN`, the statement page) belong to T096 in the `website` submodule.
+
+**Consequences**:
+- `DefaultEndpoint` is set, so `telemetry-default-gate` passes and the feature PR can leave draft once the other gates are green.
+- The destination copy in the designs and the docs name `telemetry.gameplane.net`; the bundled and custom sample hosts stay samples.
+
+**Superseded interim ruling (2026-10-06, user)**: The domain is not decided yet.
+- Implementation proceeds with `telemetry.DefaultEndpoint` left **blank**, as FR-002 allows.
+- The feature's PR **MUST NOT merge until a domain is chosen**, recorded here as RULED, and set in `DefaultEndpoint`.
+
+**How the block is enforced** (plan.md, Merge gate):
+- The PR stays a **draft** until this decision is ruled. GitHub does not allow merging drafts, and the master ruleset has no required status checks that could block the merge instead.
+- A dedicated CI job, `telemetry-default-gate`, fails while `DefaultEndpoint` is empty or isn't `https`.
+
+**Blocks**:
+- merge of the feature PR
+- FR-001's default value
+- the FR-008 upgrade notes
+- the destination copy in the first-login notice and Admin Settings designs
+
+---
+
+### OD-2: Provider hosting, ownership, and data-handling statement
+
+**Status**: RULED (2026-10-06, user)
+
+**Question**: Who runs the default provider, and where is its data-handling statement published?
+
+**Ruling**: The project maintainers run the default provider. The data-handling statement is a page on the project website, in the `website` submodule. It is linked from:
+- the first-login notice (FR-004)
+- Admin Settings → Telemetry (FR-017)
+- the upgrade notes (FR-008)
+
+**Consequences**:
+- The statement page is new website work. It goes through the submodule's own PR flow, and the website's design-first rule applies only if it needs a new screen layout.
+- The dashboard links to the statement through one constant, because the website URL changes once `CUSTOM_DOMAIN` is set (see OD-1).
+- The statement states the OD-3 and OD-4 periods.
+
+---
+
+### OD-3: Aggregate retention ceiling
+
+**Status**: RULED (2026-10-06, user)
+
+**Question**: How long does the provider keep daily aggregates? FR-020 sets a floor of 12 months.
+
+**Ruling**: **24 months**. `RETENTION_DAYS` defaults to `730`, the Helm value `api.telemetry.receiver.retentionDays` defaults to `730`, and the enforced minimum is 365. Two years covers year-over-year comparison, and the stated limit appears in the OD-2 statement.
+
+---
+
+### OD-4: Activity-record inactivity expiry
+
+**Status**: RULED (2026-10-06, user)
+
+**Question**: How long after an install's last report does the provider delete its activity record? An activity record holds the transformed install ID, the first-seen date, the last-seen date and the last version (FR-015).
+
+**Ruling**: **90 days**. `ACTIVITY_EXPIRY_DAYS` defaults to `90`, the Helm value `api.telemetry.receiver.activityExpiryDays` defaults to `90`, and the enforced minimum is 31, because the expiry must stay longer than the 30-day lapsed window (US5). This keeps new and lapsed counts accurate for installs that go quiet for a season, and the period appears in the OD-2 statement.
+
+---
+
+### OD-5: Proof-of-work defaults
+
+**Status**: RULED (2026-10-07, user)
+
+**Question**: Which defaults does the receiver's proof-of-work use (FR-039, FR-040, research R21)? The user set its shape on 2026-10-07 (spec Q12): off by default and turned on by the runbook for the project's provider, with a difficulty of zero while traffic is normal or absent, rising fast with the request rate and falling slowly.
+
+**Ruling**: the "gentler ceiling" option.
+
+| Setting | Value | Effect |
+|---|---|---|
+| `INGEST_POW` | `false` | Off in the binary and in the bundled receiver; the runbook turns it on for the project's provider. |
+| `INGEST_POW_TARGET_PER_MIN` | `60` | The normal challenge rate. No work is required at or below it. |
+| `INGEST_POW_MIN_BITS` | `0` | No work under normal load. |
+| `INGEST_POW_MAX_BITS` | `22` | The ceiling during a flood: about 4.2 million hashes, under a second on a desktop and roughly 5–8 seconds on a Raspberry Pi 4 (estimates). |
+| `MaxPoWBits` (install cap) | `26` | The install refuses harder challenges (about 67 million hashes, a minute or two on a Raspberry Pi 4), so a misconfigured provider can't burn an install's CPU. |
+| Curve | `ceil(2 · log2(r / T))` | 10× the normal rate gives 7 bits, 100× gives 14, 1,000× gives 20. |
+| Decay | 1 bit per 5 minutes | From 22 bits back to 0 in under 2 hours. |
+| Challenge lifetime | 15 minutes | Longer than a Raspberry Pi 4 needs at the 26-bit cap. |
+| Challenge requests per source | 10 per minute, burst 5 | One source can't raise the difficulty for everyone. |
+| Used-challenge memory | 1,000,000 entries | Filling it needs that many solved challenges within 15 minutes. |
diff --git a/specs/022-default-telemetry-dashboard/checklists/requirements.md b/specs/022-default-telemetry-dashboard/checklists/requirements.md
new file mode 100644
index 000000000..3d77f2416
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/checklists/requirements.md
@@ -0,0 +1,58 @@
+# Specification Quality Checklist: Default telemetry destination and telemetry dashboard
+
+**Purpose**: Validate specification completeness and quality before proceeding to planning
+**Created**: 2026-10-06
+**Feature**: [spec.md](../spec.md)
+
+## Content Quality
+
+- [x] No implementation details (languages, frameworks, APIs)
+- [x] Focused on user value and business needs
+- [x] Written for non-technical stakeholders
+- [x] All mandatory sections completed
+
+## Requirement Completeness
+
+- [x] No [NEEDS CLARIFICATION] markers remain
+- [x] Requirements are testable and unambiguous
+- [x] Success criteria are measurable
+- [x] Success criteria are technology-agnostic (no implementation details)
+- [x] All acceptance scenarios are defined
+- [x] Edge cases are identified
+- [x] Scope is clearly bounded
+- [x] Dependencies and assumptions identified
+
+## Feature Readiness
+
+- [x] All functional requirements have clear acceptance criteria
+- [x] User scenarios cover primary flows
+- [x] Feature meets measurable outcomes defined in Success Criteria
+- [x] No implementation details leak into specification
+
+## Notes
+
+- Iteration 1 left two clarification markers. In iteration 2 (2026-10-06) the user answered them:
+  - Q1: opt-out for new installs, with a first-login notice.
+  - Q2: a private receiver-hosted dashboard plus a public summary API limited to headline counts.
+
+  The answers are recorded in spec.md → Clarifications. All items pass.
+- Iteration 3 (2026-10-06) added extended telemetry:
+  - Q3: all four categories (environment, game usage, feature adoption, install ID).
+  - Q4: two tiers, both on by default for new installs.
+
+  FRs were renumbered to FR-001 through FR-034. OD-4 (activity-record expiry) was added. No new markers; all items still pass.
+- Iteration 4 (2026-10-06) added report signing at the user's request:
+  - Q5: the key is derived from a random secret in the install's database plus the install ID.
+  - Q6: mismatches are refused, and the install rotates its ID on a claim conflict.
+
+  It added US7, FR-035 to FR-038 (appended, so earlier numbers are unchanged), SC-014 and SC-015, and updated FR-011, FR-012, FR-013 and FR-015. All items still pass.
+- Iteration 5 (2026-10-06), from the analysis remediation during implement:
+  - Q7: turning basic off also turns extended off, and the UI disables the extended switch (FR-003, FR-019).
+  - Q8: operational metrics move behind the dashboard credential (FR-030).
+  - Q9: a provider runbook is added (T093).
+  - Q10: the provider dashboard is designed in `telemetry-receiver/telemetry-dashboard.pen`.
+
+  No new markers; all items still pass.
+- The domain (OD-1) has been ruled (2026-10-07): telemetry.gameplane.net. The data-handling statement URL (OD-2 dependent, T096 on website side) is https://gameplane.net/telemetry/.
+- The Assumptions section cites repo process (Pencil design-first, E2E coverage, `telemetry-receiver/specs.md` upkeep) as governance constraints. These describe process, not implementation, and are kept on purpose.
+- Size bands in US4 scenario 3 restate the provider's existing published buckets, so they are a product contract rather than an implementation choice.
diff --git a/specs/022-default-telemetry-dashboard/contracts/api-telemetry-http.md b/specs/022-default-telemetry-dashboard/contracts/api-telemetry-http.md
new file mode 100644
index 000000000..7a9415394
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/contracts/api-telemetry-http.md
@@ -0,0 +1,94 @@
+# Contract: Gameplane API telemetry endpoints
+
+**Requirements**: FR-003–FR-005, FR-012, FR-017–FR-019, FR-035, FR-037. **Research**: R10–R13, R18, R20.
+
+All routes are behind session auth. RBAC entries are added to `api/internal/rbac/rbac.go` before the `{segment: "admin", perm: "*"}` fallback:
+
+```go
+{method: "GET", segment: "admin", prefix: "/admin/telemetry", perm: "config:read"},
+{segment: "admin", prefix: "/admin/telemetry", perm: "config:manage"},
+```
+
+## `GET /admin/telemetry` (`config:read`)
+
+```json
+{
+  "destination": { "kind": "default", "host": "telemetry.example.org" },
+  "operatorDisabled": false,
+  "consent": { "basic": true, "extended": true, "source": "default" },
+  "installId": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+  "preview": { "version": "0.3.0", "servers": 3, "templates": 7, "ext": { "...": "see report-schema.md" } },
+  "status": { "lastAttemptAt": "2026-10-06T09:12:44Z", "lastSuccessAt": "2026-10-06T09:12:44Z", "lastOutcome": "ok", "lastIdRotationAt": null }
+}
+```
+
+- **`destination.kind`** is one of `default`, `custom`, `bundled`, `disabled` or `none`. `destination.host` is only the URL host, never the path, query or credentials, and is `null` for `disabled` and `none` (FR-017).
+- **`consent`** holds the stored choice. When `operatorDisabled` is true, the stored values are reported but have no effect.
+- **`installId`** is `null` whenever extended is off (FR-012).
+- **`preview`** is the exact report the reporter would send now, built by the same function (SC-006). It is `null` when basic is off or the destination is `disabled` or `none`. When collection fails partway, the fields that failed are reported as they would be sent: `0` for counts, `other` for categories.
+- **`status.lastOutcome`** is `never`, `ok` or `failed`. A failure detail is never exposed; the UI renders a fixed phrase (US3 scenario 2).
+- **`status.lastIdRotationAt`** is when the reporter last replaced the ID because the receiver said it was claimed by another key (FR-037), or `null`. The UI renders "Install ID replaced on <date>: the destination reported it was in use by another key."
+- **The preview's `ext`** includes `key` (the public key for the current ID) and `sentAt` (the preview time). The signature header isn't shown.
+- **`signing_secret` is never returned** by this or any other endpoint (FR-012).
+
+## `PUT /admin/config/telemetry` (`config:manage`, existing route `PUT /admin/config/{section}`, `api/internal/handlers/config.go:56`)
+
+Body: `{"sendMetrics": bool, "extended": bool}`.
+
+| Case | Result |
+|---|---|
+| `sendMetrics: false` (whatever `extended` says) | Saved as `extended: false` as well, then continues as "Valid" below (FR-003). |
+| Operator disabled telemetry (`kind = disabled`) | `409` "telemetry is disabled by the operator" |
+| Valid | `200`. In the same transaction: the config row is saved, `consent_source` becomes `admin`, the install ID is created or deleted to match `extended`, and the schedule opens (`next_due_at` set as in R12) or closes (`NULL`). |
+
+The response body is unchanged from the current section save.
+
+## `POST /admin/telemetry/install-id` (`config:manage`)
+
+Rotates the install ID.
+
+- `200 {"installId": "<new uuid>"}` on success.
+- `409` when extended is off (there is no ID to reset).
+
+The old ID is discarded and never sent again (US3 scenario 4).
+
+## `GET /admin/telemetry/notice` (`config:manage`; a user without it gets `{"pending": false}`)
+
+```json
+{
+  "pending": true,
+  "destination": { "kind": "default", "host": "telemetry.example.org" },
+  "fields": {
+    "basic": ["version", "servers", "templates"],
+    "extended": ["installId", "env.k8s", "env.distro", "env.arch", "env.nodes", "games", "features"]
+  }
+}
+```
+
+`pending` is computed as in data-model.md under "Notice pending". When it is `false`, the other keys are omitted.
+
+## `POST /admin/telemetry/notice` (`config:manage`)
+
+Body: `{"action": "seen" | "keep" | "extended-off" | "all-off"}`.
+
+| Action | Effect |
+|---|---|
+| `seen` | Sets `notice_shown_at` if it isn't set yet, and opens the schedule (`next_due_at = now + U(0, min(15m, interval/4))`, research R12). Records no ack. Idempotent. |
+| `keep` | Ack (`action=keep`). Consent unchanged. |
+| `extended-off` | Ack. `extended=false`, `consent_source=admin`, install ID deleted. |
+| `all-off` | Ack. `sendMetrics=false`, `extended=false`, `consent_source=admin`, install ID deleted, schedule closed. |
+
+- Every action returns `204`.
+- Every action returns `409` when the notice isn't pending for the caller, except `seen`, which is a no-op in that case.
+
+## Audit
+
+Each mutating request above is audited through the existing middleware, as all `/admin/*` writes are. Install IDs are never written to audit `target` or `reason`.
+
+## Web client (`web/src/lib/api.ts`)
+
+- `Telemetry.get()`
+- `Telemetry.resetInstallId()`
+- `Telemetry.notice()`
+- `Telemetry.ack(action)`
+- `TelemetryCfg` in `web/src/lib/config.ts` gains `extended: boolean`.
diff --git a/specs/022-default-telemetry-dashboard/contracts/install-config.md b/specs/022-default-telemetry-dashboard/contracts/install-config.md
new file mode 100644
index 000000000..dbd9f76a8
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/contracts/install-config.md
@@ -0,0 +1,90 @@
+# Contract: install-time configuration (Helm values, API flags and environment)
+
+**Requirements**: FR-001, FR-002, FR-005, FR-006, FR-009, FR-033; SC-004. **Research**: R3, R12, R13, R15, R17.
+
+## Helm values (`charts/gameplane/values.yaml`)
+
+```yaml
+api:
+  telemetry:
+    # NEW. false = hard off: the API never sends telemetry, whatever the admin
+    # toggles say. This is the single setting for air-gapped and
+    # privacy-sensitive clusters (FR-005, SC-004).
+    enabled: true
+    # Empty = the project's default provider (https://telemetry.gameplane.net/ingest,
+    # compiled into the API; OD-1 ruled 2026-10-07). Set a URL to send reports to your
+    # own receiver instead (FR-005, FR-006).
+    endpoint: ""
+    authSecretRef: { name: "", key: token }   # unchanged
+    # NEW, testing only. Spacing between reports. Don't change in production.
+    interval: 24h
+    receiver:
+      enabled: false        # unchanged; auto-wires the API when endpoint is empty
+      replicas: 1           # must stay 1 while persistence is enabled (the template fails otherwise)
+      resources: {}
+      persistence:          # NEW (FR-020)
+        enabled: true
+        size: 1Gi
+        storageClassName: ""
+      dashboard:            # NEW (FR-022, FR-028)
+        tokenSecretRef: { name: "", key: token }   # empty name = no dashboard listener
+        # Extra NetworkPolicy peers allowed to reach the dashboard port
+        # (port-forward works without any).
+        ingressFrom: []
+      publicSummary:
+        enabled: false      # NEW (FR-031)
+      pepperSecretRef: { name: "", key: pepper }   # NEW (R5), optional
+      retentionDays: 730          # NEW (OD-3: 24 months)
+      activityExpiryDays: 90      # NEW (OD-4)
+      ingestSourceDailyLimit: 20  # NEW (R6)
+      trustedProxyCIDRs: []       # NEW (R6)
+      ingestPow:                  # NEW (FR-039, R21, OD-5)
+        enabled: false            # the project's provider turns it on (runbook)
+        targetPerMinute: 60
+        minBits: 0
+        maxBits: 22
+```
+
+All new keys are read with `hasKey` or `dig` guards (the F-214 precedent), so `helm upgrade --reuse-values` from beta.8 needs no new values and adds no storage: an absent `persistence` block counts as disabled (an `emptyDir`), and other absent keys fall back to the defaults above. `retentionDays` below 365 or `activityExpiryDays` below 31 fails rendering, so a bad value never reaches a crash-looping pod. Likewise, `ingestPow.targetPerMinute` below 1, or `ingestPow.maxBits` below `minBits` or above 26, fails rendering.
+
+## How values render
+
+| Values | API arguments and environment | Destination kind |
+|---|---|---|
+| `enabled: false` | `--telemetry-disabled` | `disabled` |
+| `endpoint: ""`, `receiver.enabled: true` | `--telemetry-endpoint=http://gameplane-telemetry-receiver.<ns>.svc:8080/ingest`, `GAMEPLANE_TELEMETRY_BUNDLED=true` | `bundled` |
+| `endpoint: "https://…"` | `--telemetry-endpoint=https://…` | `custom` |
+| `endpoint: ""`, `receiver.enabled: false` | *(no endpoint argument)* | `default` (OD-1 ruled 2026-10-07) |
+| `defaultModuleSource.enabled: true` | `--official-module-source=<defaultModuleSource.name>` | — |
+| `interval` set | `GAMEPLANE_TELEMETRY_INTERVAL=<interval>` | — |
+
+`enabled: false` takes precedence over both the endpoint and the receiver. The receiver itself is still deployed if `receiver.enabled` is true.
+
+## API flags and environment (`api/cmd/main.go`)
+
+| Flag | Env | Default | Change |
+|---|---|---|---|
+| `--telemetry-endpoint` | `GAMEPLANE_TELEMETRY_ENDPOINT` | `""` | **Semantics change**: empty now means "use `telemetry.DefaultEndpoint`" (https://telemetry.gameplane.net/ingest, OD-1 ruled 2026-10-07) rather than "off". |
+| `--telemetry-disabled` | `GAMEPLANE_TELEMETRY_DISABLED` | `false` | New. |
+| — | `GAMEPLANE_TELEMETRY_BUNDLED` | `false` | New. Set only by the chart. |
+| `--telemetry-interval` | `GAMEPLANE_TELEMETRY_INTERVAL` | `24h` | New. Minimum `1m`; lower values are a startup error. |
+| `--official-module-source` | `GAMEPLANE_OFFICIAL_MODULE_SOURCE` | `""` | New. Empty means every module counts as `custom`. |
+| — | `GAMEPLANE_TELEMETRY_AUTH` | `""` | Unchanged. |
+
+`telemetry.DefaultEndpoint` (`api/internal/telemetry`) is the only place the project URL lives (FR-002). It must use `https`; a non-https value fails startup (FR-009).
+
+## Receiver chart rendering (`templates/telemetry-receiver.yaml`)
+
+- **Workload.** The Deployment keeps `replicas: {{ $r.replicas }}`, adds `strategy: Recreate`, and fails rendering when `replicas > 1 && persistence.enabled`.
+- **Volumes.** When `persistence.enabled`, a PVC `gameplane-telemetry-receiver-data` is mounted at `/data`. Otherwise an `emptyDir` is mounted there and the template adds a NOTES warning. In both cases the root filesystem stays read-only.
+- **Environment.** `DATA_DIR=/data`, `DASHBOARD_TOKEN` and `ID_PEPPER` from their `secretKeyRef`s when named, `PUBLIC_SUMMARY`, `RETENTION_DAYS`, `ACTIVITY_EXPIRY_DAYS`, `INGEST_SOURCE_DAILY_LIMIT`, `TRUSTED_PROXY_CIDRS`, and `INGEST_POW`, `INGEST_POW_TARGET_PER_MIN`, `INGEST_POW_MIN_BITS` and `INGEST_POW_MAX_BITS`.
+- **Service.** Adds port `dashboard` (8081 → 8081) when the dashboard token is named.
+- **NetworkPolicy.** Port 8080 admits only the API pod. Port 8081 admits `dashboard.ingressFrom` peers, plus the Prometheus namespace when `serviceMonitors.scrapeNamespaceSelector` is set; that rule moves from 8080 to 8081, because `/metrics` now lives there. With no peers configured, port-forward still works.
+- **ServiceMonitor** (`templates/servicemonitors.yaml`). It renders only when `dashboard.tokenSecretRef.name` is set, and scrapes port `dashboard`, path `/metrics`, with `bearerTokenSecret` pointing at that Secret. When `serviceMonitors.enabled` and the receiver are on without a token, NOTES prints a warning and no ServiceMonitor is rendered.
+
+## Test and dev installs (research R17)
+
+`deploy/kind/e2e.sh` and `deploy/kind/up.sh` must pass `--set api.telemetry.receiver.enabled=true`, so that no test or dev install ever reaches the project provider. The CI `helm template` checks (`.github/workflows/ci.yaml:775-804`) gain assertions for:
+
+- the `disabled`, `bundled` and `custom` renderings above
+- `--reuse-values` compatibility with beta.8
diff --git a/specs/022-default-telemetry-dashboard/contracts/receiver-http.md b/specs/022-default-telemetry-dashboard/contracts/receiver-http.md
new file mode 100644
index 000000000..cfa48148b
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/contracts/receiver-http.md
@@ -0,0 +1,149 @@
+# Contract: telemetry-receiver HTTP surface
+
+**Requirements**: FR-014, FR-016, FR-020–FR-033, FR-035–FR-039, FR-041. **Research**: R3, R5–R9, R20, R21.
+
+The receiver runs two listeners. The dashboard listener is never started unless `DASHBOARD_TOKEN` is set.
+
+## Public listener: `LISTEN_ADDR` (default `:8080`)
+
+| Route | Method | Auth | Success | Failures |
+|---|---|---|---|---|
+| `/ingest` | POST | `AUTH_TOKEN` when set (unchanged). When `INGEST_POW=true`, a valid `Gameplane-Telemetry-PoW` header, checked before the body is read (R21). Reports with `ext` also need a valid `Gameplane-Telemetry-Signature`. | `204`, including for same-day duplicates (counted only in `duplicates`) | `400` structural error ([report-schema.md](report-schema.md)); `401` bad or missing token; `403` `bad_signature`, `stale` or `replay`; `409` `id_claimed`; `413` body over 16 KiB; `428` `pow_required` or `pow_invalid`; `429` per-source daily limit reached; `503` `pow_busy` with `Retry-After: 60` |
+| `/v1/summary` | GET | none | `200` JSON (below) | `404` when `PUBLIC_SUMMARY` is not `true`; `429` per-source rate limit |
+| `/v1/challenge` | GET | none | `200` JSON (below) | `404` when `INGEST_POW` is not `true`; `429` per-source rate limit (10 per minute, burst 5) |
+| `/healthz` | GET | none | `200 ok` | — |
+
+### `GET /v1/summary` response (FR-029, FR-030)
+
+```json
+{
+  "asOf": "2026-10-05",
+  "reportsLatestDay": 412,
+  "reports30d": 11873,
+  "reportsTotal": 98211,
+  "activeInstalls30d": 1290
+}
+```
+
+- The response has exactly these five keys and nothing else.
+- `asOf` is the latest complete UTC day.
+- Response headers:
+  - `Content-Type: application/json`
+  - `Cache-Control: public, max-age=3600`
+  - `ETag`
+  - `Access-Control-Allow-Origin: *`
+- The response is served from a snapshot recomputed at most every 5 minutes.
+- With no data at all, every count is `0` and `asOf` is the previous UTC day. The summary is a counter, not a chart, so zeros here are accurate.
+
+The public listener answers `404` for `/metrics`. Operational metrics live only on the dashboard listener, behind the token (FR-030).
+
+### `GET /v1/challenge` response (FR-039, R21)
+
+```json
+{
+  "challenge": "AQAAAABpA2yQEp3x0b1f7a9c2e4d6b8a0c1e3f5.Zk9xQ2...",
+  "bits": 7,
+  "expiresAt": "2026-10-07T12:15:00Z"
+}
+```
+
+- `challenge` is opaque to the sender: `base64url(payload) "." base64url(mac)` (R21).
+- `bits` is the difficulty, from `INGEST_POW_MIN_BITS` up to `INGEST_POW_MAX_BITS`. It is also inside the MAC'd payload, which is what `/ingest` checks.
+- `expiresAt` is 15 minutes after issue.
+- The response carries `Cache-Control: no-store`.
+- The sender solves it and sends `Gameplane-Telemetry-PoW: <challenge>:<nonce>` on `/ingest`, where `nonce` is decimal and `SHA-256(challenge ":" nonce)` starts with at least `bits` zero bits. Each challenge is accepted once.
+
+### New `/metrics` series (operations only)
+
+- `gameplane_telemetry_duplicates_total`
+- `gameplane_telemetry_rate_limited_total{route}`
+- `gameplane_telemetry_extended_reports_total`
+- `gameplane_telemetry_refused_total{reason="bad_signature"|"stale"|"id_claimed"|"replay"|"pow_required"|"pow_invalid"|"pow_busy"}`
+- `gameplane_telemetry_pow_bits` (gauge: the difficulty a challenge issued now would carry)
+- `gameplane_telemetry_pow_challenges_total`
+
+The existing series keep their names and in-memory semantics.
+
+## Dashboard listener: `DASHBOARD_LISTEN_ADDR` (default `:8081`, only when `DASHBOARD_TOKEN` is set)
+
+| Route | Method | Auth | Success | When unauthenticated |
+|---|---|---|---|---|
+| `/login` | GET | none | Login form, which contains no data | — |
+| `/login` | POST | form field `token`, same-origin `Origin` required | `303` to `/`, sets the session cookie | Login form re-rendered with "Invalid credentials". `429` after 5 attempts per minute per source. |
+| `/logout` | POST | session, same-origin | `303` to `/login`, clears the cookie | `303` to `/login` |
+| `/` | GET | session | Overview HTML for `?range=7\|30\|90\|365` (default 30; invalid values become 30) | `303` to `/login` |
+| `/api/v1/views` | GET | session cookie, or `Authorization: Bearer <DASHBOARD_TOKEN>` | `200` JSON with the same view model the HTML renders | `401 {"error":"unauthorized"}` |
+| `/metrics` | GET | `Authorization: Bearer <DASHBOARD_TOKEN>` only | Prometheus text (existing series, plus the new counters below) | `401 {"error":"unauthorized"}` |
+| `/static/*` | GET | none | Embedded CSS and icons only | — |
+
+**Session cookie**: `gp_telemetry_session`, attributes `HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age=43200`. The value is `expiry || HMAC(K, expiry)`, where `K` is derived from `DASHBOARD_TOKEN` (research R8). Changing the token invalidates every session.
+
+**Headers on every dashboard response**:
+
+- `Content-Security-Policy: default-src 'none'; style-src 'self'; img-src 'self' data:; form-action 'self'; frame-ancestors 'none'; base-uri 'none'`
+- `X-Content-Type-Options: nosniff`
+- `Referrer-Policy: no-referrer`
+- `Cache-Control: no-store`
+
+**Refusal invariant (FR-023, SC-011)**: an unauthenticated response never contains:
+
+- any figure
+- any date other than the page chrome
+- any version, category or module name
+- anything that varies with whether data exists
+
+An E2E check (R17) compares the unauthenticated response against the login page from an empty receiver.
+
+### `GET /api/v1/views` response shape
+
+```json
+{
+  "range": 30,
+  "asOf": "2026-10-05",
+  "empty": false,
+  "basic": {
+    "reportsPerDay": [{"day": "2026-09-06", "reports": 401}],
+    "versions": [{"label": "0.3.0", "reports": 8123}, {"label": "Other", "reports": 52}, {"label": "Invalid", "reports": 3}],
+    "fleet": {
+      "servers":   {"bands": [{"le": "0", "reports": 120}], "median": 2},
+      "templates": {"bands": [{"le": "0", "reports": 15}],  "median": 4}
+    },
+    "latestDay": {"serversTotal": 1840, "templatesTotal": 2611}
+  },
+  "extended": {
+    "coverage": 0.71,
+    "installs": {"active1d": 290, "active7d": 812, "active30d": 1290},
+    "newPerDay": [{"day": "2026-09-06", "count": 12}],
+    "lapsedPerDay": [{"day": "2026-09-06", "count": 4}],
+    "versionsByInstall": {"windowDays": 30, "items": [{"label": "0.3.0", "installs": 1011}]},
+    "env": {"k8s": [{"label": "1.31", "share": 0.42}], "distro": [], "arch": [], "nodes": []},
+    "games": [{"module": "minecraft-java", "installsShare": 0.63, "serversPerDay": 2140.5}, {"module": "custom", "installsShare": 0.08, "serversPerDay": 77.1}],
+    "features": [{"feature": "wakeOnConnect", "share": 0.18}],
+    "tunnels": [{"label": "playit", "share": 0.05}],
+    "clusters": [], "db": [], "language": []
+  }
+}
+```
+
+- When the range has no data: `empty: true`, with `basic` and `extended` set to `null`. The HTML renders the empty state (FR-027).
+- When there is basic data but no extended reports: `extended: null`, and the HTML explains that no reports in the range included extended data.
+
+## Configuration
+
+| Variable | Default | Meaning |
+|---|---|---|
+| `LISTEN_ADDR` | `:8080` | Public listener. |
+| `DASHBOARD_LISTEN_ADDR` | `:8081` | Dashboard listener. |
+| `DASHBOARD_TOKEN` | *(empty)* | Dashboard credential, from a Secret. Empty means no dashboard listener. When set it must be at least 32 characters, or the receiver exits at startup (FR-041). |
+| `AUTH_TOKEN` | *(empty)* | Ingest token (unchanged). |
+| `DATA_DIR` | *(empty)* | SQLite directory. Empty means in-memory, and a startup warning is logged. |
+| `PUBLIC_SUMMARY` | `false` | Enables `/v1/summary`. |
+| `TRUSTED_PROXY_CIDRS` | *(empty)* | Comma-separated CIDRs whose `X-Forwarded-For` is trusted. |
+| `INGEST_SOURCE_DAILY_LIMIT` | `20` | Accepted reports per source per UTC day. `0` means unlimited. |
+| `RETENTION_DAYS` | `730` (OD-3) | Daily aggregate retention. Minimum 365. |
+| `ACTIVITY_EXPIRY_DAYS` | `90` (OD-4) | Activity record expiry. Minimum 31. |
+| `ID_PEPPER` | *(empty)* | HMAC pepper for install IDs, from a Secret. Empty means one is generated and kept in `meta`. |
+| `INGEST_POW` | `false` (OD-5) | Requires proof-of-work on `/ingest` and serves `/v1/challenge` (R21). |
+| `INGEST_POW_TARGET_PER_MIN` | `60` (OD-5) | Normal challenge rate; no work is required at or below it. Must be at least 1. |
+| `INGEST_POW_MIN_BITS` | `0` (OD-5) | Lowest difficulty issued. |
+| `INGEST_POW_MAX_BITS` | `22` (OD-5) | Highest difficulty issued. At least `INGEST_POW_MIN_BITS` and at most `MaxPoWBits` (26); an out-of-range value stops startup. |
diff --git a/specs/022-default-telemetry-dashboard/contracts/report-schema.md b/specs/022-default-telemetry-dashboard/contracts/report-schema.md
new file mode 100644
index 000000000..6faf201b9
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/contracts/report-schema.md
@@ -0,0 +1,122 @@
+# Contract: Telemetry report schema
+
+**Owner**: `telemetryschema/` (research R1). The API builds reports with this package and the receiver decodes them with it.
+**Requirements**: FR-010, FR-011, FR-013, FR-016, FR-035–FR-038.
+
+## Body
+
+The body is one JSON object. Keys are case-sensitive. Duplicate keys, unknown keys, `null` values and trailing content are all rejected. The body may be at most 16 KiB, which is unchanged.
+
+### Basic tier (unchanged)
+
+```json
+{ "version": "0.3.0", "servers": 3, "templates": 7 }
+```
+
+### Basic and extended tiers
+
+```json
+{
+  "version": "0.3.0",
+  "servers": 3,
+  "templates": 7,
+  "ext": {
+    "schema": 1,
+    "installId": "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+    "env": { "k8s": "1.31", "distro": "k3s", "arch": ["amd64"], "nodes": "1" },
+    "games": { "official": { "minecraft-java": 2, "terraria": 1 }, "custom": 0 },
+    "features": {
+      "wakeOnConnect": true, "tunnels": ["playit"], "capture": false,
+      "backups": true, "sso": false, "auditForwarding": false,
+      "clusters": "1", "db": "sqlite", "language": "en"
+    },
+    "key": "pV0mY3Qn8wK2b7cXlR4sTt9uJ1eHaZ6dFgQmNoP5rSk",
+    "sentAt": "2026-10-06T09:12:44Z"
+  }
+}
+```
+
+Sent with the header:
+
+```text
+Gameplane-Telemetry-Signature: ed25519=<base64url Ed25519 signature over the exact body bytes>
+```
+
+## Field rules
+
+| Path | Type | Allowed values | When the value doesn't fit |
+|---|---|---|---|
+| `version` | string | `^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$` | The receiver buckets it as `invalid`. |
+| `servers`, `templates` | integer | ≥ 0 | 400 |
+| `ext` | object | optional | — |
+| `ext.schema` | integer | `1` | A higher value gets 400, which triggers the API's basic-only fallback. |
+| `ext.installId` | string | lowercase UUIDv4 | Once `ext` passes the structural checks, the receiver ignores it and counts the report as basic. A structurally broken `ext` is a 400 whatever the ID. |
+| `ext.env.k8s` | string | `1.<minor>`, where minor is 1–3 digits | `other` |
+| `ext.env.distro` | string | `k3s` `rke2` `k0s` `eks` `gke` `aks` `openshift` `microk8s` `minikube` `kind` `doks` `talos` `other` | `other` |
+| `ext.env.arch` | string[] | non-empty, sorted, unique, drawn from `amd64` `arm64` `arm` `ppc64le` `s390x` `riscv64` `other` | Unknown members become `other`. An empty array gets 400. |
+| `ext.env.nodes` | string | `1` `2-3` `4-10` `11-50` `51+` | `other` |
+| `ext.games.official` | object | keys are module names from the embedded catalog, values are integers ≥ 1 | Unknown keys are added to `custom`. A non-positive value gets 400. |
+| `ext.games.custom` | integer | ≥ 0 | 400 |
+| `ext.features.wakeOnConnect`, `capture`, `backups`, `sso`, `auditForwarding` | boolean | — | 400 |
+| `ext.features.tunnels` | string[] | sorted, unique, drawn from `frp` `tailscale` `playit` `other` (may be empty) | Unknown members become `other`. |
+| `ext.features.clusters` | string | `1` `2-3` `4-10` `11+` | `other` |
+| `ext.features.db` | string | `sqlite` `postgres` | `other` |
+| `ext.features.language` | string | `en` (spec 019 extends this list) | `other` |
+| `ext.key` | string | canonical base64url (unpadded, no line breaks) encoding of a 32-byte Ed25519 public key | 400 |
+| `ext.sentAt` | string | RFC 3339 UTC | 400 if it doesn't parse. 403 `stale` if it is outside `[now − 36h, now + 1h]`. |
+
+## Signature and claim (FR-035–FR-038, research R20)
+
+**Key derivation** (install side, `telemetryschema.DeriveKey`):
+
+```text
+seed = HKDF-SHA256(ikm = signing_secret, salt = installId,
+                   info = "gameplane-telemetry-signing-v1", L = 32)
+priv = ed25519.NewKeyFromSeed(seed)
+```
+
+- `signing_secret` is 32 random bytes created once on the install. It never leaves the install.
+- The key is unique to the ID, so a new ID always means a new key.
+
+**Signing**: `Gameplane-Telemetry-Signature: ed25519=<base64url(ed25519.Sign(priv, body))>`.
+- `body` is the exact bytes POSTed.
+- The header is required whenever `ext` is present, and absent on basic-only reports.
+
+**Verification** (receiver, `telemetryschema.Verify`, then claim lookup). Checks run in this order, and the first failure wins:
+
+| Check | Failure |
+|---|---|
+| Header present and well-formed, and the signature verifies with `ext.key` over the body | 403 `{"error":"bad_signature"}` |
+| `sentAt` within `[now − 36h, now + 1h]` | 403 `{"error":"stale"}` |
+| The ID is unclaimed (it gets claimed: `key_fp = SHA-256(key)`), or it is claimed with the same `key_fp` | 409 `{"error":"id_claimed"}` |
+| `sentAt` is later than the ID's last accepted `sentAt` | 403 `{"error":"replay"}` |
+
+A refused report changes no stored data.
+
+## Band functions (exported by `telemetryschema`)
+
+| Function | Input → band |
+|---|---|
+| `NodeBand(n)` | 1 → `1`; 2–3 → `2-3`; 4–10 → `4-10`; 11–50 → `11-50`; over 50 → `51+` |
+| `ClusterBand(n)` | n counts the local cluster plus registered clusters. 1 → `1`; 2–3 → `2-3`; 4–10 → `4-10`; over 10 → `11+` |
+| `FleetBands` | `0,1,2,5,10,25,50,100,250,+Inf`, the same buckets as today's Prometheus histograms |
+
+## Privacy guarantees enforced by the schema
+
+- No field can hold free text. Every string is matched against a pattern or an enumeration, or is the install ID, the public key, or the send time.
+- Module names can come only from the embedded catalog.
+- Player counts, names, namespaces, hostnames, addresses, and custom module names cannot be represented in the schema.
+
+## Catalog
+
+`telemetryschema/catalog.txt` lists one official module name per line, generated from `charts/gameplane/values.yaml` → `defaultModuleSource.oci.modules`. `hack/check-telemetry-catalog.sh` fails CI when the two differ (research R15).
+
+## Compatibility
+
+| Install → receiver | Result |
+|---|---|
+| Old install (basic only) → new receiver | Accepted, counted as basic. |
+| New install with `ext` → a receiver released before this feature (≤ v0.3.0) | 400. The install re-POSTs basic only, which is accepted, and suppresses `ext` for that endpoint for 7 days. |
+| New install with `ext.schema` N → receiver that supports a lower schema | 400. Same fallback as the row above. |
+| Install whose ID is claimed by another key → new receiver | 409. The install replaces its ID, re-signs and re-POSTs once (FR-037). |
+| Bad signature, stale send time or replay → new receiver | 403. Counts as a failed attempt with normal backoff. No fallback and no ID rotation. |
diff --git a/specs/022-default-telemetry-dashboard/data-model.md b/specs/022-default-telemetry-dashboard/data-model.md
new file mode 100644
index 000000000..2de557289
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/data-model.md
@@ -0,0 +1,242 @@
+# Data Model: Default telemetry destination, extended telemetry, and telemetry dashboard
+
+**Feature**: [spec.md](spec.md) | **Research**: [research.md](research.md)
+
+There are three places where data lives:
+
+- **Wire**: the report itself, shared by both sides. Field-level rules are in [contracts/report-schema.md](contracts/report-schema.md).
+- **API**: the install's own database, SQLite or PostgreSQL, through portable migration `015`.
+- **Receiver**: the provider's SQLite file.
+
+All timestamps are RFC 3339 UTC strings bound from Go. All days are UTC calendar days written `YYYY-MM-DD`.
+
+---
+
+## Wire (package `telemetryschema`)
+
+### Report
+
+| Field | Type | Rule |
+|---|---|---|
+| `version` | string | Required. Sanitised on the receiver to `invalid` unless it matches `^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$`. Unchanged from today. |
+| `servers` | int | Required, ≥ 0. Unchanged. |
+| `templates` | int | Required, ≥ 0. Unchanged. |
+| `ext` | ExtendedPart | Optional. Present only while the extended tier is on (FR-011). |
+
+### ExtendedPart
+
+| Field | Type | Rule |
+|---|---|---|
+| `schema` | int | Required, `1`. A receiver rejects values above the one it supports with 400. |
+| `installId` | string | Required. Lowercase UUIDv4. A malformed ID makes the receiver drop `ext` and count the report as basic only. |
+| `env` | Env | Required. |
+| `games` | Games | Required. |
+| `features` | Features | Required. |
+| `key` | string | Required. Base64url (unpadded) 32-byte Ed25519 public key derived for this `installId` (R20). |
+| `sentAt` | string | Required. RFC 3339 UTC send time. Accepted window `[now − 36h, now + 1h]`. Must be strictly later than the ID's last accepted `sentAt`. |
+
+**Signature**: the header `Gameplane-Telemetry-Signature: ed25519=<base64url>` covers the exact body bytes. It is required whenever `ext` is present and must be absent on basic-only reports (FR-035, FR-038).
+
+- **Env**:
+  - `k8s` (enumerated pattern `1.N`, otherwise `other`)
+  - `distro` (enumeration)
+  - `arch` (non-empty sorted set from an enumeration)
+  - `nodes` (band)
+- **Games**:
+  - `official`: a map from catalog module name to its server count (int ≥ 1; zero entries are omitted)
+  - `custom`: int ≥ 0
+- **Features**:
+  - booleans: `wakeOnConnect`, `capture`, `backups`, `sso`, `auditForwarding`
+  - `tunnels` (sorted set from an enumeration, may be empty)
+  - `clusters` (band)
+  - `db` (enumeration)
+  - `language` (enumeration)
+
+Validation and sanitisation are identical on both sides because both import the same package (research R1):
+
+- **Structural errors** reject the report with 400:
+  - wrong JSON types
+  - unknown keys
+  - duplicate keys
+  - negative counts
+  - more than one JSON value
+- **Out-of-set values** are kept and become `other`. Unknown module keys are folded into `custom`.
+
+---
+
+## API (install side)
+
+### `config` row, key `telemetry` (existing table, extended value)
+
+| Field | Type | Meaning |
+|---|---|---|
+| `sendMetrics` | bool | Basic tier consent. Existing field. |
+| `extended` | bool | Extended tier consent. New. Saving `sendMetrics: false` always stores `extended: false` too (FR-003). |
+
+If the row is absent, both tiers are off. The row is written by `PUT /admin/config/telemetry`, by the notice actions, and by the one-time seeding step (R10).
+
+### `telemetry_state` (new table, exactly one row, `id = 'singleton'`)
+
+| Column | Type | Null | Meaning |
+|---|---|---|---|
+| `id` | TEXT PK | no | Always `'singleton'`. |
+| `consent_source` | TEXT | no | `default` (seeded on a fresh install), `legacy` (seeded on upgrade), or `admin` (an admin made an explicit choice). |
+| `install_id` | TEXT | yes | UUIDv4. Present only while `config.telemetry.extended` is true (FR-012). |
+| `notice_shown_at` | TEXT | yes | When an admin's dashboard first rendered the notice. Set once. |
+| `next_due_at` | TEXT | yes | When the next report is due. NULL while the gate is closed. |
+| `last_attempt_at` | TEXT | yes | When the last POST was attempted. |
+| `last_success_at` | TEXT | yes | When a report was last accepted (2xx). |
+| `last_outcome` | TEXT | no | `never` (default), `ok`, or `failed`. |
+| `consecutive_failures` | INTEGER | no | Default 0. Drives backoff (R12). |
+| `ext_unsupported_until` | TEXT | yes | Fallback marker (R2). |
+| `ext_unsupported_endpoint` | TEXT | yes | The endpoint the fallback marker applies to. The marker is cleared when the destination changes. |
+| `signing_secret` | TEXT | yes | 32 random bytes, base64. Created with the first install ID and kept for the install's lifetime. Never returned by any endpoint, logged or audited (FR-012, FR-035). |
+| `last_id_rotation_at` | TEXT | yes | When the reporter last replaced the ID after a 409 `id_claimed` (FR-037). |
+
+No HTTP endpoint writes this table directly. It is written by:
+
+- the seeding step
+- the post-save hook for the `telemetry` config section
+- the notice endpoint
+- the install-ID reset endpoint
+- the reporter
+
+### `telemetry_notice_acks` (new table)
+
+| Column | Type | Meaning |
+|---|---|---|
+| `user_id` | BIGINT PK | The admin who dismissed the notice (`users.id`). Deleted in Go when the user is removed (migrations README rule 3). |
+| `acked_at` | TEXT | When the notice was dismissed. |
+| `action` | TEXT | `keep`, `extended-off`, or `all-off`. |
+
+### Migration `015_telemetry_state.sql` (portable, `common/`)
+
+The migration creates the two tables above with `CREATE TABLE`. It contains:
+
+- no `AUTOINCREMENT`
+- no `datetime(...)`
+- `last_outcome` with `DEFAULT 'never'`
+- `consecutive_failures` with `DEFAULT 0`
+
+Seeding is **not** in SQL. It is the Go post-migration step from R10, because it has to read the existing JSON config value.
+
+### Derived values (not stored)
+
+- **Destination**: `{kind: default|custom|bundled|disabled|none, host}`, resolved from flags at startup (R13).
+- **Effective consent**:
+  - `basicOn = sendMetrics && kind ∉ {disabled, none}`
+  - `extendedOn = basicOn && extended`
+- **Gate open**: `basicOn && (consent_source ≠ 'default' || notice_shown_at ≠ NULL)`.
+- **Notice pending (per user)**: all of these hold:
+  - the user has `config:manage`
+  - `kind ∉ {disabled, none}`
+  - `consent_source = 'default'`
+  - the user has no ack row
+- **Preview**: the exact `Report` the reporter would build now (SC-006). It is produced by the same `Collect` function.
+
+### State transitions: consent
+
+```text
+                fresh DB (R10)                 upgrade (R10)
+                     │                              │
+                     ▼                              ▼
+        ┌──────────────────────────┐   ┌──────────────────────────┐
+        │ default                  │   │ legacy                   │
+        │ basic=on  ext=on         │   │ basic=saved|off  ext=off │
+        │ reports gated on notice  │   │ no notice                │
+        └──────────┬───────────────┘   └───────────┬──────────────┘
+          notice "seen" opens the gate             │
+          (consent_source stays default)           │
+                   │  any admin choice: settings save or notice action
+                   └──────────────┬────────────────┘
+                                  ▼
+                       ┌──────────────────────┐
+                       │ admin                │
+                       │ basic / ext as saved │
+                       └──────────────────────┘
+```
+
+- **Install ID**:
+  - `extended` changes from false to true → generate a new ID.
+  - `extended` changes from true to false → set the ID to NULL.
+  - Reset → replace the ID. The old ID is never sent again (US3 scenarios 4 and 5).
+  - A 409 `id_claimed` from the receiver → replace the ID automatically and set `last_id_rotation_at` (FR-037).
+  - The signing key is never stored. It is derived from `signing_secret` and the current ID on each send, so every change of ID changes the key (R20).
+- **Operator disabled** (`kind = disabled`) overrides every state. Toggles are refused with 409, and nothing is sent (FR-005).
+
+### State transitions: schedule (R12)
+
+```text
+gate closed ──gate opens──▶ due at now+U(0,15m) ──claim──▶ attempt
+     ▲                                                       │
+     │ gate closes (next_due_at = NULL)       2xx ◀──────────┤
+     │                                         │             │ error / non-2xx
+     │                                         ▼             ▼
+     └──────────────────────────────── due at now+interval+jitter
+                                       (or now+backoff after an error)
+```
+
+Responses inside one attempt:
+
+- **400 with `ext` present**: re-POST without `ext` once, and set `ext_unsupported_*` (R2).
+- **409 `id_claimed`**: replace the install ID (keeping `signing_secret`), set `last_id_rotation_at`, re-sign and re-POST once. A second 409 counts as an error (R20).
+- **403** (`bad_signature`, `stale` or `replay`): counts as an error, with normal backoff. The ID is never rotated.
+
+---
+
+## Receiver (provider side, SQLite at `$DATA_DIR/telemetry.db`)
+
+| Table | Key | Columns | Written by |
+|---|---|---|---|
+| `meta` | `key` | `value` | Startup and ingest. Keys: `schema_version`, `pepper` (only when `ID_PEPPER` is unset), `collection_started`, `reports_total`, `rollover_through`. |
+| `daily_basic` | `day` | `reports`, `duplicates`, `servers_sum`, `templates_sum` | Ingest (every accepted report; `duplicates` instead of `reports` for per-ID same-day repeats). |
+| `daily_version` | `(day, version)` | `reports` | Ingest. `version` is the sanitised value or `invalid`. |
+| `daily_fleet` | `(day, metric, value)` | `reports` | Ingest. `metric` is `servers` or `templates`. `value` is the exact count 0–1000, or `1001` for more than 1000. |
+| `daily_ext` | `day` | `ext_reports`, `active_installs`, `new_installs`, `lapsed_installs` | Ingest for the first three. Rollover for `lapsed_installs`. |
+| `daily_dim` | `(day, dim, value)` | `installs` | Ingest of a non-duplicate extended report. See the dimension list below. |
+| `daily_game` | `(day, module)` | `installs`, `servers` | Ingest. `module` is a catalog name or `custom`. |
+| `activity` | `id_hmac` | `key_fp` (SHA-256 of the claiming public key), `first_seen`, `last_seen`, `last_sent_at`, `last_version` | Ingest: inserting a row *is* the claim (R20). Deleted by expiry, and the claim expires with it (FR-038). |
+
+`daily_dim` dimensions:
+
+- `k8s`, `distro`, `arch` (one row per architecture present), `nodes`
+- `tunnel` (one row per provider present)
+- `clusters`, `db`, `language`
+- `feature` with value `wakeOnConnect`, `capture`, `backups`, `sso` or `auditForwarding` (a row only when the value is true)
+
+Every `value` is a `telemetryschema` enumeration member or `other`, so the row count per day is bounded by the size of those sets.
+
+### Invariants
+
+- **Nothing raw is stored.** There are no raw reports, source addresses or untransformed install IDs (FR-014, SC-012). Source addresses exist only in the in-memory limiters (R6).
+- **Proof-of-work state is memory only.** The challenge MAC key, the issue-rate window and the used-challenge set (R21) are never written to the database, and a restart discards them.
+- **Extended attributes are never keyed by ID.** `activity` has no column for any of them (FR-014).
+- **Refused reports leave no trace.** A report refused by the proof-of-work, signature, window, claim or replay checks changes no table (FR-036, FR-039). Only the in-memory limiter and the `rate_limited` and `refused` metrics see it.
+- **No full public keys are stored.** `key_fp` is enough to check the claim, because the key arrives with every report.
+- **One extended contribution per install per day.** At most one extended report per `id_hmac` per day changes any aggregate (R5).
+- **The running total never decreases.** `reports_total` is only ever incremented, so retention sweeps don't change the public "total since collection began".
+
+### Lifecycle jobs (hourly, idempotent, resumable through `rollover_through`)
+
+1. **Finalise each completed day D** after `rollover_through`: set `daily_ext[D].lapsed_installs = count(activity where last_seen = D − 30 days)`.
+2. **Expire activity records** where `last_seen < today − ACTIVITY_EXPIRY_DAYS`. This uses OD-4 (ruled: 90 days), with an enforced minimum of 31.
+3. **Delete `daily_*` rows** where `day < today − RETENTION_DAYS`. This uses OD-3 (ruled: 730 days, i.e. 24 months), with an enforced minimum of 365 (FR-020).
+
+### Derived views (computed at read time, [contracts/receiver-http.md](contracts/receiver-http.md))
+
+The range R is 7, 30, 90 or 365 days and ends on the latest complete day.
+
+| View | Computation |
+|---|---|
+| Reports per day | `daily_basic.reports` series over R |
+| Version adoption (reports) | `daily_version` summed over R. Top 10 by count, then `Other` (the rest) and `Invalid`. |
+| Fleet distribution and median | `daily_fleet` summed over R. Bands `0,1,2,5,10,25,50,100,250,250+` are applied at read. The exact median comes from the cumulative counts. |
+| Latest-day totals | `daily_basic.servers_sum`, `templates_sum` for the latest complete day |
+| Unique active installs | `count(activity where last_seen ≥ asOf − {0, 6, 29})` |
+| New and lapsed installs | `daily_ext.new_installs` and `lapsed_installs` series over R |
+| Version adoption (installs) | `activity.last_version` for records with `last_seen` inside `min(R, ACTIVITY_EXPIRY_DAYS)`. The window used is shown. |
+| Environment, games, feature shares | Σ `installs` ÷ Σ `daily_ext.ext_reports` over R (install-day weighted, research R4) |
+| Extended coverage (FR-026) | Σ `ext_reports` ÷ Σ `reports` over R |
+| Public summary (FR-029) | `reports` for asOf; Σ `reports` over the 30 days ending asOf; `meta.reports_total`; `count(activity where last_seen ≥ asOf − 29)`; `asOf` |
+
+`asOf` is the latest complete UTC day, which is yesterday. When no `daily_basic` row exists in R, every view returns its empty state instead of zeros (FR-027).
diff --git a/specs/022-default-telemetry-dashboard/plan.md b/specs/022-default-telemetry-dashboard/plan.md
new file mode 100644
index 000000000..1d1984f45
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/plan.md
@@ -0,0 +1,241 @@
+# Implementation Plan: Default telemetry destination, extended telemetry, and telemetry dashboard
+
+**Branch**: `feat/default-telemetry-dashboard` (not yet created; the spec-kit script derived `022-default-telemetry-dashboard`) | **Date**: 2026-10-06 | **Spec**: [spec.md](spec.md)
+
+**Input**: Feature specification from `specs/022-default-telemetry-dashboard/spec.md`
+
+## Summary
+
+Telemetry gets a compiled-in default destination and two consent tiers, and the receiver becomes a small provider with durable aggregates, a private dashboard and a public summary.
+
+**Destination.** The API gains one authoritative default destination, `telemetry.DefaultEndpoint`. It is set to https://telemetry.gameplane.net/ingest (OD-1, ruled 2026-10-07). An operator can still choose a custom destination, the bundled receiver, or a hard **disable** (`api.telemetry.enabled=false`).
+
+**Consent.** Consent splits into a **basic** tier and an **extended** tier:
+- **Fresh installs** (detected inside `Store.Migrate`) seed both tiers on, but nothing is sent until an admin's dashboard has displayed the first-login notice.
+- **Upgraded installs** keep their saved basic choice, and extended stays off.
+
+**Reporter.** The reporter switches to a persisted, claim-based schedule that survives restarts and sends at most one report per 24 h. It also falls back to basic-only for receivers older than this feature.
+
+**Extended report.** It adds:
+- a random install ID
+- environment categories
+- per-official-module server counts, with everything else summed as `custom`
+- feature-adoption flags
+
+All of these come from a new shared stdlib-only module, `telemetryschema/`, so the API and the receiver validate the same fixed categories.
+
+**Signed reports (US7).** Every extended report is signed with Ed25519. The key is derived (HKDF) from a random secret kept in the install's database, combined with the current install ID, so resets produce unlinkable keys. The receiver binds each ID to the first key that uses it, and refuses, without counting anything, reports that are unsigned, tampered, stale, replayed or signed by another key. When an install's ID is claimed by someone else, it replaces the ID automatically and resends (research R20).
+
+**Receiver.** `telemetry-receiver` stores only **daily aggregates** plus **expiring activity records** (an HMAC of the install ID, first and last seen, last version) in SQLite on a PVC. Per-ID, per-day deduplication and in-memory per-source limits keep the counts honest. It serves:
+- a **private, token-protected, server-rendered dashboard** on its own port
+- an **opt-in public summary** of five counts
+
+The Admin Settings Telemetry section and the new notice banner are designed in `design.pen` first. The receiver's pages are designed in their own Pencil file, `telemetry-receiver/telemetry-dashboard.pen`, which starts from a copy of the HeroUI design. Prometheus `/metrics` moves behind the dashboard token, and a runbook documents how to run the project's receiver.
+
+## Technical Context
+
+**Language/Version**: Go 1.26 for `api`, `telemetry-receiver` and the new `telemetryschema`. TypeScript (strict) and React 19 for `web`. Helm 3 templates.
+
+**Primary Dependencies**: existing ones only, apart from the receiver gaining `modernc.org/sqlite`, which the API already uses.
+- API: chi, client-go (dynamic and typed), `modernc.org/sqlite` / `pgx`.
+- Receiver: `prometheus/client_golang`, plus `modernc.org/sqlite` (new to the receiver), stdlib `html/template` and `embed`.
+- Web: HeroUI v3, TanStack Query. No new web dependency.
+
+**Storage**:
+- API: migration `015_telemetry_state.sql` in `common/` (portable to SQLite and PostgreSQL), plus the existing `config` key `telemetry`.
+- Receiver: SQLite file at `$DATA_DIR/telemetry.db` on a RWO PVC, or in-memory when `DATA_DIR` is unset.
+
+**Testing** (CI only, per constitution VI). Signing adds tests for derivation vectors, verification failure cases, and claim, replay and window rules:
+- `go test` with coverage gates: `telemetryschema` 90 (new), `telemetry-receiver` 70, `api` 80.
+- API envtest handler suites.
+- vitest for the web.
+- `helm template` assertions in `ci.yaml`.
+- Kind E2E: new `telemetry` bucket, plus an assertion in the `upgrade` bucket.
+- New lint script `hack/check-telemetry-catalog.sh`.
+
+**Target Platform**: Kubernetes (k3s, kind, managed), with linux/amd64 and arm64 distroless images. The default provider is the same receiver image, run by the project maintainers (OD-2).
+
+**Project Type**: Multi-component: Go services, a React dashboard, a Helm chart, and a new shared Go library module.
+
+**Performance Goals**:
+- Ingest: 10,000 reports per day (about 0.1 req/s average, bursty) at the default provider.
+- Dashboard: the 365-day view within 3 s (SC-010), backed by pre-aggregated daily rows.
+- Public summary: served from a 5-minute snapshot.
+- Install side: one collection pass per report or preview, with a bounded list of local CRs and nodes. Signing costs one HKDF and one Ed25519 signature per send.
+
+**Constraints**:
+- No raw reports, source IPs or untransformed IDs are ever persisted (FR-014, SC-012).
+- Every stored category is bounded by an enumeration.
+- At most one accepted report per 24 h (FR-007).
+- Every extended report is signed, and the signing secret never leaves the install (FR-035).
+- `https` with full verification for the default destination (FR-009).
+- The receiver stays a single static binary with a read-only root filesystem.
+- The dashboard has no JavaScript and a strict CSP.
+- `--reuse-values` from beta.8 must render unchanged.
+
+**Scale/Scope**:
+- About 10k reporting installs.
+- 12–24 months of daily aggregates.
+- About 10k activity records.
+- 5 new API routes or route variants.
+- 1 rewritten settings section, plus 1 new banner.
+- About 5 new frames in `design.pen`, and about 4 in `telemetry-receiver/telemetry-dashboard.pen`.
+- 1 new Go module.
+- 1 new protocol element: signed extended reports with a claim on first use (R20).
+
+No NEEDS CLARIFICATION remains. Every technical unknown is resolved in [research.md](research.md) (R1–R20). OD-1 (the domain) is ruled (2026-10-07): telemetry.gameplane.net. OD-2, OD-3 and OD-4 are ruled (2026-10-06).
+
+## Constitution Check
+
+*GATE: Must pass before Phase 0 research. Re-checked after Phase 1 design.*
+
+| Principle | Gate | Pre-design | Post-design |
+|---|---|---|---|
+| **I. E2E-tested delivery** | Every user-facing path has a Kind E2E in a registered bucket. | Planned. | **PASS**: new `telemetry` bucket with `TestTelemetryLifecycle` (`t.Parallel()`, unique names, sequential subtests because they mutate cluster-wide Helm state); `upgrade` bucket assertion (R17). Registered in `test/e2e/buckets.sh` and the CI matrix. |
+| **II. Design-first UI** | Dashboard UI is designed in `design.pen` via the Pencil MCP before React or HTML is written, and touched nodes are exported to `design-export/`. | Planned. | **PASS**: frames for the notice banner, the five Telemetry settings states, and the receiver login, overview, empty and refusal pages (R18). `.pen` files are touched only through Pencil MCP. The export lands in the same commit. The receiver pages use a third Pencil source, `telemetry-receiver/telemetry-dashboard.pen` (spec Q10), exported to `telemetry-receiver/design-export/`. Principle II names only `design.pen` and `website.pen`, so this file follows the same rules by analogy: Pencil MCP only, design before code, export in the same commit. |
+| **III. Best practice / no suppression** | No `//nolint` or `eslint-disable`; `%w` wrapping; strict TS; no CRD edits without codegen. | — | **PASS**: no CRD type changes, so CLAUDE.md rule 7 doesn't apply. The new module gets the standard lint config, and nothing is excluded. |
+| **IV. Spec-driven; per-module `specs.md`** | Behaviour changes update `specs.md` in the same change. | — | **PASS** (planned): `telemetryschema/specs.md` (new), `telemetry-receiver/specs.md` and README (invariants rewritten: "daily aggregates and expiring activity records, never raw reports", "basic or extended report"), `api/specs.md`, `web/specs.md`. |
+| **V. Delegate via Workflow** | Implementation goes through Workflow scripts, haiku first, review one tier up, `model:` set on every `agent()`. | — | **PASS** (process): the tasks phase produces scout briefs; implementation waves are split by component (see Delivery slices). |
+| **VI. CI does the heavy lifting** | Locally only `go build` and `tsc --noEmit`. | — | **PASS**: quickstart lists only compile checks locally; everything else is CI. |
+| CLAUDE.md core rule 3: login privacy | Unauthenticated views reveal nothing. | — | **PASS**: the receiver's refusal invariant (contracts/receiver-http.md). The Gameplane `/login` is untouched, and the notice appears only after authentication. |
+| CLAUDE.md core rule 9: K8s primitives first | — | — | **PASS**: PVC for receiver data; Secrets for the dashboard token and pepper; NetworkPolicy for the dashboard port. |
+| CLAUDE.md core rule 10: operator authority | — | — | **PASS**: the reporter only reads CRs; nothing bypasses reconciliation. This is the reporter's existing placement in the API. |
+| CLAUDE.md system override 10: unsettled values | — | — | **PASS**: the domain is ruled (OD-1). Retention (730 days) and activity expiry (90 days) are ruled values (OD-3, OD-4). |
+
+**Result**: no violations. The one structural addition, a 16th Go module, is recorded under Complexity Tracking as a deliberate cost rather than a violation.
+
+## Project Structure
+
+### Documentation (this feature)
+
+```text
+specs/022-default-telemetry-dashboard/
+├── spec.md
+├── OPEN-DECISIONS.md        # OD-1..OD-5 ruled
+├── plan.md                  # this file
+├── research.md              # R1–R20
+├── data-model.md
+├── quickstart.md
+├── contracts/
+│   ├── report-schema.md     # wire format, enums, bands, compatibility
+│   ├── receiver-http.md     # ingest, summary, dashboard routes, auth, env
+│   ├── api-telemetry-http.md# admin routes, config PUT semantics, notice
+│   └── install-config.md    # Helm values, API flags, rendering table
+├── checklists/requirements.md
+└── tasks.md                 # /speckit-tasks (not created here)
+```
+
+### Source Code (repository root)
+
+```text
+telemetryschema/                         NEW stdlib-only module (R1)
+├── go.mod                               module github.com/GameplanePanel/gameplane/telemetryschema
+├── report.go                            Report / ExtendedPart / Env / Games / Features, JSON encode
+├── decode.go                            strict decoder (moved from telemetry-receiver/main.go decodePayload, extended)
+├── enums.go                             distro, arch, tunnel, db, language sets; NodeBand / ClusterBand / FleetBands
+├── catalog.go, catalog.txt              embedded official module list (R15)
+├── sign.go                              DeriveKey (HKDF → Ed25519), Sign, Verify, signature header codec (R20)
+├── *_test.go, .testcoverage.yml (90)
+└── specs.md
+
+telemetry-receiver/
+├── main.go                              config + two listeners (slimmed)
+├── ingest.go                            /ingest: auth, size cap, decode, signature/window/claim/replay checks (R20), limiter, dedupe, aggregate write
+├── store.go                             SQLite schema, migrations, writes, rollover/expiry/retention jobs
+├── views.go                             view model for the dashboard + public summary
+├── dashboard.go                         token login, signed cookie, CSP, handlers
+├── summary.go                           /v1/summary snapshot cache, CORS, ETag
+├── ratelimit.go                         per-source daily counter + token buckets, trusted proxies
+├── web/                                 go:embed templates + CSS + inline-SVG chart partials (no JS)
+├── go.mod                               + modernc.org/sqlite, + replace ../telemetryschema
+├── Dockerfile                           + COPY telemetryschema/
+├── README.md, specs.md                  rewritten invariants/config
+└── *_test.go                            incl. synthetic-population accuracy (SC-008), 365-day view timing (SC-010)
+
+api/
+├── cmd/main.go                          new flags (install-config.md), reporter wiring
+├── Dockerfile                           + COPY telemetryschema/
+├── go.mod                               + require/replace telemetryschema
+├── internal/telemetry/
+│   ├── telemetry.go                     Reporter: destination resolution, gate, schedule claim, sign + send, 400 fallback, 409 ID rotation
+│   ├── collect.go                       builds the Report (also used by the preview)
+│   ├── distro.go                        R16 heuristics
+│   └── *_test.go
+├── internal/db/
+│   ├── migrations/common/015_telemetry_state.sql
+│   ├── telemetry.go                     state/ack queries, claim UPDATE
+│   └── db.go                            Migrate: fresh detection + one-time seed (R10)
+├── internal/handlers/
+│   ├── telemetry.go                     GET /admin/telemetry, POST install-id, notice GET/POST
+│   ├── config.go                        telemetry validator (extended ⇒ sendMetrics) + post-save hook + 409
+│   └── telemetry_envtest_test.go
+├── internal/rbac/rbac.go                /admin/telemetry entries before the admin wildcard
+└── specs.md
+
+web/src/
+├── lib/api.ts, lib/config.ts            Telemetry client; TelemetryCfg.extended
+├── components/ui/TelemetryNotice.tsx    banner (+ .test.tsx)
+├── components/AppLayout.tsx             mounts the notice for config:manage holders
+└── routes/AdminSettings.tsx             TelemetrySection rewrite (+ tests)
+
+charts/gameplane/
+├── values.yaml                          install-config.md keys
+├── templates/api.yaml                   --telemetry-disabled, BUNDLED, interval, official source
+├── templates/telemetry-receiver.yaml    PVC, Recreate, env, dashboard port, NetworkPolicy
+└── testdata/                            reuse-values fixture assertions
+
+test/e2e/telemetry_e2e_test.go           TestTelemetryLifecycle (R17)
+test/e2e/buckets.sh                      + telemetry bucket; upgrade bucket assertion
+deploy/kind/{e2e.sh,up.sh}               explicit bundled receiver
+hack/check-telemetry-catalog.sh          catalog drift check (wired into make lint)
+
+design.pen → design-export/{json,screenshots}/   notice, settings states
+telemetry-receiver/telemetry-dashboard.pen → telemetry-receiver/design-export/{json,screenshots}/   receiver login, overview, empty
+docs/{install.md,architecture.md,security.md,telemetry-provider.md}, CHANGELOG.md, docs/agent-architecture.md, CLAUDE.md (repo map + coverage list)
+go.work, Makefile (GO_MODULES), .github/workflows/ci.yaml (matrices, path filters, e2e bucket), .github/dependabot.yml
+website/ (submodule): platform-settings-telemetry.mdx, helm-values-reference.mdx, air-gapped-installation.mdx
+```
+
+**Structure Decision**: the work spreads across existing components, plus one new root-level library module, `telemetryschema/`, which follows the netguard and gameaction pattern. No other new top-level directories are added.
+
+## Delivery slices (input for `/speckit-tasks`)
+
+The slices are implementation waves on **one feature branch and one PR**, in this order. The PR stays a draft until OD-1 is ruled (Merge gate), so none of this reaches `master` before the domain exists.
+
+1. **Contract module.** Add `telemetryschema`, move the receiver's decoder into it with no behaviour change, and add `sign.go` (key derivation, signing and verification, R20). Wire the new module through CI, the Makefile, `go.work`, Dependabot and the docs maps. Add the catalog and its drift check.
+2. **Receiver provider** (US4, US5, US6, and US7 on the provider side; the signature, window, claim and replay checks come before any write):
+   - SQLite store, extended decode, dedupe, limits, and rollover/retention
+   - the dashboard (after its frames in `telemetry-receiver/telemetry-dashboard.pen`), `/metrics` moved behind the token, and the public summary
+   - chart persistence, dashboard and NetworkPolicy changes
+   - receiver `specs.md` and README
+3. **API reporter and consent** (US1, US2, US3, and US7 on the install side: `signing_secret`, signing, rotation on 409):
+   - migration 015, the seed inside Migrate, and destination resolution
+   - the scheduler, claim and fallback, and collection
+   - the admin routes, RBAC and config hook
+   - chart flags; explicit receiver settings in the e2e and dev scripts
+4. **Web** (US1, US3 UI): the `design.pen` frames and export first, then the notice banner and the settings section.
+5. **E2E and docs:** the `telemetry` bucket, the upgrade assertion, FR-008 docs and CHANGELOG, `docs/security.md` threat-model additions, and website pages (through the submodule's own PR flow).
+
+Slices 2 and 3 can run in parallel once slice 1 is committed. Slice 4 needs slice 3's routes. Slice 5 needs everything before it.
+
+## Cross-spec dependencies
+
+- **019 localization-language-packs** (Draft) owns adding languages to the `telemetryschema` `language` enumeration and wiring the configured default. Until then `language` is always `en` (R19).
+
+## Merge gate (OD-1, ruled 2026-10-07)
+
+OD-1 is ruled: the domain is telemetry.gameplane.net, and `telemetry.DefaultEndpoint = "https://telemetry.gameplane.net/ingest"`. The merge gate is satisfied. The CI job `telemetry-default-gate` keeps enforcing that the default stays an https URL (FR-002, FR-009).
+
+## Release checklist
+
+- **OD-2 (ruled).** The project maintainers run the provider. The data-handling statement page on the project website is published, states 24-month retention (OD-3) and 90-day activity expiry (OD-4), and is linked from the notice, the settings and the upgrade notes through one URL constant.
+- **FR-008.** The upgrade notes include the warning for installs whose basic toggle was already on.
+
+## Complexity Tracking
+
+There are no constitution violations. One deliberate structural cost is recorded so reviewers can weigh it:
+
+| Addition | Why needed | Simpler alternative rejected because |
+|---|---|---|
+| 16th Go module `telemetryschema/` (CI matrices, coverage gate 90, Dependabot, `go.work`, docs maps, `specs.md`) | FR-013 requires one fixed, published category set that both sides apply identically, and SC-006 requires the preview to match the payload. | Duplicating the enumerations relies on cross-module fixture tests that drift silently. Importing a receiver sub-package from the API inverts the dependency and drags SQLite and Prometheus into the API's module graph (research R1). |
+| Receiver persistence (SQLite plus PVC) and a web UI in a component that was previously stateless | FR-020 (durable history) and FR-022 (a dashboard served by the receiver, clarification Q2). | Prometheus can't hold per-install deduplication state or survive restarts without extra infrastructure. Reusing the React app couples the receiver's release to the dashboard (research R3, R7). |
diff --git a/specs/022-default-telemetry-dashboard/quickstart.md b/specs/022-default-telemetry-dashboard/quickstart.md
new file mode 100644
index 000000000..df1533062
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/quickstart.md
@@ -0,0 +1,153 @@
+# Quickstart: validating feature 022
+
+**Feature**: [spec.md](spec.md) | **Contracts**: [contracts/](contracts/)
+
+CI is the verification authority (constitution VI, CLAUDE.md rule 8). Locally, run only compile checks. The scenarios below are what the `telemetry` and `upgrade` E2E buckets automate (research R17). They are written so that a reviewer can also walk through them by hand on a dev Kind cluster.
+
+## Local compile checks (the only local verification)
+
+```sh
+cd telemetryschema && go build ./... && cd ..
+cd telemetry-receiver && go build ./... && cd ..
+cd api && go build ./... && cd ..
+cd web && npx tsc --noEmit && cd ..
+helm template gameplane charts/gameplane --set api.telemetry.enabled=false | grep -- --telemetry-disabled
+```
+
+## CI runs
+
+| What | Where |
+|---|---|
+| Unit and coverage for `telemetryschema` (gate 90), `telemetry-receiver` (gate 70) and `api` (gate 80) | `go test` matrix (`ci.yaml` module lists) |
+| API handler and migration integration | `make test-integration` (envtest) |
+| Web components | vitest (`web` job) |
+| Chart renderings | `helm template` checks |
+| End to end | `make test-e2e-bucket BUCKET=telemetry`, and `BUCKET=upgrade` |
+| Catalog drift | `hack/check-telemetry-catalog.sh` in `make lint` |
+
+## Manual walk-through on a dev cluster
+
+**Prerequisites**:
+
+- `git submodule update --init`
+- `make dev-up` (with `up.sh` deploying the bundled receiver, per [install-config.md](contracts/install-config.md))
+- a dashboard token Secret:
+
+```sh
+kubectl -n gameplane-system create secret generic telemetry-dashboard \
+  --from-literal=token="$(openssl rand -hex 24)"
+helm upgrade gameplane charts/gameplane --reuse-values \
+  --set api.telemetry.receiver.dashboard.tokenSecretRef.name=telemetry-dashboard \
+  --set api.telemetry.receiver.publicSummary.enabled=true \
+  --set api.telemetry.interval=2m
+```
+
+### S1: a fresh install defaults on and is gated by the notice (US1; FR-003, FR-004)
+
+1. Sign in to the dashboard as the bootstrap admin.
+   - **Expect** the telemetry banner, naming the in-cluster receiver host and listing the basic and extended fields.
+2. Before you sign in, `GET /admin/telemetry` returns `consent.source = "default"` and `status.lastOutcome = "never"`. No report arrives while nobody has seen the notice.
+3. Leave the banner showing for one interval.
+   - **Expect** `lastOutcome = "ok"` and the receiver's `/api/v1/views` showing `extended.installs.active1d = 1`.
+
+### S2: the tiers and the install ID (US3; FR-012, FR-018, FR-019)
+
+1. Admin Settings → Telemetry shows the destination kind `bundled`, both switches, the install ID, the preview and the status line.
+2. Turn off the extended switch and save.
+   - **Expect** the install ID disappears from the preview, and the next report's `ext_reports` count doesn't increase.
+3. Turn it back on.
+   - **Expect** a new ID.
+4. Choose "Reset ID".
+   - **Expect** a new ID, and the next report counted as a new install.
+5. Compare the preview JSON with what the receiver counted.
+   - **Expect** them to agree field for field (SC-006).
+
+### S3: at most one accepted report per interval across restarts (FR-007, SC-005)
+
+```sh
+kubectl -n gameplane-system rollout restart deploy/gameplane-api
+```
+
+- **Expect**: over the next 3 intervals, `daily_basic.reports` increases by 3 ± 1, and never by more than 1 within a single interval.
+
+### S4: the private dashboard and the refusal (US4; FR-022, FR-023, FR-027)
+
+```sh
+kubectl -n gameplane-system port-forward svc/gameplane-telemetry-receiver 8081:8081
+```
+
+1. Open `http://localhost:8081/`.
+   - **Expect** a redirect to the login page, which contains no figures.
+2. Sign in with the token.
+   - **Expect** the overview for 30 days. 7, 90 and 365 also work.
+3. `curl -s localhost:8081/api/v1/views`
+   - **Expect** `401 {"error":"unauthorized"}`.
+4. `curl -s -o /dev/null -w '%{http_code}' -H "Authorization: Bearer $TOKEN" localhost:8081/metrics`
+   - **Expect** `200`, and `401` without the header (spec Q8).
+5. Rotate the Secret and restart the receiver.
+   - **Expect** the old session is rejected and the data is intact (FR-028).
+6. On a receiver with no data:
+   - **Expect** the empty state, with no zero-filled charts.
+
+### S5: the public summary (US6; FR-029–FR-032)
+
+```sh
+kubectl -n gameplane-system port-forward svc/gameplane-telemetry-receiver 8080:8080
+curl -si localhost:8080/v1/summary
+```
+
+- **Expect** exactly the five keys from [receiver-http.md](contracts/receiver-http.md), plus `Cache-Control: public, max-age=3600` and `Access-Control-Allow-Origin: *`.
+- With `publicSummary.enabled=false`: **expect** `404`.
+- `curl -si localhost:8080/metrics`: **expect** `404`. Metrics live only on the dashboard port (FR-030).
+
+### S6: operator disable and redirect (US2; FR-005, SC-003, SC-004)
+
+1. `helm upgrade … --reuse-values --set api.telemetry.enabled=false`
+   - **Expect** the settings section shows "disabled by the operator", the switches are disabled, `PUT /admin/config/telemetry` returns `409`, and the receiver gets no reports over 3 intervals.
+2. `--set api.telemetry.enabled=true --set api.telemetry.endpoint=http://<other-receiver>/ingest`
+   - **Expect** reports arrive only at the other receiver, and the settings show the kind `custom`.
+
+### S7: an old receiver still gets basic reports (FR-016, SC-013)
+
+Point `api.telemetry.endpoint` at a Deployment running `ghcr.io/valgulnecron/gameplane/telemetry-receiver:v0.2.0-beta.8`.
+
+- **Expect** the API logs one 400 followed by an accepted basic-only POST, and later reports go basic-only without a 400 first.
+
+### S8: upgrades preserve the existing choice (US1 scenarios 5 and 6; FR-003)
+
+This is automated in the `upgrade` bucket. A beta.8 install with no saved choice, upgraded to this version:
+
+- **Expect** `consent.source = "legacy"`, both tiers off, and `GET /admin/telemetry/notice` returning `pending: false`.
+- If `sendMetrics` was true before the upgrade: **expect** basic on and extended off.
+
+### S9: forged reports are refused, and a claimed ID heals itself (US7; FR-035–FR-038, SC-014, SC-015)
+
+This is automated in the `telemetry` bucket with a test-only signing client built on `telemetryschema`.
+
+1. Take the install's current ID from `GET /admin/telemetry` and POST a report with that ID, signed by a different key.
+   - **Expect** `409 {"error":"id_claimed"}`, and no change to `/api/v1/views`.
+2. POST an extended report with no signature header, then a correctly signed report with one body byte changed, then a byte-for-byte resend of an accepted report.
+   - **Expect** `403` with `bad_signature`, `bad_signature` and `replay` respectively, and no change to any figure.
+3. Reset the install ID, and immediately claim the new ID with the test client's own key before the install reports.
+   - **Expect** the install's next attempt to get a 409, replace its ID and have the resend accepted. `GET /admin/telemetry` then shows a new `installId` and a set `status.lastIdRotationAt`.
+
+### S10: proof-of-work follows the request rate (FR-039–FR-041, SC-016)
+
+This is automated in the `telemetry` bucket, against a custom receiver deployed with `INGEST_POW=true`, `INGEST_POW_MIN_BITS=8` (so solving really happens) and `INGEST_POW_TARGET_PER_MIN=60`.
+
+1. Point the API at that receiver and wait one interval.
+   - **Expect** `gameplane_telemetry_pow_challenges_total` to rise and the report to be accepted (`lastOutcome = "ok"`).
+2. POST `/ingest` with no `Gameplane-Telemetry-PoW` header, then with a used or tampered one.
+   - **Expect** `428` with `pow_required`, then `pow_invalid`, and no figure changed.
+3. Unit tests cover the curve: at or below the normal rate a challenge carries `INGEST_POW_MIN_BITS`; at 1,000 times the rate it carries at least 20 bits; the difficulty falls one bit per 5 minutes after the flood stops.
+4. Start the receiver with a 31-character `DASHBOARD_TOKEN`.
+   - **Expect** it to exit at startup with an error naming the 32-character minimum.
+
+## Merge gate (OD-1, ruled 2026-10-07)
+
+OD-1 is ruled: the domain is telemetry.gameplane.net. The merge gate is satisfied. The CI job `telemetry-default-gate` keeps enforcing that the default stays an https URL.
+
+## Release checklist
+
+- **OD-2.** The data-handling statement page on the project website is published, states 24-month retention (OD-3) and 90-day activity expiry (OD-4), and is linked from the notice, the settings and the upgrade notes.
+- **FR-008 upgrade notes.** They are written in `CHANGELOG.md`, `docs/install.md` and the website telemetry page.
diff --git a/specs/022-default-telemetry-dashboard/research.md b/specs/022-default-telemetry-dashboard/research.md
new file mode 100644
index 000000000..567bed29f
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/research.md
@@ -0,0 +1,473 @@
+# Research: Default telemetry destination, extended telemetry, and telemetry dashboard
+
+**Feature**: [spec.md](spec.md) | **Plan**: [plan.md](plan.md) | **Date**: 2026-10-06
+
+Each entry records a decision, why it was made, and what else was considered. Facts about current code cite `file:line` as of `master` at `d2cc7956`.
+
+## Baseline facts
+
+- **Reporter.** `api/internal/telemetry/telemetry.go` is a ticker loop. Its first report goes out one full interval (24 h) after process start (`Run`, `time.NewTicker(r.interval)`). An API that restarts more often than daily therefore never reports, which violates FR-007. It reads the admin toggle from `config.telemetry.sendMetrics` (`enabled()`), and counts GameServers and GameTemplates on the local cluster only (`count()`).
+- **Wiring.** `api/cmd/main.go:392` starts the reporter with a hard-coded `24*time.Hour`. `--telemetry-endpoint`/`GAMEPLANE_TELEMETRY_ENDPOINT` defaults to `""`, which means off (`api/cmd/main.go:541`).
+- **Chart.** `charts/gameplane/templates/api.yaml:323-329` auto-wires `http://gameplane-telemetry-receiver.<ns>.svc:8080/ingest` when `api.telemetry.receiver.enabled` is set and `api.telemetry.endpoint` is empty. The receiver is a `Deployment` with `replicas: {{ $r.replicas }}`, `readOnlyRootFilesystem`, and no volume. Its NetworkPolicy admits port 8080 only from the API pod, plus an optional Prometheus namespace (`charts/gameplane/templates/telemetry-receiver.yaml`).
+- **Receiver.** `telemetry-receiver/main.go` uses only stdlib and `client_golang`. Its strict token-walking decoder (`decodePayload`) rejects any key other than `version`, `servers` and `templates`. Metrics are kept in memory only.
+- **API storage.** SQLite is the default and PostgreSQL is optional. New migrations go in `api/internal/db/migrations/common/` as portable SQL; the latest is `014_sessions_digest_reset.sql`. `Store.Migrate` (`api/internal/db/db.go:99`) is called by both `serve` (`api/cmd/main.go:163`) and `bootstrap-admin` (`api/cmd/bootstrap.go:47`).
+- **API RBAC.** The API's ClusterRole already grants `get/list/watch` on `nodes`, all Gameplane CRDs including `clusters`, `modulesources` and `backupschedules`, and discovery (`charts/gameplane/templates/api.yaml:15-65`). The handlers already list nodes (`api/internal/handlers/cluster.go:187`) and read `ServerVersion()` (`cluster.go:446`).
+- **API replicas.** `charts/gameplane/values.yaml:120` says "Keep at 1", because SQLite is single-writer and some locks are per-process.
+- **Admin permissions.** `/admin/config` splits `config:read` (GET) from `config:manage` (`api/internal/rbac/rbac.go:209-210`). Any other `/admin/*` route falls through to the admin wildcard (`rbac.go:217`).
+- **Module provenance.** A module-managed GameTemplate carries `gameplane.local/module-name` and `gameplane.local/module-source` labels (`operator/api/v1alpha1/module_types.go:135-139`). The chart's default ModuleSource (`defaultModuleSource.name: default`, OCI `ghcr.io/gameplanepanel/gameplane-modules`) lists the official catalog in `defaultModuleSource.oci.modules` (`charts/gameplane/values.yaml:548-584`) and verifies bundles against the chart-shipped cosign key.
+- **Web.** There is no i18n framework yet (spec 019 is still Draft), so UI strings are English literals. `AppLayout.tsx:213` already mounts a sticky global banner (`SafeModeBanner`), which is the placement precedent. `AdminSettings.tsx:1545-1576` holds the current single-switch `TelemetrySection`.
+- **E2E.** No telemetry E2E exists today. The buckets are `operator api-auth api-roles api-rbac api-agent api-mods ratelimit bot-fast bot-heavy multicluster upgrade` (`test/e2e/buckets.sh:357`). Every bucket shares one Helm install in `deploy/kind/e2e.sh:301`, and `Env.PortForward` exists (`test/e2e/env.go:342`).
+- **Egress.** The chart restricts egress only in the games namespace (`networkpolicies.yaml`). The API pod's egress is unrestricted, so the default destination needs no chart egress change.
+
+---
+
+## R1. One source of truth for the report contract
+
+**Decision**: Add a new stdlib-only Go module, `telemetryschema/`. It holds the basic and extended report types, every enumeration and band, the band functions, the strict decoder (moved out of the receiver's `decodePayload` and extended), sanitisation, and the embedded official-module catalog. `api` and `telemetry-receiver` both import it through `replace ../telemetryschema`, following the netguard and gameaction precedent (`api/go.mod:5-16`, `api/Dockerfile:7-9`).
+
+**Rationale**:
+- FR-013 requires a *fixed, published* set of categories. Having one package define the categories that the API sends and the receiver accepts means the two sides cannot drift.
+- SC-006 requires the preview to match the payload, which is easier when both are built from the same types.
+- The receiver stays a single static binary, so it can still be run standalone.
+
+**Alternatives considered**:
+- *Duplicate the enumerations in both modules and test them against a shared fixture.* This is cheaper up front, but tests that read across modules are brittle and drift is only caught after the fact.
+- *Have the API import a sub-package of the receiver module.* This inverts the dependency (client depends on server) and pulls the receiver's `sqlite` and `prometheus` dependencies into the API's module graph.
+
+**Cost**: a 16th Go module must be added to `go.work`, `Makefile` `GO_MODULES`, both module matrices in `.github/workflows/ci.yaml` (`:457` and `:549`), the CI path filters, Dependabot, the `CLAUDE.md` repo map and coverage list, and `docs/agent-architecture.md`. It also needs its own `specs.md` (constitution IV). The coverage gate is **90**, matching gameproto (90) and slightly below netguard and gameaction (91), which are the other pure-logic shared libraries. This cost is recorded in plan.md under Complexity Tracking.
+
+## R2. Wire format and backward compatibility
+
+**Decision**: The three basic fields stay at the top level, unchanged. The extended tier is one optional object, `ext`, with its own `schema` integer (starting at `1`). The full shape is in [contracts/report-schema.md](contracts/report-schema.md). The same `POST <endpoint>` URL carries both tiers.
+
+Fallback for older receivers (FR-016, SC-013):
+- If a report that carries `ext` gets HTTP **400**, the API immediately re-POSTs the same report without `ext`, once.
+- The API then records `ext_unsupported_until = now + 7 days` for that endpoint, so it doesn't send two POSTs every day.
+- A receiver that understands `ext` but not a newer `ext.schema` value also answers 400, so the same fallback applies.
+- Identity refusals use different codes, so they never trigger this fallback: **403** for a bad signature, stale send time or replay, and **409** for an ID claimed by another key (R20).
+
+**Rationale**:
+- Old receivers reject unknown keys (`decodePayload` default branch), so a 400 is a guaranteed and observable signal.
+- Keeping one URL means operators who configured a full `/ingest` URL don't have to reconfigure anything.
+
+**Alternatives considered**:
+- *A versioned path such as `/v2/ingest`.* Deriving it from an operator-supplied URL is fragile, and the old receiver's 404 would need the same fallback logic anyway.
+- *Negotiating through a header.* Old receivers ignore headers, so they would still reject the body.
+
+## R3. Receiver persistence
+
+**Decision**: Store data in SQLite, using `modernc.org/sqlite` (pure Go, `CGO_ENABLED=0`, and already vetted because the API uses it at `api/go.mod:41`).
+- **Location.** The file is `$DATA_DIR/telemetry.db`. When `DATA_DIR` is unset, the receiver uses an in-memory database and logs a warning, so a standalone `docker run` with no volume keeps working, but nothing survives a restart.
+- **Chart.** The chart always sets `DATA_DIR=/data` and mounts a PVC by default (`receiver.persistence.enabled: true`, 1 Gi). It uses `strategy: Recreate`, and the template fails if `replicas > 1` while persistence is enabled.
+- **Writes.** All writes go through one serialized writer, with WAL mode on.
+
+**Rationale**:
+- FR-020 and SC-009 require data to survive restarts.
+- 12–24 months of daily aggregates plus about 10k activity records amounts to a few MB.
+- SQLite fits a single-replica collector and the distroless image, and needs no new infrastructure (constitution: Kubernetes primitives, meaning a PVC, first).
+
+**Alternatives considered**:
+- *PostgreSQL.* This would add an operational dependency for every self-hoster.
+- *A JSON file rewritten atomically.* Rewriting it on every ingest doesn't scale to 10k activity records.
+- *Prometheus remote storage.* That stores raw-ish time series and cannot do the per-install deduplication from R5.
+
+## R4. Aggregation model (FR-020)
+
+**Decision**: Pre-aggregate per UTC day at ingest time. The tables are listed in [data-model.md](data-model.md) §Receiver.
+- **Fleet sizes.** These are stored as an **exact-value histogram** per day and metric, with values capped at 1000 (`1001` means "over 1000"). The FR-024 size bands and the exact median are both derived when the data is read.
+- **Extended dimensions.** These go in one generic `daily_dim(day, dim, value, installs)` table, whose `dim` and `value` come only from `telemetryschema` enumerations.
+- **Games.** These go in `daily_game(day, module, installs, servers)`.
+- **Cumulative total.** A running total of reports is kept in `meta`, so the public summary's "total since collection began" (FR-029) is unaffected by retention sweeps.
+
+**Rationale**:
+- Every dashboard view becomes a scan of at most 365 rows per dimension, which keeps SC-010 (under 3 s) comfortable.
+- Bounded enumerations bound the row count, so hostile input can't grow tables without limit (Edge Cases: malicious values).
+- An exact histogram gives the real median that US4 scenario 3 asks for; band-only storage would only give a median band.
+
+**Alternatives considered**:
+- *Storing reports and aggregating at read time.* FR-014 forbids storing raw reports.
+- *Storing bands only.* This loses the exact median.
+
+**Range semantics**:
+- **Basic "per day" views** chart daily values over the range.
+- **Extended install-share views** (environment, games, features) show the sum of daily install counts divided by the sum of daily extended reports over the range, which is a share weighted by install-days. Each view is labelled "share of reporting installs, averaged over the range".
+- **By-install version adoption** (US5 scenario 6) uses activity records, so it covers at most the activity-expiry window (OD-4). The dashboard states that window.
+
+## R5. Unique installs without linking attributes (FR-014, FR-015)
+
+**Decision**:
+- **Install ID.** The API generates a UUIDv4 from `crypto/rand`.
+- **Transformed ID.** The receiver stores only `HMAC-SHA256(pepper, installID)`, hex-encoded. The pepper comes from `ID_PEPPER`, a Secret. If that is unset, the receiver generates 32 random bytes on first start and keeps them in `meta`.
+- **Activity record.** Each record holds the transformed ID, `key_fp` (the claim, R20), `first_seen`, `last_seen`, `last_sent_at` (replay guard, R20) and `last_version`. Nothing else.
+- **Per-day deduplication.** For an extended report that has passed the R20 signature and claim checks:
+  - If no record exists, the receiver inserts one, which also claims the ID, and counts the report as `new_installs++` and `active_installs++`.
+  - If `last_seen < today`, it updates the record and counts `active_installs++`.
+  - If `last_seen == today`, the report is a **duplicate**. It is answered with 204 but changes no aggregate, basic or extended; only `daily_basic.duplicates` is incremented.
+- **Lapsed installs.** An hourly rollover finalizes each completed day D. It sets `lapsed_installs[D] = count(activity where last_seen = D − 30)` and then deletes records whose `last_seen` is older than the expiry (OD-4, ruled: 90 days; the enforced minimum is 31).
+
+**Rationale**:
+- An HMAC with a secret pepper means the stored value can't be matched against an ID taken from an install without that pepper.
+- No extended attribute is ever written next to the ID, as FR-014 requires.
+- Per-day deduplication stops restarts, retries and replays from inflating counts (Edge Cases: frequent restarts, spoofing).
+- SC-008 (within 1 %) holds because uniques are exact distinct counts, not estimates.
+
+**Alternatives considered**:
+- *HyperLogLog sketches.* These are approximate (around 1–2 % error) and can't give exact new and lapsed counts.
+- *Plain SHA-256 of the ID.* An attacker who knows the ID can link it. That is low risk, but the pepper costs nothing.
+
+## R6. Per-source limits and source addresses (FR-014, FR-021, FR-032)
+
+**Decision**: All limits are in memory only and keyed by source, which is never written to disk. A source is the IPv4 address (IPv4-mapped IPv6 included) or the IPv6 /64, so one host can't rotate through its prefix.
+- **Ingest.** At most `INGEST_SOURCE_DAILY_LIMIT` *accepted* reports per source per UTC day, default **20**. Over the limit the receiver returns `429`.
+- **Public summary.** A token bucket of 60 requests per minute per source, burst 10.
+- **Dashboard login.** 5 attempts per minute per source.
+- **Source IP.** This is the TCP peer address. `X-Forwarded-For` is trusted only when the peer falls inside `TRUSTED_PROXY_CIDRS` (default empty).
+- **Cleanup.** Daily counters reset at UTC midnight. Token buckets are purged after 10 idle minutes (daily counters are not, or an idle source would regain its budget).
+- **Capacity.** Each limiter tracks at most 100,000 sources and evicts the least-recently-used one to admit a new source. Two other designs were rejected:
+  - Letting sources past the cap through untracked was a bypass (security review of 4c742e7d).
+  - Pooling them into one overflow budget let an attacker who filled the table deny every new legitimate source (security review of de5d0974).
+
+  With eviction, a source's budget can only be reset by an attacker who controls more distinct IPv4 addresses or IPv6 /64s than the cap. At that scale per-source limiting no longer applies. The dashboard token is at least 32 characters (R8), which keeps guessing it infeasible at any rate, and proof-of-work (R21) is the cost that does scale with volume.
+
+**Rationale**:
+- A default of 20 tolerates CGNAT and shared egress (several homelabs behind one address) while capping how much one source can distort a day.
+- Trusting proxy headers only from configured networks stops clients from spoofing their source by setting `X-Forwarded-For` themselves.
+
+**Alternatives considered**:
+- *A limit of 1 per source per day.* This breaks every install behind a shared NAT.
+- *Proof-of-work or registration.* This can't be done without per-install secrets (spec Assumptions).
+
+## R7. Private dashboard delivery (FR-022–FR-028)
+
+**Decision**:
+- **Rendering.** The receiver renders the dashboard itself with `html/template`. CSS and templates are embedded with `go:embed`, and charts are **inline SVG** generated server-side. There is **no JavaScript**.
+- **Range selection.** The range is chosen with plain links (`?range=7|30|90|365`, default 30).
+- **Listener.** The dashboard has its own listener, `DASHBOARD_LISTEN_ADDR` (default `:8081`), separate from the public listener (`:8080`: ingest, healthz, public summary). Templates use no inline `style` attributes or `<style>` blocks, because the CSP sets `style-src 'self'`; SVG presentation attributes are fine. Prometheus `/metrics` also moves to the dashboard listener, behind the token (spec Q8), so no aggregate other than the public summary is readable from the public port.
+- **CSP.** `default-src 'none'; style-src 'self'; img-src 'self' data:; form-action 'self'; frame-ancestors 'none'; base-uri 'none'`.
+- **Chart design.** Designs come from frames in `telemetry-receiver/telemetry-dashboard.pen` (spec Q10), a separate Pencil file seeded with a copy of the HeroUI design, exported to `telemetry-receiver/design-export/`. The rendered HTML recreates the HeroUI look in plain CSS, because there is no React (constitution II, by analogy). The `dataviz` skill is applied when the frames are designed and again when the SVG is implemented.
+
+**Rationale**:
+- Rendering in-process keeps the receiver one static binary with no build toolchain, as required for self-hosting (FR-033).
+- Without JavaScript, the CSP can be very strict.
+- A separate port lets the project's provider expose only `:8080` publicly while the dashboard stays private at the network level as well.
+
+**Alternatives considered**:
+- *Reusing the `web/` React app.* This would couple the receiver's release to the dashboard build, and the dashboard isn't deployed next to a public provider.
+- *A Grafana dashboard.* This needs Grafana and Prometheus history, can't express the dedupe-aware install views, and would expose the provider's metrics endpoint.
+
+## R8. Dashboard access credential (FR-022, FR-023, FR-028)
+
+**Decision**: There is one operator credential, `DASHBOARD_TOKEN`, which comes from a Secret.
+- **No token.** If `DASHBOARD_TOKEN` is unset, the dashboard listener **is not started** at all, so the dashboard is unavailable rather than open.
+- **Strength (FR-041, Q11).** The receiver exits at startup when `DASHBOARD_TOKEN` is set but shorter than 32 characters, the same way it refuses retention below the minimum. The runbook generates the token from 32 random bytes. Per-source login limits (R6) can be outrun by anyone holding many IPv6 /64s, so the token's length, not the limiter, is what makes guessing infeasible (security review of 0819cec1).
+- **Browser login.** `POST /login` compares the token in constant time. On success it sets a cookie containing `expiry || HMAC-SHA256(K, expiry)`, where `K = HMAC-SHA256(DASHBOARD_TOKEN, "gameplane-telemetry-session")`. The cookie is `HttpOnly; Secure; SameSite=Strict; Path=/` with a 12 h lifetime. Because `K` is derived from the token, replacing the token invalidates every session, and the stored data is untouched.
+- **CSRF.** `POST /login` and `POST /logout` require a same-origin `Origin` (or `Referer`) header in addition to SameSite.
+- **Scripts.** The JSON views endpoint also accepts `Authorization: Bearer <token>`.
+- **Refusals.** Any unauthenticated HTML request is redirected to `/login`. Any unauthenticated JSON request gets `401 {"error":"unauthorized"}`. A wrong token re-renders the login page with "Invalid credentials". No response varies with whether any data exists.
+
+**Rationale**:
+- Single-credential access is a spec Assumption.
+- A stateless signed cookie needs no session table, and it rotates naturally with the token.
+- The generic responses follow the same privacy posture as Gameplane's own login (CLAUDE.md core rule 3).
+
+**Alternatives considered**:
+- *HTTP Basic auth.* Browsers cache it, and it can't be logged out of.
+- *OIDC.* This is out of scope, since there are no multi-user accounts on the provider.
+
+## R9. Public summary (FR-029–FR-032)
+
+**Decision**: `GET /v1/summary` on the public listener, returning only the five values in [contracts/receiver-http.md](contracts/receiver-http.md).
+- **When disabled.** If `PUBLIC_SUMMARY` is not `true` (the default), the route returns 404.
+- **Caching.** The response is computed from a snapshot cached for 5 minutes, sent with `Cache-Control: public, max-age=3600` and an `ETag`.
+- **CORS.** `Access-Control-Allow-Origin: *`, because the response is read-only and carries no credentials.
+- **Rate limit.** As in R6.
+
+**Rationale**:
+- Badge and website use cases need cross-origin reads that can be cached.
+- The snapshot cache keeps public polling off the database (FR-032, US6 scenario 4).
+
+**Alternatives considered**:
+- *A shields.io badge format.* It's a different representation of the same data, and can be added later without changing the data contract.
+
+## R10. Telling a new install from an existing one
+
+**Decision**:
+- **Fresh check.** `Store.Migrate` checks whether `schema_migrations` held **zero rows** when it started; if so, the database is fresh.
+- **Seeding.** After applying migrations, `Migrate` runs a one-time seeding step in the same process. If no `telemetry_state` row exists, it inserts one:
+  - **fresh:** `consent_source='default'`, and `config.telemetry = {"sendMetrics":true,"extended":true}`.
+  - **existing:** `consent_source='legacy'`. Any saved `config.telemetry` is kept, with `extended:false` added; with nothing saved, the config row stays absent, which means off.
+
+**Rationale**:
+- The check runs inside `Migrate`, which both entrypoints call, so it's correct whichever runs first. That includes `bootstrap-admin` running before the first `serve`, which would otherwise make a fresh install look existing.
+- Reinstalling over an existing PVC, or reusing a populated PostgreSQL database, counts as existing, as the spec's Edge Cases require.
+
+**Alternatives considered**:
+- *Counting users.* Wrong after `bootstrap-admin`.
+- *A Helm hook that marks fresh installs.* Breaks for `--reuse-values` and non-Helm installs.
+- *A pure-SQL migration.* Portable SQL can't read the existing JSON config value.
+
+## R11. Consent, notice and state storage (FR-003–FR-005, FR-012, FR-017–FR-019)
+
+**Decision**: Three stores, split by who may write them.
+- **`config.telemetry`** (existing key → JSON) holds the admin's choice, `{sendMetrics, extended}`. It is still edited via `PUT /admin/config/telemetry` (`api/internal/handlers/config.go:56`). Saving `sendMetrics: false` also saves `extended: false` (FR-003, spec Q7), and the UI disables the extended switch and shows it off while basic is off. A post-save hook for the `telemetry` section (following the `auth` hook at `api/internal/handlers/config.go:131`) does three things in the same transaction:
+  - sets `consent_source='admin'`
+  - deletes the install ID when extended goes off
+  - creates one when extended goes on
+
+  When the operator has disabled telemetry, the handler returns `409`.
+- **`telemetry_state`** (new singleton table) holds machine state: consent source, install ID, notice-shown time, schedule, delivery status, and the extended-fallback marker. No admin config endpoint can write it.
+- **`telemetry_notice_acks`** (new table, keyed by `user_id`) records each admin's notice dismissal.
+- **Notice condition.** The notice is pending for a user who holds `config:manage` when all of these hold:
+  - a destination is in effect, meaning the kind isn't `none` or `disabled`
+  - `consent_source = 'default'`
+  - the user has no ack row
+- **Report gate.** Reports are allowed only when `sendMetrics` is true, the destination kind is not `disabled` or `none`, and either `consent_source` isn't `'default'` or `notice_shown_at` is set.
+
+**Rationale**:
+- The install ID can't be written through the generic config endpoint, so no config write can set or spoof it.
+- The Admin Settings section keeps its existing save flow.
+- "Shown" is recorded when the dashboard actually renders the notice (`POST .../notice {"action":"seen"}`), which matches the spec's "shown" wording more closely than recording when the API serves it.
+
+**Alternatives considered**:
+- *Everything in `config.telemetry`.* An admin `PUT /admin/config/telemetry` could then set the ID, and the delivery state would show up in GET `/admin/config`.
+- *Gating reports on dismissal instead of display.* Stricter than the spec ("within 1 hour of the notice being *shown*"), and it would leave telemetry stuck if an admin never clicks.
+
+## R12. Scheduling (FR-007, SC-005)
+
+**Decision**: The schedule is persisted, and replicas claim each slot.
+- **Polling.** The reporter checks every `min(5m, interval/4)`.
+- **Gate open.** When the gate first opens (notice seen, or admin consent), it sets `next_due_at = now + U(0, min(15m, interval/4))`.
+- **Claiming a slot.** A process claims a due slot with:
+  ```sql
+  UPDATE telemetry_state
+  SET next_due_at = ?, last_attempt_at = ?
+  WHERE id = 'singleton' AND next_due_at = ?
+  ```
+  It proceeds only if exactly one row changed.
+- **After success.** `next_due_at = now + interval + U(0, interval/48)`.
+- **After failure.** Back off 1 h, 2 h, 4 h, and so on, capped at `interval`, tracked in `consecutive_failures`. Reports are never queued or replayed.
+- **Interval setting.** `--telemetry-interval` / `GAMEPLANE_TELEMETRY_INTERVAL` (default `24h`, minimum `1m`; chart value documented as testing-only).
+
+**Rationale**:
+- Persisting the schedule survives restarts.
+- The conditional UPDATE is portable to SQLite and Postgres and stays safe even if someone ignores "Keep at 1" for API replicas.
+- A spacing of at least `interval` after every *accepted* report gives the "at most one per 24 h" guarantee.
+- Jitter spreads load on the default provider.
+
+**Alternatives considered**:
+- *Keeping the ticker.* Defeated by restarts.
+- *Leader election.* Too heavy for a once-a-day POST.
+
+## R13. Resolving the destination (FR-001, FR-002, FR-005, FR-006, FR-009, FR-017)
+
+**Decision**: The API resolves exactly one destination kind, in this order:
+
+| Condition (first match wins) | Kind | Endpoint |
+|---|---|---|
+| `--telemetry-disabled` / `GAMEPLANE_TELEMETRY_DISABLED=true` | `disabled` | none |
+| endpoint flag set and `GAMEPLANE_TELEMETRY_BUNDLED=true` (set only by the chart's auto-wiring) | `bundled` | the flag value |
+| endpoint flag set | `custom` | the flag value |
+| `telemetry.DefaultEndpoint != ""` | `default` | the constant |
+| otherwise | `none` | none |
+
+- `telemetry.DefaultEndpoint` is a Go constant in `api/internal/telemetry`, set to `"https://telemetry.gameplane.net/ingest"` (OD-1, ruled 2026-10-07). That makes it the single authoritative place FR-002 asks for. The chart never repeats the URL.
+- The `default` kind requires an `https` scheme; a non-https default is a startup error. TLS uses the system roots with full verification, as FR-009 requires.
+- `custom` and `bundled` keep today's behaviour: any scheme, because the bundled receiver is plain in-cluster HTTP.
+- The chart's new value `api.telemetry.enabled` (default `true`) renders `--telemetry-disabled` when false. The template uses `hasKey`, because `--reuse-values` from beta.8 lacks the key (F-214 precedent at `api.yaml:394-399`).
+
+**Rationale**: SC-004 requires a single setting for either action: `api.telemetry.enabled=false` disables telemetry, and `api.telemetry.endpoint=…` redirects it. The `none` kind keeps today's behaviour exactly until a domain exists.
+
+## R14. Where each extended field comes from (FR-011)
+
+No new RBAC is needed; every source is already readable (see the baseline facts).
+
+| Field | Source | Notes |
+|---|---|---|
+| `env.k8s` | `Discovery().ServerVersion()` Major/Minor | Digits are kept. Values not matching `^1\.[0-9]{1,3}$` are sent as `other`. |
+| `env.distro` | R16 heuristics | |
+| `env.arch` | `node.Status.NodeInfo.Architecture` across local nodes | Sorted and unique; any non-enumerated value is sent as `other`. |
+| `env.nodes` | local node count | Bands: `1`, `2-3`, `4-10`, `11-50`, `51+`. The spec's "50+" means more than 50. |
+| `games` | local GameServers → `spec.templateRef` → GameTemplate labels | See R15. |
+| `features.wakeOnConnect` | any local GameServer with `spec.idle.wakeOnConnect` | `operator/api/v1alpha1/gameserver_types.go:152`, `:218` |
+| `features.tunnels` | set of `spec.tunnel.provider` where `tunnel.enabled` | Enumeration: `frp`, `tailscale`, `playit`. |
+| `features.capture` | API `cfg.captureFeatureEnabled` | |
+| `features.backups` | at least one BackupSchedule in the cluster | |
+| `features.sso` | Helm OIDC configured (`cfg.oidcIssuer != ""`), or a DB `auth` provider of kind `oidc`, `google` or `github` that is enabled | |
+| `features.auditForwarding` | `cfg.auditWebhookURL != ""`, or the S3 sink is configured (`cfg.auditS3Endpoint != "" && cfg.auditS3Bucket != ""`, `api/cmd/main.go:234`) | stdout logging doesn't count |
+| `features.clusters` | 1 (local) plus the number of `Cluster` CRs | Bands: `1`, `2-3`, `4-10`, `11+` |
+| `features.db` | `cfg.dbDriver` | `sqlite` or `postgres` |
+| `features.language` | `"en"` until spec 019 ships a language setting | Spec 019 owns adding real values to the enumeration. |
+
+**Counting scope**: servers, templates and games are counted on the **local cluster only**, the same as today's basic `servers` and `templates`. FR-010 keeps the basic semantics unchanged, and remote reads can fail. Multi-cluster use shows up through `features.clusters`.
+
+## R15. Official modules and look-alikes (FR-011, FR-034)
+
+**Decision**:
+- **On the install.**
+  - The chart passes `--official-module-source=<defaultModuleSource.name>` (`GAMEPLANE_OFFICIAL_MODULE_SOURCE`), and only when `defaultModuleSource.enabled`.
+  - A GameServer counts as running official module `m` only if its template has all three of:
+    - `managed-by=Module`
+    - `module-source` equal to that source's name
+    - `module-name = m`, where `m` appears in the source's `spec.oci.modules[].name` (or the git index)
+  - Everything else is summed under `custom`: manual templates, uploads, other sources, and look-alike names. No other name ever leaves the cluster.
+- **On the receiver.** `telemetryschema` embeds `catalog.txt`, which is generated from `charts/gameplane/values.yaml` `defaultModuleSource.oci.modules`. The receiver folds any key not in that list into `custom`, which bounds cardinality and blocks spoofed names.
+- **Drift check.** A new script, `hack/check-telemetry-catalog.sh`, fails `make lint` and CI when the list and the chart differ. It runs alongside `hack/check-specs.sh`.
+
+**Known limitation**: a module added to the catalog after a receiver was built counts as `custom` on that receiver until the receiver is updated. This is documented.
+
+## R16. Kubernetes distribution detection
+
+**Decision**: The first match wins, using signals the API can already read:
+
+| Distribution | Signal |
+|---|---|
+| `k3s` | `gitVersion` contains `+k3s` |
+| `rke2` | `gitVersion` contains `+rke2` |
+| `k0s` | `gitVersion` contains `+k0s` |
+| `eks` | `gitVersion` contains `-eks-` |
+| `gke` | `gitVersion` contains `-gke.` |
+| `aks` | node label `kubernetes.azure.com/cluster` |
+| `openshift` | node label `node.openshift.io/os_id` |
+| `microk8s` | node label `microk8s.io/cluster` |
+| `minikube` | node label `minikube.k8s.io/name` |
+| `kind` | node `spec.providerID` starts with `kind://` |
+| `doks` | `providerID` starts with `digitalocean://` |
+| `talos` | `nodeInfo.osImage` starts with `Talos` |
+| `other` | anything else, including plain kubeadm |
+
+**Rationale**: no new RBAC and no kube-system reads are needed, and the list is fixed and published (FR-013). Plain kubeadm can't be told apart cheaply, so it falls into `other`, which is accepted.
+
+## R17. E2E strategy (constitution I)
+
+**Decision**:
+- **New `telemetry` bucket.** It contains one top-level test, `TestTelemetryLifecycle`, which calls `t.Parallel()` and runs ordered subtests. It is the bucket's only test, because later steps run `helm upgrade` on that bucket's own cluster. The receiver's ingest limit is raised for this cluster (`INGEST_SOURCE_DAILY_LIMIT=0`, meaning unlimited) and `api.telemetry.interval=1m`. The subtests, in order:
+  - The fresh install's notice is pending.
+  - Recording it as seen makes the first report arrive at the bundled receiver.
+  - Duplicate reports on the same day are deduplicated.
+  - Turning extended off makes the next report basic-only.
+  - Resetting the ID shows up as a new install.
+  - An API pod restart causes no extra report.
+  - Pointing at a custom destination running the pinned `v0.2.0-beta.8` receiver image gets basic reports accepted, via the extended fallback.
+  - The public summary returns exactly five keys.
+  - A report reusing the install's ID but signed with another key gets 409. An unsigned report, a tampered body and a replayed body each get 403. None of them change any figure (SC-014).
+  - A second test-only client claims a freshly reset ID before the install's first report. The install's next attempt then returns 409, it rotates its ID, and its report is accepted (SC-015).
+  - An unauthenticated dashboard request reveals nothing.
+  - `api.telemetry.enabled=false` leads to zero further reports over 3 intervals, and the settings show "disabled by operator".
+- **Upgrade bucket.** Add an assertion that a beta.8 install with no saved choice upgrades to `sendMetrics=false`, `extended=false`, and no pending notice.
+- **No test or dev install may ever reach the project provider.** `deploy/kind/e2e.sh` and `deploy/kind/up.sh` set `api.telemetry.receiver.enabled=true` explicitly, and the CI `helm template` jobs assert this. Without it, every CI and dev install would report to the project provider once OD-1 sets the default.
+
+**Rationale**:
+- The lifecycle steps depend on each other's state, so one sequential test is the honest shape.
+- An isolated bucket keeps the cluster-wide `helm upgrade` away from other buckets and the login budget (CLAUDE.md: about 7 admin logins per bucket) untouched.
+- Test-only configuration lives in chart values, not in production code paths.
+
+## R18. Admin UI surface (US1, US3; constitution II)
+
+**Decision**:
+- **Notice.** A new `TelemetryNotice` banner, mounted in `AppLayout` next to `SafeModeBanner` and shown only to holders of `config:manage`. It records "seen" when it mounts and offers three actions: "Keep sharing", "Turn off extended", and "Turn off all". Each action records an acknowledgement, and the banner also links to Admin Settings.
+- **Settings.** `AdminSettings` `TelemetrySection` is rewritten to show:
+  - the destination line (kind and host, with a link to the data-handling statement on the project website, per the OD-2 ruling)
+  - two switches; the extended switch is disabled while basic is off
+  - the install ID with a "Reset ID" action, confirmed in a dialog
+  - the live preview, as read-only formatted JSON
+  - the delivery status line
+  - when the operator has disabled telemetry, both switches are disabled and an explanatory message is shown
+- **Copy.** The subtitle "No server names, player counts, or identifying data" changes to say that the extended tier includes a random install ID (FR-019).
+- **Design.** The notice and settings frames are designed first in `design.pen` and exported to `design-export/` (core rule 1). The receiver's pages are designed in `telemetry-receiver/telemetry-dashboard.pen` and exported to `telemetry-receiver/design-export/`. The frames are:
+  - the notice banner
+  - the Telemetry settings section in its default, custom, bundled, disabled and none states
+  - the receiver's dashboard login, overview (basic plus extended), empty-state and refusal pages
+
+## R19. The language field before spec 019
+
+**Decision**: `features.language` is always sent as `"en"`, and the enumeration is `["en"]`. When spec 019 lands, it adds its packs to the `telemetryschema` enumeration and wires the configured default. This cross-spec dependency is recorded in plan.md.
+
+**Rationale**: FR-011 lists the field and FR-013 requires a fixed set. Sending a constant is honest about the current product state, and 019 extends it without a schema bump, because new enumeration values on an older receiver fold into `other`.
+
+## R20. Signed reports and install-ID claims (FR-035–FR-038, US7)
+
+**Decision**:
+- **Algorithm.** Ed25519 (`crypto/ed25519`) with HKDF-SHA256 (`crypto/hkdf`). Both are stdlib (Go 1.24+), so `telemetryschema` stays stdlib-only and owns signing and verification for both sides.
+- **Stable local value (Q5).**
+  - `telemetry_state.signing_secret` holds 32 bytes from `crypto/rand`, base64-encoded. It is created the first time an install ID is created and kept for the install's lifetime, including across ID resets and extended off/on.
+  - No endpoint, log, audit event or report ever exposes it.
+  - It is never derived from the cluster's identity (kube-system UID, node names and so on), which keeps FR-012 intact.
+- **Key derivation.** The key is:
+
+  ```text
+  seed = HKDF-SHA256(ikm = signing_secret, salt = installId, info = "gameplane-telemetry-signing-v1", L = 32)
+  priv = ed25519.NewKeyFromSeed(seed)
+  ```
+
+  It is recomputed on every send and never stored. Because `installId` is part of the derivation, a reset (or an automatic rotation) yields a key that can't be linked to the previous one (US7 scenario 5).
+- **What's on the wire.**
+  - `ext.key` holds the base64url (unpadded) 32-byte public key.
+  - `ext.sentAt` holds the RFC 3339 UTC send time.
+  - The header `Gameplane-Telemetry-Signature: ed25519=<base64url signature>` signs the exact request body bytes. Signing raw bytes avoids JSON canonicalisation pitfalls, and because the key and send time are inside the body, both are covered.
+  - Basic-only reports carry neither the fields nor the header (FR-038).
+- **Receiver checks.** These run in order for reports that carry `ext`. They happen before the limiter counts the report as accepted and before any write. Every refusal has a fixed body and changes nothing:
+  1. If the header is missing or malformed, or the signature doesn't verify against `ext.key` over the body: **403** `{"error":"bad_signature"}`.
+  2. If `sentAt` is outside `[now − 36h, now + 1h]`: **403** `{"error":"stale"}`.
+  3. The receiver looks up `activity[HMAC(pepper, installId)]`.
+     - **Absent**: it claims the ID by inserting a record with `key_fp = SHA-256(ext.key)` and `last_sent_at = sentAt`.
+     - **Present**: if `key_fp` differs, **409** `{"error":"id_claimed"}`. If `sentAt ≤ last_sent_at`, **403** `{"error":"replay"}`. Otherwise it updates the record.
+  4. Aggregation and per-day deduplication then follow R5.
+- **API behaviour (Q6).**
+  - **409**: generate a new install ID (keep `signing_secret`), set `last_id_rotation_at`, rebuild and re-sign the report, and re-POST once in the same attempt. A second 409 in a row is recorded as `failed` with normal backoff, and the ID isn't rotated again until the next attempt.
+  - **403**: recorded as `failed` with normal backoff. The ID is never rotated (Edge Cases: install clock wrong).
+- **Claim lifetime.** The claim is the activity record. It expires when the record does (90 days, OD-4) and is re-established by the next valid report (FR-038).
+
+**Rationale**:
+- A claim on first use needs no project-issued secret and no registration step, which suits anonymous installs.
+- Per-ID derived keys make "claim" and "reset unlinkability" the same mechanism.
+- Signing the raw body covers every field, including the tier contents.
+- Strictly increasing `sentAt` per ID, combined with the 36 h window, blocks replays of captured reports. Per-day deduplication alone would still let a capture be replayed on the next day.
+- Storing the key's fingerprint rather than the key itself avoids keeping a second linkable identifier; the full key arrives with every report anyway.
+
+**What signing does not solve**: anyone can invent fresh IDs and keys and claim them, so fabricated installs are still possible. Per-source limits (R6) and the "approximate, self-reported" labelling remain the defence. Real attestation would need a secret issued by the project to each install, which the anonymous model rules out (spec Assumptions).
+
+**Alternatives considered**:
+- *A secret stored in a Kubernetes Secret.* It survives a database wipe, but the ID doesn't, so there's no gain, and anyone who can read Secrets in the namespace could forge reports (Q5).
+- *The kube-system namespace UID.* It isn't secret, needs new `namespaces` RBAC, and conflicts with FR-012 (Q5).
+- *HMAC with a key shared with the provider.* The provider would then hold the secret and could forge reports itself, and the secret would have to be distributed.
+- *Counting only the basic part on a mismatch.* An impersonator would still inflate basic counts (Q6).
+- *Mutual TLS client certificates.* This needs a CA and per-install issuance, and breaks for plain-HTTP bundled receivers.
+
+## R21. Proof-of-work on report ingestion (FR-039, FR-040, Q12, OD-5)
+
+**Decision**: An Anubis-style challenge round trip on the public listener, off by default (`INGEST_POW=false`).
+- **Challenge.** `GET /v1/challenge` returns `{"challenge": "<token>", "bits": n, "expiresAt": "<RFC 3339>"}` with `Cache-Control: no-store`, or `404` when proof-of-work is off. The token is `base64url(payload) "." base64url(mac)`, unpadded:
+  - `payload` is the version byte `1`, the issue time (Unix seconds, 8 bytes big-endian), `bits` (1 byte) and 16 random bytes.
+  - `mac` is the first 16 bytes of `HMAC-SHA256(K, payload)`. `K` is 32 random bytes generated at process start and kept only in memory.
+
+  A challenge expires 15 minutes after it is issued. A restart invalidates outstanding challenges, and senders recover through the one resend of FR-040.
+- **Solution.** The sender finds a decimal `nonce` (an unsigned 64-bit integer) such that `SHA-256(token ":" nonce)` starts with at least `bits` zero bits, and sends the header `Gameplane-Telemetry-PoW: <token>:<nonce>` with the report. `telemetryschema` owns the hash check and the solver, so both sides share one definition, and caps `bits` at `MaxPoWBits = 26` (OD-5).
+- **Verification.** It runs on `/ingest` after `AUTH_TOKEN` and before the body is read, so a refused report costs the provider one HMAC and one hash. The checks run in this order: header present and well formed, MAC valid, not expired, enough leading zero bits (as stated inside the token, so a sender can't lower it), not already used. A missing header gives **428** `{"error":"pow_required"}`; any other failure gives **428** `{"error":"pow_invalid"}`; both increment `gameplane_telemetry_refused_total{reason}`. A challenge is marked used as soon as its solution verifies, whatever happens to the report afterwards. Used challenges are remembered in memory until they expire. The set holds at most 1,000,000 entries; when it is full, new reports get **503** `{"error":"pow_busy"}` with `Retry-After: 60`.
+- **Adaptive difficulty.** Each challenge's `bits` is computed when it is issued, from `r`, the number of challenges issued in the trailing 60 seconds including this one, and the normal rate `T` (`INGEST_POW_TARGET_PER_MIN`):
+  - `target` is `0` when `r ≤ T`, and otherwise `min(MAX, ceil(2 · log2(r / T)))`.
+  - The issued difficulty is `max(MIN, target, peak − ⌊(now − peakAt) / 5 min⌋)`. `peak` and `peakAt` record the last time `target` exceeded the decayed value. So increases apply to the very next challenge, and decreases come at one bit per 5 minutes.
+  - The sender's expected work is `2^bits` hashes. A flood's total cost therefore grows roughly with the cube of its rate (`r · (r/T)²`), while normal traffic pays nothing. Ten times the normal rate gives 7 bits, a hundred times gives 14, and a thousand times gives 20 (SC-016).
+  - `gameplane_telemetry_pow_bits` (a gauge) exposes the current difficulty, and `gameplane_telemetry_pow_challenges_total` counts issued challenges.
+- **Challenge rate limit.** `/v1/challenge` has its own per-source token bucket (10 per minute, burst 5, keyed as in R6), so one source can't raise the difficulty for everyone. Many sources still can, up to `MAX`. That costs legitimate installs at most a few seconds of work per daily report, and it decays once the flood stops.
+- **Sender (the API reporter).**
+  - Before each POST, it requests the challenge URL: the endpoint URL with its last path segment replaced by `v1/challenge` (`https://host/prefix/ingest` becomes `https://host/prefix/v1/challenge`).
+  - Any response other than `200` means the provider doesn't require proof-of-work, and the report is sent without it (FR-040, SC-013).
+  - A `200` with `bits` above `MaxPoWBits` is recorded as `failed` with normal backoff.
+  - Solving runs in the reporter goroutine on one core, with a deadline 30 seconds before the challenge expires.
+  - A **428** response gets one new challenge and one resend in the same attempt; a second 428 is `failed`. The 409 rotation resend (R20) also fetches a fresh challenge, because challenges are single use.
+- **Configuration.** `INGEST_POW` (default `false`), `INGEST_POW_TARGET_PER_MIN` (`60`), `INGEST_POW_MIN_BITS` (`0`) and `INGEST_POW_MAX_BITS` (`22`, at most `MaxPoWBits`), per OD-5. The Helm values `api.telemetry.receiver.ingestPow.{enabled,targetPerMinute,minBits,maxBits}` render them through `hasKey` guards (F-214), with `enabled: false`.
+
+**Rationale**:
+- The cost lands on what an attacker scales (reports), not on addresses, which a /48 holder has in abundance (R6).
+- Legitimate senders are servers reporting once a day, so a few seconds of work during a flood goes unnoticed, and under normal load there is none.
+- Issuing challenges is stateless (MAC'd), so the challenge endpoint can't exhaust memory. Only verified solutions, each of which cost work, occupy memory.
+- The provider chooses the difficulty, so an operator under attack can respond by lowering `T` or raising `MIN`, without any install upgrading.
+- Before this feature there was no default destination, so no existing install reports to the project's provider and none needs exempting. Self-hosted providers keep proof-of-work off by default, so older installs pointed at them keep working.
+
+**What it does not solve**: SHA-256 proof-of-work is cheap on GPUs and dedicated hardware. It deters cheap bulk fabrication, not a determined, well-resourced attacker. Fabricated installs remain possible (R20), and dashboard figures stay labelled approximate.
+
+**Alternatives considered**:
+- *Proof-of-work bound to the report body, with no round trip (hashcash).* It saves a request, but replay protection still needs provider state, and raising the difficulty would need a client upgrade.
+- *A memory-hard function such as Argon2.* It resists GPUs better, but `telemetryschema` must stay stdlib-only, and a Raspberry Pi install would pay far more.
+- *Proof-of-work on the dashboard login.* It needs JavaScript, which the dashboard's CSP forbids (R7), and the 32-character credential (R8) already makes guessing infeasible.
+- *A fixed difficulty.* Either every install pays all the time, or the difficulty is too low to matter under attack.
diff --git a/specs/022-default-telemetry-dashboard/spec.md b/specs/022-default-telemetry-dashboard/spec.md
new file mode 100644
index 000000000..71aa9bbb3
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/spec.md
@@ -0,0 +1,449 @@
+# Feature Specification: Default telemetry destination, extended telemetry, and telemetry dashboard
+
+**Feature Branch**: `feat/default-telemetry-dashboard` (not yet created)
+
+**Created**: 2026-10-06
+
+**Status**: Draft (clarified)
+
+**Input**: User description: "Right now telemetry is only something someone can add. i want to add a default to a domain (not yet defined) and also build a dashboard to show the data provided by the telemetry provider". Follow-ups: "also could we extend the telemetry?" and "right now there is no verif for data sent. so i want a way for server to 'claim' the id with a key derivated from stable local value to sign the data so no one can impersonatte other id"
+
+## Clarifications
+
+### Session 2026-10-06
+
+- Q1: Once a default destination exists, is telemetry opt-in or opt-out? → A: **Opt-out for new installs.** Fresh installs report unless an admin turns it off, and an admin notice on first login explains this. Existing installs keep their saved choice. Installs that never saved a choice stay off.
+- Q2: Who is the dashboard for, and where does it live? → A: **A private, access-controlled page served by the receiver itself**, for whoever operates a provider (the project's or a self-hosted one). Alongside it, a **small public API** exposes only headline counts and none of the other anonymized data.
+- Q3: What should extended telemetry add? → A: **All four categories:**
+  - environment (Kubernetes version, distribution, CPU architecture, node-count band)
+  - game usage (servers per official catalog module, with everything else counted as "custom")
+  - feature adoption (which optional features are in use)
+  - a random anonymous install ID
+- Q4: How do admins consent to extended data? → A: **Two tiers with separate toggles, both on by default for new installs.** The first-login notice covers both.
+- Q5: What local value is the signing key derived from? → A: **A random secret created once on the install and kept in its database**, combined with the install ID. Resetting the ID therefore yields a new, unlinkable key. Nothing derived from the cluster's own identity is used.
+- Q7: What happens on save when basic is turned off while extended is on? → A: **Extended is turned off with it**, and saving succeeds. The dashboard also disables the extended switch whenever basic is off.
+- Q8: Where do the provider's operational metrics live? → A: **Behind the dashboard credential, on the private port.** No aggregate is readable from the provider's public port except the public summary.
+- Q9: Is running the project's receiver in scope? → A: **A runbook only.** It documents deployment, TLS, secrets, the public summary and backups. No infrastructure code.
+- Q10: Where is the provider dashboard designed? → A: **In its own Pencil file**, `telemetry-receiver/telemetry-dashboard.pen`, which starts from a copy of the HeroUI design. It follows the pink theme the main app and website share (`web/src/styles/globals.css` tokens, Geist and JetBrains Mono), dark first (user direction, 2026-10-07).
+- Q6: What happens when a report's signature is wrong, or its ID is already claimed by another key? → A: **The provider refuses it and counts nothing.** When the refusal says the ID belongs to another key, the install automatically replaces its ID (and with it the key) and resends.
+
+### Session 2026-10-07
+
+- Q11: Per-source limits can be outrun by anyone holding many IPv6 /64s. What protects the dashboard credential? → A: **The provider refuses to start with a dashboard credential shorter than 32 characters**, so guessing it stays infeasible however many sources an attacker controls. Per-source limits remain a cost, not a bound (security review of 0819cec1).
+- Q12: Should sending a report cost the sender work, as Anubis does for browsers? → A: **Yes, for report ingestion only (not the dashboard login), as an Anubis-style proof-of-work.** It is off by default, including in the bundled receiver, and the project's provider turns it on through the runbook. When it is on, the difficulty follows the request rate: none while traffic is normal or absent, rising fast as requests flood in, and falling slowly once they stop. Default values are ruled in OD-5.
+
+## Context
+
+Today an install sends anonymous usage reports (`{version, servers, templates}`, about once a day) only if **two** gates are both open:
+
+1. **Whether**: an admin turns on **Admin Settings → Telemetry → Send anonymous usage metrics** (off by default).
+2. **Where**: the operator configures a destination at install time, either an external receiver address or the bundled in-cluster receiver. Out of the box there is no destination, so the reporter never runs, even when the admin toggle is on.
+
+So telemetry only works when someone adds a destination. This feature makes five changes:
+
+- It gives gate 2 a default: the project-operated telemetry provider at https://telemetry.gameplane.net/ingest (OPEN-DECISIONS OD-1, ruled 2026-10-07).
+- It turns telemetry on by default for **new** installs (Q1).
+- It adds an **extended** tier of richer, still name-free data, behind its own toggle (Q3, Q4).
+- It adds a private dashboard and a minimal public summary API on the provider (Q2).
+- It makes extended reports verifiable. Each install signs them with a key tied to its install ID, and the provider binds each ID to the first key that uses it, so no one can report under another install's ID (Q5, Q6).
+
+The receiver currently keeps only in-memory counters that reset on restart, stores nothing durable, and rejects any report field beyond the original three. Supporting this feature means it must:
+
+- keep durable **aggregate** history
+- keep a minimal per-install activity record for unique-install counts
+- accept the extended report while still accepting basic reports from older installs
+
+Raw reports are still never stored.
+
+## User Scenarios & Testing *(mandatory)*
+
+### User Story 1 - New installs report by default, with an informed opt-out (Priority: P1)
+
+An operator installs Gameplane fresh with default settings. When an admin first signs in, a notice explains three things:
+
+- anonymous usage metrics are on, in two tiers: **basic** and **extended**
+- exactly what each tier sends, including that extended includes a random install ID
+- where the data goes
+
+The notice lets the admin turn off extended only, or turn off everything. If the admin leaves telemetry on, reports reach the project's default telemetry provider, and nobody has to configure anything.
+
+**Why this priority**: This is the core ask. A stock install produces adoption signal without setup, and the notice keeps the opt-out informed.
+
+**Independent Test**: Fresh install pointed at a test provider standing in for the default domain. Sign in as admin, confirm the notice, leave telemetry on, and confirm that a report arrives and is accepted. Repeat, turning off extended only, and confirm that only the basic report arrives. Repeat, turning off everything, and confirm that nothing arrives.
+
+**Acceptance Scenarios**:
+
+1. **Given** a fresh install with no telemetry destination configured, **When** the first admin signs in, **Then** a notice states that basic and extended usage metrics are on, lists every field each tier sends, names the destination, and offers one-step actions to turn off extended only or everything.
+2. **Given** a fresh install where an admin has seen the notice and left both tiers on, **When** time passes, **Then** the first report, basic plus extended, reaches the default provider within 1 hour of the notice being shown, and reports continue about once a day.
+3. **Given** a fresh install where no admin has signed in yet, **When** time passes, **Then** nothing is sent.
+4. **Given** a fresh install where an admin turns everything off before the first report, **When** time passes, **Then** nothing is ever sent.
+5. **Given** an install that existed before this feature and never saved a telemetry choice, **When** it is upgraded, **Then** both tiers stay off and no notice claims telemetry is on.
+6. **Given** an install that existed before this feature with basic telemetry already on, **When** it is upgraded, **Then** basic stays on and extended stays off until an admin turns it on.
+7. **Given** an install whose operator configured a custom destination or the bundled receiver before this feature, **When** it is upgraded, **Then** it keeps reporting only to that destination and never to the default provider.
+
+---
+
+### User Story 2 - Operators can redirect or hard-disable telemetry at install time (Priority: P1)
+
+An operator running an air-gapped or privacy-sensitive cluster sets one install-time option that guarantees the install never contacts any telemetry destination, whatever an admin later toggles. Another operator points reports at their own receiver instead of the project default.
+
+**Why this priority**: Telemetry that is on by default is only acceptable if operators can refuse it before any data leaves. A hard off-switch protects air-gapped clusters, regulated environments, and anyone who doesn't want the install contacting a project-run service. It has to ship with the default, not after it.
+
+**Independent Test**: Install with telemetry explicitly disabled, sign in as admin, and observe for a full reporting cycle that no notice claims telemetry is on and no outbound telemetry connection is made. Repeat with a custom destination and confirm that reports arrive there only.
+
+**Acceptance Scenarios**:
+
+1. **Given** an install with telemetry explicitly disabled at install time, **When** an admin opens Admin Settings → Telemetry, **Then** both toggles are unavailable and a message says the operator has disabled telemetry for this install.
+2. **Given** an install with telemetry explicitly disabled, **When** any amount of time passes, **Then** no connection is made to any telemetry destination, and the US1 first-login notice is not shown.
+3. **Given** an install with a custom destination, **When** reports are sent, **Then** they go only to the custom destination, and the US1 notice names that destination instead of the project default.
+
+---
+
+### User Story 3 - Admins see where data goes and exactly what is sent (Priority: P2)
+
+At any time, an admin opens Admin Settings → Telemetry. They see:
+
+- the destination host
+- the two tier toggles
+- the current install ID, with a way to reset it
+- a literal preview of the next report, including every extended field when that tier is on
+- while telemetry is on, when the last report was sent and whether it succeeded
+
+**Why this priority**: Informed opt-out depends on admins being able to see the destination and exact payload at any time, not only in the one-time notice. The pipeline works without this, so it ranks P2.
+
+**Independent Test**: Open the Telemetry settings on installs with the default, custom, bundled, and disabled destinations, each with extended on and off. Confirm that each shows the correct destination and a preview identical to what the provider receives.
+
+**Acceptance Scenarios**:
+
+1. **Given** the default destination, **When** an admin views Telemetry settings, **Then** the default provider's host is shown, labelled as the Gameplane project's telemetry service.
+2. **Given** telemetry is on, **When** an admin views Telemetry settings, **Then** the last successful report time and the outcome of the last attempt are shown. Failures appear as a short, non-technical status, such as "Last attempt failed, will retry".
+3. **Given** the preview, **When** the next report is sent, **Then** the payload the provider receives has the same fields and values as the preview at that moment.
+4. **Given** extended telemetry is on, **When** an admin resets the install ID, **Then** the preview immediately shows a new ID, and the old ID is never sent again.
+5. **Given** extended telemetry is turned off, **When** an admin views Telemetry settings, **Then** no install ID is shown or kept. Turning extended back on creates a new ID.
+
+---
+
+### User Story 4 - Provider operator views aggregate telemetry on a private dashboard (Priority: P2)
+
+A provider operator opens the provider's private dashboard. This is the project maintainers for the default provider, or a self-hoster for their own receiver. After proving access, they see, for a chosen time range:
+
+- how many installs reported
+- which Gameplane versions they run
+- how large their fleets are
+
+**Why this priority**: The project needs the collected data to be readable before it can prioritize work with it. It ranks P2 because it depends on data from US1 existing.
+
+**Independent Test**: Feed a provider a known set of synthetic basic reports across several days, open the dashboard with valid access, and confirm that every figure matches the expected aggregates. Open it without access and confirm that no figure is revealed.
+
+**Acceptance Scenarios**:
+
+1. **Given** reports from multiple days, **When** an authorized viewer picks a range of 7, 30, 90, or 365 days, **Then** the dashboard shows a per-day count of reports received.
+2. **Given** reports from several versions, **When** an authorized viewer looks at version adoption, **Then** it shows each version's share of reports over the range. Versions outside the top 10 are grouped as "Other", and malformed versions appear as "Invalid".
+3. **Given** reports with varying server and template counts, **When** an authorized viewer looks at fleet size, **Then** it shows the distribution in the same size bands the provider already uses (0, 1, 2, 5, 10, 25, 50, 100, 250, 250+) and the median per install.
+4. **Given** no reports in the selected range, **When** an authorized viewer opens the dashboard, **Then** an empty state explains that no data has been received yet. It shows no zero-filled charts that could look like real data.
+5. **Given** the provider has restarted, **When** an authorized viewer opens the dashboard, **Then** all history within the retention period is still shown.
+6. **Given** a viewer without valid access, **When** they open the dashboard or any of its data, **Then** access is refused with a generic message. Nothing is revealed: no figures, no date ranges, no version names, and no hint about whether any data exists.
+
+---
+
+### User Story 5 - Extended telemetry shows how Gameplane is actually used (Priority: P3)
+
+Using extended data, the provider operator sees on the dashboard:
+
+- unique active installs, with new and lapsed installs
+- which Kubernetes versions, distributions, architectures, and cluster sizes installs run on
+- which official games are most run
+- which optional features are actually used
+
+These answer questions that basic counts can't, such as "how many installs are single-node homelabs on arm64?" or "is anyone using relay tunnels?".
+
+**Why this priority**: It turns adoption counts into prioritization signal. The basic pipeline and dashboard (US1–US4) are useful without it, so it ranks P3.
+
+**Independent Test**: Feed a provider a synthetic population of installs with known IDs, environments, games, and features over several weeks, including ID resets, upgrades, and installs that stop reporting. Confirm that every extended figure on the dashboard matches the expected values.
+
+**Acceptance Scenarios**:
+
+1. **Given** extended reports over a range, **When** an authorized viewer looks at installs, **Then** the dashboard shows:
+   - unique active installs for the latest day and the trailing 7 and 30 days
+   - new installs (first seen) per period
+   - lapsed installs (not seen for 30 days) per period
+2. **Given** extended reports, **When** an authorized viewer looks at environment, **Then** it shows each install's share by Kubernetes minor version, distribution, CPU architecture, and node-count band.
+3. **Given** extended reports, **When** an authorized viewer looks at game usage, **Then** it shows, for each official module, the number of installs running it and the total servers using it, plus a single "custom" figure for all non-official modules.
+4. **Given** extended reports, **When** an authorized viewer looks at feature adoption, **Then** it shows the share of installs using each tracked feature.
+5. **Given** some installs share only basic data, **When** an authorized viewer looks at any extended figure, **Then** the dashboard states how many of the reports in the range included extended data, so coverage is clear.
+6. **Given** an install that upgraded within the range, **When** an authorized viewer looks at version adoption by install, **Then** the install is counted on its latest reported version.
+
+---
+
+### User Story 6 - Anyone can read headline counts from a public summary API (Priority: P3)
+
+A website, README badge, or curious user asks the provider's public summary API how many installs are reporting. They get headline counts only. Version adoption, fleet sizes, environment, games, features, and per-day history stay private to the dashboard.
+
+**Why this priority**: It lets the project show adoption publicly (badges, website) without exposing the detailed anonymized data. The private dashboard and data collection are useful without it, so it ranks P3.
+
+**Independent Test**: Feed a provider known reports, call the public summary without credentials, and confirm that it returns exactly the allowed headline counts and nothing else. Disable the public summary and confirm that it is unavailable.
+
+**Acceptance Scenarios**:
+
+1. **Given** the public summary is enabled, **When** anyone requests it without credentials, **Then** it returns only the values listed in FR-029.
+2. **Given** the public summary, **When** its response is inspected, **Then** it contains no version names, fleet-size data, server or template totals, environment, game, or feature data, per-day series, or install IDs.
+3. **Given** the provider operator has not enabled the public summary, **When** anyone requests it, **Then** it is unavailable.
+4. **Given** heavy repeated polling of the public summary, **When** requests keep arriving, **Then** the provider keeps serving reports and the dashboard normally.
+
+---
+
+### User Story 7 - No one can report under another install's ID (Priority: P3)
+
+Someone learns an install's ID, for example from a screenshot of Admin Settings, and sends forged reports under it to skew that install's version, environment or feature figures. The provider rejects them, because the ID was claimed by the real install's key and the forger can't produce that key.
+
+**Why this priority**: Unique-install and per-install figures are only as trustworthy as the IDs behind them. The pipeline and dashboard work without this, so it ranks P3, but it has to ship with the extended tier, because a published ID would otherwise be forgeable from day one.
+
+**Independent Test**: Against a provider that has accepted signed reports from an install, send reports carrying the same ID but signed with a different key, unsigned, with an altered body, or with an old send time. Confirm that every one is refused and no figure changes. Then have a fresh install's ID claimed by a different key first, and confirm that the install replaces its ID and its next report is accepted.
+
+**Acceptance Scenarios**:
+
+1. **Given** an install ID claimed by the install's key, **When** a report arrives with that ID signed by any other key, **Then** the provider refuses it and no aggregate or activity record changes.
+2. **Given** a signed report, **When** any byte of its body is changed in transit, **Then** the provider refuses it.
+3. **Given** an extended report without a signature, with a send time outside the accepted window, or replaying a report already accepted, **When** it arrives, **Then** the provider refuses it.
+4. **Given** an install whose ID was claimed by someone else first, **When** its report is refused for that reason, **Then** the install replaces its ID and key, resends once, the resent report is accepted as a new install, and Admin Settings shows that the ID was replaced.
+5. **Given** an install that resets its ID, **When** its next report arrives, **Then** it carries a new key, and the provider can't tell that the old and new IDs belong to the same install.
+6. **Given** a basic-only report, **When** it arrives, **Then** no signature is required, because it carries no ID to impersonate.
+
+---
+
+### Edge Cases
+
+- **Admin enabled the toggle before this feature, with no destination configured.** That consent was saved while it had no effect. After upgrade, basic reports start going to the default provider. Extended stays off (US1 scenario 6). The upgrade notes MUST call this out (FR-008).
+- **New install vs. existing install.** An install counts as new only if it has no prior Gameplane state when it first starts on this version. Reinstalling over existing persisted state counts as existing, so an operator's or admin's previous choice is never silently flipped to on.
+- **Install with no admin sign-in.** A headless or automated install where no admin ever signs in sends nothing, because the notice is never shown (FR-004).
+- **Install ID reset.** The install appears to the provider as one new install, and its old ID lapses after 30 days. Dashboard install counts can briefly be off by one per reset. This is accepted and documented on the dashboard.
+- **Duplicated ID.** A cluster restored from a backup, or cloned, can share an ID with its source. Such installs are counted as one until an admin resets the ID. This is an accepted limitation.
+- **Unrecognized values.** An unrecognized Kubernetes distribution, an unknown architecture, or a version that doesn't parse is reported as "other". Raw strings are never sent.
+- **Look-alike module names.** A module that shares a name with an official catalog module, but comes from any other source, counts as "custom". Its name is never sent.
+- **Older provider.** A self-hosted provider older than this feature rejects extended reports. The install still delivers its basic report to it (FR-016).
+- **Older installs.** The provider keeps accepting basic-only reports from installs older than this feature.
+- **No route to the internet** (air-gapped cluster or restrictive egress). Delivery fails quietly. No user-facing error appears beyond the US3 status line, retries are bounded so a failure never becomes a request storm, and the rest of the product is unaffected.
+- **Frequent restarts.** An install whose control plane restarts more often than once a day must still report about daily, and must never send more than one report per day (FR-007). Repeated restarts must not inflate counts.
+- **Default provider unreachable or rejecting reports.** The install backs off and retries at the next cycle. Reports are never queued and replayed in bulk.
+- **Spoofed or flooded reports.** The default provider accepts reports from anyone on the internet without a shared secret. Signing (FR-035–FR-038) stops anyone from reporting under an ID that another key has claimed. It can't stop someone from inventing new IDs and keys, so fabricated installs and basic reports remain possible. The provider limits how many reports a single source can submit. When the provider turns on proof-of-work (FR-039), every report also costs its sender work that grows with the request rate, so a flood becomes expensive however many addresses it comes from; it deters cheap bulk fabrication, not a well-resourced attacker. Dashboard and public-summary figures are presented as approximate and self-reported.
+- **ID seen before its first report.** If someone copies an ID from the Admin Settings preview and claims it before the install's first report, the install's report is refused as already claimed. The install then replaces its ID automatically (FR-037), and the forger is left holding an ID nobody uses.
+- **Install clock wrong.** A report whose send time falls outside the accepted window is refused. The install keeps its ID, backs off as for any failed delivery, and Admin Settings shows the failure. The ID is never rotated for this reason.
+- **Claim expiry.** When an ID's activity record expires after 90 days without reports (OD-4), its claim goes with it. An install that returns after that is treated as new, and its own key claims the ID again.
+- **Restored database.** Restoring the install's database from a backup restores the same secret and ID, and so the same key, and reports keep being accepted. Losing the database makes the install new (Edge Cases: new vs. existing install), with a new ID and secret.
+- **Malicious values.** Malicious version strings, and malicious values in any other field, fall into "Invalid" or "other" buckets. Hostile input can't create unbounded dashboard categories or inject content into the dashboard.
+- **Default domain decided.** A build MUST NOT ship with a placeholder destination (FR-002). OD-1 is ruled (2026-10-07), and the default is set to https://telemetry.gameplane.net/ingest.
+- **Explicit disable conflicts with the admin toggles.** The operator's install-time disable always wins over both tiers.
+- **Lost or leaked dashboard access.** The provider operator can replace the dashboard access credential without losing any stored data.
+
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+**Default destination & consent**
+
+- **FR-001**: When the operator has not configured a telemetry destination, the system MUST use the project's default telemetry provider as the destination.
+- **FR-002**: The default destination MUST be defined in exactly one authoritative place, and MUST NOT ship as a placeholder or unresolvable value. OD-1 is ruled (2026-10-07), and the default is set to https://telemetry.gameplane.net/ingest.
+- **FR-003**: Telemetry MUST have two tiers with independent admin controls: **basic** and **extended**. Extended can only be on while basic is on, and turning basic off turns extended off. The tier defaults are:
+  - On a **new** install with a destination in effect, both tiers MUST default to **on**.
+  - On an install that existed before this feature, a saved basic choice MUST be kept, and if no choice was ever saved, basic MUST stay **off**.
+  - Extended MUST default to **off** on every pre-existing install.
+- **FR-004**: On a new install where telemetry defaults to on, the system MUST show the first admin who signs in a notice. The notice:
+  - lists the exact fields of both tiers
+  - states that extended includes a random install ID
+  - names the destination host
+  - offers one-step actions to turn off extended only, or everything
+
+  No report MUST be sent before an admin has been shown this notice. Once dismissed, the notice MUST NOT reappear for that admin.
+- **FR-005**: An operator MUST be able to set, at install time, either a custom destination (which replaces the default) or an explicit **disabled** state. When disabled, no telemetry of either tier is ever sent, whatever the admin toggles say, and the FR-004 notice is not shown.
+- **FR-006**: Destinations the operator configured before this feature, whether a custom destination or the bundled in-cluster receiver, MUST keep working unchanged after upgrade, and MUST NOT also send to the default provider.
+- **FR-007**: While telemetry is on, an install MUST send about one report per day of uptime, survive control-plane restarts without skipping days, and send no more than one report in any 24-hour window.
+- **FR-008**: The release that introduces this feature MUST state the following in its upgrade notes and install documentation:
+  - that new installs share basic and extended data by default
+  - exactly what each tier contains
+  - which existing installs are affected (those whose basic toggle was already on)
+  - how to disable telemetry at install time and from the dashboard
+- **FR-009**: Reports to the default provider MUST travel only over an encrypted connection with a verified server identity.
+
+**Payload & privacy**
+
+- **FR-010**: The **basic** report MUST stay exactly the current three fields: version, server count, and template count.
+- **FR-011**: The **extended** report MUST add the following, and only these, sent only while the extended tier is on:
+  1. **Install ID**: a random identifier (FR-012).
+  2. **Environment**:
+     - Kubernetes minor version
+     - distribution category (from a fixed published list, plus "other")
+     - CPU architecture(s) of the nodes
+     - node-count band: 1, 2–3, 4–10, 11–50, 50+
+  3. **Game usage**: the server count for each module from the official catalog, plus one combined count for all other modules, labelled "custom".
+  4. **Feature adoption**:
+     - wake-on-connect in use (yes/no)
+     - relay tunnel types in use
+     - packet capture enabled (yes/no)
+     - any server with backups configured (yes/no)
+     - single sign-on enabled (yes/no)
+     - audit forwarding in use (yes/no)
+     - registered-cluster band: 1, 2–3, 4–10, 10+
+     - database backend category
+     - default dashboard language
+  5. **Proof of identity**: the install's public signing key and the time the report was sent. The report is signed (FR-035).
+- **FR-012**: The install ID MUST be random and not derived from any cluster, host, network, or user attribute. It MUST be kept only on the install. An admin MUST be able to reset it at any time. It MUST be deleted when the extended tier is turned off, and a new one created if the tier is turned back on. The install's signing secret (FR-035) MUST likewise be kept only on the install, and MUST never be sent, displayed or exported through any Gameplane interface.
+- **FR-013**: Every extended value MUST come from a fixed, published set of categories or bands, except per-module server counts (non-negative integers), the install ID, the public signing key and the send time. Values that don't fit MUST be sent as "other". Neither tier MUST carry names, namespaces, hostnames, addresses, player counts, custom module names, or free text.
+- **FR-014**: The provider MUST NOT store raw reports or source network addresses. It MAY keep source addresses transiently, and only to enforce per-source request limits. It MUST NOT store any extended attribute (environment, games, features) linked to an install ID. Extended attributes exist on the provider only as aggregates.
+- **FR-015**: For unique-install counting, the provider MAY keep one **activity record** per install ID, holding only:
+  - a one-way transformed form of the ID
+  - a fingerprint of the key that claimed the ID (FR-036)
+  - the first-seen date
+  - the last-seen date
+  - the send time of the latest accepted report, used only to refuse replays (FR-036)
+  - the last reported version
+
+  It MUST delete the record once the install has been inactive for the period set in OD-4.
+- **FR-016**: The provider MUST keep accepting basic-only reports. An install whose provider rejects extended reports MUST still deliver its basic report to that provider.
+
+**Admin transparency**
+
+- **FR-017**: Admin Settings → Telemetry MUST show the destination host currently in effect: the project default, a custom destination, the bundled receiver, or disabled by the operator.
+- **FR-018**: Admin Settings → Telemetry MUST show a preview of the next report's exact field values, including every extended field and the install ID when that tier is on. While telemetry is on, it MUST also show the time of the last successful report and the outcome of the last attempt.
+- **FR-019**: Admin Settings → Telemetry MUST present basic and extended as separate controls, and MUST offer an install-ID reset while extended is on. When extended is on, no product copy may claim that no identifying data is sent. Instead, it MUST state that a random install ID is included. While basic is off, the extended control MUST be disabled and shown as off.
+
+**Provider storage**
+
+- **FR-020**: The provider MUST keep **daily aggregates** (UTC) for at least 12 months, and they MUST survive provider restarts.
+  - **From basic data**, per day:
+    - reports accepted
+    - count per sanitized version
+    - server and template distributions by size band
+    - server and template totals
+  - **From extended data**, per day:
+    - unique active installs, and new installs
+    - per-category counts for each environment field
+    - installs and servers per official module, plus "custom"
+    - per-feature adoption counts
+    - the number of reports that included extended data
+- **FR-021**: The provider MUST limit how many reports a single source can submit per day, so that one source can't distort the figures by flooding.
+
+**Private dashboard**
+
+- **FR-022**: The provider MUST serve a private dashboard of the FR-020 aggregates for 7-, 30-, 90-, and 365-day ranges, viewable only by viewers who present the provider operator's access credential.
+- **FR-023**: Unauthenticated access to the dashboard or its data MUST be refused with a generic message that reveals no figures, dates, categories, or whether any data exists.
+- **FR-024**: The dashboard MUST show these **basic** views:
+  - reports per day as a trend
+  - version adoption, with the top 10 versions plus "Other" and "Invalid"
+  - fleet-size distributions and medians for servers and templates
+  - total servers and templates on the latest day
+  - a "data as of" timestamp
+- **FR-025**: The dashboard MUST show these **extended** views:
+  - unique active installs (latest day, trailing 7 and 30 days)
+  - new and lapsed installs per period
+  - version adoption by install
+  - environment breakdowns
+  - game usage by installs and by servers, including "custom"
+  - feature adoption shares
+- **FR-026**: The dashboard MUST label basic figures as approximate and self-reported. Every extended view MUST show what share of reports in the range included extended data.
+- **FR-027**: The dashboard MUST show a clear empty state when there is no data in the selected range, rather than zero-valued charts.
+- **FR-028**: The provider operator MUST be able to replace the dashboard access credential without losing stored data. Until a credential is configured, the dashboard MUST stay unavailable rather than open.
+
+**Public summary API**
+
+- **FR-029**: The provider MUST offer a public summary that needs no credentials and returns **only**:
+  - reports received on the latest complete day
+  - reports received over the trailing 30 days
+  - total reports received since collection began
+  - unique active installs over the trailing 30 days (from extended data)
+  - a "data as of" date
+- **FR-030**: The public summary MUST NOT expose any other aggregate, any category breakdown, any per-day series, or any install ID. No other unauthenticated endpoint of the provider may expose aggregates either. Operational metrics MUST require the dashboard credential (FR-022).
+- **FR-031**: The public summary MUST be off unless the provider operator enables it. The project's default provider enables it.
+- **FR-032**: The public summary MUST be rate-limited per source, and safe for clients to cache, so that public polling can't degrade report ingestion or the dashboard.
+
+**Self-hosted parity**
+
+- **FR-033**: The bundled in-cluster receiver and standalone self-hosted receivers MUST offer the same storage, private dashboard, and public summary as the default provider, under the same defaults.
+- **FR-034**: The official module catalog used for game-usage reporting MUST be the same published list the install already trusts as its official module source. Any module the install did not get from that source counts as "custom".
+
+**Report authenticity**
+
+- **FR-035**: Every extended report MUST be signed. The signing key MUST be derived from a random secret created once on the install and kept in its database, combined with the current install ID. The key is therefore unique to that ID, and an ID reset yields a new key that can't be linked to the old one. The secret and private key MUST never leave the install. The report carries the public key and its send time, and the signature MUST cover the whole report as sent.
+- **FR-036**: The provider MUST bind an install ID to the key of the first validly signed report that uses it (the **claim**). From then on it MUST accept reports for that ID only when they are signed by the same key. It MUST refuse, without changing any aggregate or activity record, any extended report that is:
+  - unsigned, or carries a signature that doesn't verify against the whole report
+  - signed with a send time more than 36 hours old or more than 1 hour in the future
+  - signed by a key other than the one that claimed its ID
+  - sent no later than the latest report already accepted for its ID (a replay)
+- **FR-037**: When the provider refuses a report because its ID is claimed by another key, the install MUST replace its ID, and so its key, and resend once in the same attempt. Admin Settings MUST show when the ID was last replaced for this reason. A refusal for any other reason MUST NOT trigger a replacement.
+- **FR-038**: A claim MUST last exactly as long as the ID's activity record, and expire with it (FR-015, OD-4). Basic-only reports carry no ID and need no signature.
+
+**Report cost and credential strength**
+
+- **FR-039**: A provider MUST be able to require proof-of-work for report ingestion. When it does, every report MUST present a single-use challenge issued by the provider within the last 15 minutes, with a solution of the difficulty that challenge states. The provider MUST refuse, without changing any aggregate or activity record, a report whose challenge is missing, forged, expired, already used or unsolved. The difficulty MUST follow recent challenge demand: none at or below a configured normal rate, rising from the very next challenge when demand exceeds it, and falling back slowly once demand subsides. Proof-of-work MUST be off unless the provider operator enables it; the bundled receiver keeps it off by default, and the project's default provider enables it (OD-2 runbook). Defaults are OD-5.
+- **FR-040**: When its provider offers challenges, the install MUST obtain and solve one before each report. When the provider doesn't offer them, the install MUST send without proof-of-work, so older and self-hosted providers keep working. The install MUST refuse to solve a challenge harder than a fixed cap (OD-5) and record the attempt as failed. When the provider refuses a report for its proof-of-work, the install MUST obtain a new challenge and resend once in the same attempt. Solving MUST NOT block the API's request handling.
+- **FR-041**: The provider MUST refuse to start when a dashboard credential is set but shorter than 32 characters.
+
+### Key Entities
+
+- **Basic report**: one anonymous sample from one install, carrying version, server count, and template count. Unchanged by this feature.
+- **Extended report**: the basic report plus an install ID, environment categories, per-official-module server counts with a "custom" total, feature-adoption flags and bands, the public signing key and the send time. It is signed (FR-035) and sent only while the extended tier is on.
+- **Install ID**: a random identifier kept only on the install. An admin can reset it, and it's deleted when extended is turned off. The install also replaces it automatically when it turns out to be claimed by another key (FR-037).
+- **Install signing secret**: random bytes created once on the install and kept in its database. Combined with the install ID, they derive the signing key. They are never sent or shown.
+- **Telemetry destination**: where an install's reports go. Exactly one of: project default, operator-specified custom destination, bundled in-cluster receiver, or disabled.
+- **Telemetry consent**: the admin's on/off choice for each tier. Basic and extended default to on for new installs. For existing installs, basic keeps its saved choice (or stays off if none was saved), and extended stays off. Consent is evaluated before every report, and an operator's disabled destination overrides both tiers.
+- **Telemetry notice acknowledgement**: per admin, whether the FR-004 notice has been shown and dismissed. It gates the first report on new installs.
+- **Delivery status**: per install, the last attempt time, the last successful report time, and the last outcome. Shown to admins and never sent anywhere.
+- **Daily aggregate**: per calendar day (UTC) on the provider. Holds the basic and extended tallies listed in FR-020. It's the only form in which report contents are kept.
+- **Activity record**: per install ID on the provider. Holds the transformed ID, the fingerprint of the key that claimed it, the first-seen and last-seen dates, the latest accepted send time, and the last version. It expires after inactivity (OD-4), and the claim expires with it.
+- **Dashboard access credential**: the provider operator's secret that unlocks the private dashboard. It can be replaced without touching stored data.
+- **Public summary**: a view derived from daily aggregates and activity records, limited to the values listed in FR-029.
+
+## Success Criteria *(mandatory)*
+
+### Measurable Outcomes
+
+- **SC-001**: On a fresh install with default settings, the first report is accepted by the default provider within 1 hour of the first admin seeing the notice, with zero telemetry configuration steps.
+- **SC-002**: Turning telemetry off takes one action from the first-login notice and one action from Admin Settings, either for extended only or for everything. After turning off extended, no further report carries an install ID or any extended field. After turning off everything, the install makes zero connections to any telemetry destination over a 48-hour observation.
+- **SC-003**: Over a 48-hour observation, an install with telemetry disabled at install time, or an upgraded install that never saved a choice, makes zero connections to any telemetry destination.
+- **SC-004**: An operator can disable or redirect telemetry by changing exactly one install-time setting.
+- **SC-005**: Over 7 days of operation that includes at least 3 control-plane restarts, an install with telemetry on produces 7 ± 1 reports, never more than one in any 24-hour window.
+- **SC-006**: In 100% of sampled reports, the Admin Settings preview matches the payload the provider receives, field for field.
+- **SC-007**: An authorized viewer can find the following within 1 minute of opening the dashboard, without any other tool:
+  - unique active installs over 30 days
+  - the most common version
+  - the median fleet size
+  - the five most-run official games
+  - the share of single-node installs
+- **SC-008**: For a synthetic population with known truth, including restarts, upgrades, and installs that stop reporting, the dashboard's 30-day unique-active-install count is within 1% of the true count.
+- **SC-009**: After a provider restart, 100% of daily aggregates and activity records within their retention periods are still present.
+- **SC-010**: With 12 months of history at 10,000 reports per day, the dashboard shows the 365-day view within 3 seconds.
+- **SC-011**: Every response from the public summary contains only the values listed in FR-029. An unauthenticated request to the private dashboard reveals none of its figures.
+- **SC-012**: An audit of everything the provider keeps finds only:
+  - dates, category labels, counts, and band tallies
+  - activity records holding a transformed ID, a key fingerprint, two dates, one send time, and a version
+
+  It finds no raw reports, network addresses, untransformed IDs, full public keys, or extended attributes linked to any ID.
+- **SC-013**: An install on this version that reports to a provider older than this feature still has 100% of its basic reports accepted.
+- **SC-014**: In a test of every forgery case in US7 scenarios 1–3 against a claimed ID, 100% of forged reports are refused and 0 figures change.
+- **SC-015**: An install whose ID was claimed by another key has a report accepted under a new ID within the same delivery attempt in 100% of tested cases.
+- **SC-016**: With proof-of-work on, a challenge issued while demand is at or below the normal rate requires no work, and a challenge issued while demand is 1,000 times the normal rate requires at least 2^20 hash attempts on average (FR-039).
+
+## Assumptions
+
+- The default provider is operated by the Gameplane project. Its maintainers run it at https://telemetry.gameplane.net/ingest, and its data-handling statement is a page on the project website at https://gameplane.net/telemetry/ (OD-1 and OD-2, ruled 2026-10-07).
+- "Telemetry provider" means the receiving service, whether that is the project-run default or a self-hosted or bundled receiver. All of them speak the same report format.
+- Unique-install figures are available only for installs that share extended data, because only extended reports carry an install ID. Basic-only installs are counted as reports per day.
+- The install ID is pseudonymous rather than anonymous: it links one install's reports over time. That is why it's confined to the extended tier, never linked to stored extended attributes (FR-014), resettable, and deleted when extended is turned off (FR-012). Signing protects existing IDs from impersonation. Fabricated new installs can only be limited by per-source limits, because there's no way to tell a real install from an invented one without a project-issued secret.
+- The provider accepts unauthenticated reports from the public internet, because a shared secret can't be distributed to every install. Optional token-protected ingest for self-hosted receivers keeps working.
+- The private dashboard uses a single operator-held access credential. Multi-user accounts and roles on the provider are out of scope.
+- The public summary is aimed at badges and website counters. It's read-only and needs no credentials.
+- Daily aggregates are kept for 24 months (OD-3, ruled; FR-020 floor 12 months). Activity records expire after 90 days of inactivity (OD-4, ruled).
+- Game-usage and feature-adoption values come from what the control plane already knows about its own resources and settings. No data is collected from inside game servers or from players.
+- The first-login notice (US1), the Admin Settings changes (US3), and the provider's private dashboard (US4, US5) are designed in Pencil before they're built (constitution Principle II). The notice and settings are designed in `design.pen`. The provider dashboard is designed in its own Pencil file, `telemetry-receiver/telemetry-dashboard.pen`, which starts from a copy of the HeroUI design, and its snapshot is exported to `telemetry-receiver/design-export/`. Opt-out, tier, disabled, custom-destination, restart, ID-reset, old-provider, public-summary, forged-report and ID-conflict paths get E2E coverage (constitution Principle I).
+- Changes to provider behavior update `telemetry-receiver/specs.md` and its README in the same change, and reporter changes update `api/specs.md` (constitution Principle IV). Two receiver invariants change:
+  - "stores nothing persistent" becomes "stores daily aggregates and expiring activity records only, never raw reports"
+  - "exactly three fields" becomes "basic or extended report, both strictly validated"
+- Changing telemetry from opt-in to opt-out for new installs, and adding the extended tier, reverses the documented "off by default" and "no identifying data" promises. Every doc and UI string that makes those promises (install docs, chart comments, receiver README, website telemetry page, the Admin Settings subtitle) is updated in the same change.
+- Out of scope:
+  - player counts or any per-player data
+  - per-server details beyond the per-module counts
+  - custom module names
+  - free-text fields
+  - telemetry from game agents
+  - exporting raw data
+  - alerting on telemetry
+  - buying or provisioning the domain
diff --git a/specs/022-default-telemetry-dashboard/tasks.md b/specs/022-default-telemetry-dashboard/tasks.md
new file mode 100644
index 000000000..22c83e898
--- /dev/null
+++ b/specs/022-default-telemetry-dashboard/tasks.md
@@ -0,0 +1,663 @@
+---
+
+description: "Task list for feature 022: default telemetry destination, extended telemetry, signed reports, and telemetry dashboard"
+---
+
+# Tasks: Default telemetry destination, extended telemetry, and telemetry dashboard
+
+**Input**: Design documents from `specs/022-default-telemetry-dashboard/`
+
+**Prerequisites**: [plan.md](plan.md), [spec.md](spec.md), [research.md](research.md), [data-model.md](data-model.md), [contracts/](contracts/), [quickstart.md](quickstart.md), [OPEN-DECISIONS.md](OPEN-DECISIONS.md)
+
+**Tests**: Test tasks are required, not optional. Constitution Principle I needs E2E coverage for every user-facing path, the spec's Assumptions list the E2E paths, and CLAUDE.md sets per-module coverage gates (telemetryschema 90, telemetry-receiver 70, api 80, web 92/76/82/92).
+
+**Organization**: Tasks are grouped by user story (US1–US7 from spec.md), so each story can be built and verified on its own on top of Phases 1–2.
+
+## Format: `[ID] [P?] [Story] Description`
+
+- **[P]**: can run in parallel (different files, no dependency on unfinished tasks)
+- **[Story]**: the user story the task belongs to (US1–US7)
+
+## Execution rules (CLAUDE.md, binding on every task)
+
+- **Verification.** Locally, run only `go build ./...` (inside the module) and `cd web && npx tsc --noEmit`. Never run `go test`, `npm test`, `make test|lint|cover`, envtest or E2E locally (rule 8). CI is the verification authority.
+- **Delegation.** Implementation runs through `Workflow` scripts. Agents start at `haiku`, set `model:` on every `agent()`, and get reviewed one tier up. One scout writes a brief per phase with exact `file:line` and before/after code, and fixers edit blind from that brief (rules 13, 18).
+- **Design first.** Any task that changes `design.pen` or `telemetry-receiver/telemetry-dashboard.pen` uses Pencil MCP only, never generic file tools (rule 2). Ask the user to open the file and save in the Pencil UI, then run the `design-export` skill, and commit the export with the design (rule 1). The receiver file exports to `telemetry-receiver/design-export/{json,screenshots}/`.
+- **Commits.** Commit each logical unit signed (`git commit -s`) with conventional prefixes and the `Co-Authored-By` / `Claude-Session` trailers. Never amend pushed commits (rule 11).
+- **Tests.** Don't delete or weaken a test. Tests whose behaviour this feature intentionally changes are listed in T002 and need sign-off first (system override 1).
+- **Merge gate.** OPEN-DECISIONS OD-1 was ruled (2026-10-07): the default domain is telemetry.gameplane.net, and the merge gate is satisfied (plan.md, Merge gate).
+
+---
+
+## Phase 1: Setup (shared infrastructure)
+
+**Purpose**: Create the branch, get test sign-off, and wire the new `telemetryschema` module into the build.
+
+- [X] T001 Create branch `feat/default-telemetry-dashboard` from `master` and commit `specs/022-default-telemetry-dashboard/` (`.specify/feature.json` is git-ignored, so it stays local) as `docs(specs): add 022 default telemetry dashboard spec`.
+- [X] T002 Get **explicit human sign-off** (system override 1) to rewrite these existing tests so they assert the new behaviour. Rewrites must keep or raise coverage and never delete a case without a replacement:
+  - `api/internal/telemetry/telemetry_test.go`: `TestReportOnce_EnabledPostsAnonymousCounts`, `TestReportOnce_SendsAuthHeader`, `TestReportOnce_DisabledSkipsPost`. The reporter's constructor and send path change (research R12).
+  - `api/internal/telemetry/telemetry_branches_test.go`: `TestNew_DefaultsInterval`, `TestEnabled_Branches`, `TestCount_UnknownKind`, `TestReportOnce_EndpointErrorPropagates`.
+  - `web/src/routes/AdminSettings.test.tsx`, test "shows telemetry toggle and saves setting". `findByRole("switch")` assumes one switch, and there will be two (FR-019).
+  - `web/src/routes/AdminSettings_sections.test.tsx`, test "toggles telemetry and saves". It may need the new `GET /admin/telemetry` handler.
+
+  - `telemetry-receiver/main_test.go` (added 2026-10-06 for spec Q8): the `metrics()` helper (lines 38–50) calls the dashboard handler with `Authorization: Bearer <token>` instead of the public `routes()`, `TestMetricsMethodNotAllowed` (line 138) targets that handler, and a new case asserts that `GET /metrics` on the public `routes()` returns `404`. The `decodePayload` tests stay unchanged, because T017 keeps a `decodePayload` wrapper.
+  - `.github/workflows/ci.yaml`, the "observability scrape TLS/reachability" step (about lines 773–812): the receiver ServiceMonitor and NetworkPolicy renders also set `api.telemetry.receiver.dashboard.tokenSecretRef.name`, the ServiceMonitor check expects `port: dashboard` and `bearerTokenSecret`, the NetworkPolicy check expects the Prometheus namespace on port 8081, and a new check asserts no receiver ServiceMonitor renders without a token.
+
+  - `api/internal/handlers/config_test.go` `TestConfig_GetEmpty` (added 2026-10-07): Migrate now seeds the fresh-install telemetry default, so it becomes `TestConfig_GetFreshInstallDefaults` and asserts exactly the seeded `telemetry` key. The `telStore` and `bareStore` helpers in the reporter tests above upsert or remove the seeded row, with no assertion changes.
+
+  - `api/internal/handlers/config_validators_test.go` `TestValidateTelemetry` (added 2026-10-07): the canonical output gains `"extended":false`, and a new case checks that `{"sendMetrics":false,"extended":true}` normalises to both false.
+
+  **Signed off 2026-10-06** by the user ("Approve all", then "Approve" for the `/metrics` changes; "Assert the seeded default" for `TestConfig_GetEmpty` and "Assert the new shape" for `TestValidateTelemetry` on 2026-10-07). Record the sign-off in the PR description.
+- [X] T003 Create `telemetryschema/go.mod` (`module github.com/GameplanePanel/gameplane/telemetryschema`, `go 1.26.0`, no requires) and `telemetryschema/doc.go` with a package comment: "the shared telemetry report contract used by api and telemetry-receiver; see specs/022-default-telemetry-dashboard/contracts/report-schema.md".
+- [X] T004 Add `./telemetryschema` to the `use` block in `go.work`, and add `telemetryschema` to `GO_MODULES` in `Makefile:43` (after `gameproto`).
+- [X] T005 [P] Add `telemetryschema` to both Go module matrices in `.github/workflows/ci.yaml` (the `module:` lists at about lines 457 and 549). Add `telemetryschema/**` everywhere `telemetry-receiver/**` appears as a path filter (about line 119), and to the api and telemetry-receiver image path filters in `.github/workflows/publish-edge.yaml`. Add a `gomod` entry for `/telemetryschema` in `.github/dependabot.yml`, copied from the `/telemetry-receiver` entry at about line 176.
+- [X] T006 [P] Create `telemetryschema/.testcoverage.yml` (copy the `telemetry-receiver/.testcoverage.yml` format with `total: 90` and an updated header comment) and a non-empty `telemetryschema/specs.md` skeleton with the sections Purpose, Responsibilities, External interface (linking `specs/022-default-telemetry-dashboard/contracts/report-schema.md`), Key invariants, and Testing & coverage, so that `hack/check-specs.sh` passes.
+- [X] T007 [P] Update the repository docs maps:
+  - `CLAUDE.md`: in the repository map add `telemetryschema/   shared telemetry report contract (api, telemetry-receiver)`; change "links all 15 Go modules" to 16; add `telemetryschema 90` to the coverage minimums; add a row to the Architecture table.
+  - `docs/agent-architecture.md`: add a `telemetryschema/specs.md` row next to Telemetry-Receiver (line 29).
+- [X] T008 [P] Make the module-list checks accept the new module. Inspect how `hack/check-ci-report-coverage.sh`, `hack/check-publish-edge-paths.sh` and `hack/check-specs.sh` enumerate modules, and add `telemetryschema` to any list they read. Edit the lists only, not the checks' logic.
+- [X] T009 Wire the dependency:
+  - Add `require github.com/GameplanePanel/gameplane/telemetryschema v0.0.0` and `replace github.com/GameplanePanel/gameplane/telemetryschema => ../telemetryschema` to `api/go.mod` and `telemetry-receiver/go.mod` in the same change as their first import (T026, T017), following the netguard pattern at `api/go.mod:5-9`. `test/e2e/go.mod` gets the same lines in T088, with the test-only signing client.
+  - Add `COPY telemetryschema/ ./telemetryschema/` to `api/Dockerfile` next to `COPY netguard/` (line 7).
+  - In `telemetry-receiver/Dockerfile`, copy `telemetryschema/` before `go mod download` so that the `replace` path resolves.
+
+**Checkpoint**: an empty `telemetryschema` module builds and is wired into CI, and the test sign-off is recorded.
+
+---
+
+## Phase 2: Foundational (blocking prerequisites)
+
+**Purpose**: The shared report contract, install-side state and collection, and receiver storage. Every user story depends on them.
+
+**⚠️ CRITICAL**: No user-story work starts until this phase is done.
+
+### Report contract (`telemetryschema/`)
+
+- [X] T010 [P] Create `telemetryschema/report.go`:
+  - Types `Report{Version string; Servers, Templates int; Ext *Extended}`, `Extended{Schema int; InstallID string; Env Env; Games Games; Features Features; Key string; SentAt time.Time}`, `Env{K8s, Distro string; Arch []string; Nodes string}`, `Games{Official map[string]int; Custom int}`, and `Features{WakeOnConnect bool; Tunnels []string; Capture, Backups, SSO, AuditForwarding bool; Clusters, DB, Language string}`.
+  - JSON tags exactly as in `contracts/report-schema.md`.
+  - `Encode(Report) ([]byte, error)`, which emits sorted map keys and sorted arrays so the output is deterministic.
+- [X] T011 [P] Create `telemetryschema/enums.go`:
+  - The enumerations from the field-rules table in `contracts/report-schema.md`: Distros, Arches, Tunnels, DBs, `Languages = ["en"]`, NodeBands and ClusterBands.
+  - `VersionRE` (moved from `telemetry-receiver/main.go:52`).
+  - `K8sMinorRE = ^1\.[0-9]{1,3}$`.
+  - `NodeBand(n int) string` (1, 2-3, 4-10, 11-50, 51+), `ClusterBand(n int) string` (1, 2-3, 4-10, 11+), and `FleetBands = []float64{0,1,2,5,10,25,50,100,250}`.
+  - `SanitizeEnum(set, v) string`, which returns `other` for unknown values.
+- [X] T012 Create `telemetryschema/decode.go`, with `Decode(body []byte) (Report, DecodeInfo, error)`:
+  - Port the strict token-walking logic from `decodePayload` in `telemetry-receiver/main.go:85-186`: exactly one object, exact case-sensitive keys, no duplicates or nulls, nothing trailing.
+  - Extend it with the optional `ext` object, validated against the field-rules table in `contracts/report-schema.md`.
+  - Structural errors wrap `ErrInvalidPayload` with `%w`. `ext.schema > 1` returns `ErrUnsupportedSchema`.
+  - Out-of-set values become `other`. Unknown `games.official` keys are added to `Custom`, using the catalog from T013.
+  - A malformed `installId` sets `DecodeInfo.ExtDropped = true` and returns `Ext = nil`.
+- [X] T013 [P] Create `telemetryschema/catalog.txt` (one module name per line, copied from `charts/gameplane/values.yaml` `defaultModuleSource.oci.modules` at about line 583) and `telemetryschema/catalog.go` (`//go:embed catalog.txt`, `IsOfficial(name string) bool`, `Catalog() []string`).
+  - Add `hack/check-telemetry-catalog.sh` (POSIX sh). It extracts the values.yaml list and diffs it with `catalog.txt`, exiting 1 with the diff on mismatch.
+  - Add a `check-telemetry-catalog` target to `Makefile`, and add it to the `lint:` prerequisites at `Makefile:266`. CI runs it as a `lint (netguard)` step, and the `specs` path filter covers the script, `telemetryschema/catalog.txt` and `charts/gameplane/values.yaml`.
+- [X] T014 [P] Create `telemetryschema/sign.go` (research R20):
+  - `const SignatureHeader = "Gameplane-Telemetry-Signature"`.
+  - `NewSecret() ([]byte, error)`: 32 bytes from `crypto/rand`.
+  - `DeriveKey(secret []byte, installID string) (ed25519.PrivateKey, error)`: `crypto/hkdf` with SHA-256, salt = installID, info = `gameplane-telemetry-signing-v1`, 32-byte seed, then `ed25519.NewKeyFromSeed`.
+  - `PublicKeyString(priv) string`: base64url, unpadded.
+  - `Sign(priv, body []byte) string`: returns `ed25519=<b64url sig>`.
+  - `Verify(header, publicKey string, body []byte) error`, wrapping `ErrBadSignature`.
+  - `KeyFingerprint(publicKey string) string`: hex SHA-256 of the raw key.
+- [X] T015 [P] Create `telemetryschema/decode_test.go`, `enums_test.go`, `catalog_test.go` and `sign_test.go`, covering:
+  - every reject case already covered by `telemetry-receiver/main_test.go` `TestDecodePayloadRequiresExactKeys`
+  - every `ext` rule, including `other` folding, unknown modules going to `Custom`, `ExtDropped`, and schema 2 being rejected
+  - band boundaries 1/2/3/4/10/11/50/51 and clusters 10/11
+  - catalog membership
+  - a fixed `DeriveKey` vector, sign/verify round trip, a single-byte tamper failing, and different IDs deriving different keys
+- [X] T016 [P] Create `telemetryschema/specs.md` with the full content, replacing the T006 skeleton: types, enumerations, bands, the signature scheme, invariants (no free text, bounded categories), and the compatibility table from `contracts/report-schema.md`.
+- [X] T017 Change `telemetry-receiver/main.go` to delegate decoding to `telemetryschema.Decode`:
+  - Keep `decodePayload(body []byte) (payload, error)` as a thin wrapper, so the existing `main_test.go` tests keep compiling and passing unchanged.
+  - The wrapper returns `errInvalidPayload` for any report that carries `ext`. This keeps today's behaviour until T072.
+  - Replace the local `versionRE` with `telemetryschema.VersionRE`.
+
+### Install-side state (API database)
+
+- [X] T018 Create `api/internal/db/migrations/common/015_telemetry_state.sql` with tables `telemetry_state` and `telemetry_notice_acks`, with exactly the columns in `data-model.md` § API, including `signing_secret` and `last_id_rotation_at`. Follow the portability rules in `api/internal/db/migrations/README.md`: no `AUTOINCREMENT`, no `datetime(...)`, no `INSERT OR`, and no comment line ending in `;`.
+- [X] T019 Change `Store.Migrate` in `api/internal/db/db.go:99`:
+  - Before applying anything, count rows in `schema_migrations`. `fresh := count == 0`.
+  - After applying, call `s.seedTelemetryState(ctx, fresh)`.
+- [X] T020 Create `api/internal/db/telemetry.go`:
+  - `seedTelemetryState` (research R10), idempotent through `INSERT ... ON CONFLICT (id) DO NOTHING`:
+    - **fresh**: `consent_source='default'`, and upsert the config key `telemetry` = `{"sendMetrics":true,"extended":true}`.
+    - **otherwise**: `consent_source='legacy'`. If the config key `telemetry` exists, rewrite it with `extended:false` added.
+  - Helpers:
+    - `TelemetryState` struct with `GetTelemetryState` and `UpdateTelemetryState`
+    - `ClaimTelemetryDue(ctx, expected, next, now string) (bool, error)`, using `UPDATE telemetry_state SET next_due_at=?, last_attempt_at=? WHERE id='singleton' AND next_due_at=?`
+    - `SetInstallID` and `ClearInstallID`
+    - `EnsureSigningSecret`, which creates the secret once and never returns it outside the package API used by `api/internal/telemetry`
+    - `MarkNoticeShown`, which sets the value only if NULL
+    - `InsertNoticeAck`, `HasNoticeAck` and `DeleteNoticeAcksForUser`
+- [X] T021 Call `DeleteNoticeAcksForUser` from the existing account-removal path in `api/internal/db/users.go`, in the same place other per-user rows are deleted (migrations README rule 3).
+- [X] T022 [P] Create `api/internal/db/telemetry_test.go`, covering:
+  - fresh versus existing seeding, including running `Migrate` twice (the bootstrap-admin then serve order), an existing DB with `sendMetrics:true`, and an existing DB with no telemetry row
+  - two concurrent `ClaimTelemetryDue` calls where exactly one wins
+  - notice ack lifecycle and user deletion
+
+  `TestSharedMigrationsArePortable` in `api/internal/db/migrations_test.go` must pass for 015 without edits.
+
+### Install-side destination and collection (`api/internal/telemetry/`)
+
+- [X] T023 Create `api/internal/telemetry/destination.go`:
+  - `const DefaultEndpoint = ""`, with a comment: "Project default telemetry destination. Empty until specs/022…/OPEN-DECISIONS.md OD-1 is ruled; the feature PR must not merge while empty (hack/check-telemetry-default.sh)."
+  - `type Destination struct{ Kind, URL, Host string }`
+  - `ResolveDestination(disabled bool, endpoint string, bundled bool) (Destination, error)`, implementing the research R13 table. A `default` kind whose scheme isn't `https` returns an error.
+- [X] T024 [P] Create `hack/check-telemetry-default.sh` (POSIX sh). It reads the `DefaultEndpoint` value from `api/internal/telemetry/destination.go` and exits 1 unless it is non-empty and starts with `https://`. Add a separate job `telemetry-default-gate` to `.github/workflows/ci.yaml` that runs only this script. Don't add it to `make lint`.
+- [X] T025 Add flags in `api/cmd/main.go`:
+  - `--telemetry-disabled` / `GAMEPLANE_TELEMETRY_DISABLED`
+  - `--telemetry-interval` / `GAMEPLANE_TELEMETRY_INTERVAL` (default `24h`; a value below `1m` is a startup error)
+  - `--official-module-source` / `GAMEPLANE_OFFICIAL_MODULE_SOURCE`
+  - `GAMEPLANE_TELEMETRY_BUNDLED`, read from the environment only
+
+  Change the `--telemetry-endpoint` help text at line 541 to "URL to POST anonymous usage metrics to (empty = the project default)". Resolve the destination once at startup through `telemetry.ResolveDestination`, and exit on error.
+- [X] T026 Create `api/internal/telemetry/collect.go` with `Collect(ctx, deps) (telemetryschema.Report, error)`. `deps` holds the kube client, store, config flags, version and official source.
+  - **Basic.** Keep the current local-cluster counts from `count()` in `telemetry.go:146`.
+  - **Extended.** Build it only when `extendedOn`, from the research R14 table: discovery `ServerVersion`, local nodes, GameServers, GameTemplate labels, BackupSchedules, `Cluster` CRs, `cfg.captureFeatureEnabled`, the OIDC flag or a DB `auth` provider, the audit webhook or S3 sink, and `cfg.dbDriver`. `language` is `"en"`.
+  - **Signing fields.** `Key` = `PublicKeyString(DeriveKey(secret, installID))` and `SentAt = now`.
+  - **Partial failures.** A failure for one field yields `0` or `other`, not an error.
+- [X] T027 [P] Create `api/internal/telemetry/official.go`. Following research R15, a GameServer counts as official module `m` only when its template has all of:
+  - label `gameplane.local/managed-by=Module`
+  - label `gameplane.local/module-source` equal to `--official-module-source`
+  - label `gameplane.local/module-name=m`, with `m` in that ModuleSource's `spec.oci.modules[].name` (or its git index), and `telemetryschema.IsOfficial(m)`
+
+  Everything else, including look-alike names, adds to `Custom`.
+- [X] T028 [P] Create `api/internal/telemetry/distro.go` with `detectDistro(gitVersion string, nodes []corev1.Node) string`, implementing the research R16 table in order.
+- [X] T029 [P] Create `api/internal/telemetry/collect_test.go`, `official_test.go`, `distro_test.go` and `destination_test.go`, using the fake dynamic and typed clients:
+  - every R14 field, including partial-failure fallbacks
+  - official, custom, upload-source and look-alike modules
+  - every R16 row plus kubeadm becoming `other`
+  - every R13 row, plus a non-https default being rejected
+
+### Receiver storage (`telemetry-receiver/`)
+
+- [X] T030 Create `telemetry-receiver/store.go`:
+  - Open `modernc.org/sqlite` (add it to `telemetry-receiver/go.mod`) at `$DATA_DIR/telemetry.db`. When `DATA_DIR` is empty, use a private in-memory database per store (`:memory:` with `SetMaxOpenConns(1)`, not a process-wide shared cache, so the many `newServer(config{})` calls in the existing tests stay isolated) and log a warning. `newServer(cfg config) *server` keeps its signature and opens an in-memory store; `main` opens the configured store and passes it in through a second constructor.
+  - Enable WAL, with a single writer goroutine or a mutex.
+  - Create every table in `data-model.md` § Receiver, including `activity.key_fp` and `activity.last_sent_at`.
+  - Initialise `meta` keys `schema_version`, `collection_started` and `reports_total`. Generate and store `pepper` when `ID_PEPPER` is unset.
+- [X] T031 Extend `loadConfig` in `telemetry-receiver/main.go` with every variable in the `contracts/receiver-http.md` Configuration table. Enforce `RETENTION_DAYS ≥ 365` and `ACTIVITY_EXPIRY_DAYS ≥ 31` (OD-3, OD-4), failing with a startup error. Add the second listener scaffold, which starts only when `DASHBOARD_TOKEN` is set. Keep `TestLoadConfigDefaults` passing.
+- [X] T032 Add receiver persistence to the chart:
+  - In `charts/gameplane/values.yaml`, add the `api.telemetry.receiver` keys `persistence`, `dashboard`, `publicSummary`, `pepperSecretRef`, `retentionDays: 730`, `activityExpiryDays: 90`, `ingestSourceDailyLimit: 20` and `trustedProxyCIDRs`, per `contracts/install-config.md`.
+  - In `charts/gameplane/templates/telemetry-receiver.yaml`:
+    - a PVC `gameplane-telemetry-receiver-data`, or an `emptyDir` when persistence is disabled, mounted at `/data`, with `DATA_DIR=/data`
+    - `strategy: Recreate`
+    - a `fail` when `replicas > 1` and persistence is enabled
+    - env passthrough for the retention, expiry, limit and proxy settings
+  - Read every new key through a `hasKey` or `dig` guard (F-214 precedent at `templates/api.yaml:394-399`).
+- [X] T033 [P] Create `telemetry-receiver/store_test.go`, covering schema creation, reopening the same `DATA_DIR` (aggregates and pepper survive, SC-009), and in-memory mode.
+
+**Checkpoint**: the contract, state, collection and storage foundations exist, and user stories can start.
+
+---
+
+## Phase 3: User Story 1 — New installs report by default, with an informed opt-out (P1) 🎯 MVP
+
+**Goal**: A fresh install reports to the resolved destination by default, but only after an admin's dashboard has shown the notice. The notice lets the admin turn off extended or everything.
+
+**Independent Test**: Fresh Kind install with the bundled receiver. Sign in, and the notice is pending. Once it has been shown, a report reaches the receiver within one interval. "Turn off all" stops all reports. An upgraded beta.8 install stays off with no notice.
+
+- [X] T034 [US1] Rewrite `api/internal/telemetry/telemetry.go` (research R12, data-model § schedule):
+  - The `Reporter` takes the `Destination`, interval, store, collect deps and auth header.
+  - The tick is `min(5m, interval/4)`.
+  - It evaluates "Gate open" (data-model § Derived values). While the gate is closed, `next_due_at` stays NULL. When it opens, `next_due_at = now + U(0, min(15m, interval/4))`.
+  - It claims each slot with `ClaimTelemetryDue`, then builds the report with `Collect`, encodes it, and signs it with `telemetryschema.Sign` when `Ext != nil`.
+  - It POSTs with `Content-Type: application/json`, the `Authorization` header when configured, and the signature header.
+  - **400 with ext present**: re-POST without `ext` once, and set `ext_unsupported_until = now+7d` and `ext_unsupported_endpoint`.
+  - **2xx**: set `last_success_at` and `last_outcome='ok'`, reset `consecutive_failures`, and set `next_due_at = now + interval + U(0, interval/48)`.
+  - **Other errors**: set `last_outcome='failed'`, and back off `min(1h·2^n, interval)`.
+  - Never queue or replay reports.
+- [X] T035 [US1] Create `api/internal/telemetry/consent.go` with `ApplyConsent(ctx, tx, dest, interval, basic, extended bool, source string)` (it needs the destination for `ErrOperatorDisabled` and the interval to schedule the first slot; SQLite's single connection means it uses the tx helpers in a new `api/internal/db/telemetry_tx.go`), shared by the config hook and the notice actions. It:
+  - writes the config key `telemetry`
+  - sets `consent_source`
+  - creates or clears the install ID (creating the signing secret through `EnsureSigningSecret` when an ID is created)
+  - opens or closes the schedule
+
+  It returns `ErrOperatorDisabled` when the destination kind is `disabled`.
+- [X] T036 [US1] **Closes an interim consent gap (security review of 1ab7ee6b): until this task lands, fresh installs are seeded `sendMetrics:true` while the old reporter checks only that flag, so it can send before the notice. This task and T034 must ship in the same PR as Phase 2.** Replace the reporter start at `api/cmd/main.go:392` (`telemetry.New(..., 24*time.Hour)`) with the new constructor, using the resolved destination and the interval flag.
+- [X] T037 [US1] Extend `api/internal/handlers/config.go` for the `telemetry` section:
+  - Add `Extended bool \`json:"extended"\`` to `telemetryCfg` (line 724).
+  - Normalise instead of rejecting: when `sendMetrics` is false, store `extended: false` too (FR-003, spec Q7). There is no 422 for this case.
+  - In `put`, add a `telemetry` post-save hook next to the `auth` hook at line 131. It calls `telemetry.ApplyConsent(..., "admin")` in the same transaction as the config upsert, and returns `409` "telemetry is disabled by the operator" on `ErrOperatorDisabled`.
+- [X] T038 [US1] Create `api/internal/handlers/telemetry.go` with `GET /admin/telemetry/notice` and `POST /admin/telemetry/notice`, exactly as in `contracts/api-telemetry-http.md` (the pending computation from data-model § Derived values; the four actions through `ApplyConsent`; `204` or `409`). Mount it in `api/cmd/main.go` next to the config handlers. In `api/internal/rbac/rbac.go`, add `{method: "GET", segment: "admin", prefix: "/admin/telemetry", perm: "config:read"}` and `{segment: "admin", prefix: "/admin/telemetry", perm: "config:manage"}` **before** `{segment: "admin", perm: "*"}` (line 217). The GET handler itself returns `{"pending":false}` to callers without `config:manage`.
+- [X] T039 [P] [US1] Rewrite the signed-off tests from T002 in `api/internal/telemetry/telemetry_test.go` and `telemetry_branches_test.go`, and add new cases using a fake clock and `httptest`:
+  - no POST while the source is `default` and the notice hasn't been seen
+  - the first POST within 15 minutes of `MarkNoticeShown`
+  - spacing of at least the interval
+  - a new Reporter on the same database doesn't send early (restart)
+  - the 400 fallback, then 7 days of basic-only
+  - backoff growth and cap
+  - two Reporters sharing one database send one POST per slot
+  - the auth header is still sent
+- [X] T040 [P] [US1] Create `api/internal/handlers/telemetry_envtest_test.go`, covering:
+  - the notice is pending only for `config:manage` holders, a `default` source, and a destination other than `none` or `disabled`
+  - `seen` sets `notice_shown_at` once
+  - the effects of `keep`, `extended-off` and `all-off`
+  - `409` when not pending
+  - `PUT /admin/config/telemetry` with `{sendMetrics:false, extended:true}` returning 200 and storing `extended:false` with the ID deleted; 200 with side effects (ID created and deleted, `consent_source=admin`); and 409 when the operator has disabled telemetry
+
+  The existing `api/internal/handlers/config_test.go:144-156` must pass unchanged.
+- [X] T041 [US1] Design the "Telemetry notice" banner in `design.pen` through Pencil MCP, with states for the default and the bundled destination. It lists the basic fields and the extended fields (stating that a random install ID is included), shows the destination host, offers the actions "Keep sharing", "Turn off extended" and "Turn off all", links to Admin Settings, and links to the data-handling statement. Ask the user to save, run the `design-export` skill (`design-export/json/<id>.json`, `design-export/screenshots/<id>.png`, `design-export/MANIFEST.md`), and commit the design and export together.
+- [X] T042 [P] [US1] In `web/src/lib/api.ts`, add `Telemetry.notice()` and `Telemetry.ack(action: "seen" | "keep" | "extended-off" | "all-off")` with response types from `contracts/api-telemetry-http.md`. Add an MSW default handler for `GET /admin/telemetry/notice` (`{pending:false}`) wherever the shared test handlers live (the same place the `/admin/config` defaults come from; `web/src/test/`).
+- [X] T043 [US1] Create `web/src/components/ui/TelemetryNotice.tsx`, implementing the T041 design. It uses TanStack Query for `Telemetry.notice()` and posts `seen` once on mount with `void`. Each action calls `ack` and invalidates the `["telemetry"]` and `["admin-config"]` queries. Mount it in `web/src/components/AppLayout.tsx` beside the `SafeModeBanner` block (line 213), only for users who hold `config:manage`, using the existing permission helper the layout uses for admin navigation.
+- [X] T044 [P] [US1] Create `web/src/components/ui/TelemetryNotice.test.tsx`, and add an `AppLayout` test case, covering:
+  - it renders only while pending
+  - `seen` is posted exactly once
+  - each action posts the right body and hides the banner
+  - it is hidden for users without `config:manage`
+- [X] T045 [US1] In `deploy/kind/e2e.sh` (the helm command at about line 301) and the `Makefile` `dev-install` target (`deploy/kind/up.sh` has no helm command), add the telemetry-receiver image to the E2E image set (`docker-bake.hcl`, `.github/actions/build-e2e-images/action.yml`, the `e2e.sh` load loop and `make e2e-images`), and add `--set api.telemetry.receiver.enabled=true` with the comment "never let CI or dev installs reach the project provider (spec 022 R17)".
+- [X] T046 [US1] Register a new bucket `telemetry`, using the `e2e-test-authoring` skill:
+  - in `test/e2e/buckets.sh`: add it to `bucket_names` (line 357), add a `list_bucket` case, and add `bucket_telemetry()` returning `TestTelemetryLifecycle`
+  - in the e2e matrix in `.github/workflows/ci.yaml` (about line 1140): `parallel: 1`, `test_timeout: 25m`, `job_timeout: 60`
+- [X] T047 [US1] Create `test/e2e/telemetry_e2e_test.go` with `TestTelemetryLifecycle`. It calls `t.Parallel()` and runs ordered `t.Run` subtests (research R17).
+  - **Setup.** Create the Secret `telemetry-dashboard`, then run `helm upgrade --reuse-values` (pattern: `test/e2e/upgrade_e2e_test.go:118`) with these values:
+    - `api.telemetry.interval=1m`
+    - `api.telemetry.receiver.dashboard.tokenSecretRef.name=telemetry-dashboard`
+    - `api.telemetry.receiver.publicSummary.enabled=true`
+    - `api.telemetry.receiver.ingestSourceDailyLimit=0`
+  - **Subtests:**
+    - `notice_pending_on_fresh_install`
+    - `seen_opens_gate_and_first_report_arrives`, asserted through the receiver's `/metrics` `gameplane_telemetry_reports_total` on the dashboard port 8081 with `Authorization: Bearer <token>`, over `Env.PortForward` (`test/e2e/env.go:342`). That route comes from T067; the bucket runs on the finished branch, so the ordering is safe
+    - `all_off_stops_reports`, followed by turning telemetry back on through `PUT /admin/config/telemetry`
+    - `api_restart_does_not_resend_early`
+  - Keep admin logins to 2 or fewer (bucket login budget).
+- [X] T048 [US1] In `test/e2e/upgrade_e2e_test.go` (`TestUpgrade_FromPreviousRelease`), add assertions after the upgrade: `GET /admin/telemetry/notice` returns `pending:false`, and the `GET /admin/config` `telemetry` section is absent or `{sendMetrics:false}` (US1 scenario 5).
+
+**Checkpoint**: US1 is demonstrable end to end against the bundled receiver, which still counts reports in memory only.
+
+---
+
+## Phase 4: User Story 2 — Operators can redirect or hard-disable telemetry (P1)
+
+**Goal**: One install-time setting disables or redirects telemetry. The UI and the API reflect the operator's choice.
+
+**Independent Test**: With `api.telemetry.enabled=false`, no report arrives over 3 intervals, the settings show "disabled by the operator", and `PUT` returns 409. With a custom endpoint, reports arrive only there. An old (beta.8) receiver still gets basic reports.
+
+- [X] T049 [US2] Change the chart:
+  - `charts/gameplane/values.yaml`: add `api.telemetry.enabled: true` and `api.telemetry.interval: 24h`, with comments from `contracts/install-config.md`. Rewrite the comment block at lines 231-235 to say that an empty endpoint means the project default.
+  - `charts/gameplane/templates/api.yaml` (lines 323-329):
+    - render `--telemetry-disabled` when `enabled` is false (`hasKey` guard, default true)
+    - render `GAMEPLANE_TELEMETRY_BUNDLED=true` when auto-wiring the receiver
+    - render `--official-module-source={{ .Values.defaultModuleSource.name }}` when `defaultModuleSource.enabled`
+    - render `GAMEPLANE_TELEMETRY_INTERVAL` from `api.telemetry.interval`
+- [X] T050 [P] [US2] Add `helm template` assertions to `.github/workflows/ci.yaml` (next to lines 775-804):
+  - `enabled=false` renders `--telemetry-disabled`
+  - the receiver renders `--telemetry-endpoint=http://gameplane-telemetry-receiver…` and `GAMEPLANE_TELEMETRY_BUNDLED`
+  - a custom endpoint renders without `BUNDLED`
+  - defaults render no endpoint
+  - `charts/gameplane/testdata/upgrade-from-v0.2.0-beta.8-values.yaml` renders with `--reuse-values` semantics without failing
+- [X] T051 [US2] Add `GET /admin/telemetry` to `api/internal/handlers/telemetry.go`. It returns `destination`, `operatorDisabled` and `consent`, with `installId`, `preview` and `status` set to `null` until T057.
+- [X] T052 [US2] Design the Telemetry section of Admin Settings in `design.pen` through Pencil MCP, as one frame per destination state: `default`, `custom`, `bundled`, `disabled` (both switches disabled, with a "disabled by the operator" message) and `none`. Include, for use by US3 and US7:
+  - the basic switch and the extended switch
+  - the install-ID row with a "Reset ID" action and a confirm dialog
+  - the read-only preview JSON block
+  - the status line, in the never, ok, failed and "ID replaced on <date>" variants
+  - the new subtitle that names the install ID
+
+  Ask the user to save, run `design-export`, and commit.
+- [X] T053 [US2] Change `TelemetrySection` in `web/src/routes/AdminSettings.tsx` (lines 1545-1576) to query `Telemetry.get()` (new in `web/src/lib/api.ts`) and render the destination line and the `disabled` and `none` states from the T052 design. Keep the existing basic switch's accessible name "Enable telemetry" or "Disable telemetry".
+- [X] T054 [P] [US2] Tests:
+  - Create `web/src/routes/AdminSettings_telemetry.test.tsx` covering each destination state, and that the switches are disabled and saving is blocked when the operator has disabled telemetry.
+  - Extend `api/internal/handlers/telemetry_envtest_test.go` with every `destination.kind` and `operatorDisabled`.
+  - Add the MSW default for `GET /admin/telemetry`.
+- [X] T055 [US2] Add these subtests to `test/e2e/telemetry_e2e_test.go`:
+  - `custom_destination_receives_only`: deploy a second receiver Deployment and Service with a unique name in the release namespace, `helm upgrade --reuse-values --set api.telemetry.endpoint=<it>`, and assert that its counter rises and the bundled receiver's doesn't.
+  - `old_receiver_gets_basic`: the custom destination runs the beta.8 image `ghcr.io/valgulnecron/gameplane/telemetry-receiver:<beta.8 release tag>`. The scout confirms the tag format from `.github/workflows/release.yaml`. Assert that reports are accepted (FR-016, SC-013).
+  - `operator_disabled_sends_nothing`: this must be the **last** subtest. Run `--set api.telemetry.enabled=false` and assert zero new reports over 3 intervals, `PUT /admin/config/telemetry` returning 409, and the notice not pending.
+
+**Checkpoint**: US1 and US2 together cover the P1 install-side behaviour.
+
+---
+
+## Phase 5: User Story 3 — Admins see where data goes and exactly what is sent (P2)
+
+**Goal**: Admin Settings shows the destination, both tier switches, the install ID with reset, a live preview identical to the payload, and the delivery status.
+
+**Independent Test**: For each destination, with extended on and off, the preview matches what the receiver recorded. A reset shows a new ID. Turning extended off removes the ID.
+
+- [X] T056 [US3] Add `POST /admin/telemetry/install-id` to `api/internal/handlers/telemetry.go`. It rotates through `SetInstallID(newUUIDv4)`, returns `200 {"installId"}`, and returns `409` when extended is off.
+- [X] T057 [US3] Complete `GET /admin/telemetry`:
+  - `installId` (null when extended is off)
+  - `preview`, which is the `Collect` output and null when basic is off or the kind is `disabled` or `none`
+  - `status` with `lastAttemptAt`, `lastSuccessAt`, `lastOutcome` and `lastIdRotationAt`
+
+  Never include `signing_secret`.
+- [X] T058 [P] [US3] In `web/src/lib/config.ts`, add `extended: boolean` to `TelemetryCfg` (line 86). In `web/src/lib/api.ts`, give `Telemetry.get()` its full response type and add `Telemetry.resetInstallId()`. In `web/src/test/factories.ts`, change the default at line 305 to `telemetry: { sendMetrics: false, extended: false }`.
+- [X] T059 [US3] Finish `TelemetrySection` in `web/src/routes/AdminSettings.tsx` from the T052 design:
+  - the extended switch (accessible name "Enable extended telemetry" or "Disable extended telemetry"), disabled and shown off while basic is off; turning basic off also clears extended in the form draft (FR-019, spec Q7)
+  - the install-ID row with "Reset ID" and its confirm dialog
+  - the preview JSON block
+  - the status line with fixed phrases
+  - the subtitle and helper copy from FR-019, replacing "No server names, player counts, or identifying data."
+
+  Saves go through the existing `useSectionForm` and `PUT /admin/config/telemetry`.
+- [X] T060 [P] [US3] Rewrite the T002-approved cases in `web/src/routes/AdminSettings.test.tsx` and `AdminSettings_sections.test.tsx` for two switches, and extend `AdminSettings_telemetry.test.tsx` with these cases: extended disabled and shown off while basic is off, turning basic off clears extended in the saved body, the reset flow, preview rendering, and status phrases. In `api/internal/handlers/telemetry_envtest_test.go`, add a case where the preview equals the body the reporter POSTs to an `httptest` receiver at the same instant, ignoring `ext.sentAt` (SC-006).
+- [X] T061 [US3] Add these subtests to `test/e2e/telemetry_e2e_test.go`, before the US2 subtests:
+  - `extended_off_sends_basic_only`
+  - `reset_id_counts_as_new_install`, asserted through the receiver's views once US5 lands (until then, through the `gameplane_telemetry_extended_reports_total` metric on port 8081 with the Bearer token)
+  - `preview_matches_received`, comparing the preview's version, servers and templates with the receiver's recorded latest-day values
+
+**Checkpoint**: P1 and P2 install-side stories are complete.
+
+---
+
+## Phase 6: User Story 4 — Private dashboard of aggregate telemetry (P2)
+
+**Goal**: The receiver persists basic aggregates and serves a token-protected, server-rendered dashboard that reveals nothing to unauthenticated visitors.
+
+**Independent Test**: Feed synthetic basic reports across several days, sign in, and check every figure for 7, 30, 90 and 365 days. Every unauthenticated response is identical whether data exists or not. Rotating the token invalidates sessions without losing data.
+
+- [X] T062 [P] [US4] Create `telemetry-receiver/ratelimit.go` (research R6):
+  - a per-source accepted-reports-per-UTC-day counter, where `INGEST_SOURCE_DAILY_LIMIT=0` means unlimited
+  - a generic token bucket
+  - idle purge after 10 minutes and a reset at midnight
+  - `sourceIP(r *http.Request, trusted []netip.Prefix) netip.Addr`, which honours `X-Forwarded-For` only when the peer is inside `TRUSTED_PROXY_CIDRS`
+  - addresses are never written to the store or the logs
+- [X] T063 [US4] Move the ingest handler from `telemetry-receiver/main.go` to a new `telemetry-receiver/ingest.go`, keeping auth, the size cap and status codes. Add the per-source limit (`429` plus `gameplane_telemetry_rate_limited_total{route="ingest"}`). Write the basic aggregates (`daily_basic.reports`, `servers_sum` and `templates_sum`; `daily_version`; `daily_fleet` with values capped at 1001; `meta.reports_total`) in one transaction. Keep the existing Prometheus series; they are served from the dashboard listener (T067). The existing `main_test.go` ingest tests and `cardinality_test.go` (added upstream in #578) must pass unchanged; only the T002-approved `/metrics` changes apply. Those tests call `newServer(config{})` and then `s.ingest` and `s.reg` directly, 160 times from one source, so the zero-value `config` must mean an in-memory store and no per-source limit (the 20-per-day default is applied by `loadConfig`, not by the zero value), `newServer` keeps its signature, and the 128-label `versionLabel` budget stays.
+- [X] T064 [US4] In `telemetry-receiver/store.go`, add an hourly lifecycle job that is idempotent and resumes from `meta.rollover_through`. It deletes `daily_*` rows older than `RETENTION_DAYS`, and is started from `serve`. US5 adds the lapsed and expiry steps.
+- [X] T065 [US4] Create `telemetry-receiver/views.go` with `BuildViews(ctx, store, rangeDays int, now time.Time) (Views, error)` for the basic block in the `contracts/receiver-http.md` `/api/v1/views` shape:
+  - `reportsPerDay`
+  - versions as the top 10, then `Other`, then `Invalid`
+  - fleet bands and the exact median
+  - `latestDay` totals
+  - `empty`
+  - `asOf` = yesterday (UTC)
+
+  Invalid ranges fall back to 30.
+- [X] T066 [US4] Load the `dataviz` skill, then design the receiver pages in `telemetry-receiver/telemetry-dashboard.pen` (seeded with a copy of the HeroUI design, spec Q10) through Pencil MCP: the login page (also used for the refusal, with "Invalid credentials"), the overview's basic section with the range selector (7, 30, 90, 365), the empty state, and the "approximate, self-reported" labelling (FR-026). Ask the user to open that file, then save it, run `design-export` into `telemetry-receiver/design-export/`, and commit.
+- [X] T067 [US4] Create `telemetry-receiver/dashboard.go`, mounted on `DASHBOARD_LISTEN_ADDR` only when `DASHBOARD_TOKEN` is set. It implements these routes from `contracts/receiver-http.md`:
+  - `GET /login` and `POST /login`, comparing the token in constant time, with a login limit of 5 per minute per source and a same-origin `Origin`/`Referer` check
+  - `POST /logout`
+  - `GET /`
+  - `GET /api/v1/views`, accepting the cookie or `Authorization: Bearer`
+  - `GET /metrics`, accepting `Authorization: Bearer` only, serving the existing Prometheus registry; remove `/metrics` from the public `routes()` so that it answers `404` there (FR-030, spec Q8)
+  - `/static/*`
+
+  The cookie is `gp_telemetry_session` = `expiry || HMAC(K, expiry)`, where `K = HMAC-SHA256(DASHBOARD_TOKEN, "gameplane-telemetry-session")`, with `HttpOnly; Secure; SameSite=Strict; Max-Age=43200`. Unauthenticated HTML requests get `303` to `/login`, and unauthenticated JSON requests get `401 {"error":"unauthorized"}`. Every response carries the CSP, `nosniff`, `no-referrer` and `no-store` headers.
+- [X] T068 [US4] Create `telemetry-receiver/web/`, embedded with `go:embed`: `layout.html`, `login.html` and `overview.html` (basic section), `style.css`, and inline-SVG chart partials (columns for reports per day, horizontal bars for versions, a histogram for fleet sizes), following the T066 design (pink theme, dark first, light values from the same tokens). No inline `style` attributes or `<style>` blocks: the CSP sets `style-src 'self'`. Include the logo PNG from `website/design-assets/gameplane-icon.png` as a static asset. There is no JavaScript, and the range is chosen with links.
+- [X] T069 [US4] Change the chart for the dashboard, in `charts/gameplane/templates/telemetry-receiver.yaml`:
+  - `DASHBOARD_TOKEN` from `dashboard.tokenSecretRef` when it is named
+  - Service port `dashboard` (8081) when the token is named
+  - a NetworkPolicy rule for port 8081 admitting `dashboard.ingressFrom` peers; move the `serviceMonitors.scrapeNamespaceSelector` rule (`telemetry-receiver.yaml:107-116`) from port 8080 to 8081
+  - `INGEST_SOURCE_DAILY_LIMIT` and `TRUSTED_PROXY_CIDRS` env
+  - in `templates/servicemonitors.yaml`, render the receiver ServiceMonitor only when `dashboard.tokenSecretRef.name` is set, with `port: dashboard`, `path: /metrics` and `bearerTokenSecret: {name: <ref>, key: token}`
+  - create `templates/NOTES.txt`, which prints a warning when `serviceMonitors.enabled` and the bundled receiver are on but no dashboard token is named (no receiver ServiceMonitor is rendered)
+  - apply the T002-approved changes to the `ci.yaml` "observability scrape" step
+  - a `CHANGELOG.md` note under T094: receiver metrics now need the dashboard token
+- [X] T070 [P] [US4] Create `telemetry-receiver/views_test.go`, `dashboard_test.go` and `ratelimit_test.go`, covering:
+  - the exact figures for a synthetic multi-day dataset in every range
+  - the empty state
+  - the **refusal invariant**: every unauthenticated response body and status is byte-identical between an empty store and a populated one
+  - rotating the token invalidates an old cookie and keeps the data
+  - Origin checks
+  - the CSP header
+  - the login limit
+  - the ingest 429 response
+  - `X-Forwarded-For` honoured only from trusted peers
+  - `GET /metrics` returns `404` on the public listener, `401` on the dashboard listener without the Bearer token, and `200` with it
+- [X] T071 [US4] Add these subtests to `test/e2e/telemetry_e2e_test.go`:
+  - `dashboard_refuses_unauthenticated`, where `/` returns 303 to a login page that contains no digits from the data and `/api/v1/views` returns 401
+  - `dashboard_shows_reports`, which signs in with the Secret's token through `Env.PortForward` on 8081 (setting the `Cookie` header by hand, since the session cookie is `Secure` and the port-forward is plain HTTP). Views end at yesterday (UTC), so same-day reports from earlier subtests are not in them: it asserts that `/api/v1/views` returns `200` with `asOf` = yesterday and a well-formed body, and that `/metrics` (Bearer) counts the earlier reports. The exact figures are covered by `views_test.go`.
+
+**Checkpoint**: the provider keeps history and shows basic views privately.
+
+---
+
+## Phase 7: User Story 5 — Extended telemetry shows how Gameplane is used (P3)
+
+**Goal**: The receiver accepts extended reports, deduplicates them per install per day, and shows install, environment, game and feature views.
+
+**Independent Test**: A synthetic population (known IDs, environments, games and features over several weeks, with resets, upgrades and lapses) produces exact extended figures, and a 30-day unique count within 1% (SC-008).
+
+- [X] T072 [US5] In `telemetry-receiver/ingest.go`, accept `ext`, removing the T017 reject-on-ext in the `decodePayload` wrapper's caller. Keep the wrapper's tested behaviour for the basic path. With `id_hmac = HMAC-SHA256(pepper, installId)` (research R5):
+  - **Record absent**: insert the record, `new_installs++`, `active_installs++`.
+  - **`last_seen < today`**: update the record, `active_installs++`.
+  - **Same day**: a duplicate. Increment `daily_basic.duplicates` and `gameplane_telemetry_duplicates_total`, and write nothing else.
+  - **Non-duplicate**: write `daily_ext.ext_reports`, `daily_dim` (every dimension listed in data-model § Receiver) and `daily_game` (`installs++`, `servers += n`, with `custom` for the rest), and increment `gameplane_telemetry_extended_reports_total`.
+- [X] T073 [US5] Extend the lifecycle job in `telemetry-receiver/store.go`. For each finalised day D, set `lapsed_installs[D] = count(activity where last_seen = D − 30)`, then delete activity rows with `last_seen < today − ACTIVITY_EXPIRY_DAYS`.
+- [X] T074 [US5] In `telemetry-receiver/views.go`, add the `extended` block:
+  - coverage
+  - `installs.active1d`, `active7d` and `active30d`
+  - `newPerDay` and `lapsedPerDay`
+  - `versionsByInstall` with `windowDays = min(range, ACTIVITY_EXPIRY_DAYS)`
+  - shares for `env.*`, `games`, `features`, `tunnels`, `clusters`, `db` and `language`, weighted by install-days as in research R4
+
+  The block is `null` when the range has no extended reports.
+- [X] T075 [US5] In `telemetry-receiver/telemetry-dashboard.pen`, add the overview's extended section: install KPIs, new and lapsed trends, environment, game and feature breakdowns, and the coverage note. Load the `dataviz` skill for charts and categorical colours. Ask the user to open that file, then save it, run `design-export` into `telemetry-receiver/design-export/`, and commit.
+- [X] T076 [US5] Add `telemetry-receiver/web/overview_extended.html` and its chart partials, following the T075 design. When `extended` is null, render the "no reports in this range included extended data" message.
+- [X] T077 [P] [US5] Create `telemetry-receiver/population_test.go`, `ingest_ext_test.go` and `views_perf_test.go`:
+  - **Synthetic population** with a fake clock: resets, upgrades and lapses. Assert exact new, lapsed and active counts, and a 30-day unique count within 1% (SC-008).
+  - **Dedupe**: same ID, same day.
+  - **Schema check**: `activity` has exactly the columns `id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version` (FR-014, SC-012).
+  - **Performance**: seed 365 days at 10,000 reports per day as aggregates, and assert `BuildViews(365)` takes under 3 s (SC-010).
+- [X] T078 [US5] Add the subtest `extended_counted_once_per_day` to `test/e2e/telemetry_e2e_test.go`. Two reports from the same ID on the same day give `active1d = 1` and duplicates ≥ 1. After `extended_off_sends_basic_only` (T061), `ext_reports` doesn't increase.
+
+**Checkpoint**: extended data is collected and visible. Signature enforcement follows in US7.
+
+---
+
+## Phase 8: User Story 6 — Public summary API (P3)
+
+**Goal**: An opt-in, unauthenticated, cacheable endpoint exposes exactly five headline values.
+
+**Independent Test**: With the summary enabled, the response has exactly five keys, plus cache and CORS headers. When disabled it returns 404. Heavy polling doesn't slow ingest.
+
+- [X] T079 [US6] Create `telemetry-receiver/summary.go` with `GET /v1/summary` on the public listener, exactly as in `contracts/receiver-http.md`:
+  - `404` unless `PUBLIC_SUMMARY=true`
+  - a snapshot recomputed at most every 5 minutes
+  - `Cache-Control: public, max-age=3600`, `ETag` with 304 support, and `Access-Control-Allow-Origin: *`
+  - a token bucket of 60 per minute with burst 10 per source (`429` plus the `route="summary"` metric)
+
+  `reportsTotal` comes from `meta.reports_total`.
+- [X] T080 [P] [US6] In `charts/gameplane/templates/telemetry-receiver.yaml`, render `PUBLIC_SUMMARY` from `publicSummary.enabled` (`hasKey` guard, default false).
+- [X] T081 [P] [US6] Create `telemetry-receiver/summary_test.go`, covering exactly five keys (decode into a map and assert its length), 404 when disabled, the headers, ETag and 304, the limiter, and that `reportsTotal` is unchanged after a retention sweep.
+- [X] T082 [US6] Add the subtest `public_summary_five_keys` to `test/e2e/telemetry_e2e_test.go`, through `Env.PortForward` on 8080.
+
+---
+
+## Phase 9: User Story 7 — No one can report under another install's ID (P3)
+
+**Goal**: The receiver enforces signatures, the send-time window, first-use claims and replay rules before any write, and installs heal themselves after a claim conflict.
+
+**Independent Test**: Every forgery case is refused with no figure changed (SC-014). An install whose ID was claimed first by someone else rotates its ID and is accepted in the same attempt (SC-015).
+
+- [X] T083 [US7] In `telemetry-receiver/ingest.go`, add the checks in the order of the `contracts/report-schema.md` § Signature and claim table, **before** the limiter counts the report as accepted and before any write:
+  - `telemetryschema.Verify`, which fails with 403 `bad_signature`
+  - the window `[now−36h, now+1h]`, which fails with 403 `stale`
+  - the claim: insert with `key_fp` and `last_sent_at`, or compare `key_fp`, which fails with 409 `id_claimed`
+  - `sentAt > last_sent_at`, which fails with 403 `replay`
+
+  Responses use fixed JSON bodies, and `gameplane_telemetry_refused_total{reason}` is incremented. Basic-only reports skip all of these checks.
+- [X] T084 [US7] In `api/internal/telemetry/telemetry.go`, handle a 409 `id_claimed` inside the same attempt: replace the install ID (keeping `signing_secret`), set `last_id_rotation_at`, re-`Collect`, re-sign and re-POST once. A second 409 is recorded as `failed`. A 403 is recorded as `failed` with normal backoff, and never rotates.
+- [X] T085 [US7] In `TelemetrySection` in `web/src/routes/AdminSettings.tsx`, render the status variant "Install ID replaced on <date>: the destination reported it was in use by another key" when `status.lastIdRotationAt` is set, using the T052 design.
+- [X] T086 [P] [US7] Create `telemetry-receiver/ingest_sign_test.go`, covering the full forgery matrix: another key gives 409; an unsigned report, a one-byte tamper, a stale `sentAt`, a future `sentAt` and a byte-identical replay each give 403. In every case, assert that every table's row counts are unchanged (SC-014). Cover claim expiry together with re-claim (FR-038).
+- [X] T087 [P] [US7] Add cases to `api/internal/telemetry/telemetry_test.go`: a 409 then 204 sequence rotates the ID and sends with a new key in the same attempt (SC-015); 409 twice gives `failed`; 403 doesn't rotate. Add a web test case for the rotation status line in `web/src/routes/AdminSettings_telemetry.test.tsx`.
+- [X] T088 [US7] Create `test/e2e/telemetry_client_test.go`, a test-only helper that builds and signs reports with `telemetryschema` and a throwaway secret. Add these subtests to `TestTelemetryLifecycle`, before the US2 subtests:
+  - `forged_other_key_gets_409`
+  - `unsigned_tampered_replayed_get_403`, asserting that the views are unchanged
+  - `claimed_id_rotates_and_recovers`: reset the ID, claim the new ID with the helper's key, wait one interval, then assert that `lastIdRotationAt` is set, `installId` has changed, and `lastOutcome = "ok"`
+
+---
+
+## Phase 9b: Report cost and credential strength (FR-039–FR-041, Q11, Q12, OD-5)
+
+**Goal**: When a provider turns proof-of-work on, every report costs its sender work that follows the request rate, and the dashboard credential can't be short enough to guess.
+
+**Independent Test**: Against a receiver with `INGEST_POW=true`, the install's reports are accepted after solving challenges, reports without a valid solution get 428 and change nothing, and the difficulty follows the curve in research R21 (SC-016). A receiver with a 31-character `DASHBOARD_TOKEN` refuses to start (quickstart S10).
+
+- [X] T101 [P] [US7] Create `telemetryschema/pow.go` (stdlib only):
+  - `PoWHeader = "Gameplane-Telemetry-PoW"` and `MaxPoWBits = 26` (OD-5)
+  - `PoWOK(challenge string, nonce uint64, bits int) bool`: `SHA-256(challenge + ":" + decimal nonce)` starts with at least `bits` zero bits
+  - `SolvePoW(ctx, challenge string, bits int) (uint64, error)`: single goroutine, checks `ctx` periodically, and errors when `bits` is negative or above `MaxPoWBits`
+  - `FormatPoW(challenge string, nonce uint64) string` and `ParsePoW(header string) (string, uint64, error)`: split at the last `:`; the nonce is plain decimal; reject an empty or over-long challenge
+
+  Add `telemetryschema/pow_test.go` (coverage gate 90) and the PoW row to `telemetryschema/specs.md`.
+- [X] T102 [US7] In `telemetry-receiver`, create `pow.go` per research R21:
+  - challenge issue and MAC
+  - the adaptive difficulty (60-second issue window, `ceil(2·log2(r/T))`, peak decay of one bit per 5 minutes)
+  - verification order, and the used-challenge set with expiry, a 1,000,000-entry cap and `pow_busy`
+  - the `/v1/challenge` handler with its own per-source bucket (10 per minute, burst 5)
+  - `gameplane_telemetry_pow_bits`, `gameplane_telemetry_pow_challenges_total`, and the `pow_required`/`pow_invalid` refusal reasons
+
+  Parse `INGEST_POW*` in `main.go` with the OD-5 defaults, and exit at startup on out-of-range values. In `ingest.go`, check proof-of-work after `AUTH_TOKEN` and before the body is read, only when `INGEST_POW=true`.
+- [X] T103 [US7] In `telemetry-receiver/main.go`, exit at startup when `DASHBOARD_TOKEN` is set but shorter than 32 characters (FR-041), with an error naming the minimum. If an existing test starts the receiver with a shorter token, stop and ask for sign-off rather than changing it. Raise the E2E dashboard token constant to at least 32 characters.
+- [X] T104 [P] [US7] Create `telemetry-receiver/pow_test.go`, covering:
+  - the curve: at or below `T` a challenge carries `MIN`; at 10×, 100× and 1,000× it carries 7, 14 and 20 bits, capped at `MAX`; it decays one bit per 5 minutes (SC-016)
+  - a tampered MAC, a wrong difficulty, an expired challenge, a reused challenge and a missing header each give 428 with the right reason and change no table
+  - `pow_busy` at a test-lowered cap
+  - `/v1/challenge` returning 404 when off and 429 past the per-source bucket
+  - PoW checked before the body is read and after `AUTH_TOKEN`
+
+  Add config tests for the `INGEST_POW*` ranges and the token minimum.
+- [X] T105 [US7] In `api/internal/telemetry/telemetry.go`, per research R21:
+  - before each POST, request the challenge URL (the endpoint with its last path segment replaced by `v1/challenge`), solve with `telemetryschema.SolvePoW` under a deadline 30 seconds before `expiresAt`, and send `PoWHeader`
+  - send without the header on any non-200
+  - record `failed` (normal backoff) when `bits` exceeds `MaxPoWBits`
+  - on 428, get one new challenge and resend once in the same attempt; a second 428 is `failed`
+  - the 409 rotation resend (T084) fetches a fresh challenge
+- [X] T106 [P] [US7] Create `api/internal/telemetry/telemetry_pow_test.go`, covering:
+  - challenge URL derivation (with and without a path prefix)
+  - a 404 provider gets reports with no header
+  - a challenge provider gets a header that `telemetryschema.PoWOK` accepts
+  - 428 then 204 resends once with a new challenge; 428 twice is `failed`
+  - `bits = 27` is `failed` with no POST
+  - the 409 rotation resend carries a fresh challenge
+- [X] T107 [P] [US7] In the chart:
+  - add `api.telemetry.receiver.ingestPow.{enabled,targetPerMinute,minBits,maxBits}` (defaults `false`, `60`, `0`, `22`) to `values.yaml`, rendered as `INGEST_POW*` in `templates/telemetry-receiver.yaml` through `hasKey` guards (F-214)
+  - fail rendering when `targetPerMinute < 1`, or `maxBits < minBits` or `maxBits > 26`
+  - add `helm template` assertions for the default, an enabled render and each failure to `.github/workflows/ci.yaml`
+- [X] T108 [US7] Add the S10 subtests to `TestTelemetryLifecycle`, after `custom_destination_receives_only` and before `old_receiver_gets_basic`:
+  - `pow_receiver_accepts_solved_reports`: deploy a custom receiver with `INGEST_POW=true`, `INGEST_POW_MIN_BITS=8` and the dashboard token, point the API at it, then assert that `gameplane_telemetry_pow_challenges_total` rises and `lastOutcome = "ok"`
+  - `pow_refuses_missing_and_invalid`: a POST with no header gets 428 `pow_required`, a reused solution gets 428 `pow_invalid`, and the reports counter is unchanged
+
+  Extend the deploy helper with the extra env rather than duplicating it.
+- [X] T109 [P] [US7] Update the docs:
+  - `docs/telemetry-provider.md`: turning on `INGEST_POW` for the project's provider, tuning `INGEST_POW_TARGET_PER_MIN` from `/metrics`, reading `gameplane_telemetry_pow_bits`, and generating `DASHBOARD_TOKEN` from 32 random bytes with its 32-character minimum
+  - `docs/security.md` § Telemetry: proof-of-work, what it does and doesn't stop, and the credential minimum
+  - `CHANGELOG.md` [Unreleased]: the new receiver settings, and the token minimum as an upgrade note
+
+---
+
+## Phase 10: Polish and cross-cutting concerns
+
+- [X] T089 [P] Rewrite `telemetry-receiver/specs.md` and `telemetry-receiver/README.md` to match the shipped behaviour:
+  - the two listeners, the configuration table and the dashboard
+  - invariants: "stores daily aggregates and expiring activity records only, never raw reports or addresses", "basic or extended report, both strictly validated", and "extended reports must be signed"
+  - the dependency list (`modernc.org/sqlite` and `telemetryschema`)
+- [X] T090 [P] Update `api/specs.md`: the Telemetry responsibility line at line 21, the new flags in the line 81 list, the `/admin/telemetry*` routes in the admin route list near line 171, and the migration 015 tables. Update `web/specs.md` for the notice banner and the Telemetry section.
+- [X] T091 [P] Rewrite `docs/install.md` § Telemetry (from line 415) per FR-008:
+  - new installs share basic and extended data by default after the notice
+  - the exact fields of each tier, including the install ID and signing
+  - who is affected on upgrade, with a warning for installs whose basic toggle was already on
+  - `api.telemetry.enabled=false`, a custom endpoint, the bundled receiver, the dashboard token and the public summary
+
+  Update `docs/architecture.md:408-410`.
+- [X] T092 [P] Add to the `docs/security.md` threat model: the public unauthenticated ingest and summary, the pseudonymous install ID, signing (what it does and doesn't stop: fabricated installs), dashboard authentication and the refusal invariant, source-address handling, and the pepper.
+- [X] T093 [P] Create `docs/telemetry-provider.md`, a runbook for running the project's receiver (OD-2): deploying the image, TLS termination, keeping `:8081` private, the `DASHBOARD_TOKEN` and `ID_PEPPER` Secrets and their rotation, `PUBLIC_SUMMARY=true`, `TRUSTED_PROXY_CIDRS`, retention (`RETENTION_DAYS`, `ACTIVITY_EXPIRY_DAYS`), scraping `/metrics` with the token, and backing up and restoring `telemetry.db`. Link it from `docs/install.md` § Telemetry and `telemetry-receiver/README.md`. (The README link lands with T089.)
+- [X] T094 [P] Add a `CHANGELOG.md` entry with the FR-008 upgrade notes, breaking-ish behaviour notes ("empty `api.telemetry.endpoint` now means the project default"; "the receiver's `/metrics` moved to the dashboard port and needs the dashboard token"), and links to the docs.
+- [X] T095 Add a single statement-URL constant for the data-handling statement (OD-2), for example in the module `web/src` already uses for docs links. If there is none, create `web/src/lib/links.ts`. Use it in `TelemetryNotice.tsx` and `TelemetrySection`.
+- [ ] T096 Make the website changes in the `website/` submodule, following its own `CLAUDE.md` and PR flow (default branch `main`):
+  - a data-handling statement page (OD-2: maintainers operate it; 24-month aggregates, OD-3; 90-day activity expiry, OD-4; signing; no raw reports or IPs)
+  - updates to `src/content/docs/platform-settings-telemetry.mdx`, `helm-values-reference.mdx` and `air-gapped-installation.mdx` (set `api.telemetry.enabled=false`)
+
+  Then commit the submodule pointer bump in the root.
+- [X] T097 Run the `security-review` skill over the branch diff and fix the confirmed findings through a small fix workflow. (2026-10-08: no confirmed findings; one candidate rejected at confidence 4/10.)
+- [X] T098 Push the branch and open the PR **as a draft**, using the `ship-branch` skill. Add labels through REST (rule 14): `type: feature`, `area: api`, `area: web`, `area: chart`, `area: e2e`, `area: shared` and `area: specs`. The PR body states:
+  - the OD-1 merge gate
+  - the T002 sign-off list
+  - that `telemetry-default-gate` is expected to fail until OD-1 is ruled
+- [X] T099 Once OD-1 is ruled: set `DefaultEndpoint` in `api/internal/telemetry/destination.go`, mark OD-1 RULED in `specs/022-default-telemetry-dashboard/OPEN-DECISIONS.md`, update the destination copy in `design.pen` (with re-export) and the docs, confirm `telemetry-default-gate` passes, and mark the PR ready for review.
+  The docs written under T091-T094 name no receiver host. Once OD-1 is ruled, add the host to:
+  - `docs/install.md` § Telemetry: the sentence on an empty `api.telemetry.endpoint`, and the Upgrading admonition
+  - `docs/architecture.md`: the "API → telemetry-receiver" bullet
+  - `docs/telemetry-provider.md`: the intro paragraph and the "Public summary" paragraph
+  - `CHANGELOG.md` [Unreleased] > Upgrade Notes: the first three bullets
+  - the statement URL `https://valgulnecron.github.io/gameplane-website/telemetry/` (in `docs/install.md`, `docs/security.md`, `docs/telemetry-provider.md` and `CHANGELOG.md`) if the website gets a custom domain; it must match the T095 constant
+- [ ] T100 After merge: `git mv specs/022-default-telemetry-dashboard specs/done_022-default-telemetry-dashboard` and update in-repo references as a `docs:` commit (rule 16, constitution IV). Then delete the remote and local branch (rule 12).
+
+---
+
+## Dependencies and execution order
+
+### Phase dependencies
+
+- **Phase 1** has no prerequisites. T002 (sign-off) must be done before T039, T060 and T087 touch existing tests.
+- **Phase 2** depends on Phase 1 and blocks every story.
+  - Within it, the contract tasks T010–T016 come before T017, T026 and T030.
+  - T018 → T019 → T020 → T021 and T022.
+  - T023 → T024 and T025.
+- **US1 (Phase 3)** depends on Phase 2.
+- **US2 (Phase 4)** depends on Phase 2. T051 and T053 build on the US1 handler file and section. Its E2E subtests (T055) must stay last in `TestTelemetryLifecycle`.
+- **US3 (Phase 5)** depends on US2's T051–T053 (the same handler and section).
+- **US4 (Phase 6)** depends only on Phase 2, so it can run in parallel with US1–US3.
+- **US5 (Phase 7)** depends on US4: the ingest, store and views files.
+- **US6 (Phase 8)** depends on US4: aggregates and `meta.reports_total`.
+- **US7 (Phase 9)**:
+  - T083 and T086 depend on US5 (ext ingest)
+  - T084 and T087 depend on US1 (the reporter)
+  - T085 depends on US3
+  - T088 depends on T083 and T084
+- **Phase 9b**:
+  - T101 first
+  - T102–T104 depend on T101 and the US7 receiver checks (T083)
+  - T105 and T106 depend on T101 and T084
+  - T107 is independent
+  - T108 depends on T102, T105 and T107
+  - T109 depends on T102 and T103
+- **Polish (Phase 10)** depends on every story. T099 also waits for OD-1, and T100 waits for the merge.
+
+### Story order (graph)
+
+```text
+Setup → Foundational ─┬─ US1 → US2 → US3 ─────────────┐
+                      └─ US4 → US5 ─┬─ US6            ├─ US7 → 9b → Polish → (OD-1) → T099 → merge → T100
+                                    └─────────────────┘
+```
+
+### Within each story
+
+1. Design (`design.pen` or `telemetry-receiver/telemetry-dashboard.pen`, then export).
+2. Data and state.
+3. Server logic.
+4. HTTP and UI.
+5. Unit and envtest tests.
+6. E2E subtests.
+
+Commit after each logical unit.
+
+## Parallel opportunities
+
+- **Phase 1**: T005, T006, T007 and T008 together, after T004.
+- **Phase 2**:
+  - T010, T011, T013 and T014 in parallel, then T012, then T015 and T016.
+  - The API state chain (T018–T022) runs alongside the contract work.
+  - T027, T028 and T029 in parallel, after T023.
+  - The receiver store (T030–T033) runs alongside the API tasks.
+- **Across stories**: once Phase 2 is done, the **install-side track** (US1 → US2 → US3) and the **provider track** (US4 → US5 → US6) run as two parallel workflows.
+
+Parallel example for US4:
+
+```text
+Wave A (parallel): T062 ratelimit.go | T065 views.go | T066 telemetry-dashboard.pen frames
+Wave B:            T063 ingest.go (needs T062) | T067 dashboard.go
+Wave C:            T068 templates (needs T066, T067) | T069 chart
+Wave D (parallel): T070 unit tests | T071 E2E subtests
+```
+
+Parallel example for US1:
+
+```text
+Wave A (parallel): T034 reporter | T035 consent.go | T041 notice design
+Wave B (parallel): T037 config hook | T038 notice handlers | T042 web client
+Wave C:            T043 TelemetryNotice (needs T041, T042) | T036 wiring
+Wave D (parallel): T039 | T040 | T044 | T045 | T046, then T047 and T048
+```
+
+## Implementation strategy
+
+- **MVP (US1 + US2, both P1).** Default-on with the notice gate, the operator disable and redirect, and E2E against the bundled receiver. This alone fixes today's "telemetry never works" problem, including the restart bug.
+- **Then:**
+  - US3, for transparency
+  - US4, the provider's history and private dashboard, which can be built alongside US1–US3
+  - US5, US6 and US7 together, because signing (US7) must ship with extended acceptance (US5): an unsigned extended tier must not reach `master`
+- **Single PR.** Everything lands through one draft PR that stays unmergeable until OD-1 is ruled (plan.md, Merge gate). Run CI after each phase to catch regressions early.
diff --git a/telemetry-receiver/Dockerfile b/telemetry-receiver/Dockerfile
index f5a0e5037..601faa041 100644
--- a/telemetry-receiver/Dockerfile
+++ b/telemetry-receiver/Dockerfile
@@ -1,6 +1,9 @@
 FROM --platform=$BUILDPLATFORM golang:1.27-alpine AS build
 WORKDIR /src
 
+# telemetryschema is an in-repo module the receiver depends on via a local replace
+# (../telemetryschema); copy it first so `go mod download` and the build resolve it.
+COPY telemetryschema/ ./telemetryschema/
 COPY telemetry-receiver/go.mod telemetry-receiver/go.sum* ./telemetry-receiver/
 WORKDIR /src/telemetry-receiver
 RUN go mod download
diff --git a/telemetry-receiver/README.md b/telemetry-receiver/README.md
index 1e1d5999e..5f0d3a4f9 100644
--- a/telemetry-receiver/README.md
+++ b/telemetry-receiver/README.md
@@ -1,33 +1,92 @@
 # telemetry-receiver
 
-The **telemetry-receiver** [optional] is the collection endpoint for Gameplane's anonymous usage telemetry. The
-API's reporter (`api/internal/telemetry`) POSTs a tiny JSON payload once
-a day when the admin has enabled **Admin Settings → Telemetry → Send
-anonymous usage metrics**:
+The **telemetry-receiver** [optional] is the collection endpoint for Gameplane's
+usage telemetry. The API's reporter (`api/internal/telemetry`) POSTs a small
+JSON report once a day while the admin's telemetry switches are on. There
+are two tiers:
 
 ```json
 { "version": "0.3.0", "servers": 3, "templates": 7 }
 ```
 
-No names, namespaces, hostnames, or identifiers of any kind — the
-payload is the whole message. The receiver validates it, logs it as a
-structured line, and aggregates it into Prometheus metrics. Raw reports
-are never stored.
+The basic tier is that and nothing else. The extended tier adds an `ext`
+object: a random install ID, environment categories, game and feature
+counts, the install's public signing key and the send time, and the report
+is signed. See [`docs/install.md`](../docs/install.md#telemetry) for the
+exact fields and [`docs/security.md`](../docs/security.md#telemetry) for the
+threat model.
+
+The receiver validates each report strictly, then folds it into **daily
+aggregates and expiring activity records**. It never stores raw reports or
+source addresses. The result is shown on a private dashboard.
+
+You can run it three ways: the Helm chart's bundled receiver for your own
+install, a provider for other installs (see
+[`docs/telemetry-provider.md`](../docs/telemetry-provider.md)), or as the
+project's default receiver, which the maintainers operate.
+
+## Listeners
+
+| Listener | Variable (default) | Serves |
+|---|---|---|
+| Public | `LISTEN_ADDR` (`:8080`) | `POST /ingest`, `GET /v1/summary` (only when `PUBLIC_SUMMARY=true`), `GET /v1/challenge` (only when `INGEST_POW=true`), `GET /healthz` |
+| Dashboard | `DASHBOARD_LISTEN_ADDR` (`:8081`) | login page, dashboard, `/api/v1/views`, `/metrics`, static assets |
+
+The dashboard listener starts only when `DASHBOARD_TOKEN` is set. Keep it
+on a private network. The public listener answers `404` for `/metrics` and
+everything else.
 
 ## Behavior
 
 | Route | Method | Response |
 |---|---|---|
-| `/ingest` | POST | `204` accepted · `400` malformed, not a single JSON object, missing/unknown fields, negative counts · `401` bad or missing token (when `AUTH_TOKEN` is set) · `413` body over 16 KiB |
-| `/metrics` | GET | Prometheus text format |
+| `/ingest` | POST | `204` accepted (also a same-day duplicate) · `400` malformed or invalid · `401` bad or missing token (when `AUTH_TOKEN` is set) · `403` `bad_signature`, `stale` or `replay` · `409` `id_claimed` · `413` body over 16 KiB · `428` `pow_required` or `pow_invalid` · `429` per-source daily limit · `503` `pow_busy` |
+| `/v1/summary` | GET | `200` five headline counts · `404` unless `PUBLIC_SUMMARY=true` · `429` rate limit |
+| `/v1/challenge` | GET | `200` a proof-of-work challenge · `404` unless `INGEST_POW=true` · `429` rate limit |
 | `/healthz` | GET | `200 ok` |
 
-Metrics:
+Extended reports must carry a valid `Gameplane-Telemetry-Signature`. The
+receiver binds each install ID to the first key that uses it and refuses a
+different key, a send time outside `[now - 36h, now + 1h]` and a replayed
+send time. A refused report changes no stored data.
+
+### Proof-of-work
+
+With `INGEST_POW=true`, `/ingest` requires a header
+`Gameplane-Telemetry-PoW: <challenge>:<nonce>`, where `challenge` comes from
+`GET /v1/challenge` and `SHA-256(challenge ":" nonce)` starts with the
+challenge's number of zero bits. Challenges are single use and expire after
+15 minutes. The difficulty is 0 (or `INGEST_POW_MIN_BITS`) while at most
+`INGEST_POW_TARGET_PER_MIN` challenges a minute are issued, rises with the
+request rate up to `INGEST_POW_MAX_BITS`, and falls one bit every five
+minutes. Installs refuse challenges above 26 bits. Installs that find no
+challenge endpoint send without proof-of-work. It is off by default; a
+public provider turns it on. See
+[`docs/telemetry-provider.md`](../docs/telemetry-provider.md#proof-of-work-on-ingest).
+
+### Dashboard
+
+Server-rendered HTML with inline SVG charts, no JavaScript, for the last 7,
+30, 90 or 365 days (`?range=`). It needs the dashboard token: a browser
+logs in at `/login` and gets a 12-hour session cookie; scripts can send
+`Authorization: Bearer <token>` to `/api/v1/views`. `/metrics` accepts only
+the Bearer token. An unauthenticated request never sees a figure: the HTML
+redirects to `/login` and the JSON answers `401 {"error":"unauthorized"}`.
+
+### Metrics
+
+On the dashboard listener, Bearer token required:
 
 ```
 gameplane_telemetry_reports_total{version="0.3.0"}  # reports by reported version
-gameplane_telemetry_servers                                 # histogram of GameServer counts
-gameplane_telemetry_templates                               # histogram of GameTemplate counts
+gameplane_telemetry_servers                         # histogram of GameServer counts
+gameplane_telemetry_templates                       # histogram of GameTemplate counts
+gameplane_telemetry_duplicates_total                # same-day repeat extended reports
+gameplane_telemetry_extended_reports_total          # extended reports counted
+gameplane_telemetry_rate_limited_total{route}       # ingest, login, summary, challenge
+gameplane_telemetry_refused_total{reason}           # bad_signature, stale, id_claimed, replay, pow_required, pow_invalid, pow_busy
+gameplane_telemetry_pow_challenges_total            # proof-of-work challenges issued
+gameplane_telemetry_pow_bits                        # difficulty a challenge issued now would carry
 ```
 
 Version strings with an invalid character set or more than 32 characters
@@ -36,31 +95,59 @@ distinct valid versions per process. Further versions count under
 `version="other"`; previously retained versions keep their own counters.
 The two bucket names are reserved. This caps the metric at 130 series,
 including concurrent ingestion. Restarting the receiver resets the budget
-and all counters.
+and all counters; the durable figures live in the SQLite store.
 
 ## Configuration (environment variables)
 
 | Variable | Default | Meaning |
 |---|---|---|
-| `LISTEN_ADDR` | `:8080` | HTTP listen address |
-| `AUTH_TOKEN` | *(empty)* | When set, `/ingest` requires an exactly-matching `Authorization` header (compared constant-time). Use the same Secret on the API side (`GAMEPLANE_TELEMETRY_AUTH`). |
+| `LISTEN_ADDR` | `:8080` | Public listener. |
+| `DASHBOARD_LISTEN_ADDR` | `:8081` | Dashboard listener. |
+| `DASHBOARD_TOKEN` | *(empty)* | Dashboard credential, from a Secret. Empty means no dashboard listener. When set it must be at least 32 characters, or the receiver exits at startup; generate one from 32 random bytes. |
+| `AUTH_TOKEN` | *(empty)* | When set, `/ingest` requires an exactly-matching `Authorization` header (compared constant-time). Use the same Secret on the API side (`GAMEPLANE_TELEMETRY_AUTH`). Leave empty on a public provider. |
+| `DATA_DIR` | *(empty)* | SQLite directory (`telemetry.db`). Empty means in-memory, with a startup warning; everything is lost on restart. |
+| `PUBLIC_SUMMARY` | `false` | `true` enables `GET /v1/summary`. |
+| `TRUSTED_PROXY_CIDRS` | *(empty)* | Comma-separated CIDRs whose `X-Forwarded-For` is trusted for the source address. |
+| `INGEST_SOURCE_DAILY_LIMIT` | `20` | Accepted reports per source per UTC day. `0` means unlimited. |
+| `RETENTION_DAYS` | `730` | Daily aggregate retention. Minimum `365`. |
+| `ACTIVITY_EXPIRY_DAYS` | `90` | Activity record expiry. Minimum `31`. |
+| `ID_PEPPER` | *(empty)* | HMAC pepper for install IDs, from a Secret. Empty means one is generated and kept in the database. |
+| `INGEST_POW` | `false` | `true` requires proof-of-work on `/ingest` and serves `/v1/challenge`. |
+| `INGEST_POW_TARGET_PER_MIN` | `60` | Normal challenge rate; no work is required at or below it. Must be at least 1. |
+| `INGEST_POW_MIN_BITS` | `0` | Lowest difficulty issued. |
+| `INGEST_POW_MAX_BITS` | `22` | Highest difficulty issued. At least `INGEST_POW_MIN_BITS` and at most 26. |
+
+A value below a minimum, an unparsable number or a malformed
+`TRUSTED_PROXY_CIDRS` entry stops the receiver at start with an error.
+
+## Dependencies
+
+`github.com/prometheus/client_golang` (metrics), `modernc.org/sqlite` (pure
+Go SQLite, no cgo) and the in-repo `telemetryschema` module (the shared
+report contract, signing and proof-of-work helpers; standard library
+only). Nothing else.
 
 ## Run via the Helm chart
 
 Set `api.telemetry.receiver.enabled=true` and the chart deploys the
 receiver next to the API and points the API's `--telemetry-endpoint` at
 it automatically (unless `api.telemetry.endpoint` is set to an external
-URL). See `docs/install.md`.
+URL). Aggregates go to a PVC at `/data`; the receiver runs one replica.
+Set `api.telemetry.receiver.dashboard.tokenSecretRef.name` to enable the
+dashboard. Proof-of-work is `api.telemetry.receiver.ingestPow.*`. See
+`docs/install.md`.
 
 ## Run standalone
 
 ```sh
-docker run --rm -p 8080:8080 \
-  -e AUTH_TOKEN='Bearer …' \
+docker run --rm -p 8080:8080 -p 8081:8081 \
+  -v telemetry-data:/data -e DATA_DIR=/data \
+  -e DASHBOARD_TOKEN="$(openssl rand -base64 32)" \
   ghcr.io/gameplanepanel/gameplane/telemetry-receiver:edge
 ```
 
 Point any Gameplane install at it with
 `--telemetry-endpoint=https://telemetry.example.com/ingest` (or
 `GAMEPLANE_TELEMETRY_ENDPOINT`); the admin toggle still gates whether
-anything is sent.
+anything is sent. Terminate TLS in front of `:8080` and keep `:8081`
+private: see the [provider runbook](../docs/telemetry-provider.md).
diff --git a/telemetry-receiver/charts.go b/telemetry-receiver/charts.go
new file mode 100644
index 000000000..9e6e4378b
--- /dev/null
+++ b/telemetry-receiver/charts.go
@@ -0,0 +1,361 @@
+package main
+
+import (
+	"fmt"
+	"html/template"
+	"math"
+	"strconv"
+	"strings"
+)
+
+// Chart geometry (SVG user units; every chart scales to its container).
+const (
+	colChartW      = 960.0
+	colChartH      = 240.0
+	colPlotLeft    = 56.0
+	colPlotRight   = 952.0
+	colPlotTop     = 16.0
+	colPlotBottom  = 212.0
+	colSlotFill    = 0.62 // share of a slot the column itself covers
+	colTickCount   = 3    // gridlines above the baseline
+	colLabelOffset = 4.0
+
+	barChartW    = 600.0
+	barRowH      = 30.0
+	barLabelW    = 150.0
+	barMaxW      = 380.0
+	barValueX    = 592.0
+	barHeight    = 12.0
+	barTrackFrac = 1.0
+)
+
+// Series classes; style.css maps them to the chart tokens.
+const (
+	seriesPink = "s1"
+	seriesBlue = "s2"
+)
+
+// pageFuncs are the template functions of the dashboard pages.
+var pageFuncs = template.FuncMap{"num": groupInt, "pct": percentString}
+
+// tableRow is one row of the "View as table" alternative of a chart.
+type tableRow struct {
+	Label string
+	Value string
+}
+
+// tick is one y-axis gridline.
+type tick struct {
+	Y     float64
+	Label string
+}
+
+// xLabel is one x-axis label.
+type xLabel struct {
+	X     float64
+	Label string
+}
+
+// column is one vertical bar; Title becomes the SVG <title> tooltip.
+type column struct {
+	X, Y, W, H float64
+	Title      string
+}
+
+// columnChart is a vertical bar chart. It starts at zero, has a single
+// y-axis and labels only the latest value. When Table is true the template
+// renders Rows as an HTML table instead of the SVG.
+type columnChart struct {
+	Table     bool
+	Name      string
+	Class     string
+	Head1     string
+	Head2     string
+	W, H      float64
+	PlotLeft  float64
+	PlotRight float64
+	LabelX    float64 // x of the y-axis labels
+	BaseY     float64
+	AxisY     float64 // y of the x-axis labels
+	Ticks     []tick
+	Cols      []column
+	XLabels   []xLabel
+	LastText  string
+	LastX     float64
+	LastY     float64
+	Rows      []tableRow
+}
+
+// point is one input of a column chart.
+type point struct {
+	Label string
+	Value int64
+}
+
+// niceScale returns a tick step and the axis top (step * colTickCount) for a
+// maximum value: the smallest 1, 2 or 5 times a power of ten whose top covers
+// maxV.
+func niceScale(maxV int64) (step, top int64) {
+	if maxV < 1 {
+		return 1, colTickCount
+	}
+	for mag := int64(1); ; mag *= 10 {
+		for _, m := range []int64{1, 2, 5} {
+			if s := m * mag; s*colTickCount >= maxV {
+				return s, s * colTickCount
+			}
+		}
+	}
+}
+
+// groupInt formats n with thousands separators: 1284 becomes "1,284".
+func groupInt(n int64) string {
+	s := strconv.FormatInt(n, 10)
+	neg := strings.HasPrefix(s, "-")
+	s = strings.TrimPrefix(s, "-")
+	var b strings.Builder
+	for i, r := range s {
+		if i > 0 && (len(s)-i)%3 == 0 {
+			b.WriteByte(',')
+		}
+		b.WriteRune(r)
+	}
+	if neg {
+		return "-" + b.String()
+	}
+	return b.String()
+}
+
+// percentString formats a 0..1 share as a whole percent: 0.384 becomes "38%".
+func percentString(share float64) string {
+	return strconv.Itoa(int(math.Round(share*100))) + "%"
+}
+
+// newColumnChart lays out pts as columns. labelEvery spaces the x labels
+// (every n-th point, always including the first). valueHead is the header of
+// the table view's value column.
+func newColumnChart(name, class, labelHead, valueHead string, pts []point, labelEvery int) columnChart {
+	c := columnChart{
+		Name: name, Class: class, Head1: labelHead, Head2: valueHead,
+		W: colChartW, H: colChartH, PlotLeft: colPlotLeft, PlotRight: colPlotRight,
+		LabelX: colPlotLeft - 8, BaseY: colPlotBottom, AxisY: colChartH - 4,
+	}
+	var maxV int64
+	for _, p := range pts {
+		maxV = max(maxV, p.Value)
+		c.Rows = append(c.Rows, tableRow{Label: p.Label, Value: groupInt(p.Value)})
+	}
+	step, top := niceScale(maxV)
+	plotH := colPlotBottom - colPlotTop
+	for k := int64(0); k <= colTickCount; k++ {
+		c.Ticks = append(c.Ticks, tick{
+			Y:     round1(colPlotBottom - float64(k*step)/float64(top)*plotH),
+			Label: groupInt(k * step),
+		})
+	}
+	if len(pts) == 0 {
+		return c
+	}
+	if labelEvery < 1 {
+		labelEvery = 1
+	}
+	slot := (colPlotRight - colPlotLeft) / float64(len(pts))
+	w := slot * colSlotFill
+	for i, p := range pts {
+		h := float64(p.Value) / float64(top) * plotH
+		x := colPlotLeft + slot*float64(i) + (slot-w)/2
+		c.Cols = append(c.Cols, column{
+			X: round1(x), Y: round1(colPlotBottom - h), W: round1(w), H: round1(h),
+			Title: p.Label + ": " + groupInt(p.Value),
+		})
+		if i%labelEvery == 0 {
+			c.XLabels = append(c.XLabels, xLabel{X: round1(x + w/2), Label: p.Label})
+		}
+	}
+	last := c.Cols[len(c.Cols)-1]
+	c.LastText = groupInt(pts[len(pts)-1].Value)
+	c.LastX = round1(last.X + last.W/2)
+	c.LastY = round1(last.Y - colLabelOffset)
+	return c
+}
+
+// barItem is one input of a bar chart. Frac is the bar length as a share of
+// the full bar width (0..1); Value is the text shown at the right.
+type barItem struct {
+	Label string
+	Value string
+	Frac  float64
+}
+
+// barRow is one laid-out horizontal bar.
+type barRow struct {
+	Y, TextY float64
+	RectY    float64 // top of the bar rectangle
+	Bar      float64 // bar length
+	Label    string
+	Value    string
+	Title    string
+}
+
+// barChart is a horizontal bar chart. When Table is true the template renders
+// Rows as an HTML table instead of the SVG. Track draws a full-width track
+// behind each bar.
+type barChart struct {
+	Table  bool
+	Name   string
+	Class  string
+	Head1  string
+	Head2  string
+	Track  bool
+	W, H   float64
+	BarX   float64
+	TrackW float64
+	ValueX float64
+	BarY   float64 // offset of the bar inside its row
+	BarH   float64
+	Bars   []barRow
+	Rows   []tableRow
+}
+
+// newBarChart lays out items, top to bottom, with a value column on the right.
+func newBarChart(name, labelHead, valueHead string, track bool, items []barItem) barChart {
+	c := barChart{
+		Name: name, Class: seriesPink, Head1: labelHead, Head2: valueHead, Track: track,
+		W: barChartW, H: barRowH * float64(len(items)), BarX: barLabelW, TrackW: barMaxW,
+		ValueX: barValueX, BarY: (barRowH - barHeight) / 2, BarH: barHeight,
+	}
+	for i, it := range items {
+		frac := min(max(it.Frac, 0), barTrackFrac)
+		y := barRowH * float64(i)
+		c.Bars = append(c.Bars, barRow{
+			Y: y, TextY: y + barRowH/2 + 4, RectY: y + c.BarY, Bar: round1(frac * barMaxW),
+			Label: it.Label, Value: it.Value, Title: it.Label + ": " + it.Value,
+		})
+		c.Rows = append(c.Rows, tableRow{Label: it.Label, Value: it.Value})
+	}
+	return c
+}
+
+// countBars builds bar items from counts, scaled to the largest count.
+func countBars(labels []string, counts []int64) []barItem {
+	var maxV int64
+	for _, n := range counts {
+		maxV = max(maxV, n)
+	}
+	items := make([]barItem, len(labels))
+	for i := range labels {
+		frac := 0.0
+		if maxV > 0 {
+			frac = float64(counts[i]) / float64(maxV)
+		}
+		items[i] = barItem{Label: labels[i], Value: groupInt(counts[i]), Frac: frac}
+	}
+	return items
+}
+
+// fleetLabels returns the display label of every fleet band: "0", "1", "2",
+// "3–5", "6–10" and so on, ending with the open band.
+func fleetLabels(bands []FleetBand) []string {
+	out := make([]string, len(bands))
+	prev := -1
+	for i, b := range bands {
+		bound, err := strconv.Atoi(b.Le)
+		switch {
+		case err != nil:
+			out[i] = b.Le // the open "250+" band
+		case bound == prev+1:
+			out[i] = b.Le
+			prev = bound
+		default:
+			out[i] = fmt.Sprintf("%d–%d", prev+1, bound)
+			prev = bound
+		}
+	}
+	return out
+}
+
+// fleetChart draws one fleet distribution as a column histogram.
+func fleetChart(name, xHead string, d FleetDistribution, table bool) columnChart {
+	labels := fleetLabels(d.Bands)
+	pts := make([]point, len(d.Bands))
+	for i, b := range d.Bands {
+		pts[i] = point{Label: labels[i], Value: b.Reports}
+	}
+	c := newColumnChart(name, seriesPink, xHead, "Reports", pts, 1)
+	c.Table = table
+	return c
+}
+
+// rangeLink is one entry of the range selector.
+type rangeLink struct {
+	Days   int
+	Href   string
+	Active bool
+}
+
+// overviewPage is the data of the overview template: the view model plus
+// the pre-computed charts. Views is embedded so templates read .Range,
+// .AsOf, .Empty, .Basic and .Extended directly.
+type overviewPage struct {
+	Views
+	Table          bool
+	Ranges         []rangeLink
+	TableHref      string
+	ChartHref      string
+	ReportsTotal   int64
+	Since          string
+	LatestReports  int64
+	RangeReports   int64
+	MeanServers    float64
+	PerDay         columnChart
+	VersionsChart  barChart
+	ServersChart   columnChart
+	TemplatesChart columnChart
+	Ext            *extCharts
+}
+
+// newOverviewPage builds the overview data. total and since come from the
+// store's meta table (reports_total, collection_started).
+func newOverviewPage(v Views, table bool, total int64, since string) overviewPage {
+	p := overviewPage{Views: v, Table: table, ReportsTotal: total, Since: since}
+	for _, d := range validRanges {
+		p.Ranges = append(p.Ranges, rangeLink{Days: d, Href: "/?range=" + strconv.Itoa(d), Active: d == v.Range})
+	}
+	q := "/?range=" + strconv.Itoa(v.Range)
+	p.ChartHref = q
+	p.TableHref = q + "&view=table"
+	if v.Basic == nil {
+		return p
+	}
+	b := v.Basic
+	pts := make([]point, len(b.ReportsPerDay))
+	for i, d := range b.ReportsPerDay {
+		pts[i] = point{Label: d.Day, Value: d.Reports}
+		p.RangeReports += d.Reports
+	}
+	if n := len(b.ReportsPerDay); n > 0 {
+		p.LatestReports = b.ReportsPerDay[n-1].Reports
+	}
+	if p.LatestReports > 0 {
+		p.MeanServers = round1(float64(b.LatestDay.ServersTotal) / float64(p.LatestReports))
+	}
+	p.PerDay = newColumnChart("Reports per day", seriesPink, "Day", "Reports", pts, dayLabelEvery(len(pts)))
+	p.PerDay.Table = table
+
+	labels := make([]string, len(b.Versions))
+	counts := make([]int64, len(b.Versions))
+	for i, r := range b.Versions {
+		labels[i], counts[i] = r.Label, r.Reports
+	}
+	p.VersionsChart = newBarChart("Versions", "Version", "Reports", false, countBars(labels, counts))
+	p.VersionsChart.Table = table
+	p.ServersChart = fleetChart("Servers per install", "Game servers", b.Fleet.Servers, table)
+	p.TemplatesChart = fleetChart("Templates per install", "Templates", b.Fleet.Templates, table)
+	p.Ext = buildExtendedCharts(v, table)
+	return p
+}
+
+// dayLabelEvery spaces the x labels of a daily chart so that about five show.
+func dayLabelEvery(n int) int {
+	return max(1, n/5)
+}
diff --git a/telemetry-receiver/charts_ext.go b/telemetry-receiver/charts_ext.go
new file mode 100644
index 000000000..73288928d
--- /dev/null
+++ b/telemetry-receiver/charts_ext.go
@@ -0,0 +1,127 @@
+package main
+
+import "strings"
+
+// extCharts holds the charts of the extended section (T076).
+type extCharts struct {
+	CoverageW       float64 // fill width of the coverage track, 0..100
+	NewTotal        int64
+	LapsedTotal     int64
+	New             columnChart
+	Lapsed          columnChart
+	K8s             barChart
+	Distro          barChart
+	Arch            barChart
+	Nodes           barChart
+	Games           barChart
+	Features        barChart
+	VersionsInstall barChart
+	WindowDays      int
+}
+
+// featureLabels are the display names of the boolean features.
+var featureLabels = map[string]string{
+	"wakeOnConnect":   "Wake on connect",
+	"capture":         "Packet capture",
+	"backups":         "Backups",
+	"sso":             "SSO",
+	"auditForwarding": "Audit forwarding",
+}
+
+// buildExtendedCharts lays out the extended section from v.Extended. It
+// returns nil when the range has no extended reports.
+func buildExtendedCharts(v Views, table bool) *extCharts {
+	e := v.Extended
+	if e == nil {
+		return nil
+	}
+	c := &extCharts{CoverageW: round1(min(max(e.Coverage, 0), 1) * 100), WindowDays: e.VersionsByInstall.WindowDays}
+	newPts := make([]point, len(e.NewPerDay))
+	for i, d := range e.NewPerDay {
+		newPts[i] = point{Label: d.Day, Value: d.Count}
+		c.NewTotal += d.Count
+	}
+	lapsedPts := make([]point, len(e.LapsedPerDay))
+	for i, d := range e.LapsedPerDay {
+		lapsedPts[i] = point{Label: d.Day, Value: d.Count}
+		c.LapsedTotal += d.Count
+	}
+	every := dayLabelEvery(len(newPts))
+	c.New = newColumnChart("New installs per day", seriesPink, "Day", "Installs", newPts, every)
+	c.Lapsed = newColumnChart("Lapsed installs per day", seriesBlue, "Day", "Installs", lapsedPts, every)
+
+	c.K8s = shareChart("Kubernetes version", "Version", e.Env.K8s, false)
+	c.Distro = shareChart("Distribution", "Distribution", e.Env.Distro, false)
+	c.Arch = shareChart("Architecture", "Architecture", e.Env.Arch, false)
+	c.Nodes = shareChart("Cluster nodes", "Node band", e.Env.Nodes, false)
+
+	games := make([]ShareRow, len(e.Games))
+	for i, g := range e.Games {
+		label := g.Module
+		if label == gameCustom {
+			label = "Custom"
+		}
+		games[i] = ShareRow{Label: label, Share: g.InstallsShare}
+	}
+	c.Games = shareChart("Games", "Module", games, false)
+
+	var features []ShareRow
+	for _, f := range e.Features {
+		features = append(features, ShareRow{Label: featureLabels[f.Feature], Share: f.Share})
+	}
+	for _, r := range e.DB {
+		if r.Label == "postgres" {
+			features = append(features, ShareRow{Label: "PostgreSQL", Share: r.Share})
+		}
+	}
+	var multi float64
+	for _, r := range e.Clusters {
+		if r.Label != "1" && r.Label != "other" {
+			multi += r.Share
+		}
+	}
+	features = append(features, ShareRow{Label: "Multi-cluster", Share: multi})
+	for _, r := range e.Tunnels {
+		features = append(features, ShareRow{Label: "Tunnel: " + r.Label, Share: r.Share})
+	}
+	c.Features = shareChart("Feature adoption", "Feature", sortedShares(features, nil), true)
+
+	labels := make([]string, len(e.VersionsByInstall.Items))
+	counts := make([]int64, len(e.VersionsByInstall.Items))
+	for i, r := range e.VersionsByInstall.Items {
+		labels[i], counts[i] = r.Label, r.Installs
+	}
+	c.VersionsInstall = newBarChart("Versions by install", "Version", "Installs", false, countBars(labels, counts))
+	for _, bc := range []*barChart{&c.K8s, &c.Distro, &c.Arch, &c.Nodes, &c.Games, &c.Features, &c.VersionsInstall} {
+		bc.Table = table
+	}
+	c.New.Table, c.Lapsed.Table = table, table
+	return c
+}
+
+// shareChart draws shares as horizontal bars. With track set every bar is a
+// share of 100% and sits on a full-width track; otherwise bars are scaled to
+// the largest share.
+func shareChart(name, labelHead string, rows []ShareRow, track bool) barChart {
+	var maxShare float64
+	for _, r := range rows {
+		maxShare = max(maxShare, r.Share)
+	}
+	items := make([]barItem, len(rows))
+	for i, r := range rows {
+		frac := r.Share
+		if !track && maxShare > 0 {
+			frac = r.Share / maxShare
+		}
+		items[i] = barItem{Label: displayLabel(r.Label), Value: percentString(r.Share), Frac: frac}
+	}
+	return newBarChart(name, labelHead, "Share of install-days", track, items)
+}
+
+// displayLabel shows a node or cluster band with an en dash: "2-3" as "2–3".
+func displayLabel(label string) string {
+	if len(label) > 0 && strings.Count(label, "-") == 1 && label[0] >= '0' && label[0] <= '9' {
+		return strings.Replace(label, "-", "–", 1)
+	}
+	return label
+}
diff --git a/telemetry-receiver/charts_test.go b/telemetry-receiver/charts_test.go
new file mode 100644
index 000000000..0f882cbfe
--- /dev/null
+++ b/telemetry-receiver/charts_test.go
@@ -0,0 +1,222 @@
+package main
+
+import (
+	"net/http"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+func TestNiceScale(t *testing.T) {
+	for _, tc := range []struct{ max, step, top int64 }{
+		{-5, 1, 3}, {0, 1, 3}, {1, 1, 3}, {3, 1, 3}, {4, 2, 6}, {7, 5, 15}, {15, 5, 15}, {16, 10, 30},
+		{1284, 500, 1500}, {1500, 500, 1500}, {1501, 1000, 3000},
+	} {
+		if step, top := niceScale(tc.max); step != tc.step || top != tc.top {
+			t.Errorf("niceScale(%d) = %d, %d, want %d, %d", tc.max, step, top, tc.step, tc.top)
+		}
+	}
+}
+
+func TestGroupIntAndPercent(t *testing.T) {
+	for n, want := range map[int64]string{0: "0", 7: "7", 999: "999", 1000: "1,000", 1284: "1,284", 412055: "412,055", 1234567: "1,234,567", -4321: "-4,321"} {
+		if got := groupInt(n); got != want {
+			t.Errorf("groupInt(%d) = %q, want %q", n, got, want)
+		}
+	}
+	for share, want := range map[float64]string{0: "0%", 0.384: "38%", 0.5: "50%", 1: "100%", 0.004: "0%"} {
+		if got := percentString(share); got != want {
+			t.Errorf("percentString(%v) = %q, want %q", share, got, want)
+		}
+	}
+	if got := displayLabel("2-3"); got != "2–3" {
+		t.Errorf("displayLabel(2-3) = %q", got)
+	}
+	for _, same := range []string{"", "minecraft-java", "1.31", "11+", "a-b-c", "0.3.0-rc.1-x"} {
+		if got := displayLabel(same); got != same {
+			t.Errorf("displayLabel(%q) = %q, want it unchanged", same, got)
+		}
+	}
+}
+
+func TestFleetLabels(t *testing.T) {
+	d := FleetDistribution{Bands: fleetBands(nil)}
+	got := fleetLabels(d.Bands)
+	want := []string{"0", "1", "2", "3–5", "6–10", "11–25", "26–50", "51–100", "101–250", "250+"}
+	if strings.Join(got, ",") != strings.Join(want, ",") {
+		t.Fatalf("fleetLabels = %v, want %v", got, want)
+	}
+}
+
+func TestNewColumnChartLayout(t *testing.T) {
+	c := newColumnChart("Reports per day", seriesPink, "Day", "Reports",
+		[]point{{"2026-10-04", 0}, {"2026-10-05", 750}, {"2026-10-06", 1500}}, 2)
+	if len(c.Cols) != 3 || len(c.Ticks) != colTickCount+1 {
+		t.Fatalf("cols %d ticks %d", len(c.Cols), len(c.Ticks))
+	}
+	if c.Cols[0].H != 0 || c.Cols[2].H <= c.Cols[1].H || c.Cols[1].H <= 0 {
+		t.Errorf("column heights = %v %v %v, want 0 < h1 < h2", c.Cols[0].H, c.Cols[1].H, c.Cols[2].H)
+	}
+	if c.Cols[2].Y != round1(colPlotTop) {
+		t.Errorf("the tallest column starts at y=%v, want the top of the plot %v (scale 0..1500)", c.Cols[2].Y, colPlotTop)
+	}
+	if c.Ticks[0].Label != "0" || c.Ticks[3].Label != "1,500" {
+		t.Errorf("tick labels = %v", c.Ticks)
+	}
+	if len(c.XLabels) != 2 || c.XLabels[0].Label != "2026-10-04" || c.XLabels[1].Label != "2026-10-06" {
+		t.Errorf("x labels = %v, want every 2nd point", c.XLabels)
+	}
+	if c.LastText != "1,500" || c.Cols[2].Title != "2026-10-06: 1,500" {
+		t.Errorf("last label %q, title %q", c.LastText, c.Cols[2].Title)
+	}
+	if len(c.Rows) != 3 || c.Rows[1].Value != "750" {
+		t.Errorf("rows = %v", c.Rows)
+	}
+	if empty := newColumnChart("x", seriesPink, "a", "b", nil, 0); len(empty.Cols) != 0 || empty.LastText != "" {
+		t.Errorf("an empty chart has columns or a label: %+v", empty)
+	}
+}
+
+func TestNewBarChartLayoutAndClamping(t *testing.T) {
+	c := newBarChart("Versions", "Version", "Reports", true,
+		[]barItem{{"0.3.0", "812", 1}, {"dev", "4", 0.25}, {"bad", "x", 7}, {"neg", "y", -1}})
+	if len(c.Bars) != 4 || c.H != 4*barRowH || !c.Track {
+		t.Fatalf("bars %d height %v track %v", len(c.Bars), c.H, c.Track)
+	}
+	if c.Bars[0].Bar != barMaxW || c.Bars[1].Bar != round1(0.25*barMaxW) || c.Bars[2].Bar != barMaxW || c.Bars[3].Bar != 0 {
+		t.Errorf("bar lengths = %v %v %v %v", c.Bars[0].Bar, c.Bars[1].Bar, c.Bars[2].Bar, c.Bars[3].Bar)
+	}
+	if c.Bars[1].Title != "dev: 4" || c.Rows[1].Label != "dev" {
+		t.Errorf("title %q rows %v", c.Bars[1].Title, c.Rows)
+	}
+	items := countBars([]string{"a", "b", "z"}, []int64{10, 5, 0})
+	if items[0].Frac != 1 || items[1].Frac != 0.5 || items[2].Frac != 0 || items[0].Value != "10" {
+		t.Errorf("countBars = %+v", items)
+	}
+	if zero := countBars([]string{"a"}, []int64{0}); zero[0].Frac != 0 {
+		t.Errorf("countBars of zeros = %+v", zero)
+	}
+}
+
+func TestDayLabelEvery(t *testing.T) {
+	for n, want := range map[int]int{0: 1, 4: 1, 7: 1, 30: 6, 365: 73} {
+		if got := dayLabelEvery(n); got != want {
+			t.Errorf("dayLabelEvery(%d) = %d, want %d", n, got, want)
+		}
+	}
+}
+
+// seedExtendedDash stores one basic report and two extended reports on the
+// latest complete day (2026-10-06) of a dashboard test server.
+func seedExtendedDash(t *testing.T, s *server) {
+	t.Helper()
+	s.now = func() time.Time { return dashNow.Add(-24 * time.Hour) }
+	defer func() { s.now = func() time.Time { return dashNow } }()
+	if w := extSend(t, s, okReport, ""); w.Code != http.StatusNoContent {
+		t.Fatalf("basic report: %d", w.Code)
+	}
+	for n := 1; n <= 2; n++ {
+		body, sig := newExtInstall(n).report(t, s.now(), func(r *telemetryschema.Report) {
+			if n == 2 {
+				r.Ext.Env.Distro, r.Ext.Features.DB, r.Ext.Features.Clusters = "eks", "postgres", "2-3"
+			}
+		})
+		if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+			t.Fatalf("extended report %d: %d (%s)", n, w.Code, w.Body)
+		}
+	}
+}
+
+func TestOverviewRendersChartsTablesAndTheExtendedSection(t *testing.T) {
+	s, h := newDash(t, config{})
+	seedExtendedDash(t, s)
+	cookie := signIn(t, h)
+
+	page := doDash(t, h, dashReq{path: "/?range=7", cookie: cookie})
+	body := page.Body.String()
+	if page.Code != http.StatusOK {
+		t.Fatalf("status = %d", page.Code)
+	}
+	for _, want := range []string{
+		"<svg", "<title>", "Reports per day", "View as table", "Extended reports", "Kubernetes version",
+		"Feature adoption", "Games", "minecraft-java", "Coverage:", "k3s", "eks", `href="/?range=30"`,
+		`aria-current="page"`, "Sign out",
+	} {
+		if !strings.Contains(body, want) {
+			t.Errorf("overview lacks %q", want)
+		}
+	}
+	// The CSP is style-src 'self': no inline style and no script, anywhere.
+	for _, bad := range []string{"<style", " style=", "<script", "onclick=", "https://", "http://"} {
+		if strings.Contains(body, bad) {
+			t.Errorf("overview contains %q", bad)
+		}
+	}
+
+	table := doDash(t, h, dashReq{path: "/?range=7&view=table", cookie: cookie}).Body.String()
+	if !strings.Contains(table, `<table class="data">`) || strings.Contains(table, "<svg class=\"chart") ||
+		!strings.Contains(table, "View as chart") {
+		t.Errorf("table view: want tables, no chart svg and a way back")
+	}
+}
+
+func TestOverviewExplainsAMissingExtendedBlockAndTheEmptyState(t *testing.T) {
+	s, h := newDash(t, config{})
+	cookie := signIn(t, h)
+	if body := doDash(t, h, dashReq{path: "/", cookie: cookie}).Body.String(); !strings.Contains(body, "No reports yet") ||
+		strings.Contains(body, "<svg class=\"chart") || strings.Contains(body, "Basic reports") {
+		t.Errorf("empty overview: want the empty state and no chart")
+	}
+	seedDash(t, s) // basic reports only
+	body := doDash(t, h, dashReq{path: "/", cookie: cookie}).Body.String()
+	if !strings.Contains(body, "No reports in this range included extended data") {
+		t.Error("basic-only overview lacks the no-extended-data message")
+	}
+	if strings.Contains(body, "Kubernetes version") {
+		t.Error("basic-only overview renders an extended chart")
+	}
+}
+
+func TestLoginPageAndStaticLogo(t *testing.T) {
+	_, h := newDash(t, config{})
+	login := doDash(t, h, dashReq{path: "/login"}).Body.String()
+	for _, want := range []string{"Dashboard token", `name="token"`, "/static/gameplane-icon.png"} {
+		if !strings.Contains(login, want) {
+			t.Errorf("login page lacks %q", want)
+		}
+	}
+	if strings.Contains(login, "<style") || strings.Contains(login, " style=") {
+		t.Error("login page has inline styles")
+	}
+	logo := doDash(t, h, dashReq{path: "/static/gameplane-icon.png"})
+	if logo.Code != http.StatusOK || logo.Header().Get("Content-Type") != "image/png" || logo.Body.Len() < 1000 {
+		t.Errorf("logo: %d %q %d bytes", logo.Code, logo.Header().Get("Content-Type"), logo.Body.Len())
+	}
+}
+
+func TestBuildExtendedChartsNilWithoutExtendedViews(t *testing.T) {
+	if got := buildExtendedCharts(Views{}, false); got != nil {
+		t.Fatalf("buildExtendedCharts(no extended) = %+v, want nil", got)
+	}
+	e := &ExtendedViews{
+		Coverage: 1.5, Features: []FeatureShare{{"backups", 0.5}},
+		Clusters: []ShareRow{{"1", 0.5}, {"4-10", 0.25}, {"other", 0.25}}, DB: []ShareRow{{"postgres", 0.5}},
+		Games: []GameShare{{"custom", 0.25, 1}}, Tunnels: []ShareRow{{"frp", 0.1}},
+	}
+	c := buildExtendedCharts(Views{Extended: e}, true)
+	if c == nil || c.CoverageW != 100 {
+		t.Fatalf("coverage width = %+v, want clamped to 100", c)
+	}
+	rows := map[string]string{}
+	for _, r := range c.Features.Rows {
+		rows[r.Label] = r.Value
+	}
+	if rows["PostgreSQL"] != "50%" || rows["Multi-cluster"] != "25%" || rows["Tunnel: frp"] != "10%" || rows["Backups"] != "50%" {
+		t.Errorf("feature rows = %v", rows)
+	}
+	if !c.Features.Table || c.Games.Rows[0].Label != "Custom" {
+		t.Errorf("table flag %v, games %v", c.Features.Table, c.Games.Rows)
+	}
+}
diff --git a/telemetry-receiver/dashboard.go b/telemetry-receiver/dashboard.go
new file mode 100644
index 000000000..ac85362b8
--- /dev/null
+++ b/telemetry-receiver/dashboard.go
@@ -0,0 +1,367 @@
+package main
+
+import (
+	"bytes"
+	"context"
+	"crypto/hmac"
+	"crypto/sha256"
+	"crypto/subtle"
+	"embed"
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"html/template"
+	"io"
+	"io/fs"
+	"log/slog"
+	"mime"
+	"net/http"
+	"net/url"
+	"path"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/prometheus/client_golang/prometheus/promhttp"
+)
+
+// webFS holds the dashboard templates and static files (no JavaScript).
+// The templates and static files are described in specs 022 T068 and T076.
+//
+//go:embed web
+var webFS embed.FS
+
+const (
+	sessionCookie = "gp_telemetry_session"
+	// sessionMaxAge is the cookie lifetime in seconds (12 hours).
+	sessionMaxAge = 43200
+	sessionTTL    = sessionMaxAge * time.Second
+	// sessionKeyLabel is the HMAC message that derives the cookie key K from
+	// DASHBOARD_TOKEN (research R8).
+	sessionKeyLabel = "gameplane-telemetry-session"
+	// loginPerMinute is the login attempt limit per source (research R6).
+	loginPerMinute = 5
+	// maxLoginBody bounds the login form body.
+	maxLoginBody = 4 << 10
+
+	// dashboardCSP is sent on every dashboard response.
+	dashboardCSP = "default-src 'none'; style-src 'self'; img-src 'self' data:; form-action 'self'; frame-ancestors 'none'; base-uri 'none'"
+
+	// loginFailedMessage is the only login failure message; it never says
+	// whether the token was close, missing or unconfigured.
+	loginFailedMessage = "Invalid credentials"
+	unauthorizedBody   = `{"error":"unauthorized"}`
+)
+
+// staticFile holds a preloaded static file with its content type.
+type staticFile struct {
+	ctype string
+	data  []byte
+}
+
+// dashboard serves the private dashboard listener.
+type dashboard struct {
+	s           *server
+	token       string
+	key         []byte
+	pages       map[string]*template.Template
+	staticFiles map[string]staticFile
+	logins      *bucketLimiter
+}
+
+// dashboardRoutes returns the handler of the dashboard listener. It is only
+// mounted when DASHBOARD_TOKEN is set; with an empty token every
+// authenticated route refuses, so it can never be open.
+func (s *server) dashboardRoutes() http.Handler {
+	static, err := fs.Sub(webFS, "web/static")
+	if err != nil {
+		panic(fmt.Sprintf("telemetry-receiver: embedded static files: %v", err))
+	}
+	staticFiles := make(map[string]staticFile)
+	entries, err := fs.ReadDir(static, ".")
+	if err != nil {
+		panic(fmt.Sprintf("telemetry-receiver: read static files: %v", err))
+	}
+	for _, entry := range entries {
+		if !entry.IsDir() {
+			name := entry.Name()
+			data, err := fs.ReadFile(static, name)
+			if err != nil {
+				panic(fmt.Sprintf("telemetry-receiver: read static file %s: %v", name, err))
+			}
+			ctype := mime.TypeByExtension(path.Ext(name))
+			if ctype == "" {
+				ctype = "application/octet-stream"
+			}
+			staticFiles[name] = staticFile{ctype: ctype, data: data}
+		}
+	}
+	d := &dashboard{
+		s:           s,
+		token:       s.cfg.dashboardToken,
+		key:         sessionKey(s.cfg.dashboardToken),
+		pages:       make(map[string]*template.Template),
+		staticFiles: staticFiles,
+		logins:      newBucketLimiter(loginPerMinute, loginPerMinute),
+	}
+	pageFiles := map[string][]string{
+		"login":    {"web/layout.html", "web/login.html"},
+		"overview": {"web/layout.html", "web/charts.html", "web/overview.html", "web/overview_extended.html"},
+	}
+	for page, files := range pageFiles {
+		d.pages[page] = template.Must(template.New(page).Funcs(pageFuncs).ParseFS(webFS, files...))
+	}
+	mux := http.NewServeMux()
+	mux.HandleFunc("GET /login", d.loginPage)
+	mux.HandleFunc("POST /login", d.loginSubmit)
+	mux.HandleFunc("POST /logout", d.logout)
+	mux.HandleFunc("GET /{$}", d.overview)
+	mux.HandleFunc("GET /api/v1/views", d.apiViews)
+	mux.HandleFunc("GET /metrics", d.metrics)
+	mux.HandleFunc("GET /static/{file}", d.serveStatic)
+	return secureHeaders(mux)
+}
+
+// secureHeaders sets the headers every dashboard response carries, including
+// the mux's own 404 and 405 answers.
+func secureHeaders(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		h := w.Header()
+		h.Set("Content-Security-Policy", dashboardCSP)
+		h.Set("X-Content-Type-Options", "nosniff")
+		h.Set("Referrer-Policy", "no-referrer")
+		h.Set("Cache-Control", "no-store")
+		next.ServeHTTP(w, r)
+	})
+}
+
+// sessionKey derives K = HMAC-SHA256(token, "gameplane-telemetry-session").
+func sessionKey(token string) []byte {
+	m := hmac.New(sha256.New, []byte(token))
+	m.Write([]byte(sessionKeyLabel))
+	return m.Sum(nil)
+}
+
+// tokenEqual compares in constant time. Hashing first makes the comparison
+// independent of the lengths.
+func tokenEqual(a, b string) bool {
+	ha, hb := sha256.Sum256([]byte(a)), sha256.Sum256([]byte(b))
+	return subtle.ConstantTimeCompare(ha[:], hb[:]) == 1
+}
+
+// sessionMAC returns HMAC-SHA256(K, expiry).
+func (d *dashboard) sessionMAC(expiry string) []byte {
+	m := hmac.New(sha256.New, d.key)
+	m.Write([]byte(expiry))
+	return m.Sum(nil)
+}
+
+// newSessionValue returns the cookie value expiry || HMAC(K, expiry), written
+// as "<expiry in Unix seconds>.<base64url of the MAC>".
+func (d *dashboard) newSessionValue(now time.Time) string {
+	expiry := strconv.FormatInt(now.Add(sessionTTL).Unix(), 10)
+	return expiry + "." + base64.RawURLEncoding.EncodeToString(d.sessionMAC(expiry))
+}
+
+// sessionValid reports whether the request carries an unexpired cookie
+// signed with the key derived from the current token.
+func (d *dashboard) sessionValid(r *http.Request) bool {
+	if d.token == "" {
+		return false
+	}
+	c, err := r.Cookie(sessionCookie)
+	if err != nil {
+		return false
+	}
+	expiry, encoded, found := strings.Cut(c.Value, ".")
+	if !found {
+		return false
+	}
+	mac, err := base64.RawURLEncoding.DecodeString(encoded)
+	if err != nil || !hmac.Equal(mac, d.sessionMAC(expiry)) {
+		return false
+	}
+	until, err := strconv.ParseInt(expiry, 10, 64)
+	return err == nil && until > d.s.now().Unix()
+}
+
+// bearerValid reports whether the request has Authorization: Bearer <token>.
+func (d *dashboard) bearerValid(r *http.Request) bool {
+	if d.token == "" {
+		return false
+	}
+	got, ok := strings.CutPrefix(r.Header.Get("Authorization"), "Bearer ")
+	return ok && tokenEqual(got, d.token)
+}
+
+// sameOrigin requires an Origin (or, failing that, Referer) whose host is the
+// request's own Host. A missing or "null" origin is refused.
+func sameOrigin(r *http.Request) bool {
+	raw := r.Header.Get("Origin")
+	if raw == "" {
+		raw = r.Header.Get("Referer")
+	}
+	if raw == "" {
+		return false
+	}
+	u, err := url.Parse(raw)
+	if err != nil || u.Host == "" {
+		return false
+	}
+	return strings.EqualFold(u.Host, r.Host)
+}
+
+func (d *dashboard) render(w http.ResponseWriter, status int, page string, data any) {
+	var buf bytes.Buffer
+	if err := d.pages[page].ExecuteTemplate(&buf, "layout", data); err != nil {
+		slog.Error("render dashboard page", "page", page, "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	w.WriteHeader(status)
+	_, _ = w.Write(buf.Bytes())
+}
+
+func writeUnauthorized(w http.ResponseWriter) {
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(http.StatusUnauthorized)
+	_, _ = w.Write([]byte(unauthorizedBody))
+}
+
+type loginData struct{ Error string }
+
+func (d *dashboard) loginPage(w http.ResponseWriter, _ *http.Request) {
+	d.render(w, http.StatusOK, "login", loginData{})
+}
+
+func (d *dashboard) loginSubmit(w http.ResponseWriter, r *http.Request) {
+	if !d.logins.allow(sourceIP(r, d.s.cfg.trustedProxyCIDRs), d.s.now()) {
+		d.s.rateLimited.WithLabelValues(routeLogin).Inc()
+		w.Header().Set("Retry-After", "60")
+		http.Error(w, "too many attempts", http.StatusTooManyRequests)
+		return
+	}
+	if !sameOrigin(r) {
+		http.Error(w, "forbidden", http.StatusForbidden)
+		return
+	}
+	r.Body = http.MaxBytesReader(w, r.Body, maxLoginBody)
+	if err := r.ParseForm(); err != nil || d.token == "" || !tokenEqual(r.PostForm.Get("token"), d.token) {
+		d.render(w, http.StatusUnauthorized, "login", loginData{Error: loginFailedMessage})
+		return
+	}
+	now := d.s.now()
+	http.SetCookie(w, &http.Cookie{
+		Name:     sessionCookie,
+		Value:    d.newSessionValue(now),
+		Path:     "/",
+		MaxAge:   sessionMaxAge,
+		HttpOnly: true,
+		Secure:   true,
+		SameSite: http.SameSiteStrictMode,
+	})
+	http.Redirect(w, r, "/", http.StatusSeeOther)
+}
+
+func (d *dashboard) logout(w http.ResponseWriter, r *http.Request) {
+	if !sameOrigin(r) {
+		http.Error(w, "forbidden", http.StatusForbidden)
+		return
+	}
+	http.SetCookie(w, &http.Cookie{
+		Name:     sessionCookie,
+		Path:     "/",
+		MaxAge:   -1,
+		HttpOnly: true,
+		Secure:   true,
+		SameSite: http.SameSiteStrictMode,
+	})
+	http.Redirect(w, r, "/login", http.StatusSeeOther)
+}
+
+// rangeParam reads ?range=; invalid or missing values become defaultRange.
+func rangeParam(r *http.Request) int {
+	n, err := strconv.Atoi(r.URL.Query().Get("range"))
+	if err != nil {
+		return defaultRange
+	}
+	return normalizeRange(n)
+}
+
+func (d *dashboard) overview(w http.ResponseWriter, r *http.Request) {
+	if !d.sessionValid(r) {
+		http.Redirect(w, r, "/login", http.StatusSeeOther)
+		return
+	}
+	v, err := BuildViews(r.Context(), d.s.store, rangeParam(r), d.s.now())
+	if err != nil {
+		slog.Error("build views", "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+	total, since := d.collectionMeta(r.Context())
+	d.render(w, http.StatusOK, "overview", newOverviewPage(v, r.URL.Query().Get("view") == "table", total, since))
+}
+
+// collectionMeta reads the running report total and the collection start day
+// for the overview tiles. A missing or unreadable value shows as 0 or empty
+// rather than failing the page.
+func (d *dashboard) collectionMeta(ctx context.Context) (int64, string) {
+	var total int64
+	if raw, ok, err := d.s.store.metaGet(ctx, metaReportsTotal); err == nil && ok {
+		total, _ = strconv.ParseInt(raw, 10, 64)
+	}
+	var since string
+	if raw, ok, err := d.s.store.metaGet(ctx, metaCollectionStart); err == nil && ok {
+		if t, err := time.Parse(time.RFC3339, raw); err == nil {
+			since = dayString(t)
+		}
+	}
+	return total, since
+}
+
+func (d *dashboard) apiViews(w http.ResponseWriter, r *http.Request) {
+	if !d.sessionValid(r) && !d.bearerValid(r) {
+		writeUnauthorized(w)
+		return
+	}
+	v, err := BuildViews(r.Context(), d.s.store, rangeParam(r), d.s.now())
+	if err != nil {
+		slog.Error("build views", "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+	body, err := json.Marshal(v)
+	if err != nil {
+		slog.Error("encode views", "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+	w.Header().Set("Content-Type", "application/json")
+	_, _ = w.Write(body)
+}
+
+// metrics serves the Prometheus registry to a Bearer token only; the session
+// cookie is not accepted here (FR-030, spec Q8).
+func (d *dashboard) metrics(w http.ResponseWriter, r *http.Request) {
+	if !d.bearerValid(r) {
+		writeUnauthorized(w)
+		return
+	}
+	promhttp.HandlerFor(d.s.reg, promhttp.HandlerOpts{}).ServeHTTP(w, r)
+}
+
+// serveStatic serves one preloaded embedded static file with io.Copy rather
+// than http.ServeContent or http.ServeFileFS, whose error responses drop the
+// Cache-Control header that every dashboard response must carry.
+func (d *dashboard) serveStatic(w http.ResponseWriter, r *http.Request) {
+	name := r.PathValue("file")
+	f, ok := d.staticFiles[name]
+	if !ok {
+		http.NotFound(w, r)
+		return
+	}
+	w.Header().Set("Content-Type", f.ctype)
+	_, _ = io.Copy(w, bytes.NewReader(f.data))
+}
diff --git a/telemetry-receiver/dashboard_test.go b/telemetry-receiver/dashboard_test.go
new file mode 100644
index 000000000..3ea62484b
--- /dev/null
+++ b/telemetry-receiver/dashboard_test.go
@@ -0,0 +1,569 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"net/netip"
+	"net/url"
+	"strings"
+	"testing"
+	"time"
+)
+
+const (
+	dashToken  = "dash-token-for-tests"
+	dashOrigin = "http://example.com" // httptest.NewRequest uses Host example.com
+)
+
+var dashNow = time.Date(2026, 10, 7, 12, 0, 0, 0, time.UTC)
+
+// newDash builds a receiver with a fixed clock and returns it with its
+// dashboard handler.
+func newDash(t *testing.T, cfg config) (*server, http.Handler) {
+	t.Helper()
+	if cfg.dashboardToken == "" {
+		cfg.dashboardToken = dashToken
+	}
+	s := newServer(cfg)
+	s.now = func() time.Time { return dashNow }
+	return s, s.dashboardRoutes()
+}
+
+// seedDash stores reports on the latest complete day (2026-10-06) and the
+// day before it.
+func seedDash(t *testing.T, s *server) {
+	t.Helper()
+	for _, r := range []struct {
+		day, version string
+		servers, tpl int
+	}{
+		{"2026-10-06", "1.0.0", 7, 21},
+		{"2026-10-06", "1.0.0", 3, 4},
+		{"2026-10-05", "2.3.4", 99, 98},
+	} {
+		if err := s.store.recordBasic(context.Background(), r.day, r.version, r.servers, r.tpl); err != nil {
+			t.Fatalf("seed: %v", err)
+		}
+	}
+}
+
+type dashReq struct {
+	method, path string
+	header       map[string]string
+	body         string
+	cookie       *http.Cookie
+	remote       string
+}
+
+func doDash(t *testing.T, h http.Handler, r dashReq) *httptest.ResponseRecorder {
+	t.Helper()
+	if r.method == "" {
+		r.method = http.MethodGet
+	}
+	req := httptest.NewRequestWithContext(t.Context(), r.method, r.path, strings.NewReader(r.body))
+	if r.body != "" {
+		req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	}
+	for k, v := range r.header {
+		req.Header.Set(k, v)
+	}
+	if r.cookie != nil {
+		req.AddCookie(r.cookie)
+	}
+	if r.remote != "" {
+		req.RemoteAddr = r.remote
+	}
+	rec := httptest.NewRecorder()
+	h.ServeHTTP(rec, req)
+	return rec
+}
+
+func loginForm(token string) string { return url.Values{"token": {token}}.Encode() }
+
+func sameOriginHeader() map[string]string { return map[string]string{"Origin": dashOrigin} }
+
+func bearer(token string) map[string]string {
+	return map[string]string{"Authorization": "Bearer " + token}
+}
+
+// signIn logs in with the right token and returns the session cookie.
+func signIn(t *testing.T, h http.Handler) *http.Cookie {
+	t.Helper()
+	rec := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm(dashToken)})
+	if rec.Code != http.StatusSeeOther || rec.Header().Get("Location") != "/" {
+		t.Fatalf("login: %d Location %q, want 303 /", rec.Code, rec.Header().Get("Location"))
+	}
+	for _, c := range rec.Result().Cookies() {
+		if c.Name == sessionCookie {
+			return &http.Cookie{Name: c.Name, Value: c.Value}
+		}
+	}
+	t.Fatal("login set no session cookie")
+	return nil
+}
+
+func TestDashboardRefusalInvariant(t *testing.T) {
+	_, empty := newDash(t, config{})
+	populated, full := newDash(t, config{})
+	seedDash(t, populated)
+	wrongOrigin := map[string]string{"Origin": "http://evil.example"}
+	cases := []struct {
+		name string
+		req  dashReq
+		code int
+	}{
+		{"login page", dashReq{path: "/login"}, http.StatusOK},
+		{"wrong token", dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm("nope")}, http.StatusUnauthorized},
+		{"login without origin", dashReq{method: http.MethodPost, path: "/login", body: loginForm("nope")}, http.StatusForbidden},
+		{"login cross origin", dashReq{method: http.MethodPost, path: "/login", header: wrongOrigin, body: loginForm(dashToken)}, http.StatusForbidden},
+		{"overview", dashReq{path: "/"}, http.StatusSeeOther},
+		{"overview range 7", dashReq{path: "/?range=7"}, http.StatusSeeOther},
+		{"overview bad range", dashReq{path: "/?range=bogus"}, http.StatusSeeOther},
+		{"views", dashReq{path: "/api/v1/views"}, http.StatusUnauthorized},
+		{"views wrong bearer", dashReq{path: "/api/v1/views", header: bearer("nope")}, http.StatusUnauthorized},
+		{"views forged cookie", dashReq{path: "/api/v1/views", cookie: &http.Cookie{Name: sessionCookie, Value: "AAAA"}}, http.StatusUnauthorized},
+		{"metrics", dashReq{path: "/metrics"}, http.StatusUnauthorized},
+		{"metrics wrong bearer", dashReq{path: "/metrics", header: bearer("nope")}, http.StatusUnauthorized},
+		{"logout", dashReq{method: http.MethodPost, path: "/logout", header: sameOriginHeader()}, http.StatusSeeOther},
+		{"unknown path", dashReq{path: "/admin"}, http.StatusNotFound},
+		{"unknown static file", dashReq{path: "/static/missing.css"}, http.StatusNotFound},
+		{"template is not static", dashReq{path: "/static/overview.html"}, http.StatusNotFound},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			a, b := doDash(t, empty, tc.req), doDash(t, full, tc.req)
+			if a.Code != tc.code || b.Code != tc.code {
+				t.Fatalf("status = %d (empty) / %d (populated), want %d", a.Code, b.Code, tc.code)
+			}
+			if a.Body.String() != b.Body.String() {
+				t.Fatalf("body differs between an empty and a populated store:\nempty:     %q\npopulated: %q", a.Body, b.Body)
+			}
+			for _, h := range []string{"Content-Type", "Location", "Set-Cookie", "Content-Security-Policy", "Cache-Control"} {
+				if a.Header().Get(h) != b.Header().Get(h) {
+					t.Fatalf("header %s differs: %q vs %q", h, a.Header().Get(h), b.Header().Get(h))
+				}
+			}
+			// Nothing from the data may appear in a refusal.
+			for _, leak := range []string{"2026-10-0", "1.0.0", "2.3.4", "99"} {
+				if strings.Contains(b.Body.String(), leak) {
+					t.Fatalf("refusal body contains %q: %q", leak, b.Body)
+				}
+			}
+		})
+	}
+}
+
+func TestDashboardLoginFlow(t *testing.T) {
+	_, h := newDash(t, config{})
+
+	page := doDash(t, h, dashReq{path: "/login"})
+	if page.Code != http.StatusOK || !strings.Contains(page.Body.String(), `name="token"`) ||
+		!strings.Contains(page.Header().Get("Content-Type"), "text/html") {
+		t.Fatalf("login page: %d %q", page.Code, page.Body)
+	}
+	if strings.Contains(page.Body.String(), loginFailedMessage) {
+		t.Fatal("a fresh login page must not show the error")
+	}
+
+	bad := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm("wrong")})
+	if bad.Code != http.StatusUnauthorized || !strings.Contains(bad.Body.String(), loginFailedMessage) {
+		t.Fatalf("wrong token: %d %q", bad.Code, bad.Body)
+	}
+	if len(bad.Result().Cookies()) != 0 {
+		t.Fatal("a failed login must not set a cookie")
+	}
+
+	ok := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm(dashToken)})
+	if ok.Code != http.StatusSeeOther || ok.Header().Get("Location") != "/" {
+		t.Fatalf("login: %d Location %q", ok.Code, ok.Header().Get("Location"))
+	}
+	cookies := ok.Result().Cookies()
+	if len(cookies) != 1 {
+		t.Fatalf("cookies = %d, want 1", len(cookies))
+	}
+	c := cookies[0]
+	if c.Name != "gp_telemetry_session" || !c.HttpOnly || !c.Secure || c.SameSite != http.SameSiteStrictMode ||
+		c.Path != "/" || c.MaxAge != 43200 || c.Value == "" {
+		t.Fatalf("cookie attributes = %+v", c)
+	}
+
+	session := &http.Cookie{Name: c.Name, Value: c.Value}
+	home := doDash(t, h, dashReq{path: "/", cookie: session})
+	if home.Code != http.StatusOK || !strings.Contains(home.Header().Get("Content-Type"), "text/html") || home.Body.Len() == 0 {
+		t.Fatalf("overview with session: %d", home.Code)
+	}
+	redirect := doDash(t, h, dashReq{path: "/"})
+	if redirect.Code != http.StatusSeeOther || redirect.Header().Get("Location") != "/login" {
+		t.Fatalf("overview without session: %d Location %q", redirect.Code, redirect.Header().Get("Location"))
+	}
+
+	out := doDash(t, h, dashReq{method: http.MethodPost, path: "/logout", header: sameOriginHeader(), cookie: session})
+	if out.Code != http.StatusSeeOther || out.Header().Get("Location") != "/login" {
+		t.Fatalf("logout: %d Location %q", out.Code, out.Header().Get("Location"))
+	}
+	cleared := out.Result().Cookies()
+	if len(cleared) != 1 || cleared[0].Name != sessionCookie || cleared[0].MaxAge >= 0 {
+		t.Fatalf("logout must clear the cookie, got %+v", cleared)
+	}
+}
+
+func TestDashboardOriginChecks(t *testing.T) {
+	cases := []struct {
+		name   string
+		header map[string]string
+		want   int
+	}{
+		{"no origin or referer", nil, http.StatusForbidden},
+		{"foreign origin", map[string]string{"Origin": "http://evil.example"}, http.StatusForbidden},
+		{"null origin", map[string]string{"Origin": "null"}, http.StatusForbidden},
+		{"unparsable origin", map[string]string{"Origin": "::bad"}, http.StatusForbidden},
+		{"foreign referer", map[string]string{"Referer": "http://evil.example/login"}, http.StatusForbidden},
+		{"same-origin origin", map[string]string{"Origin": dashOrigin}, http.StatusSeeOther},
+		{"same-origin referer", map[string]string{"Referer": dashOrigin + "/login"}, http.StatusSeeOther},
+		{"origin wins over referer", map[string]string{"Origin": "http://evil.example", "Referer": dashOrigin + "/login"}, http.StatusForbidden},
+	}
+	for _, tc := range cases {
+		t.Run("login "+tc.name, func(t *testing.T) {
+			_, h := newDash(t, config{}) // a fresh login limiter per case
+			rec := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: tc.header, body: loginForm(dashToken)})
+			if rec.Code != tc.want {
+				t.Fatalf("status = %d, want %d", rec.Code, tc.want)
+			}
+		})
+		t.Run("logout "+tc.name, func(t *testing.T) {
+			_, h := newDash(t, config{})
+			rec := doDash(t, h, dashReq{method: http.MethodPost, path: "/logout", header: tc.header})
+			if rec.Code != tc.want {
+				t.Fatalf("status = %d, want %d", rec.Code, tc.want)
+			}
+		})
+	}
+}
+
+func TestDashboardRotatingTheTokenInvalidatesSessionsAndKeepsData(t *testing.T) {
+	s, h := newDash(t, config{dashboardToken: "old-token"})
+	seedDash(t, s)
+	login := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm("old-token")})
+	if login.Code != http.StatusSeeOther {
+		t.Fatalf("login with the old token: %d", login.Code)
+	}
+	old := &http.Cookie{Name: sessionCookie, Value: login.Result().Cookies()[0].Value}
+	if rec := doDash(t, h, dashReq{path: "/api/v1/views", cookie: old}); rec.Code != http.StatusOK {
+		t.Fatalf("old cookie before rotation: %d", rec.Code)
+	}
+
+	// Same store, new token.
+	rotated := newServerWithStore(config{dashboardToken: "new-token"}, s.store)
+	rotated.now = s.now
+	h2 := rotated.dashboardRoutes()
+	if rec := doDash(t, h2, dashReq{path: "/", cookie: old}); rec.Code != http.StatusSeeOther {
+		t.Fatalf("old cookie after rotation, overview: %d, want 303", rec.Code)
+	}
+	if rec := doDash(t, h2, dashReq{path: "/api/v1/views", cookie: old}); rec.Code != http.StatusUnauthorized {
+		t.Fatalf("old cookie after rotation, views: %d, want 401", rec.Code)
+	}
+	if rec := doDash(t, h2, dashReq{path: "/api/v1/views", header: bearer("old-token")}); rec.Code != http.StatusUnauthorized {
+		t.Fatalf("old bearer after rotation: %d, want 401", rec.Code)
+	}
+	rec := doDash(t, h2, dashReq{path: "/api/v1/views", header: bearer("new-token")})
+	if rec.Code != http.StatusOK {
+		t.Fatalf("new bearer: %d", rec.Code)
+	}
+	var v Views
+	if err := json.Unmarshal(rec.Body.Bytes(), &v); err != nil {
+		t.Fatal(err)
+	}
+	if v.Empty || v.Basic == nil || v.Basic.LatestDay.ServersTotal != 10 {
+		t.Fatalf("data lost after rotation: %+v", v)
+	}
+}
+func TestDashboardRejectsExpiredTamperedAndMalformedCookies(t *testing.T) {
+	s, h := newDash(t, config{})
+	now := dashNow
+	s.now = func() time.Time { return now }
+	good := signIn(t, h)
+	if rec := doDash(t, h, dashReq{path: "/", cookie: good}); rec.Code != http.StatusOK {
+		t.Fatalf("fresh cookie: %d", rec.Code)
+	}
+	// Change a character inside the MAC, away from its last character, which
+	// carries base64 padding bits that do not affect the decoded bytes.
+	flip := func(v string) string {
+		i := len(v) - 5
+		c := "A"
+		if v[i:i+1] == "A" {
+			c = "B"
+		}
+		return v[:i] + c + v[i+1:]
+	}
+	for name, value := range map[string]string{
+		"tampered mac":    flip(good.Value),
+		"tampered expiry": "9" + good.Value,
+		"no separator":    strings.ReplaceAll(good.Value, ".", ""),
+		"not base64":      "!!!",
+		"too short":       "AAAA",
+		"empty":           "",
+		"truncated":       good.Value[:len(good.Value)-4],
+		"extra trailing":  good.Value + "AAAA",
+	} {
+		rec := doDash(t, h, dashReq{path: "/", cookie: &http.Cookie{Name: sessionCookie, Value: value}})
+		if rec.Code != http.StatusSeeOther {
+			t.Errorf("%s: status = %d, want 303", name, rec.Code)
+		}
+	}
+	now = now.Add(12*time.Hour - time.Second)
+	if rec := doDash(t, h, dashReq{path: "/", cookie: good}); rec.Code != http.StatusOK {
+		t.Fatalf("cookie just before expiry: %d", rec.Code)
+	}
+	now = now.Add(time.Second)
+	if rec := doDash(t, h, dashReq{path: "/", cookie: good}); rec.Code != http.StatusSeeOther {
+		t.Fatalf("expired cookie: %d, want 303", rec.Code)
+	}
+}
+
+func TestDashboardSecurityHeadersOnEveryResponse(t *testing.T) {
+	_, h := newDash(t, config{})
+	session := signIn(t, h)
+	want := map[string]string{
+		"Content-Security-Policy": "default-src 'none'; style-src 'self'; img-src 'self' data:; form-action 'self'; frame-ancestors 'none'; base-uri 'none'",
+		"X-Content-Type-Options":  "nosniff",
+		"Referrer-Policy":         "no-referrer",
+		"Cache-Control":           "no-store",
+	}
+	for name, r := range map[string]dashReq{
+		"login page":       {path: "/login"},
+		"failed login":     {method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm("x")},
+		"forbidden login":  {method: http.MethodPost, path: "/login"},
+		"redirect":         {path: "/"},
+		"overview":         {path: "/", cookie: session},
+		"views":            {path: "/api/v1/views", cookie: session},
+		"unauthorized":     {path: "/api/v1/views"},
+		"metrics":          {path: "/metrics", header: bearer(dashToken)},
+		"metrics refused":  {path: "/metrics"},
+		"method":           {method: http.MethodPost, path: "/metrics"},
+		"static":           {path: "/static/style.css"},
+		"static missing":   {path: "/static/nope.css"},
+		"static traversal": {path: "/static/..%2Flogin.html"},
+		"not found":        {path: "/nope"},
+		"logout":           {method: http.MethodPost, path: "/logout", header: sameOriginHeader()},
+	} {
+		rec := doDash(t, h, r)
+		for k, v := range want {
+			if got := rec.Header().Get(k); got != v {
+				t.Errorf("%s: header %s = %q, want %q", name, k, got, v)
+			}
+		}
+	}
+}
+
+func TestDashboardLoginLimitIsFivePerMinutePerSource(t *testing.T) {
+	s, h := newDash(t, config{})
+	attempt := func(remote string) *httptest.ResponseRecorder {
+		return doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm("wrong"), remote: remote})
+	}
+	for i := range 5 {
+		if rec := attempt("192.0.2.1:1000"); rec.Code != http.StatusUnauthorized {
+			t.Fatalf("attempt %d: status = %d, want 401", i+1, rec.Code)
+		}
+	}
+	limited := attempt("192.0.2.1:2000")
+	if limited.Code != http.StatusTooManyRequests || limited.Header().Get("Retry-After") == "" {
+		t.Fatalf("sixth attempt: %d Retry-After %q, want 429 with Retry-After", limited.Code, limited.Header().Get("Retry-After"))
+	}
+	// The limit also stops a correct token.
+	right := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm(dashToken), remote: "192.0.2.1:3000"})
+	if right.Code != http.StatusTooManyRequests {
+		t.Fatalf("correct token while limited: %d, want 429", right.Code)
+	}
+	if rec := attempt("192.0.2.9:1000"); rec.Code != http.StatusUnauthorized {
+		t.Fatalf("another source: %d, want 401", rec.Code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "login"); got != 2 {
+		t.Fatalf("rate_limited_total{route=login} = %v, want 2", got)
+	}
+}
+
+func TestDashboardLoginLimitUsesForwardedSourceFromTrustedProxy(t *testing.T) {
+	_, h := newDash(t, config{trustedProxyCIDRs: []netip.Prefix{netip.MustParsePrefix("10.0.0.0/8")}})
+	attempt := func(xff string) int {
+		return doDash(t, h, dashReq{
+			method: http.MethodPost, path: "/login", remote: "10.0.0.1:1000",
+			header: map[string]string{"Origin": dashOrigin, "X-Forwarded-For": xff}, body: loginForm("wrong"),
+		}).Code
+	}
+	for range 5 {
+		if code := attempt("203.0.113.5"); code != http.StatusUnauthorized {
+			t.Fatalf("status = %d, want 401", code)
+		}
+	}
+	if code := attempt("203.0.113.5"); code != http.StatusTooManyRequests {
+		t.Fatalf("sixth attempt from the same client: %d, want 429", code)
+	}
+	if code := attempt("203.0.113.6"); code != http.StatusUnauthorized {
+		t.Fatalf("another client behind the proxy: %d, want 401", code)
+	}
+}
+
+func TestDashboardViewsEndpoint(t *testing.T) {
+	s, h := newDash(t, config{})
+	seedDash(t, s)
+	session := signIn(t, h)
+
+	for name, r := range map[string]dashReq{
+		"bearer": {path: "/api/v1/views", header: bearer(dashToken)},
+		"cookie": {path: "/api/v1/views", cookie: session},
+	} {
+		rec := doDash(t, h, r)
+		if rec.Code != http.StatusOK || rec.Header().Get("Content-Type") != "application/json" {
+			t.Fatalf("%s: %d %q", name, rec.Code, rec.Header().Get("Content-Type"))
+		}
+		var v Views
+		if err := json.Unmarshal(rec.Body.Bytes(), &v); err != nil {
+			t.Fatalf("%s: %v", name, err)
+		}
+		if v.Range != 30 || v.AsOf != "2026-10-06" || v.Empty || v.Basic == nil {
+			t.Fatalf("%s: %+v", name, v)
+		}
+		if want := (LatestDayRow{ServersTotal: 10, TemplatesTotal: 25}); v.Basic.LatestDay != want {
+			t.Fatalf("%s: latestDay = %+v, want %+v", name, v.Basic.LatestDay, want)
+		}
+		var raw map[string]json.RawMessage
+		if err := json.Unmarshal(rec.Body.Bytes(), &raw); err != nil {
+			t.Fatal(err)
+		}
+		if string(raw["extended"]) != "null" {
+			t.Fatalf("%s: extended = %s, want null", name, raw["extended"])
+		}
+		var basic map[string]json.RawMessage
+		if err := json.Unmarshal(raw["basic"], &basic); err != nil {
+			t.Fatal(err)
+		}
+		for _, key := range []string{"reportsPerDay", "versions", "fleet", "latestDay"} {
+			if _, ok := basic[key]; !ok {
+				t.Errorf("%s: basic has no %q key", name, key)
+			}
+		}
+	}
+
+	ranges := map[string]int{"": 30, "?range=7": 7, "?range=90": 90, "?range=365": 365, "?range=abc": 30, "?range=8": 30}
+	for query, want := range ranges {
+		rec := doDash(t, h, dashReq{path: "/api/v1/views" + query, header: bearer(dashToken)})
+		var v Views
+		if err := json.Unmarshal(rec.Body.Bytes(), &v); err != nil || v.Range != want {
+			t.Errorf("query %q: range = %d (err %v), want %d", query, v.Range, err, want)
+		}
+	}
+
+	refused := doDash(t, h, dashReq{path: "/api/v1/views"})
+	if refused.Code != http.StatusUnauthorized || refused.Body.String() != `{"error":"unauthorized"}` ||
+		refused.Header().Get("Content-Type") != "application/json" {
+		t.Fatalf("unauthenticated views: %d %q", refused.Code, refused.Body)
+	}
+}
+
+func TestDashboardViewsEmptyStore(t *testing.T) {
+	_, h := newDash(t, config{})
+	rec := doDash(t, h, dashReq{path: "/api/v1/views?range=7", header: bearer(dashToken)})
+	var raw map[string]json.RawMessage
+	if err := json.Unmarshal(rec.Body.Bytes(), &raw); err != nil {
+		t.Fatal(err)
+	}
+	if string(raw["empty"]) != "true" || string(raw["basic"]) != "null" || string(raw["extended"]) != "null" {
+		t.Fatalf("empty store view = %s", rec.Body)
+	}
+	session := signIn(t, h)
+	if page := doDash(t, h, dashReq{path: "/", cookie: session}); page.Code != http.StatusOK {
+		t.Fatalf("overview on an empty store: %d", page.Code)
+	}
+}
+
+func TestDashboardMetricsAcceptsBearerOnly(t *testing.T) {
+	s, h := newDash(t, config{})
+	session := signIn(t, h)
+	s.reports.WithLabelValues("1.0.0").Inc()
+	for name, r := range map[string]dashReq{
+		"no credentials": {path: "/metrics"},
+		"wrong bearer":   {path: "/metrics", header: bearer("nope")},
+		"basic scheme":   {path: "/metrics", header: map[string]string{"Authorization": "Basic " + dashToken}},
+		"bare token":     {path: "/metrics", header: map[string]string{"Authorization": dashToken}},
+		"cookie only":    {path: "/metrics", cookie: session},
+	} {
+		rec := doDash(t, h, r)
+		if rec.Code != http.StatusUnauthorized || rec.Body.String() != `{"error":"unauthorized"}` {
+			t.Errorf("%s: %d %q, want 401 unauthorized", name, rec.Code, rec.Body)
+		}
+	}
+	rec := doDash(t, h, dashReq{path: "/metrics", header: bearer(dashToken)})
+	if rec.Code != http.StatusOK {
+		t.Fatalf("with the bearer token: %d", rec.Code)
+	}
+	for _, series := range []string{
+		`gameplane_telemetry_reports_total{version="1.0.0"} 1`,
+		`gameplane_telemetry_rate_limited_total{route="ingest"} 0`,
+		`gameplane_telemetry_rate_limited_total{route="login"} 0`,
+	} {
+		if !strings.Contains(rec.Body.String(), series) {
+			t.Errorf("metrics lack %s", series)
+		}
+	}
+	if post := doDash(t, h, dashReq{method: http.MethodPost, path: "/metrics", header: bearer(dashToken)}); post.Code != http.StatusMethodNotAllowed {
+		t.Fatalf("POST /metrics: %d, want 405", post.Code)
+	}
+}
+
+func TestDashboardWithoutTokenFailsClosed(t *testing.T) {
+	s := newServer(config{}) // no dashboard token
+	s.now = func() time.Time { return dashNow }
+	h := s.dashboardRoutes()
+	for name, r := range map[string]dashReq{
+		"empty bearer":         {path: "/api/v1/views", header: map[string]string{"Authorization": "Bearer "}},
+		"empty metrics bearer": {path: "/metrics", header: map[string]string{"Authorization": "Bearer "}},
+	} {
+		if rec := doDash(t, h, r); rec.Code != http.StatusUnauthorized {
+			t.Errorf("%s: %d, want 401", name, rec.Code)
+		}
+	}
+	login := doDash(t, h, dashReq{method: http.MethodPost, path: "/login", header: sameOriginHeader(), body: loginForm("")})
+	if login.Code != http.StatusUnauthorized || len(login.Result().Cookies()) != 0 {
+		t.Fatalf("login with an empty token: %d, want 401 and no cookie", login.Code)
+	}
+	// A cookie signed with the key of the empty token is refused.
+	forger := &dashboard{s: s, key: sessionKey("")}
+	forged := &http.Cookie{Name: sessionCookie, Value: forger.newSessionValue(dashNow)}
+	if rec := doDash(t, h, dashReq{path: "/", cookie: forged}); rec.Code != http.StatusSeeOther {
+		t.Fatalf("forged cookie: %d, want 303", rec.Code)
+	}
+	if rec := doDash(t, h, dashReq{path: "/api/v1/views", cookie: forged}); rec.Code != http.StatusUnauthorized {
+		t.Fatalf("forged cookie, views: %d, want 401", rec.Code)
+	}
+}
+
+func TestDashboardStatic(t *testing.T) {
+	_, h := newDash(t, config{})
+	css := doDash(t, h, dashReq{path: "/static/style.css"})
+	if css.Code != http.StatusOK || !strings.HasPrefix(css.Header().Get("Content-Type"), "text/css") || css.Body.Len() == 0 {
+		t.Fatalf("style.css: %d %q", css.Code, css.Header().Get("Content-Type"))
+	}
+	for _, path := range []string{"/static/", "/static/login.html", "/static/layout.html", "/static/nope.css", "/static/..%2Flogin.html"} {
+		if rec := doDash(t, h, dashReq{path: path}); rec.Code != http.StatusNotFound {
+			t.Errorf("%s: %d, want 404", path, rec.Code)
+		}
+	}
+}
+
+func TestDashboardStoreFailureIs500(t *testing.T) {
+	s, h := newDash(t, config{})
+	session := signIn(t, h)
+	if _, err := s.store.db.ExecContext(context.Background(), "DROP TABLE daily_basic"); err != nil {
+		t.Fatal(err)
+	}
+	for name, r := range map[string]dashReq{
+		"overview": {path: "/", cookie: session},
+		"views":    {path: "/api/v1/views", header: bearer(dashToken)},
+	} {
+		if rec := doDash(t, h, r); rec.Code != http.StatusInternalServerError {
+			t.Errorf("%s with a broken store: %d, want 500", name, rec.Code)
+		}
+	}
+}
diff --git a/telemetry-receiver/design-export/MANIFEST.md b/telemetry-receiver/design-export/MANIFEST.md
new file mode 100644
index 000000000..fa3e482b1
--- /dev/null
+++ b/telemetry-receiver/design-export/MANIFEST.md
@@ -0,0 +1,39 @@
+# telemetry-dashboard.pen export manifest
+
+This is a snapshot of `telemetry-receiver/telemetry-dashboard.pen` for review in git. The `.pen` file is accessed only through Pencil MCP. It holds the receiver's private dashboard pages for spec 022 (T066, T075), built on a copy of the HeroUI design-system kit.
+
+## Contents (2026-10-07, first export)
+
+| Node | Frame | Spec |
+|---|---|---|
+| `HBYBE` | Receiver / Login | T066, FR-022 |
+| `a7wUpP` | Receiver / Login — refused (generic "Invalid credentials") | T066, FR-023 |
+| `i0xK1E` | Receiver / Overview: basic section (KPIs, reports per day, versions, servers per install) and extended section (coverage, install KPIs, new and lapsed small multiples, environment, games, feature adoption, privacy footnote) | T066, T075, FR-024–FR-027 |
+| `Z079vK` | Receiver / Overview — empty (no zero-filled charts) | T066, FR-027 |
+| `jy9Rn` | Receiver / Extended — none in range | T075, T076 |
+| `y49Ie` | Telemetry components: `sDDfo` Telemetry/Stat tile, `wPbIp` Telemetry/Share row | T066 |
+
+`variables.json` lists every colour and font token, light and dark, for the server-rendered CSS (T068).
+
+## Theme
+
+- **Palette.** This follows the pink theme the main app and website share: the `web/src/styles/globals.css` values under the same HeroUI token names, the same as `website/website-export`. The kit copy in this file is re-themed with it.
+- **Typography.** Fonts are Geist (sans) and JetBrains Mono (headings, eyebrows, wordmark).
+- **Modes.** The frames are rendered in dark mode, the website's default. Light values are defined for every token.
+- **Chart tokens.**
+  - `chart/series-1` is pink: `#DB2777` light, `#EC4899` dark. Brand `#FF4FA3` is too light for dark-surface marks.
+  - `chart/series-2` is blue: `#2a78d6` light, `#3987e5` dark, used for lapsed installs.
+  - Both pass the dataviz validator in both modes against the file's surfaces (`#FFF7FB`, `#1C1A20`).
+  - `chart/grid`, `chart/baseline` and `chart/track` are recessive hairline and track tones.
+- **Chart rules.** Columns start at zero, there is a single y-axis, and only the latest value is labelled. Small multiples share a scale. A "View as table" link gives a table alternative, because the CSP-locked pages have no JavaScript for hover.
+
+## Method
+
+- **JSON.** `Get(id, {depth: 40, includePathGeometry: true})` was printed from one `execute` call. A script split the output into `json/<id>.json` (2-space indent, UTF-8, trailing newline). The compact re-serialisation length of every file matches `JSON.stringify` in Pencil exactly, and no file contains `"..."` elisions.
+- **PNG.** `Export(ids, "png", …, {scale: 2})`. Login, refused and empty are 2880×1800, the overview is 2880×5634, "none in range" is 2880×328 and the components frame is 1624×354.
+- **Content checks.** Each string matched only its own file:
+  - "Invalid credentials" → `a7wUpP`
+  - "No reports yet" → `Z079vK`
+  - "Lapsed installs per day" → `i0xK1E`
+  - "No reports in this range included extended data" → `jy9Rn`
+  - "DASHBOARD_TOKEN value" → `HBYBE`, `a7wUpP`
diff --git a/telemetry-receiver/design-export/json/HBYBE.json b/telemetry-receiver/design-export/json/HBYBE.json
new file mode 100644
index 000000000..e065a0638
--- /dev/null
+++ b/telemetry-receiver/design-export/json/HBYBE.json
@@ -0,0 +1,169 @@
+{
+  "type": "frame",
+  "id": "HBYBE",
+  "x": 3567.959083557127,
+  "y": 1020.8789062499995,
+  "name": "Receiver / Login",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 900,
+  "fill": "$background/background",
+  "layout": "vertical",
+  "justifyContent": "center",
+  "alignItems": "center",
+  "children": [
+    {
+      "id": "f7gFY",
+      "type": "ref",
+      "ref": "f07b1",
+      "name": "Login card",
+      "width": 400,
+      "padding": 32,
+      "gap": 24,
+      "stroke": "$border",
+      "strokeWidth": 1,
+      "strokeAlignment": "inner",
+      "children": [
+        {
+          "type": "frame",
+          "id": "RFl9o",
+          "name": "Heading",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 10,
+          "children": [
+            {
+              "type": "frame",
+              "id": "yItF3",
+              "name": "Brand",
+              "gap": 10,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "rectangle",
+                  "id": "Nn2ic",
+                  "name": "Logo",
+                  "fill": {
+                    "type": "image",
+                    "enabled": true,
+                    "url": "../website/design-assets/gameplane-icon.png",
+                    "mode": "contain"
+                  },
+                  "width": 24,
+                  "height": 24
+                },
+                {
+                  "type": "text",
+                  "id": "v4e5d",
+                  "name": "Wordmark",
+                  "fill": "$foreground/foreground",
+                  "content": "gameplane",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 15,
+                  "fontWeight": "600"
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "dsE3s",
+              "name": "Eyebrow",
+              "fill": "$accent/accent",
+              "content": "PRIVATE DASHBOARD",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 11,
+              "fontWeight": "normal",
+              "letterSpacing": 1.5
+            },
+            {
+              "type": "text",
+              "id": "CC9oc",
+              "name": "Title",
+              "fill": "$foreground/foreground",
+              "content": "Gameplane telemetry",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 24,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "c0nVDt",
+              "name": "Subtitle",
+              "fill": "$foreground/secondary",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": "Private dashboard. Sign in with the dashboard token.",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "MTBth",
+          "name": "Form",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 16,
+          "children": [
+            {
+              "id": "w3zMra",
+              "type": "ref",
+              "ref": "Tu3H4",
+              "name": "Token field",
+              "width": "fill_container",
+              "descendants": {
+                "I4m7NO": {
+                  "content": "Dashboard token"
+                },
+                "DJsYb": {
+                  "content": "••••••••••••••••••••••••"
+                },
+                "PvRXY": {
+                  "content": "The DASHBOARD_TOKEN value from the receiver's Secret."
+                }
+              }
+            },
+            {
+              "id": "V9VTdg",
+              "type": "ref",
+              "ref": "hvQ4m",
+              "name": "Sign in",
+              "width": "fill_container",
+              "justifyContent": "center",
+              "descendants": {
+                "UYKSN": {
+                  "enabled": false
+                },
+                "y9bBK0": {
+                  "content": "Sign in"
+                }
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "eKQ9o",
+      "name": "Footer gap",
+      "width": 10,
+      "height": 24
+    },
+    {
+      "type": "text",
+      "id": "UKIoU",
+      "name": "Footnote",
+      "fill": "$foreground/muted",
+      "content": "Sessions last 12 hours. Rotating the token signs everyone out.",
+      "fontFamily": "$typography/font-sans",
+      "fontSize": 12,
+      "fontWeight": "normal"
+    }
+  ]
+}
diff --git a/telemetry-receiver/design-export/json/Z079vK.json b/telemetry-receiver/design-export/json/Z079vK.json
new file mode 100644
index 000000000..40af934c9
--- /dev/null
+++ b/telemetry-receiver/design-export/json/Z079vK.json
@@ -0,0 +1,321 @@
+{
+  "type": "frame",
+  "id": "Z079vK",
+  "x": 8327.959083557127,
+  "y": 1020.8789062499995,
+  "name": "Receiver / Overview — empty",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 900,
+  "fill": "$background/background",
+  "layout": "vertical",
+  "children": [
+    {
+      "type": "frame",
+      "id": "eJ6OT",
+      "name": "Top bar",
+      "width": "fill_container",
+      "height": 64,
+      "stroke": "$border",
+      "strokeWidth": {
+        "bottom": 1
+      },
+      "strokeAlignment": "inner",
+      "padding": [
+        0,
+        40
+      ],
+      "justifyContent": "space_between",
+      "alignItems": "center",
+      "children": [
+        {
+          "type": "frame",
+          "id": "fLKfk",
+          "name": "Brand",
+          "gap": 10,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "rectangle",
+              "id": "Oy7L3",
+              "name": "Logo",
+              "fill": {
+                "type": "image",
+                "enabled": true,
+                "url": "../website/design-assets/gameplane-icon.png",
+                "mode": "contain"
+              },
+              "width": 24,
+              "height": 24
+            },
+            {
+              "type": "text",
+              "id": "k0J6XW",
+              "name": "Wordmark",
+              "fill": "$foreground/foreground",
+              "content": "gameplane",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 15,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "W2GPI",
+              "name": "Slash",
+              "fill": "$foreground/muted",
+              "content": "/",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 15,
+              "fontWeight": "normal"
+            },
+            {
+              "type": "text",
+              "id": "FgVOn",
+              "name": "Product",
+              "fill": "$foreground/foreground",
+              "content": "Telemetry",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 15,
+              "fontWeight": "normal"
+            },
+            {
+              "id": "th45R",
+              "type": "ref",
+              "ref": "Q401P",
+              "name": "Approx chip",
+              "descendants": {
+                "wH6ey": {
+                  "content": "Approximate · self-reported"
+                }
+              }
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "YA8Cg",
+          "name": "Session",
+          "gap": 16,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "L19QW",
+              "name": "As of",
+              "fill": "$foreground/muted",
+              "content": "No data yet",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            },
+            {
+              "id": "R6ROEM",
+              "type": "ref",
+              "ref": "bCpKh",
+              "name": "Sign out",
+              "descendants": {
+                "Watg8": {
+                  "icon": "log-out"
+                },
+                "U8ICg": {
+                  "content": "Sign out"
+                }
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "W1xXA",
+      "name": "Content",
+      "width": "fill_container",
+      "layout": "vertical",
+      "gap": 32,
+      "padding": [
+        32,
+        40,
+        48,
+        40
+      ],
+      "children": [
+        {
+          "type": "frame",
+          "id": "Y9ifbZ",
+          "name": "Title row",
+          "width": "fill_container",
+          "justifyContent": "space_between",
+          "alignItems": "end",
+          "children": [
+            {
+              "type": "frame",
+              "id": "N3wvSC",
+              "name": "Title block",
+              "width": 760,
+              "layout": "vertical",
+              "gap": 8,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "m2ly0",
+                  "name": "Eyebrow",
+                  "fill": "$accent/accent",
+                  "content": "PROVIDER OVERVIEW",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 12,
+                  "fontWeight": "normal",
+                  "letterSpacing": 1.5
+                },
+                {
+                  "type": "text",
+                  "id": "uw4PM",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "Usage across reporting installs",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 32,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "ZiECk",
+                  "name": "Subtitle",
+                  "fill": "$foreground/muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Daily aggregates from self-reported, anonymous reports. Every figure is approximate: installs choose to report, and nothing is verified beyond the report signature.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 15,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "id": "Iz2y7",
+              "type": "ref",
+              "ref": "sklNL",
+              "name": "Range",
+              "children": [
+                {
+                  "id": "hnl8m",
+                  "type": "ref",
+                  "ref": "nO0GM",
+                  "name": "7 days",
+                  "descendants": {
+                    "x5KZZd": {
+                      "content": "7 days"
+                    }
+                  }
+                },
+                {
+                  "id": "LUA0n",
+                  "type": "ref",
+                  "ref": "iEQse",
+                  "name": "30 days",
+                  "descendants": {
+                    "BtgBT": {
+                      "content": "30 days"
+                    }
+                  }
+                },
+                {
+                  "id": "g25lA",
+                  "type": "ref",
+                  "ref": "nO0GM",
+                  "name": "90 days",
+                  "descendants": {
+                    "x5KZZd": {
+                      "content": "90 days"
+                    }
+                  }
+                },
+                {
+                  "id": "Y3uyQw",
+                  "type": "ref",
+                  "ref": "nO0GM",
+                  "name": "365 days",
+                  "descendants": {
+                    "x5KZZd": {
+                      "content": "365 days"
+                    }
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "A1PwG",
+          "name": "Empty state",
+          "width": "fill_container",
+          "height": 420,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 40,
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "q5cEEN",
+              "name": "Icon wrap",
+              "width": 48,
+              "height": 48,
+              "fill": "$accent/soft",
+              "cornerRadius": 12,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "iSRaQ",
+                  "name": "Icon",
+                  "width": 22,
+                  "height": 22,
+                  "icon": "inbox",
+                  "library": "lucide",
+                  "fill": "$accent/accent"
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "T5Kr4b",
+              "name": "Title",
+              "fill": "$foreground/foreground",
+              "content": "No reports yet",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 20,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "JJM29",
+              "name": "Body",
+              "fill": "$foreground/muted",
+              "textGrowth": "fixed-width",
+              "width": 520,
+              "content": "Figures appear once this receiver has accepted reports for a full UTC day. Installs send to POST /ingest on the public port; nothing is shown until there is data, so no chart is drawn from zeros.",
+              "lineHeight": 1.5,
+              "textAlign": "center",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/telemetry-receiver/design-export/json/a7wUpP.json b/telemetry-receiver/design-export/json/a7wUpP.json
new file mode 100644
index 000000000..ad9f6ff82
--- /dev/null
+++ b/telemetry-receiver/design-export/json/a7wUpP.json
@@ -0,0 +1,187 @@
+{
+  "type": "frame",
+  "id": "a7wUpP",
+  "x": 5127.959083557127,
+  "y": 1020.8789062499995,
+  "name": "Receiver / Login — refused",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "height": 900,
+  "fill": "$background/background",
+  "layout": "vertical",
+  "justifyContent": "center",
+  "alignItems": "center",
+  "children": [
+    {
+      "id": "v4MbR",
+      "type": "ref",
+      "ref": "f07b1",
+      "name": "Login card",
+      "width": 400,
+      "padding": 32,
+      "gap": 24,
+      "stroke": "$border",
+      "strokeWidth": 1,
+      "strokeAlignment": "inner",
+      "children": [
+        {
+          "type": "frame",
+          "id": "ojnmT",
+          "name": "Heading",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 10,
+          "children": [
+            {
+              "type": "frame",
+              "id": "d3ASU",
+              "name": "Brand",
+              "gap": 10,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "rectangle",
+                  "id": "tOXnc",
+                  "name": "Logo",
+                  "fill": {
+                    "type": "image",
+                    "enabled": true,
+                    "url": "../website/design-assets/gameplane-icon.png",
+                    "mode": "contain"
+                  },
+                  "width": 24,
+                  "height": 24
+                },
+                {
+                  "type": "text",
+                  "id": "Rj0dV",
+                  "name": "Wordmark",
+                  "fill": "$foreground/foreground",
+                  "content": "gameplane",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 15,
+                  "fontWeight": "600"
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "E5yaH",
+              "name": "Eyebrow",
+              "fill": "$accent/accent",
+              "content": "PRIVATE DASHBOARD",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 11,
+              "fontWeight": "normal",
+              "letterSpacing": 1.5
+            },
+            {
+              "type": "text",
+              "id": "bVf7f",
+              "name": "Title",
+              "fill": "$foreground/foreground",
+              "content": "Gameplane telemetry",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 24,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "GZktc",
+              "name": "Subtitle",
+              "fill": "$foreground/secondary",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": "Private dashboard. Sign in with the dashboard token.",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "id": "D2oxw0",
+          "type": "ref",
+          "ref": "YxI4e",
+          "name": "Refusal alert",
+          "width": "fill_container",
+          "descendants": {
+            "K5BCAi": {
+              "content": "Invalid credentials"
+            },
+            "jLj0v": {
+              "enabled": false
+            },
+            "BLuJ9": {
+              "enabled": false
+            }
+          }
+        },
+        {
+          "type": "frame",
+          "id": "XgGt2",
+          "name": "Form",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 16,
+          "children": [
+            {
+              "id": "lZ2GC",
+              "type": "ref",
+              "ref": "Tu3H4",
+              "name": "Token field",
+              "width": "fill_container",
+              "descendants": {
+                "I4m7NO": {
+                  "content": "Dashboard token"
+                },
+                "DJsYb": {
+                  "content": "••••••••••••••••••••••••"
+                },
+                "PvRXY": {
+                  "content": "The DASHBOARD_TOKEN value from the receiver's Secret."
+                }
+              }
+            },
+            {
+              "id": "W9k1fv",
+              "type": "ref",
+              "ref": "hvQ4m",
+              "name": "Sign in",
+              "width": "fill_container",
+              "justifyContent": "center",
+              "descendants": {
+                "UYKSN": {
+                  "enabled": false
+                },
+                "y9bBK0": {
+                  "content": "Sign in"
+                }
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "E1qJ3",
+      "name": "Footer gap",
+      "width": 10,
+      "height": 24
+    },
+    {
+      "type": "text",
+      "id": "vbkKX",
+      "name": "Footnote",
+      "fill": "$foreground/muted",
+      "content": "Sessions last 12 hours. Rotating the token signs everyone out.",
+      "fontFamily": "$typography/font-sans",
+      "fontSize": 12,
+      "fontWeight": "normal"
+    }
+  ]
+}
diff --git a/telemetry-receiver/design-export/json/i0xK1E.json b/telemetry-receiver/design-export/json/i0xK1E.json
new file mode 100644
index 000000000..681aa21b7
--- /dev/null
+++ b/telemetry-receiver/design-export/json/i0xK1E.json
@@ -0,0 +1,6005 @@
+{
+  "type": "frame",
+  "id": "i0xK1E",
+  "x": 6727.959083557127,
+  "y": 1020.8789062499995,
+  "name": "Receiver / Overview",
+  "theme": {
+    "semantic": "dark"
+  },
+  "clip": true,
+  "width": 1440,
+  "fill": "$background/background",
+  "layout": "vertical",
+  "children": [
+    {
+      "type": "frame",
+      "id": "PrCYy",
+      "name": "Top bar",
+      "width": "fill_container",
+      "height": 64,
+      "stroke": "$border",
+      "strokeWidth": {
+        "bottom": 1
+      },
+      "strokeAlignment": "inner",
+      "padding": [
+        0,
+        40
+      ],
+      "justifyContent": "space_between",
+      "alignItems": "center",
+      "children": [
+        {
+          "type": "frame",
+          "id": "EsFiy",
+          "name": "Brand",
+          "gap": 10,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "rectangle",
+              "id": "RDJgN",
+              "name": "Logo",
+              "fill": {
+                "type": "image",
+                "enabled": true,
+                "url": "../website/design-assets/gameplane-icon.png",
+                "mode": "contain"
+              },
+              "width": 24,
+              "height": 24
+            },
+            {
+              "type": "text",
+              "id": "ma9hV",
+              "name": "Wordmark",
+              "fill": "$foreground/foreground",
+              "content": "gameplane",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 15,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "bBhW1",
+              "name": "Slash",
+              "fill": "$foreground/muted",
+              "content": "/",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 15,
+              "fontWeight": "normal"
+            },
+            {
+              "type": "text",
+              "id": "BZqrR",
+              "name": "Product",
+              "fill": "$foreground/foreground",
+              "content": "Telemetry",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 15,
+              "fontWeight": "normal"
+            },
+            {
+              "id": "Y4ENwh",
+              "type": "ref",
+              "ref": "Q401P",
+              "name": "Approx chip",
+              "descendants": {
+                "wH6ey": {
+                  "content": "Approximate · self-reported"
+                }
+              }
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "lIxVZ",
+          "name": "Session",
+          "gap": 16,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "W416z",
+              "name": "As of",
+              "fill": "$foreground/muted",
+              "content": "Data through 2026-10-06 (UTC)",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            },
+            {
+              "id": "vkzqR",
+              "type": "ref",
+              "ref": "bCpKh",
+              "name": "Sign out",
+              "descendants": {
+                "Watg8": {
+                  "icon": "log-out"
+                },
+                "U8ICg": {
+                  "content": "Sign out"
+                }
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "ZDH5z",
+      "name": "Content",
+      "width": "fill_container",
+      "layout": "vertical",
+      "gap": 32,
+      "padding": [
+        32,
+        40,
+        48,
+        40
+      ],
+      "children": [
+        {
+          "type": "frame",
+          "id": "EEm5G",
+          "name": "Title row",
+          "width": "fill_container",
+          "justifyContent": "space_between",
+          "alignItems": "end",
+          "children": [
+            {
+              "type": "frame",
+              "id": "cHCb4",
+              "name": "Title block",
+              "width": 760,
+              "layout": "vertical",
+              "gap": 8,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "BLOll",
+                  "name": "Eyebrow",
+                  "fill": "$accent/accent",
+                  "content": "PROVIDER OVERVIEW",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 12,
+                  "fontWeight": "normal",
+                  "letterSpacing": 1.5
+                },
+                {
+                  "type": "text",
+                  "id": "gTaru",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "Usage across reporting installs",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 32,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "v8Ohz",
+                  "name": "Subtitle",
+                  "fill": "$foreground/muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Daily aggregates from self-reported, anonymous reports. Every figure is approximate: installs choose to report, and nothing is verified beyond the report signature.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 15,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "id": "Gwgkx",
+              "type": "ref",
+              "ref": "sklNL",
+              "name": "Range",
+              "children": [
+                {
+                  "id": "spB9q",
+                  "type": "ref",
+                  "ref": "nO0GM",
+                  "name": "7 days",
+                  "descendants": {
+                    "x5KZZd": {
+                      "content": "7 days"
+                    }
+                  }
+                },
+                {
+                  "id": "CEvvH",
+                  "type": "ref",
+                  "ref": "iEQse",
+                  "name": "30 days",
+                  "descendants": {
+                    "BtgBT": {
+                      "content": "30 days"
+                    }
+                  }
+                },
+                {
+                  "id": "rcNte",
+                  "type": "ref",
+                  "ref": "nO0GM",
+                  "name": "90 days",
+                  "descendants": {
+                    "x5KZZd": {
+                      "content": "90 days"
+                    }
+                  }
+                },
+                {
+                  "id": "kZitx",
+                  "type": "ref",
+                  "ref": "nO0GM",
+                  "name": "365 days",
+                  "descendants": {
+                    "x5KZZd": {
+                      "content": "365 days"
+                    }
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "WyzQu",
+          "name": "Basic heading",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "NaBPb",
+              "name": "Heading",
+              "fill": "$foreground/foreground",
+              "content": "Basic reports",
+              "fontFamily": "$typography/font-mono",
+              "fontSize": 20,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "YTarC",
+              "name": "Sub",
+              "fill": "$foreground/muted",
+              "content": "Version, server count and template count from every report, basic or extended.",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "iOskc",
+          "name": "Basic KPIs",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "id": "WySx8",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Reports, latest day",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Reports, latest day"
+                },
+                "tZRdh": {
+                  "content": "1,284"
+                },
+                "oPQEN": {
+                  "content": "2026-10-06 (UTC)"
+                }
+              }
+            },
+            {
+              "id": "kzCOI",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Reports, last 30 days",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Reports, last 30 days"
+                },
+                "tZRdh": {
+                  "content": "37,912"
+                },
+                "oPQEN": {
+                  "content": "Sep 7 – Oct 6"
+                }
+              }
+            },
+            {
+              "id": "hubU0",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Reports since collection began",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Reports since collection began"
+                },
+                "tZRdh": {
+                  "content": "412,055"
+                },
+                "oPQEN": {
+                  "content": "Since 2026-03-02"
+                }
+              }
+            },
+            {
+              "id": "LI86z",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Median servers per install",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Median servers per install"
+                },
+                "tZRdh": {
+                  "content": "3"
+                },
+                "oPQEN": {
+                  "content": "Latest day; mean 4.6"
+                }
+              }
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "rTyW6",
+          "name": "Reports per day",
+          "width": "fill_container",
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "layout": "vertical",
+          "gap": 16,
+          "padding": 20,
+          "children": [
+            {
+              "type": "frame",
+              "id": "EHBKg",
+              "name": "Header",
+              "width": "fill_container",
+              "justifyContent": "space_between",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "poOcW",
+                  "name": "Titles",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "wurGm",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Reports per day",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "rZQiH",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "content": "Accepted reports per UTC day, last 30 days",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "LWxly",
+                  "name": "Table link",
+                  "fill": "$accent/accent",
+                  "content": "View as table",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "FZz94",
+              "name": "Plot row",
+              "width": "fill_container",
+              "gap": 8,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "r2jIv",
+                  "name": "Y axis",
+                  "width": 44,
+                  "height": 208,
+                  "layout": "vertical",
+                  "justifyContent": "space_between",
+                  "alignItems": "end",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "lDbNf",
+                      "name": "Tick 1,500",
+                      "fill": "$foreground/muted",
+                      "content": "1,500",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "gfX9J",
+                      "name": "Tick 1,000",
+                      "fill": "$foreground/muted",
+                      "content": "1,000",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "RpyKE",
+                      "name": "Tick 500",
+                      "fill": "$foreground/muted",
+                      "content": "500",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "uhswv",
+                      "name": "Tick 0",
+                      "fill": "$foreground/muted",
+                      "content": "0",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "itl6U",
+                  "name": "Plot",
+                  "width": 1260,
+                  "height": 208,
+                  "layout": "none",
+                  "children": [
+                    {
+                      "type": "rectangle",
+                      "id": "ehS8J",
+                      "x": 0,
+                      "y": 4,
+                      "name": "Grid 0",
+                      "fill": "$chart/grid",
+                      "width": 1260,
+                      "height": 1
+                    },
+                    {
+                      "type": "rectangle",
+                      "id": "RM4fJ",
+                      "x": 0,
+                      "y": 70.66666666666667,
+                      "name": "Grid 1",
+                      "fill": "$chart/grid",
+                      "width": 1260,
+                      "height": 1
+                    },
+                    {
+                      "type": "rectangle",
+                      "id": "scHGZ",
+                      "x": 0,
+                      "y": 137.33333333333334,
+                      "name": "Grid 2",
+                      "fill": "$chart/grid",
+                      "width": 1260,
+                      "height": 1
+                    },
+                    {
+                      "type": "rectangle",
+                      "id": "DogbT",
+                      "x": 0,
+                      "y": 204,
+                      "name": "Baseline",
+                      "fill": "$chart/baseline",
+                      "width": 1260,
+                      "height": 1
+                    },
+                    {
+                      "type": "frame",
+                      "id": "z70gC",
+                      "x": 0,
+                      "y": -20,
+                      "name": "Columns",
+                      "width": 1260,
+                      "height": 224,
+                      "alignItems": "end",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "z5eSP5",
+                          "name": "Day 1",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "NpPE9",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 149
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "InasO",
+                          "name": "Day 2",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "blVmn",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 152
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "S0c3P5",
+                          "name": "Day 3",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "xVz1h",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 153
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "gIes7",
+                          "name": "Day 4",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "h00jy",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 155
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "cZqOZ",
+                          "name": "Day 5",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "S4olM",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 156
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "zpa9L",
+                          "name": "Day 6",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "akFYW",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 147
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "UQMno",
+                          "name": "Day 7",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "K4f0E8",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 145
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "ZtVqm",
+                          "name": "Day 8",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "c41OTM",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 155
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "CzyFK",
+                          "name": "Day 9",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "wuxFw",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 157
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "JkRh7",
+                          "name": "Day 10",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "O0XwqM",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 159
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "GPoP1",
+                          "name": "Day 11",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "jJg0u",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 160
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "IKV9c",
+                          "name": "Day 12",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "AVr3K",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 161
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "YaNBo",
+                          "name": "Day 13",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "xrTlP",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 151
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "KxeCR",
+                          "name": "Day 14",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "wNeIt",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 149
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "jUFhJ",
+                          "name": "Day 15",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "S2bIOp",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 160
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "wniFH",
+                          "name": "Day 16",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "G4H63L",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 162
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "xUpKT",
+                          "name": "Day 17",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "ylFmR",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 163
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "LVN8u",
+                          "name": "Day 18",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "JNSrg",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 164
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "p7bhT",
+                          "name": "Day 19",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "YvPGq",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 166
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "tzVMN",
+                          "name": "Day 20",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "Cwn6p",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 155
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "jt3C1",
+                          "name": "Day 21",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "B3ZW9n",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 152
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "qsYxX",
+                          "name": "Day 22",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "VOVr1",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 163
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "myPLG",
+                          "name": "Day 23",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "t1rje",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 165
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "NV5dX",
+                          "name": "Day 24",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "zGHCv",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 167
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "UbiJU",
+                          "name": "Day 25",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "T2GSn7",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 168
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "thEOO",
+                          "name": "Day 26",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "LbbCa",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 169
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "N08Apm",
+                          "name": "Day 27",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "jyLUn",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 158
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "gNm4A",
+                          "name": "Day 28",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "fSZus",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 157
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "cvTAF",
+                          "name": "Day 29",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "M8UwO0",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 168
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "snyg0",
+                          "name": "Day 30",
+                          "width": 42,
+                          "layout": "vertical",
+                          "gap": 4,
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "rbAnN",
+                              "name": "Value label",
+                              "fill": "$foreground/foreground",
+                              "content": "1,284",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "600"
+                            },
+                            {
+                              "type": "rectangle",
+                              "cornerRadius": [
+                                4,
+                                4,
+                                0,
+                                0
+                              ],
+                              "id": "g1YRBL",
+                              "name": "Column",
+                              "fill": "$chart/series-1",
+                              "width": 20,
+                              "height": 171
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Bt3QV",
+              "name": "X axis",
+              "width": "fill_container",
+              "padding": [
+                0,
+                0,
+                0,
+                52
+              ],
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "M4cUj",
+                  "name": "X 1",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "S4zhC",
+                      "name": "Label",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 7",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "irNR9",
+                  "name": "X 2",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "XTio8",
+                  "name": "X 3",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "k38ubo",
+                  "name": "X 4",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "meJSb",
+                  "name": "X 5",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "fvMy1",
+                  "name": "X 6",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "Gi10h",
+                  "name": "X 7",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "sxkq4",
+                  "name": "X 8",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "W8qe74",
+                      "name": "Label",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 14",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "c8FG2",
+                  "name": "X 9",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "xlbNh",
+                  "name": "X 10",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "MTXE9",
+                  "name": "X 11",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "vQUPg",
+                  "name": "X 12",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "A0jjv",
+                  "name": "X 13",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "KuEti",
+                  "name": "X 14",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "WG8Df",
+                  "name": "X 15",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "MUVNi",
+                      "name": "Label",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 21",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "fXfoH",
+                  "name": "X 16",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "vMXSq",
+                  "name": "X 17",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "qf1sj",
+                  "name": "X 18",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "YzSdz",
+                  "name": "X 19",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "ENZVx",
+                  "name": "X 20",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "x0qIV",
+                  "name": "X 21",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "Og5PT",
+                  "name": "X 22",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "n2HIzG",
+                      "name": "Label",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 28",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "d67ks",
+                  "name": "X 23",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "SE93c",
+                  "name": "X 24",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "iusfp",
+                  "name": "X 25",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "etd4K",
+                  "name": "X 26",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "lGgoB",
+                  "name": "X 27",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "jH0Zu",
+                  "name": "X 28",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "A29IAZ",
+                  "name": "X 29",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "kTkYU",
+                      "name": "Label",
+                      "fill": "$foreground/muted",
+                      "content": "Oct 5",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "IPQap",
+                  "name": "X 30",
+                  "width": 42,
+                  "height": 14,
+                  "justifyContent": "center"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "p8RL2",
+          "name": "Basic breakdowns",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "Waady",
+              "name": "Versions",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 16,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "BTPQR",
+                  "name": "Titles",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "HlgPb",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Versions",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "uO6sB",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": 600,
+                      "content": "Reports on the latest day by reported version. Top 10, then Other and Invalid.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "jjkwN",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "UYCro",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version 0.3.0",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "0.3.0",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 432
+                        },
+                        "uTqdm": {
+                          "content": "812"
+                        }
+                      }
+                    },
+                    {
+                      "id": "GIRd2",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version 0.3.0-rc.1",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "0.3.0-rc.1",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 107
+                        },
+                        "uTqdm": {
+                          "content": "201"
+                        }
+                      }
+                    },
+                    {
+                      "id": "tKNOd",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version 0.2.0-beta.8",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "0.2.0-beta.8",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 76
+                        },
+                        "uTqdm": {
+                          "content": "143"
+                        }
+                      }
+                    },
+                    {
+                      "id": "o7v436",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version 0.2.0-beta.7",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "0.2.0-beta.7",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 32
+                        },
+                        "uTqdm": {
+                          "content": "61"
+                        }
+                      }
+                    },
+                    {
+                      "id": "vmMgu",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version 0.2.0-beta.6",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "0.2.0-beta.6",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 14
+                        },
+                        "uTqdm": {
+                          "content": "27"
+                        }
+                      }
+                    },
+                    {
+                      "id": "J6DG4",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version 0.2.0-beta.5",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "0.2.0-beta.5",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 5
+                        },
+                        "uTqdm": {
+                          "content": "9"
+                        }
+                      }
+                    },
+                    {
+                      "id": "n1k1ys",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version dev",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "dev",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 2
+                        },
+                        "uTqdm": {
+                          "content": "4"
+                        }
+                      }
+                    },
+                    {
+                      "id": "aFTHI",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version Other",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Other",
+                          "fill": "$foreground/muted"
+                        },
+                        "dMFUm": {
+                          "width": 13
+                        },
+                        "uTqdm": {
+                          "content": "24"
+                        }
+                      }
+                    },
+                    {
+                      "id": "EmQ33",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Version Invalid",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Invalid",
+                          "fill": "$foreground/muted"
+                        },
+                        "dMFUm": {
+                          "width": 2
+                        },
+                        "uTqdm": {
+                          "content": "3"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "U44h65",
+              "name": "Fleet size",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 16,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "DIXJG",
+                  "name": "Titles",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "adjqS",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Servers per install",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "YGPWl",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": 600,
+                      "content": "Installs on the latest day by game-server count. Median 3, mean 4.6.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "YDYbk",
+                  "name": "Plot row",
+                  "width": "fill_container",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "mpEfM",
+                      "name": "Y axis",
+                      "width": 44,
+                      "height": 188,
+                      "layout": "vertical",
+                      "justifyContent": "space_between",
+                      "alignItems": "end",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "nT2NS",
+                          "name": "Tick 400",
+                          "fill": "$foreground/muted",
+                          "content": "400",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "iL2Mm",
+                          "name": "Tick 200",
+                          "fill": "$foreground/muted",
+                          "content": "200",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "ovHB0",
+                          "name": "Tick 0",
+                          "fill": "$foreground/muted",
+                          "content": "0",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "CG2nD",
+                      "name": "Plot",
+                      "width": 580,
+                      "height": 188,
+                      "layout": "none",
+                      "children": [
+                        {
+                          "type": "rectangle",
+                          "id": "aXWl4",
+                          "x": 0,
+                          "y": 94,
+                          "name": "Grid mid",
+                          "fill": "$chart/grid",
+                          "width": 580,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "cYdRA",
+                          "x": 0,
+                          "y": 4,
+                          "name": "Grid top",
+                          "fill": "$chart/grid",
+                          "width": 580,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "rszg8",
+                          "x": 0,
+                          "y": 184,
+                          "name": "Baseline",
+                          "fill": "$chart/baseline",
+                          "width": 580,
+                          "height": 1
+                        },
+                        {
+                          "type": "frame",
+                          "id": "s9D8Th",
+                          "x": 0,
+                          "y": -16,
+                          "name": "Columns",
+                          "width": 580,
+                          "height": 200,
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "reyUt",
+                              "name": "Band 0",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "p84xhn",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 18
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "RpQdP",
+                              "name": "Band 1",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "C6TPdA",
+                                  "name": "Value label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "388",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 11,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "AaTqq",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 175
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ho3un",
+                              "name": "Band 2",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "wAb0H",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 111
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "s0YGas",
+                              "name": "Band 3–5",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "lNkS6",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 153
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "dpBDC",
+                              "name": "Band 6–10",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "hiiSo",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 68
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Pp20f",
+                              "name": "Band 11–25",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "c0IdCw",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 35
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "bUATG",
+                              "name": "Band 26–50",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "AWB3G",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 11
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Ln3uf",
+                              "name": "Band 51–100",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "l9OsCk",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 4
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "VwdWm",
+                              "name": "Band 101–250",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "yUnHi",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 2
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "d07UWo",
+                              "name": "Band 250+",
+                              "width": 58,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "vcnPm",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 24,
+                                  "height": 2
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "J39J9",
+                  "name": "X axis",
+                  "width": "fill_container",
+                  "padding": [
+                    0,
+                    0,
+                    0,
+                    52
+                  ],
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "J3Ib1",
+                      "name": "X 0",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "TqaxM",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "0",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "uRPEI",
+                      "name": "X 1",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "zDLJt",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "1",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "h7vLr",
+                      "name": "X 2",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "yLtgH",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "2",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "TtGcG",
+                      "name": "X 3–5",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "vHWYV",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "3–5",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "nG5OI",
+                      "name": "X 6–10",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "ecex2",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "6–10",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "ENTZH",
+                      "name": "X 11–25",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "nOODW",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "11–25",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "Th42X",
+                      "name": "X 26–50",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "YQgnf",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "26–50",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "w9yqCf",
+                      "name": "X 51–100",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "Deys8",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "51–100",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "qm5a7",
+                      "name": "X 101–250",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "vDHQs",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "101–250",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "NLU1i",
+                      "name": "X 250+",
+                      "width": 58,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "MY7si",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "250+",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "KeDpH",
+                  "name": "Axis title",
+                  "fill": "$foreground/muted",
+                  "content": "Game servers per install",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 11,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "rectangle",
+          "id": "N3PIj",
+          "name": "Section divider",
+          "fill": "$separator/separator",
+          "width": "fill_container",
+          "height": 1
+        },
+        {
+          "type": "frame",
+          "id": "oW2pt",
+          "name": "Extended heading",
+          "width": "fill_container",
+          "justifyContent": "space_between",
+          "alignItems": "end",
+          "children": [
+            {
+              "type": "frame",
+              "id": "D8zEc",
+              "name": "Titles",
+              "width": 900,
+              "layout": "vertical",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "RtFVZ",
+                  "name": "Heading",
+                  "fill": "$foreground/foreground",
+                  "content": "Extended reports",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 20,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "kUcKw",
+                  "name": "Sub",
+                  "fill": "$foreground/muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Installs that also share the extended tier. Each install counts once per day; shares are weighted by install-days in the range.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "YLA8E",
+              "name": "Coverage",
+              "layout": "vertical",
+              "gap": 6,
+              "alignItems": "end",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "q0byl",
+                  "name": "Coverage label",
+                  "fill": "$foreground/secondary",
+                  "content": "Coverage: 71% of reports in range include extended data",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "frame",
+                  "id": "gXFmK",
+                  "name": "Coverage meter",
+                  "width": 320,
+                  "height": 8,
+                  "fill": "$chart/track",
+                  "cornerRadius": 4,
+                  "children": [
+                    {
+                      "type": "rectangle",
+                      "cornerRadius": 4,
+                      "id": "lO0v9",
+                      "name": "Fill",
+                      "fill": "$chart/series-1",
+                      "width": 227,
+                      "height": 8
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "GwrDY",
+          "name": "Install KPIs",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "id": "aRoss",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Active installs, latest day",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Active installs, latest day"
+                },
+                "tZRdh": {
+                  "content": "912"
+                },
+                "oPQEN": {
+                  "content": "2026-10-06 (UTC)"
+                }
+              }
+            },
+            {
+              "id": "R2Bns",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Active, last 7 days",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Active, last 7 days"
+                },
+                "tZRdh": {
+                  "content": "1,031"
+                },
+                "oPQEN": {
+                  "content": "Unique installs"
+                }
+              }
+            },
+            {
+              "id": "UMt1g",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Active, last 30 days",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Active, last 30 days"
+                },
+                "tZRdh": {
+                  "content": "1,106"
+                },
+                "oPQEN": {
+                  "content": "Unique installs"
+                }
+              }
+            },
+            {
+              "id": "Ga6OP",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "New installs, last 30 days",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "New installs, last 30 days"
+                },
+                "tZRdh": {
+                  "content": "214"
+                },
+                "oPQEN": {
+                  "content": "First report in range"
+                }
+              }
+            },
+            {
+              "id": "okh9E",
+              "type": "ref",
+              "ref": "sDDfo",
+              "name": "Lapsed, last 30 days",
+              "width": "fill_container",
+              "descendants": {
+                "yia1E": {
+                  "content": "Lapsed, last 30 days"
+                },
+                "tZRdh": {
+                  "content": "87"
+                },
+                "oPQEN": {
+                  "content": "No report for 30 days"
+                }
+              }
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "IkA62",
+          "name": "New and lapsed",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "kohdp",
+              "name": "New installs per day",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 16,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "WQjKA",
+                  "name": "Titles",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "L78e6",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "New installs per day",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "nWMZz",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "content": "First accepted report from an install ID",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "o4RFwP",
+                  "name": "Plot row",
+                  "width": "fill_container",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "ym7NT",
+                      "name": "Y axis",
+                      "width": 28,
+                      "height": 148,
+                      "layout": "vertical",
+                      "justifyContent": "space_between",
+                      "alignItems": "end",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "jejpp",
+                          "name": "Tick 15",
+                          "fill": "$foreground/muted",
+                          "content": "15",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "P5aiv",
+                          "name": "Tick 10",
+                          "fill": "$foreground/muted",
+                          "content": "10",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "AwNN9",
+                          "name": "Tick 5",
+                          "fill": "$foreground/muted",
+                          "content": "5",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "Z6mKj",
+                          "name": "Tick 0",
+                          "fill": "$foreground/muted",
+                          "content": "0",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "fQjoT",
+                      "name": "Plot",
+                      "width": 570,
+                      "height": 148,
+                      "layout": "none",
+                      "children": [
+                        {
+                          "type": "rectangle",
+                          "id": "IytaL",
+                          "x": 0,
+                          "y": 4,
+                          "name": "Grid 0",
+                          "fill": "$chart/grid",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "GWhSK",
+                          "x": 0,
+                          "y": 50.666666666666664,
+                          "name": "Grid 1",
+                          "fill": "$chart/grid",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "dWBkG",
+                          "x": 0,
+                          "y": 97.33333333333333,
+                          "name": "Grid 2",
+                          "fill": "$chart/grid",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "IE11Z",
+                          "x": 0,
+                          "y": 144,
+                          "name": "Baseline",
+                          "fill": "$chart/baseline",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "frame",
+                          "id": "oRmhw",
+                          "x": 0,
+                          "y": -16,
+                          "name": "Columns",
+                          "width": 570,
+                          "height": 160,
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "c2JI0d",
+                              "name": "Day 1",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "sRswa",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 56
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "VSj5w",
+                              "name": "Day 2",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "b4FuhU",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 65
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Y7c3f",
+                              "name": "Day 3",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "S07Rr7",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 84
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "La65r",
+                              "name": "Day 4",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "C7kPJ",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 47
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Jl9Z3",
+                              "name": "Day 5",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "YZeiI",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 75
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "H8qZvr",
+                              "name": "Day 6",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "pGKYf",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "cmwpi",
+                              "name": "Day 7",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "P39eWq",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "dy6uF",
+                              "name": "Day 8",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "B7uoL",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 84
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "sfUUn",
+                              "name": "Day 9",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "qZzeP",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 103
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "uWAKs",
+                              "name": "Day 10",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "D6zKZ",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 65
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ua4GB",
+                              "name": "Day 11",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "pfWt0",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 75
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ca97S",
+                              "name": "Day 12",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "KVbRG",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 93
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "O0tsH",
+                              "name": "Day 13",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "jBr0N",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "xVAVP",
+                              "name": "Day 14",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "EE7O7",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 47
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "PHymd",
+                              "name": "Day 15",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "s7onNl",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 75
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "aKFiw",
+                              "name": "Day 16",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "ol8P1",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 84
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "mCkG3",
+                              "name": "Day 17",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "XZl62",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 112
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "iwRFf",
+                              "name": "Day 18",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "EiBO2",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 65
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "CrRQ2",
+                              "name": "Day 19",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "Pwfez",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 93
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "V9ooQE",
+                              "name": "Day 20",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "PQHxL",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 47
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "l3DFyW",
+                              "name": "Day 21",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "IrXZH",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "bPs9q",
+                              "name": "Day 22",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "dnjBt",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 84
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "HuVhZ",
+                              "name": "Day 23",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "K7nP3",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 75
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "LmVIV",
+                              "name": "Day 24",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "rIi37",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 103
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "v8atQO",
+                              "name": "Day 25",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "WlniK",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 121
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "LkHnd",
+                              "name": "Day 26",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "rdBQ3",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 93
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "k5FhJ",
+                              "name": "Day 27",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "O2DWD",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 56
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "n932tK",
+                              "name": "Day 28",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "QvO87",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 47
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "bGgTJ",
+                              "name": "Day 29",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "G7Wn2T",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 84
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "WhjYb",
+                              "name": "Day 30",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "GvXpz",
+                                  "name": "Value label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "7",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 11,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "T6Y94",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 12,
+                                  "height": 65
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "gOkG8",
+                  "name": "X axis",
+                  "width": 606,
+                  "padding": [
+                    0,
+                    0,
+                    0,
+                    36
+                  ],
+                  "justifyContent": "space_between",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "ervGE",
+                      "name": "X Sep 7",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 7",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "a2GW8",
+                      "name": "X Sep 21",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 21",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "C6cZG",
+                      "name": "X Oct 6",
+                      "fill": "$foreground/muted",
+                      "content": "Oct 6",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "D8ofHq",
+              "name": "Lapsed installs per day",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 16,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "Qjo3F",
+                  "name": "Titles",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "lPda7",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Lapsed installs per day",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "NMwMD",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "content": "Installs whose last report was 30 days earlier",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "Z0E8bU",
+                  "name": "Plot row",
+                  "width": "fill_container",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "vULf9",
+                      "name": "Y axis",
+                      "width": 28,
+                      "height": 148,
+                      "layout": "vertical",
+                      "justifyContent": "space_between",
+                      "alignItems": "end",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "bK7yi",
+                          "name": "Tick 15",
+                          "fill": "$foreground/muted",
+                          "content": "15",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "xKq7c",
+                          "name": "Tick 10",
+                          "fill": "$foreground/muted",
+                          "content": "10",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "FrUJZ",
+                          "name": "Tick 5",
+                          "fill": "$foreground/muted",
+                          "content": "5",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "D7B7t",
+                          "name": "Tick 0",
+                          "fill": "$foreground/muted",
+                          "content": "0",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "Yn1gC",
+                      "name": "Plot",
+                      "width": 570,
+                      "height": 148,
+                      "layout": "none",
+                      "children": [
+                        {
+                          "type": "rectangle",
+                          "id": "VlMsG",
+                          "x": 0,
+                          "y": 4,
+                          "name": "Grid 0",
+                          "fill": "$chart/grid",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "g82r0i",
+                          "x": 0,
+                          "y": 50.666666666666664,
+                          "name": "Grid 1",
+                          "fill": "$chart/grid",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "Zmurq",
+                          "x": 0,
+                          "y": 97.33333333333333,
+                          "name": "Grid 2",
+                          "fill": "$chart/grid",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "itHgw",
+                          "x": 0,
+                          "y": 144,
+                          "name": "Baseline",
+                          "fill": "$chart/baseline",
+                          "width": 570,
+                          "height": 1
+                        },
+                        {
+                          "type": "frame",
+                          "id": "M8hyoM",
+                          "x": 0,
+                          "y": -16,
+                          "name": "Columns",
+                          "width": 570,
+                          "height": 160,
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "JHU6d",
+                              "name": "Day 1",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "MxfRd",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "yjWt7",
+                              "name": "Day 2",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "q6JXl",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "jGTXx",
+                              "name": "Day 3",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "xBSEy",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "TnTV3",
+                              "name": "Day 4",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "MF5xk",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "sTOVc",
+                              "name": "Day 5",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "c3FTSh",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "z74CGq",
+                              "name": "Day 6",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "g08k9",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 9
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "qxQ6s",
+                              "name": "Day 7",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "TDQv0",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "xfu5D",
+                              "name": "Day 8",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "xjBRo",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "dZosB",
+                              "name": "Day 9",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "AMBLC",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "IqsEy",
+                              "name": "Day 10",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "m4n1Vt",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "oc8bt",
+                              "name": "Day 11",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "UL6ow",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "x1MdoE",
+                              "name": "Day 12",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "Hn2hY",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 47
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "JIgLl",
+                              "name": "Day 13",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "Hxuyb",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "as6Wj",
+                              "name": "Day 14",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "bhlml",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 9
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "OqXAN",
+                              "name": "Day 15",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "RoHcb",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "zTQ4X",
+                              "name": "Day 16",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "CJy4y",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "nna2a",
+                              "name": "Day 17",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "ShsE0",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "b3tQ8",
+                              "name": "Day 18",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "dh3X7",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "MVv3S",
+                              "name": "Day 19",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "adyxe",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ojOzc",
+                              "name": "Day 20",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "GICVn",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "nxDoE",
+                              "name": "Day 21",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "xsDPO",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 9
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "haiYL",
+                              "name": "Day 22",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "EVORr",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "Ru1Uq",
+                              "name": "Day 23",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "u6x5kM",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "wNch4",
+                              "name": "Day 24",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "NuY5y",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "l5umTv",
+                              "name": "Day 25",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "obrv5",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 47
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "A2JCkx",
+                              "name": "Day 26",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "zTJkH",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "kyayT",
+                              "name": "Day 27",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "E2ECy",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 19
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "lPoNF",
+                              "name": "Day 28",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "J3McA",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 9
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "iA9mD",
+                              "name": "Day 29",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "DDODx",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 28
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "G3EVz",
+                              "name": "Day 30",
+                              "width": 19,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "j9Kxr",
+                                  "name": "Value label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "4",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 11,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    3,
+                                    3,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "MMi9n",
+                                  "name": "Column",
+                                  "fill": "$chart/series-2",
+                                  "width": 12,
+                                  "height": 37
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "Qi78V",
+                  "name": "X axis",
+                  "width": 606,
+                  "padding": [
+                    0,
+                    0,
+                    0,
+                    36
+                  ],
+                  "justifyContent": "space_between",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "ZQpkW",
+                      "name": "X Sep 7",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 7",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "F2fZj",
+                      "name": "X Sep 21",
+                      "fill": "$foreground/muted",
+                      "content": "Sep 21",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "text",
+                      "id": "TyxT1",
+                      "name": "X Oct 6",
+                      "fill": "$foreground/muted",
+                      "content": "Oct 6",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "vyryH",
+          "name": "Environment row 1",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "c6yNe1",
+              "name": "Kubernetes version",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 14,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "ts7Ae",
+                  "name": "Titles",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "x6UDGY",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Kubernetes version",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "isshR",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Share of install-days by reported minor version.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "xRdeX",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "wjOTK",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "1.31",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "1.31",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 164,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "38%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "mCGa5",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "1.30",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "1.30",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 117,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "27%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "uFp1s",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "1.32",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "1.32",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 78,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "18%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "apyWg",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "1.29",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "1.29",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 39,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "9%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "GkAhZ",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Other",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Other",
+                          "fill": "$foreground/muted"
+                        },
+                        "dMFUm": {
+                          "width": 35,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "8%"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "nABaC",
+              "name": "Distribution",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 14,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "gvGga",
+                  "name": "Titles",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "WU9QN",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Distribution",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "P3DHlg",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Share of install-days by detected distribution.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "UShQw",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "ysbp4",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "k3s",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "k3s",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 199,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "46%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "ERFfG",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "rke2",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "rke2",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 52,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "12%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "dm7Jd",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "microk8s",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "microk8s",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 39,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "9%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "Cnm2F",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "eks",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "eks",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 30,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "7%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "Ys8ZE",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "talos",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "talos",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 26,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "6%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "hnLEu",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "gke",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "gke",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 22,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "5%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "E1JJDc",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "kind",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "kind",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 13,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "3%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "cyGTq",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Other",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Other",
+                          "fill": "$foreground/muted"
+                        },
+                        "dMFUm": {
+                          "width": 52,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "12%"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "HRCgy",
+          "name": "Environment row 2",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "y7r64",
+              "name": "Architecture",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 14,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "MMhPC",
+                  "name": "Titles",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "k8ASe",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Architecture",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "qkzeO",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Share of install-days reporting each node architecture. Mixed clusters report several, so shares add up to more than 100%.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "EK8eL",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "f43md",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "amd64",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "amd64",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 350,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "81%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "SyiIg",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "arm64",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "arm64",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 112,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "26%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "p9B19",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "arm",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "arm",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 9,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "2%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "SvWZd",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Other",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Other",
+                          "fill": "$foreground/muted"
+                        },
+                        "dMFUm": {
+                          "width": 4,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "1%"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "b8fCX",
+              "name": "Cluster nodes",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 14,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "m4Yk7",
+                  "name": "Titles",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "gsYLI",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Cluster nodes",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "mEv68",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Share of install-days by node-count band.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "T2PQjM",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "NSTAz",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "1",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "1",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 251,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "58%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "Oxw93",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "2–3",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "2–3",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 95,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "22%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "wAcAs",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "4–10",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "4–10",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 60,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "14%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "JRkXA",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "11–50",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "11–50",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 22,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "5%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "J2Wm5",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "51+",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "51+",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 4,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "1%"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "X93xNq",
+          "name": "Usage row",
+          "width": "fill_container",
+          "gap": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "D0Xo8",
+              "name": "Games",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 14,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "rOjQF",
+                  "name": "Titles",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "FP9Oc",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Games",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "HcHrn",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Share of install-days running at least one server of each official module. Uploaded and third-party modules count as Custom.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "t1UGtz",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "gfdQc",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "minecraft-java",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "minecraft-java",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 264,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "61%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "n7fklX",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "terraria",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "terraria",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 78,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "18%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "exoBx",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "valheim",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "valheim",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 65,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "15%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "U3TWG5",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "palworld",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "palworld",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 48,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "11%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "DKLuV",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "factorio",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "factorio",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 39,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "9%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "t8Lxu",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "rust",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "rust",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 30,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "7%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "Ybgs3",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "satisfactory",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "satisfactory",
+                          "fill": "$foreground/foreground"
+                        },
+                        "dMFUm": {
+                          "width": 26,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "6%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "V36hc1",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Custom",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Custom",
+                          "fill": "$foreground/muted"
+                        },
+                        "dMFUm": {
+                          "width": 95,
+                          "cornerRadius": [
+                            0,
+                            4,
+                            4,
+                            0
+                          ]
+                        },
+                        "uTqdm": {
+                          "content": "22%"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "twyVG",
+              "name": "Feature adoption",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 14,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "VLjMc",
+                  "name": "Titles",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "LleaT",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Feature adoption",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "FiOPQ",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Share of install-days with each feature in use.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "bUAgs",
+                  "name": "Bars",
+                  "width": "fill_container",
+                  "layout": "vertical",
+                  "gap": 10,
+                  "children": [
+                    {
+                      "id": "Y1CuHR",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Backups",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Backups",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 225,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "52%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "G1KQk",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Wake on connect",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Wake on connect",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 147,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "34%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "dRRIa",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Tunnels",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Tunnels",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 91,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "21%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "JkAiq",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "SSO",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "SSO",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 82,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "19%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "kbwG7",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "PostgreSQL",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "PostgreSQL",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 48,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "11%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "u5vRJn",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Audit forwarding",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Audit forwarding",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 35,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "8%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "oO1hy",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Multi-cluster",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Multi-cluster",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 26,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "6%"
+                        }
+                      }
+                    },
+                    {
+                      "id": "z6RegB",
+                      "type": "ref",
+                      "ref": "wPbIp",
+                      "name": "Packet capture",
+                      "width": "fill_container",
+                      "descendants": {
+                        "j1J75": {
+                          "content": "Packet capture",
+                          "fill": "$foreground/foreground"
+                        },
+                        "L6Z5jA": {
+                          "fill": "$chart/track",
+                          "cornerRadius": 4
+                        },
+                        "dMFUm": {
+                          "width": 17,
+                          "cornerRadius": 4
+                        },
+                        "uTqdm": {
+                          "content": "4%"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "DJxkA",
+          "name": "Footnote",
+          "width": "fill_container",
+          "stroke": "$separator/separator",
+          "strokeWidth": {
+            "top": 1
+          },
+          "strokeAlignment": "inner",
+          "layout": "vertical",
+          "gap": 6,
+          "padding": [
+            16,
+            0,
+            0,
+            0
+          ],
+          "children": [
+            {
+              "type": "text",
+              "id": "BPXtv",
+              "name": "Note",
+              "fill": "$foreground/muted",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": "All figures are approximate and self-reported. Reports are anonymous; extended reports are signed by a key the install derives locally, which stops impersonation but not invented installs.",
+              "lineHeight": 1.5,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "normal"
+            },
+            {
+              "type": "text",
+              "id": "N1Jwcs",
+              "name": "Note",
+              "fill": "$foreground/muted",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": "Install IDs are stored only as keyed hashes. Activity records expire 90 days after an install's last report, and daily aggregates are kept for 24 months. No IP address or raw report is stored.",
+              "lineHeight": 1.5,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "normal"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/telemetry-receiver/design-export/json/jy9Rn.json b/telemetry-receiver/design-export/json/jy9Rn.json
new file mode 100644
index 000000000..717838c48
--- /dev/null
+++ b/telemetry-receiver/design-export/json/jy9Rn.json
@@ -0,0 +1,66 @@
+{
+  "type": "frame",
+  "id": "jy9Rn",
+  "x": 8327.959083557127,
+  "y": 2040.8789062499995,
+  "name": "Receiver / Extended — none in range",
+  "theme": {
+    "semantic": "dark"
+  },
+  "width": 1440,
+  "fill": "$background/background",
+  "layout": "vertical",
+  "gap": 16,
+  "padding": [
+    32,
+    40
+  ],
+  "children": [
+    {
+      "type": "text",
+      "id": "Xb6cp",
+      "name": "Heading",
+      "fill": "$foreground/foreground",
+      "content": "Extended reports",
+      "fontFamily": "$typography/font-mono",
+      "fontSize": 20,
+      "fontWeight": "600"
+    },
+    {
+      "type": "frame",
+      "id": "TRz9s",
+      "name": "Message",
+      "width": "fill_container",
+      "fill": "$surface/surface",
+      "cornerRadius": "$radius/3xl",
+      "stroke": "$border",
+      "strokeWidth": 1,
+      "strokeAlignment": "inner",
+      "gap": 12,
+      "padding": 20,
+      "alignItems": "center",
+      "children": [
+        {
+          "type": "icon",
+          "id": "tN7f3",
+          "name": "Icon",
+          "width": 18,
+          "height": 18,
+          "icon": "info",
+          "library": "lucide",
+          "fill": "$foreground/muted"
+        },
+        {
+          "type": "text",
+          "id": "NZUcy",
+          "name": "Text",
+          "fill": "$foreground/secondary",
+          "content": "No reports in this range included extended data. Basic figures above still cover every report.",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 14,
+          "fontWeight": "normal"
+        }
+      ]
+    }
+  ]
+}
diff --git a/telemetry-receiver/design-export/json/y49Ie.json b/telemetry-receiver/design-export/json/y49Ie.json
new file mode 100644
index 000000000..c6dae311f
--- /dev/null
+++ b/telemetry-receiver/design-export/json/y49Ie.json
@@ -0,0 +1,131 @@
+{
+  "type": "frame",
+  "id": "y49Ie",
+  "x": 3567.959083557127,
+  "y": 2040.8789062499995,
+  "name": "Telemetry components",
+  "theme": {
+    "semantic": "dark"
+  },
+  "fill": "$background/background",
+  "gap": 48,
+  "padding": 32,
+  "children": [
+    {
+      "type": "frame",
+      "id": "sDDfo",
+      "name": "Telemetry/Stat tile",
+      "reusable": true,
+      "width": 280,
+      "fill": "$surface/surface",
+      "cornerRadius": "$radius/3xl",
+      "stroke": "$border",
+      "strokeWidth": 1,
+      "strokeAlignment": "inner",
+      "effect": {
+        "type": "shadow",
+        "shadowType": "outer",
+        "color": "#0000000A",
+        "offset": {
+          "x": 0,
+          "y": 2
+        },
+        "blur": 4
+      },
+      "layout": "vertical",
+      "gap": 6,
+      "padding": 16,
+      "children": [
+        {
+          "type": "text",
+          "id": "yia1E",
+          "name": "Label",
+          "fill": "$foreground/secondary",
+          "content": "Reports, latest day",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 13,
+          "fontWeight": "normal"
+        },
+        {
+          "type": "text",
+          "id": "tZRdh",
+          "name": "Value",
+          "fill": "$foreground/foreground",
+          "content": "1,284",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 28,
+          "fontWeight": "600"
+        },
+        {
+          "type": "text",
+          "id": "oPQEN",
+          "name": "Note",
+          "fill": "$foreground/muted",
+          "content": "2026-10-06 (UTC)",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 12,
+          "fontWeight": "normal"
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "wPbIp",
+      "name": "Telemetry/Share row",
+      "reusable": true,
+      "width": 420,
+      "gap": 12,
+      "alignItems": "center",
+      "children": [
+        {
+          "type": "text",
+          "id": "j1J75",
+          "name": "Label",
+          "fill": "$foreground/foreground",
+          "textGrowth": "fixed-width",
+          "width": 128,
+          "content": "k3s",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 13,
+          "fontWeight": "normal"
+        },
+        {
+          "type": "frame",
+          "id": "L6Z5jA",
+          "name": "Track",
+          "width": "fill_container",
+          "height": 12,
+          "children": [
+            {
+              "type": "rectangle",
+              "cornerRadius": [
+                0,
+                4,
+                4,
+                0
+              ],
+              "id": "dMFUm",
+              "name": "Bar",
+              "fill": "$chart/series-1",
+              "width": 140,
+              "height": 12
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "uTqdm",
+          "name": "Value",
+          "fill": "$foreground/secondary",
+          "textGrowth": "fixed-width",
+          "width": 48,
+          "content": "48%",
+          "textAlign": "right",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 13,
+          "fontWeight": "normal"
+        }
+      ]
+    }
+  ]
+}
diff --git a/telemetry-receiver/design-export/screenshots/HBYBE.png b/telemetry-receiver/design-export/screenshots/HBYBE.png
new file mode 100644
index 000000000..82c5c3f22
Binary files /dev/null and b/telemetry-receiver/design-export/screenshots/HBYBE.png differ
diff --git a/telemetry-receiver/design-export/screenshots/Z079vK.png b/telemetry-receiver/design-export/screenshots/Z079vK.png
new file mode 100644
index 000000000..43319786c
Binary files /dev/null and b/telemetry-receiver/design-export/screenshots/Z079vK.png differ
diff --git a/telemetry-receiver/design-export/screenshots/a7wUpP.png b/telemetry-receiver/design-export/screenshots/a7wUpP.png
new file mode 100644
index 000000000..2c1540d29
Binary files /dev/null and b/telemetry-receiver/design-export/screenshots/a7wUpP.png differ
diff --git a/telemetry-receiver/design-export/screenshots/i0xK1E.png b/telemetry-receiver/design-export/screenshots/i0xK1E.png
new file mode 100644
index 000000000..14954dd89
Binary files /dev/null and b/telemetry-receiver/design-export/screenshots/i0xK1E.png differ
diff --git a/telemetry-receiver/design-export/screenshots/jy9Rn.png b/telemetry-receiver/design-export/screenshots/jy9Rn.png
new file mode 100644
index 000000000..38b4ec03f
Binary files /dev/null and b/telemetry-receiver/design-export/screenshots/jy9Rn.png differ
diff --git a/telemetry-receiver/design-export/screenshots/y49Ie.png b/telemetry-receiver/design-export/screenshots/y49Ie.png
new file mode 100644
index 000000000..7e4581348
Binary files /dev/null and b/telemetry-receiver/design-export/screenshots/y49Ie.png differ
diff --git a/telemetry-receiver/design-export/variables.json b/telemetry-receiver/design-export/variables.json
new file mode 100644
index 000000000..ba45d53b0
--- /dev/null
+++ b/telemetry-receiver/design-export/variables.json
@@ -0,0 +1,168 @@
+{
+  "accent/accent": {
+    "dark": "#FF4FA3",
+    "light": "#DB2777"
+  },
+  "accent/foreground": {
+    "dark": "#FFFFFF",
+    "light": "#FFFFFF"
+  },
+  "accent/soft": {
+    "dark": "#331525",
+    "light": "#FFFFFF"
+  },
+  "accent/soft-foreground": {
+    "dark": "#FF8AC4",
+    "light": "#BE185D"
+  },
+  "background/background": {
+    "dark": "#121114",
+    "light": "#FFFFFF"
+  },
+  "border": {
+    "dark": "#2C2932",
+    "light": "#EFC3D6"
+  },
+  "chart/baseline": {
+    "dark": "#2C2932",
+    "light": "#EFC3D6"
+  },
+  "chart/grid": {
+    "dark": "#232128",
+    "light": "#F8E6EE"
+  },
+  "chart/series-1": {
+    "dark": "#EC4899",
+    "light": "#DB2777"
+  },
+  "chart/series-2": {
+    "dark": "#3987e5",
+    "light": "#2a78d6"
+  },
+  "chart/track": {
+    "dark": "#EC48992E",
+    "light": "#DB27771F"
+  },
+  "danger/danger": {
+    "dark": "#E0304F",
+    "light": "#DC2828"
+  },
+  "danger/foreground": {
+    "dark": "#FCFCFC",
+    "light": "#FCFCFC"
+  },
+  "danger/soft": {
+    "dark": "#2E1317",
+    "light": "#FEE2E2"
+  },
+  "danger/soft-foreground": {
+    "dark": "#F87171",
+    "light": "#EF4444"
+  },
+  "default/default": {
+    "dark": "#232128",
+    "light": "#F6DCE7"
+  },
+  "default/foreground": {
+    "dark": "#EDE9F0",
+    "light": "#2A0F1E"
+  },
+  "field/background": {
+    "dark": "#17151A",
+    "light": "#FFFFFF"
+  },
+  "field/foreground": {
+    "dark": "#FCFCFC",
+    "light": "#2A0F1E"
+  },
+  "field/placeholder": {
+    "dark": "#7B7584",
+    "light": "#8A6C7B"
+  },
+  "foreground/foreground": {
+    "dark": "#F5F3F7",
+    "light": "#2A0F1E"
+  },
+  "foreground/link": {
+    "dark": "#7DB4FF",
+    "light": "#2563EB"
+  },
+  "foreground/muted": {
+    "dark": "#9E98A6",
+    "light": "#6E5262"
+  },
+  "foreground/secondary": {
+    "dark": "#9E98A6",
+    "light": "#6E5262"
+  },
+  "foreground/segment": {
+    "dark": "#F5F3F7",
+    "light": "#2A0F1E"
+  },
+  "muted": {
+    "dark": "#9E98A6",
+    "light": "#6E5262"
+  },
+  "overlay": {
+    "dark": "#1C1A20",
+    "light": "#FFF7FB"
+  },
+  "segment": {
+    "dark": "#1D1B22",
+    "light": "#FFFFFF"
+  },
+  "separator/separator": {
+    "dark": "#232227",
+    "light": "#EFC3D6"
+  },
+  "success/foreground": {
+    "dark": "#18181B",
+    "light": "#18181B"
+  },
+  "success/soft": {
+    "dark": "#0B2211",
+    "light": "#E0FAE4"
+  },
+  "success/soft-foreground": {
+    "dark": "#42BD66",
+    "light": "#006924"
+  },
+  "success/success": {
+    "dark": "#21C45D",
+    "light": "#21C45D"
+  },
+  "surface/secondary": {
+    "dark": "#17151A",
+    "light": "#F8DDE9"
+  },
+  "surface/surface": {
+    "dark": "#1C1A20",
+    "light": "#FFF7FB"
+  },
+  "surface/tertiary": {
+    "dark": "#141317",
+    "light": "#F8DDE9"
+  },
+  "typography/font-mono": {
+    "default": "JetBrains Mono"
+  },
+  "typography/font-sans": {
+    "default": "Geist"
+  },
+  "warning/foreground": {
+    "dark": "#18181B",
+    "light": "#18181B"
+  },
+  "warning/soft": {
+    "dark": "#331F05",
+    "light": "#FEF3C7"
+  },
+  "warning/soft-foreground": {
+    "dark": "#F6AD4C",
+    "light": "#92400E"
+  },
+  "warning/warning": {
+    "dark": "#F59F0A",
+    "light": "#F59F0A"
+  }
+}
diff --git a/telemetry-receiver/go.mod b/telemetry-receiver/go.mod
index 01191b8c0..efc5029c2 100644
--- a/telemetry-receiver/go.mod
+++ b/telemetry-receiver/go.mod
@@ -2,18 +2,35 @@ module github.com/GameplanePanel/gameplane/telemetry-receiver
 
 go 1.26.0
 
-require github.com/prometheus/client_golang v1.24.1
+require (
+	github.com/GameplanePanel/gameplane/telemetryschema v0.0.0-00010101000000-000000000000
+	github.com/prometheus/client_golang v1.24.1
+	modernc.org/sqlite v1.60.1
+)
+
+// telemetryschema is an in-repo module (no published version); resolve it
+// locally both inside the go.work workspace and for standalone
+// `go build ./telemetry-receiver/...`.
+replace github.com/GameplanePanel/gameplane/telemetryschema => ../telemetryschema
 
 require (
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/google/uuid v1.6.0 // indirect
 	github.com/klauspost/compress v1.19.2 // indirect
+	github.com/mattn/go-isatty v0.0.24 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
+	github.com/ncruces/go-strftime v1.0.0 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.70.1 // indirect
 	github.com/prometheus/procfs v0.21.1 // indirect
-	golang.org/x/sys v0.47.0 // indirect
+	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
+	golang.org/x/sys v0.48.0 // indirect
 	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
+	modernc.org/libc v1.77.1 // indirect
+	modernc.org/mathutil v1.7.1 // indirect
+	modernc.org/memory v1.12.1 // indirect
 )
diff --git a/telemetry-receiver/go.sum b/telemetry-receiver/go.sum
index df703f664..fbffac2a6 100644
--- a/telemetry-receiver/go.sum
+++ b/telemetry-receiver/go.sum
@@ -4,14 +4,26 @@ github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UF
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
+github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3 h1:LMLX+LgTNWpfvCBdFebv6EsYotImrt/Ppc5cXIriCSo=
+github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3/go.mod h1:jl5iWTm0/hd5PjEYEOuwAJ57L/CibdZfrqZ5XA5GrCk=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
+github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
 github.com/klauspost/compress v1.19.2 h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=
 github.com/klauspost/compress v1.19.2/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
+github.com/mattn/go-isatty v0.0.24 h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI=
+github.com/mattn/go-isatty v0.0.24/go.mod h1:nMCL3Zebbrt45jsMDgnfIwz6ydEQApk5oEI3HqDio6A=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
+github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w=
+github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/prometheus/client_golang v1.24.1 h1:JnJkREXzWxUdCuPFpIWZiPispT9xVV59uiuyR2bPlnU=
@@ -22,15 +34,51 @@ github.com/prometheus/common v0.70.1 h1:1HvjP4D5oL3t8RsPlwxA9onvvStjtIHYE5XuuwOi
 github.com/prometheus/common v0.70.1/go.mod h1:VdFUQDMZK3VLkurFUVhia6uys/0suUp86TJz5qbJRhc=
 github.com/prometheus/procfs v0.21.1 h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI=
 github.com/prometheus/procfs v0.21.1/go.mod h1:aB55Cww9pdSJVHk0hUf0inxWyyjPogFIjmHKYgMKmtY=
+github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
+github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
-golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
-golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
+golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
+golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
+golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
+golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
+golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/tools v0.50.0 h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU=
+golang.org/x/tools v0.50.0/go.mod h1:7ulVMw3831Mwi5EZD6RomGyffr4VFjuNYXf2BbCEAV0=
 google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=
 google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+modernc.org/cc/v4 v4.29.7 h1:q+NXGJ0bK3b4TXFYQQVr9pYETGnmwFWkrUzJnMya/Tg=
+modernc.org/cc/v4 v4.29.7/go.mod h1:OnovgIhbbMXMu1aISnJ0wvVD1KnW+cAUJkIrAWh+kVI=
+modernc.org/ccgo/v4 v4.36.1 h1:ZNIUZAryN0UgnJwtyxrdEzcFc3yD4Cu4AzjfPXsLsIE=
+modernc.org/ccgo/v4 v4.36.1/go.mod h1:rrtGc2QkS239nYb/mQNuBMyjq3/y3ZXWbBjPoV3wqzA=
+modernc.org/fileutil v1.4.0 h1:j6ZzNTftVS054gi281TyLjHPp6CPHr2KCxEXjEbD6SM=
+modernc.org/fileutil v1.4.0/go.mod h1:EqdKFDxiByqxLk8ozOxObDSfcVOv/54xDs/DUHdvCUU=
+modernc.org/gc/v2 v2.6.5 h1:nyqdV8q46KvTpZlsw66kWqwXRHdjIlJOhG6kxiV/9xI=
+modernc.org/gc/v2 v2.6.5/go.mod h1:YgIahr1ypgfe7chRuJi2gD7DBQiKSLMPgBQe9oIiito=
+modernc.org/gc/v3 v3.1.5 h1:21ldfPfRYE31Tb7B3mwAK8gy1AxP4+dKjrOQPfqakoc=
+modernc.org/gc/v3 v3.1.5/go.mod h1:HFK/6AGESC7Ex+EZJhJ2Gni6cTaYpSMmU/cT9RmlfYY=
+modernc.org/goabi0 v0.2.0 h1:HvEowk7LxcPd0eq6mVOAEMai46V+i7Jrj13t4AzuNks=
+modernc.org/goabi0 v0.2.0/go.mod h1:CEFRnnJhKvWT1c1JTI3Avm+tgOWbkOu5oPA8eH8LnMI=
+modernc.org/libc v1.77.1 h1:Ct8j47QtiZ1Enj2DtFXQtUqrPCAjdCmPjtCuvrYQ0Hs=
+modernc.org/libc v1.77.1/go.mod h1:87/pZ4L6nD1zqW4nItuS12YO7hN1igAah34xjnQo/W0=
+modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU=
+modernc.org/mathutil v1.7.1/go.mod h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg=
+modernc.org/memory v1.12.1 h1:nFMiWrpStgZczNl6XI9GnIk/rWhYIyHGUaR04pGbp9g=
+modernc.org/memory v1.12.1/go.mod h1:/JP4VbVC+K5sU2wZi9bHoq2MAkCnrt2r98UGeSK7Mjw=
+modernc.org/opt v0.2.0 h1:tGyef5ApycA7FSEOMraay9SaTk5zmbx7Tu+cJs4QKZg=
+modernc.org/opt v0.2.0/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns=
+modernc.org/sortutil v1.2.1 h1:+xyoGf15mM3NMlPDnFqrteY07klSFxLElE2PVuWIJ7w=
+modernc.org/sortutil v1.2.1/go.mod h1:7ZI3a3REbai7gzCLcotuw9AC4VZVpYMjDzETGsSMqJE=
+modernc.org/sqlite v1.60.1 h1:/blz53O951KWFOso4QQvEs/Fq6cDBKLtMVrYNSeJVKw=
+modernc.org/sqlite v1.60.1/go.mod h1:1dIoEagfDE72QytD5scH1lxARtaUgKgHC/NuApA27r0=
+modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0=
+modernc.org/strutil v1.2.1/go.mod h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A=
+modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=
+modernc.org/token v1.1.0/go.mod h1:UGzOrNV1mAFSEB63lOFHIpNRUVMvYTc6yu1SMY/XTDM=
diff --git a/telemetry-receiver/ingest.go b/telemetry-receiver/ingest.go
new file mode 100644
index 000000000..dd51d346b
--- /dev/null
+++ b/telemetry-receiver/ingest.go
@@ -0,0 +1,162 @@
+package main
+
+import (
+	"context"
+	"crypto/subtle"
+	"database/sql"
+	"errors"
+	"fmt"
+	"io"
+	"log/slog"
+	"net/http"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+const (
+	// fleetCap is the stored fleet-size value for "more than 1000": exact
+	// counts 0-1000 are kept, anything larger shares this row (research R4).
+	fleetCap = 1001
+	// maxSummedCount clamps one report's servers/templates contribution to
+	// the daily sums, so a hostile count cannot overflow the integer column.
+	maxSummedCount = 1_000_000
+)
+
+// Fleet histogram metric names stored in daily_fleet.metric.
+const (
+	fleetMetricServers   = "servers"
+	fleetMetricTemplates = "templates"
+)
+
+func (s *server) ingest(w http.ResponseWriter, req *http.Request) {
+	if s.cfg.authToken != "" {
+		got := req.Header.Get("Authorization")
+		if subtle.ConstantTimeCompare([]byte(got), []byte(s.cfg.authToken)) != 1 {
+			http.Error(w, "unauthorized", http.StatusUnauthorized)
+			return
+		}
+	}
+	// Proof-of-work comes after AUTH_TOKEN and before the body is read, so a
+	// refused report costs one HMAC and one hash (spec 022 R21).
+	if !s.requirePoW(w, req) {
+		return
+	}
+	// Read the whole body first so the size limit applies to all of it, not
+	// just to the part a JSON decoder happens to consume.
+	body, err := io.ReadAll(http.MaxBytesReader(w, req.Body, maxBody))
+	if err != nil {
+		var tooBig *http.MaxBytesError
+		if errors.As(err, &tooBig) {
+			http.Error(w, "body too large", http.StatusRequestEntityTooLarge)
+			return
+		}
+		http.Error(w, "invalid payload", http.StatusBadRequest)
+		return
+	}
+	rep, _, err := telemetryschema.Decode(body)
+	if err != nil {
+		http.Error(w, "invalid payload", http.StatusBadRequest)
+		return
+	}
+	if rep.Servers < 0 || rep.Templates < 0 {
+		http.Error(w, "invalid payload", http.StatusBadRequest)
+		return
+	}
+	// A report whose ext part was dropped by Decode (bad install ID) comes
+	// back with Ext == nil and is counted as basic.
+	if rep.Ext != nil {
+		s.ingestExtended(w, req, body, rep)
+		return
+	}
+	p := payload{Version: rep.Version, Servers: rep.Servers, Templates: rep.Templates}
+	// The per-source daily limit counts accepted reports only, so it sits
+	// after validation: a malformed request never uses up a source's budget.
+	// The address is used for the counter and then dropped (FR-014).
+	if !s.daily.take(sourceIP(req, s.cfg.trustedProxyCIDRs), s.now()) {
+		s.rateLimited.WithLabelValues(routeIngest).Inc()
+		http.Error(w, "rate limit exceeded", http.StatusTooManyRequests)
+		return
+	}
+	version := s.versionLabel(p.Version)
+	if err := s.store.recordBasic(req.Context(), dayString(s.now()), version, p.Servers, p.Templates); err != nil {
+		slog.Error("telemetry report not stored", "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+
+	slog.Info("telemetry report",
+		"version", version, "servers", p.Servers, "templates", p.Templates)
+	s.reports.WithLabelValues(version).Inc()
+	s.servers.Observe(float64(p.Servers))
+	s.templates.Observe(float64(p.Templates))
+	w.WriteHeader(http.StatusNoContent)
+}
+
+// versionLabel retains the first 128 valid versions for this process.
+// Overflow reports still count, but share one label. Never evict entries:
+// CounterVec would otherwise retain every old label and keep growing.
+func (s *server) versionLabel(version string) string {
+	if !telemetryschema.VersionRE.MatchString(version) || version == "invalid" {
+		return "invalid"
+	}
+	if version == "other" {
+		return "other"
+	}
+	s.versionMu.Lock()
+	defer s.versionMu.Unlock()
+	if _, ok := s.versions[version]; ok {
+		return version
+	}
+	if len(s.versions) >= maxVersionLabels {
+		return "other"
+	}
+	s.versions[version] = struct{}{}
+	return version
+}
+
+// recordBasic writes one accepted basic report into the aggregates for day
+// in a single transaction: daily_basic, daily_version, daily_fleet (two
+// rows) and meta.reports_total. version must already be a bounded label
+// (versionLabel). Nothing identifying the report or its source is stored.
+func (s *store) recordBasic(ctx context.Context, day, version string, servers, templates int) error {
+	return s.writeTx(ctx, func(tx *sql.Tx) error {
+		return writeBasic(ctx, tx, day, version, servers, templates)
+	})
+}
+
+// writeBasic is the transaction body of recordBasic, shared with the
+// extended path, which also counts the basic part of its report.
+func writeBasic(ctx context.Context, tx *sql.Tx, day, version string, servers, templates int) error {
+	if _, err := tx.ExecContext(ctx,
+		`INSERT INTO daily_basic (day, reports, servers_sum, templates_sum) VALUES (?, 1, ?, ?)
+		 ON CONFLICT (day) DO UPDATE SET
+		   reports = reports + 1,
+		   servers_sum = servers_sum + excluded.servers_sum,
+		   templates_sum = templates_sum + excluded.templates_sum`,
+		day, min(servers, maxSummedCount), min(templates, maxSummedCount)); err != nil {
+		return fmt.Errorf("record daily_basic: %w", err)
+	}
+	if _, err := tx.ExecContext(ctx,
+		`INSERT INTO daily_version (day, version, reports) VALUES (?, ?, 1)
+		 ON CONFLICT (day, version) DO UPDATE SET reports = reports + 1`,
+		day, version); err != nil {
+		return fmt.Errorf("record daily_version: %w", err)
+	}
+	for _, f := range []struct {
+		metric string
+		n      int
+	}{{fleetMetricServers, servers}, {fleetMetricTemplates, templates}} {
+		if _, err := tx.ExecContext(ctx,
+			`INSERT INTO daily_fleet (day, metric, value, reports) VALUES (?, ?, ?, 1)
+			 ON CONFLICT (day, metric, value) DO UPDATE SET reports = reports + 1`,
+			day, f.metric, min(f.n, fleetCap)); err != nil {
+			return fmt.Errorf("record daily_fleet %s: %w", f.metric, err)
+		}
+	}
+	if _, err := tx.ExecContext(ctx,
+		`UPDATE meta SET value = CAST(CAST(value AS INTEGER) + 1 AS TEXT) WHERE key = ?`,
+		metaReportsTotal); err != nil {
+		return fmt.Errorf("record reports_total: %w", err)
+	}
+	return nil
+}
diff --git a/telemetry-receiver/ingest_ext.go b/telemetry-receiver/ingest_ext.go
new file mode 100644
index 000000000..8faa2cd63
--- /dev/null
+++ b/telemetry-receiver/ingest_ext.go
@@ -0,0 +1,362 @@
+package main
+
+import (
+	"context"
+	"crypto/hmac"
+	"crypto/sha256"
+	"database/sql"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"log/slog"
+	"net/http"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// Dimension names stored in daily_dim.dim (data-model.md, Receiver).
+const (
+	dimK8s      = "k8s"
+	dimDistro   = "distro"
+	dimArch     = "arch"
+	dimNodes    = "nodes"
+	dimTunnel   = "tunnel"
+	dimClusters = "clusters"
+	dimDB       = "db"
+	dimLanguage = "language"
+	dimFeature  = "feature"
+)
+
+// featureNames are the boolean features stored under dimFeature, in display
+// order. A daily_dim row exists only when the feature is on.
+var featureNames = []string{"wakeOnConnect", "capture", "backups", "sso", "auditForwarding"}
+
+// gameCustom is the daily_game.module of every non-catalog game server.
+const gameCustom = "custom"
+
+// Refusal reasons of the identity checks (contracts/report-schema.md,
+// Signature and claim). They are the JSON error codes and the label values
+// of gameplane_telemetry_refused_total.
+const (
+	refuseBadSignature = "bad_signature"
+	refuseStale        = "stale"
+	refuseIDClaimed    = "id_claimed"
+	refuseReplay       = "replay"
+)
+
+// errIDClaimed and errReplay are returned by checkClaim and, through the
+// write transaction, by recordExtended.
+var (
+	errIDClaimed = errors.New(refuseIDClaimed)
+	errReplay    = errors.New(refuseReplay)
+)
+
+// refusalStatus maps a refusal reason to its HTTP status.
+var refusalStatus = map[string]int{
+	refuseBadSignature: http.StatusForbidden,
+	refuseStale:        http.StatusForbidden,
+	refuseReplay:       http.StatusForbidden,
+	refuseIDClaimed:    http.StatusConflict,
+}
+
+// refuse answers a refused report with a fixed JSON body and counts it. A
+// refused report changes no stored data (FR-036).
+func (s *server) refuse(w http.ResponseWriter, reason string) {
+	s.refused.WithLabelValues(reason).Inc()
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(refusalStatus[reason])
+	_, _ = w.Write([]byte(`{"error":"` + reason + `"}`))
+}
+
+// installHMAC returns HMAC-SHA256(pepper, installID), hex-encoded: the only
+// form of an install ID the receiver stores (research R5).
+func (s *store) installHMAC(installID string) string {
+	m := hmac.New(sha256.New, s.pepper)
+	m.Write([]byte(installID))
+	return hex.EncodeToString(m.Sum(nil))
+}
+
+// ingestExtended handles a report that carries a valid ext part. The identity
+// checks (verifyExtSignature, precheckClaim) run first, before the limiter
+// counts the report and before any write.
+func (s *server) ingestExtended(w http.ResponseWriter, req *http.Request, body []byte, rep telemetryschema.Report) {
+	ext := rep.Ext
+	if reason := s.verifyExtSignature(req.Header.Get(telemetryschema.SignatureHeader), body, ext); reason != "" {
+		s.refuse(w, reason)
+		return
+	}
+	idHMAC := s.store.installHMAC(ext.InstallID)
+	if reason := s.precheckClaim(req.Context(), idHMAC, ext); reason != "" {
+		s.refuse(w, reason)
+		return
+	}
+	if !s.daily.take(sourceIP(req, s.cfg.trustedProxyCIDRs), s.now()) {
+		s.rateLimited.WithLabelValues(routeIngest).Inc()
+		http.Error(w, "rate limit exceeded", http.StatusTooManyRequests)
+		return
+	}
+	version := s.versionLabel(rep.Version)
+	outcome, err := s.store.recordExtended(req.Context(), extRecord{
+		Day: dayString(s.now()), Version: version, Servers: rep.Servers, Templates: rep.Templates,
+		IDHMAC: idHMAC, Ext: ext,
+	})
+	switch {
+	case errors.Is(err, errIDClaimed):
+		s.refuse(w, refuseIDClaimed)
+		return
+	case errors.Is(err, errReplay):
+		s.refuse(w, refuseReplay)
+		return
+	case err != nil:
+		slog.Error("telemetry report not stored", "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+	if outcome == extDuplicate {
+		s.duplicates.Inc()
+		w.WriteHeader(http.StatusNoContent)
+		return
+	}
+	slog.Info("telemetry report",
+		"version", version, "servers", rep.Servers, "templates", rep.Templates, "extended", true)
+	s.reports.WithLabelValues(version).Inc()
+	s.servers.Observe(float64(rep.Servers))
+	s.templates.Observe(float64(rep.Templates))
+	s.extReports.Inc()
+	w.WriteHeader(http.StatusNoContent)
+}
+
+// extRecord is one extended report that passed the identity checks.
+type extRecord struct {
+	Day       string
+	Version   string // a bounded label from versionLabel
+	Servers   int
+	Templates int
+	IDHMAC    string
+	Ext       *telemetryschema.Extended
+}
+
+// extOutcome is how recordExtended counted a report.
+type extOutcome int
+
+const (
+	// extNew: the first report of an install ID (new_installs++).
+	extNew extOutcome = iota
+	// extReturning: a known install's first report of the UTC day.
+	extReturning
+	// extDuplicate: a repeat within the UTC day; only duplicates changed.
+	extDuplicate
+)
+
+// activityRow is one stored activity record, as far as the checks need it.
+type activityRow struct {
+	KeyFP      string
+	LastSeen   string
+	LastSentAt string // RFC 3339 UTC
+}
+
+// rowQuerier is satisfied by *sql.DB and *sql.Tx.
+type rowQuerier interface {
+	QueryRowContext(ctx context.Context, query string, args ...any) *sql.Row
+}
+
+// lookupActivity reads the activity record of idHMAC.
+func lookupActivity(ctx context.Context, q rowQuerier, idHMAC string) (activityRow, bool, error) {
+	var r activityRow
+	err := q.QueryRowContext(ctx,
+		`SELECT key_fp, last_seen, last_sent_at FROM activity WHERE id_hmac = ?`, idHMAC).
+		Scan(&r.KeyFP, &r.LastSeen, &r.LastSentAt)
+	if errors.Is(err, sql.ErrNoRows) {
+		return activityRow{}, false, nil
+	}
+	if err != nil {
+		return activityRow{}, false, fmt.Errorf("read activity: %w", err)
+	}
+	return r, true, nil
+}
+
+// recordExtended counts one extended report in a single transaction (research
+// R5): insert, update or duplicate, then the aggregates. A claim or replay
+// failure from checkClaim rolls the transaction back and is returned as
+// errIDClaimed or errReplay.
+func (s *store) recordExtended(ctx context.Context, r extRecord) (extOutcome, error) {
+	outcome := extNew
+	err := s.writeTx(ctx, func(tx *sql.Tx) error {
+		keyFP := telemetryschema.KeyFingerprint(r.Ext.Key)
+		// Full precision: a report sent at a fractional second must not look
+		// later than its own stored send time when replayed.
+		sentAt := r.Ext.SentAt.UTC().Format(time.RFC3339Nano)
+		row, found, err := lookupActivity(ctx, tx, r.IDHMAC)
+		if err != nil {
+			return err
+		}
+		switch {
+		case !found:
+			if _, err := tx.ExecContext(ctx,
+				`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version)
+				 VALUES (?, ?, ?, ?, ?, ?)`,
+				r.IDHMAC, keyFP, r.Day, r.Day, sentAt, r.Version); err != nil {
+				return fmt.Errorf("insert activity: %w", err)
+			}
+		default:
+			if err := checkClaim(row, keyFP, r.Ext.SentAt); err != nil {
+				return err
+			}
+			if row.LastSeen >= r.Day {
+				outcome = extDuplicate
+				// A duplicate changes no aggregate, but its send time still
+				// becomes the latest accepted one; otherwise a captured
+				// duplicate could be replayed later the same day, or the next
+				// day as that day's report.
+				if _, err := tx.ExecContext(ctx,
+					`UPDATE activity SET last_sent_at = ? WHERE id_hmac = ?`, sentAt, r.IDHMAC); err != nil {
+					return fmt.Errorf("update activity send time: %w", err)
+				}
+				if _, err := tx.ExecContext(ctx,
+					`INSERT INTO daily_basic (day, duplicates) VALUES (?, 1)
+					 ON CONFLICT (day) DO UPDATE SET duplicates = duplicates + 1`, r.Day); err != nil {
+					return fmt.Errorf("record duplicate: %w", err)
+				}
+				return nil
+			}
+			outcome = extReturning
+			if _, err := tx.ExecContext(ctx,
+				`UPDATE activity SET last_seen = ?, last_sent_at = ?, last_version = ? WHERE id_hmac = ?`,
+				r.Day, sentAt, r.Version, r.IDHMAC); err != nil {
+				return fmt.Errorf("update activity: %w", err)
+			}
+		}
+		if err := writeBasic(ctx, tx, r.Day, r.Version, r.Servers, r.Templates); err != nil {
+			return err
+		}
+		return writeExtendedAggregates(ctx, tx, r, outcome == extNew)
+	})
+	return outcome, err
+}
+
+// writeExtendedAggregates writes daily_ext, daily_dim and daily_game for one
+// non-duplicate extended report. No attribute is stored next to the install ID.
+func writeExtendedAggregates(ctx context.Context, tx *sql.Tx, r extRecord, isNew bool) error {
+	newInstalls := 0
+	if isNew {
+		newInstalls = 1
+	}
+	if _, err := tx.ExecContext(ctx,
+		`INSERT INTO daily_ext (day, ext_reports, active_installs, new_installs) VALUES (?, 1, 1, ?)
+		 ON CONFLICT (day) DO UPDATE SET
+		   ext_reports = ext_reports + 1,
+		   active_installs = active_installs + 1,
+		   new_installs = new_installs + excluded.new_installs`,
+		r.Day, newInstalls); err != nil {
+		return fmt.Errorf("record daily_ext: %w", err)
+	}
+	e := r.Ext
+	dims := []struct{ dim, value string }{
+		{dimK8s, e.Env.K8s}, {dimDistro, e.Env.Distro}, {dimNodes, e.Env.Nodes},
+		{dimClusters, e.Features.Clusters}, {dimDB, e.Features.DB}, {dimLanguage, e.Features.Language},
+	}
+	for _, a := range e.Env.Arch {
+		dims = append(dims, struct{ dim, value string }{dimArch, a})
+	}
+	for _, t := range e.Features.Tunnels {
+		dims = append(dims, struct{ dim, value string }{dimTunnel, t})
+	}
+	on := map[string]bool{
+		"wakeOnConnect": e.Features.WakeOnConnect, "capture": e.Features.Capture,
+		"backups": e.Features.Backups, "sso": e.Features.SSO, "auditForwarding": e.Features.AuditForwarding,
+	}
+	for _, f := range featureNames {
+		if on[f] {
+			dims = append(dims, struct{ dim, value string }{dimFeature, f})
+		}
+	}
+	for _, d := range dims {
+		if _, err := tx.ExecContext(ctx,
+			`INSERT INTO daily_dim (day, dim, value, installs) VALUES (?, ?, ?, 1)
+			 ON CONFLICT (day, dim, value) DO UPDATE SET installs = installs + 1`,
+			r.Day, d.dim, d.value); err != nil {
+			return fmt.Errorf("record daily_dim %s: %w", d.dim, err)
+		}
+	}
+	games := make(map[string]int, len(e.Games.Official)+1)
+	for module, n := range e.Games.Official {
+		games[module] = n
+	}
+	if e.Games.Custom > 0 {
+		games[gameCustom] += e.Games.Custom
+	}
+	for module, n := range games {
+		if _, err := tx.ExecContext(ctx,
+			`INSERT INTO daily_game (day, module, installs, servers) VALUES (?, ?, 1, ?)
+			 ON CONFLICT (day, module) DO UPDATE SET
+			   installs = installs + 1,
+			   servers = servers + excluded.servers`,
+			r.Day, module, min(n, maxSummedCount)); err != nil {
+			return fmt.Errorf("record daily_game %s: %w", module, err)
+		}
+	}
+	return nil
+}
+
+// The send-time window of an extended report: sentAt must lie in
+// [now - extWindowPast, now + extWindowFuture] (FR-036).
+const (
+	extWindowPast   = 36 * time.Hour
+	extWindowFuture = time.Hour
+)
+
+// verifyExtSignature is the first two identity checks, in contract order: the
+// signature over the exact body bytes under ext.key (bad_signature), then the
+// send-time window (stale). It returns a refusal reason, or "" when the
+// report may continue.
+func (s *server) verifyExtSignature(header string, body []byte, ext *telemetryschema.Extended) string {
+	if err := telemetryschema.Verify(header, ext.Key, body); err != nil {
+		return refuseBadSignature
+	}
+	now := s.now()
+	if ext.SentAt.Before(now.Add(-extWindowPast)) || ext.SentAt.After(now.Add(extWindowFuture)) {
+		return refuseStale
+	}
+	return ""
+}
+
+// precheckClaim is the read-only claim and replay check that runs before the
+// limiter counts the report, so a refused report never uses up a source's
+// budget. It returns a refusal reason, or "". recordExtended repeats the
+// check inside its transaction, which is the authoritative one. A read failure
+// here is not a refusal: the transaction reads again.
+func (s *server) precheckClaim(ctx context.Context, idHMAC string, ext *telemetryschema.Extended) string {
+	row, found, err := lookupActivity(ctx, s.store.db, idHMAC)
+	if err != nil || !found {
+		return ""
+	}
+	switch claimErr := checkClaim(row, telemetryschema.KeyFingerprint(ext.Key), ext.SentAt); {
+	case errors.Is(claimErr, errIDClaimed):
+		return refuseIDClaimed
+	case errors.Is(claimErr, errReplay):
+		return refuseReplay
+	}
+	return ""
+}
+
+// checkClaim decides whether a report may use an existing activity record, in
+// contract order: errIDClaimed when the record belongs to another key
+// (key_fp differs), then errReplay when sentAt is not later than the last
+// accepted sentAt. An unreadable stored send time is an error, never an
+// acceptance.
+func checkClaim(row activityRow, keyFP string, sentAt time.Time) error {
+	if row.KeyFP != keyFP {
+		return errIDClaimed
+	}
+	last, err := time.Parse(time.RFC3339Nano, row.LastSentAt)
+	if err != nil {
+		// Fail closed: an unreadable send time must not switch the replay
+		// check off for this ID.
+		return fmt.Errorf("activity last_sent_at %q: %w", row.LastSentAt, err)
+	}
+	if !sentAt.After(last) {
+		return errReplay
+	}
+	return nil
+}
diff --git a/telemetry-receiver/ingest_ext_test.go b/telemetry-receiver/ingest_ext_test.go
new file mode 100644
index 000000000..dfbb1a1eb
--- /dev/null
+++ b/telemetry-receiver/ingest_ext_test.go
@@ -0,0 +1,410 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// extStart is 12:00 UTC on 2026-10-07, the clock of the extended tests.
+var extStart = time.Date(2026, 10, 7, 12, 0, 0, 0, time.UTC)
+
+// extInstall is a synthetic install: an install ID and the signing secret its
+// key derives from.
+type extInstall struct {
+	id     string
+	secret []byte
+}
+
+// newExtInstall returns install number n. Its ID is a lowercase UUIDv4 and
+// its secret is derived from n, so runs are reproducible.
+func newExtInstall(n int) extInstall {
+	secret := make([]byte, telemetryschema.SecretSize)
+	secret[0], secret[1] = byte(n), byte(n>>8)
+	return extInstall{id: fmt.Sprintf("00000000-0000-4000-8000-%012d", n), secret: secret}
+}
+
+// withSecret returns the same install ID with another signing secret: a
+// different key claiming the same ID.
+func (in extInstall) withSecret(b byte) extInstall {
+	secret := make([]byte, telemetryschema.SecretSize)
+	secret[0], secret[1], secret[2] = 0xEE, 0xEE, b
+	return extInstall{id: in.id, secret: secret}
+}
+
+// report builds a report with an ext part sent at sentAt and returns the body
+// and the signature header value. mod, when non-nil, changes the report before
+// it is encoded and signed. Servers is 3 and templates is 2.
+func (in extInstall) report(t *testing.T, sentAt time.Time, mod func(*telemetryschema.Report)) (string, string) {
+	t.Helper()
+	priv, err := telemetryschema.DeriveKey(in.secret, in.id)
+	if err != nil {
+		t.Fatalf("DeriveKey: %v", err)
+	}
+	rep := telemetryschema.Report{Version: "1.0.0", Servers: 3, Templates: 2, Ext: &telemetryschema.Extended{
+		Schema: telemetryschema.SchemaVersion, InstallID: in.id,
+		Env:   telemetryschema.Env{K8s: "1.31", Distro: "k3s", Arch: []string{"amd64"}, Nodes: "1"},
+		Games: telemetryschema.Games{Official: map[string]int{"minecraft-java": 2}, Custom: 1},
+		Features: telemetryschema.Features{
+			Backups: true, Tunnels: []string{"playit"}, Clusters: "1", DB: "sqlite", Language: "en",
+		},
+		Key: telemetryschema.PublicKeyString(priv), SentAt: sentAt,
+	}}
+	if mod != nil {
+		mod(&rep)
+	}
+	body, err := telemetryschema.Encode(rep)
+	if err != nil {
+		t.Fatalf("Encode: %v", err)
+	}
+	return string(body), telemetryschema.Sign(priv, body)
+}
+
+// newExtServer returns a receiver over a private in-memory store with a
+// controllable clock. The returned pointer is the clock: assign to it to move
+// time.
+func newExtServer(t *testing.T, cfg config, start time.Time) (*server, *time.Time) {
+	t.Helper()
+	s := newServer(cfg)
+	t.Cleanup(func() { _ = s.store.close() })
+	clock := start
+	s.now = func() time.Time { return clock }
+	return s, &clock
+}
+
+// extSend POSTs body to /ingest from a fixed source, with the signature
+// header when sig is not empty.
+func extSend(t *testing.T, s *server, body, sig string) *httptest.ResponseRecorder {
+	t.Helper()
+	r := httptest.NewRequestWithContext(t.Context(), http.MethodPost, "/ingest", strings.NewReader(body))
+	r.RemoteAddr = "192.0.2.1:1000"
+	if sig != "" {
+		r.Header.Set(telemetryschema.SignatureHeader, sig)
+	}
+	w := httptest.NewRecorder()
+	s.ingest(w, r)
+	return w
+}
+
+// extDump returns the full content of every receiver table, so a test can
+// assert that a refused report changed nothing at all (SC-014).
+func extDump(t *testing.T, st *store) string {
+	t.Helper()
+	var b strings.Builder
+	for _, table := range wantTables {
+		rows, err := st.db.QueryContext(context.Background(), "SELECT * FROM "+table+" ORDER BY rowid")
+		if err != nil {
+			t.Fatalf("dump %s: %v", table, err)
+		}
+		cols, err := rows.Columns()
+		if err != nil {
+			t.Fatalf("columns %s: %v", table, err)
+		}
+		fmt.Fprintf(&b, "[%s]\n", table)
+		for rows.Next() {
+			vals := make([]any, len(cols))
+			ptrs := make([]any, len(cols))
+			for i := range vals {
+				ptrs[i] = &vals[i]
+			}
+			if err := rows.Scan(ptrs...); err != nil {
+				t.Fatalf("scan %s: %v", table, err)
+			}
+			fmt.Fprintln(&b, vals...)
+		}
+		if err := rows.Err(); err != nil {
+			t.Fatalf("read %s: %v", table, err)
+		}
+		if err := rows.Close(); err != nil {
+			t.Fatalf("close %s: %v", table, err)
+		}
+	}
+	return b.String()
+}
+
+func TestIngestExtendedFirstReportCountsEverything(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	in := newExtInstall(1)
+	body, sig := in.report(t, extStart, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("status = %d, want 204 (%s)", w.Code, w.Body)
+	}
+	st := s.store
+	day := "2026-10-07"
+	for _, c := range []struct {
+		name, query string
+		args        []any
+		want        int
+	}{
+		{"daily_basic.reports", `SELECT reports FROM daily_basic WHERE day = ?`, []any{day}, 1},
+		{"daily_basic.duplicates", `SELECT duplicates FROM daily_basic WHERE day = ?`, []any{day}, 0},
+		{"daily_version", `SELECT reports FROM daily_version WHERE day = ? AND version = '1.0.0'`, []any{day}, 1},
+		{"daily_ext.ext_reports", `SELECT ext_reports FROM daily_ext WHERE day = ?`, []any{day}, 1},
+		{"daily_ext.active_installs", `SELECT active_installs FROM daily_ext WHERE day = ?`, []any{day}, 1},
+		{"daily_ext.new_installs", `SELECT new_installs FROM daily_ext WHERE day = ?`, []any{day}, 1},
+		{"daily_ext.lapsed_installs", `SELECT lapsed_installs FROM daily_ext WHERE day = ?`, []any{day}, 0},
+		{"dim k8s", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'k8s' AND value = '1.31'`, []any{day}, 1},
+		{"dim distro", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'distro' AND value = 'k3s'`, []any{day}, 1},
+		{"dim arch", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'arch' AND value = 'amd64'`, []any{day}, 1},
+		{"dim nodes", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'nodes' AND value = '1'`, []any{day}, 1},
+		{"dim tunnel", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'tunnel' AND value = 'playit'`, []any{day}, 1},
+		{"dim clusters", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'clusters' AND value = '1'`, []any{day}, 1},
+		{"dim db", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'db' AND value = 'sqlite'`, []any{day}, 1},
+		{"dim language", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'language' AND value = 'en'`, []any{day}, 1},
+		{"dim feature backups", `SELECT installs FROM daily_dim WHERE day = ? AND dim = 'feature' AND value = 'backups'`, []any{day}, 1},
+		{"no row for a feature that is off", `SELECT count(*) FROM daily_dim WHERE day = ? AND dim = 'feature' AND value = 'wakeOnConnect'`, []any{day}, 0},
+		{"feature rows", `SELECT count(*) FROM daily_dim WHERE day = ? AND dim = 'feature'`, []any{day}, 1},
+		{"game official installs", `SELECT installs FROM daily_game WHERE day = ? AND module = 'minecraft-java'`, []any{day}, 1},
+		{"game official servers", `SELECT servers FROM daily_game WHERE day = ? AND module = 'minecraft-java'`, []any{day}, 2},
+		{"game custom installs", `SELECT installs FROM daily_game WHERE day = ? AND module = 'custom'`, []any{day}, 1},
+		{"game custom servers", `SELECT servers FROM daily_game WHERE day = ? AND module = 'custom'`, []any{day}, 1},
+		{"activity rows", `SELECT count(*) FROM activity`, nil, 1},
+	} {
+		if got := countRows(t.Context(), t, st, c.query, c.args...); got != c.want {
+			t.Errorf("%s = %d, want %d", c.name, got, c.want)
+		}
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "1" {
+		t.Errorf("reports_total = %s, want 1", got)
+	}
+	// Only the transformed ID is stored, and the claim is the key fingerprint.
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM activity WHERE id_hmac = ?`, in.id); got != 0 {
+		t.Errorf("the raw install ID is stored: %d rows", got)
+	}
+	var keyFP, firstSeen, lastSeen, lastSent, lastVersion string
+	if err := st.db.QueryRowContext(context.Background(),
+		`SELECT key_fp, first_seen, last_seen, last_sent_at, last_version FROM activity WHERE id_hmac = ?`,
+		st.installHMAC(in.id)).Scan(&keyFP, &firstSeen, &lastSeen, &lastSent, &lastVersion); err != nil {
+		t.Fatalf("read activity: %v", err)
+	}
+	priv, err := telemetryschema.DeriveKey(in.secret, in.id)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if keyFP != telemetryschema.KeyFingerprint(telemetryschema.PublicKeyString(priv)) ||
+		firstSeen != day || lastSeen != day || lastSent != "2026-10-07T12:00:00Z" || lastVersion != "1.0.0" {
+		t.Errorf("activity = %s %s %s %s %s", keyFP, firstSeen, lastSeen, lastSent, lastVersion)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_extended_reports_total"); got != 1 {
+		t.Errorf("extended_reports_total = %v, want 1", got)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_duplicates_total"); got != 0 {
+		t.Errorf("duplicates_total = %v, want 0", got)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0"); got != 1 {
+		t.Errorf("reports_total{version} = %v, want 1", got)
+	}
+}
+
+// extCounter reads an unlabelled counter from the server's registry.
+func extCounter(t *testing.T, s *server, name string) float64 {
+	t.Helper()
+	families, err := s.reg.Gather()
+	if err != nil {
+		t.Fatalf("gather: %v", err)
+	}
+	for _, f := range families {
+		if f.GetName() == name && len(f.Metric) == 1 {
+			return f.Metric[0].GetCounter().GetValue()
+		}
+	}
+	t.Fatalf("metric %s not found", name)
+	return 0
+}
+
+func TestIngestExtendedSameDayRepeatIsADuplicate(t *testing.T) {
+	s, clock := newExtServer(t, config{}, extStart)
+	in := newExtInstall(1)
+	first, firstSig := in.report(t, extStart, nil)
+	if w := extSend(t, s, first, firstSig); w.Code != http.StatusNoContent {
+		t.Fatalf("first: %d", w.Code)
+	}
+	*clock = extStart.Add(2 * time.Hour)
+	second, secondSig := in.report(t, *clock, func(r *telemetryschema.Report) { r.Servers, r.Version = 9, "2.0.0" })
+	if w := extSend(t, s, second, secondSig); w.Code != http.StatusNoContent {
+		t.Fatalf("repeat: %d, want 204", w.Code)
+	}
+	st := s.store
+	day := "2026-10-07"
+	if got := countRows(t.Context(), t, st, `SELECT duplicates FROM daily_basic WHERE day = ?`, day); got != 1 {
+		t.Errorf("duplicates = %d, want 1", got)
+	}
+	// Nothing else changed: the repeat's version and servers were not counted.
+	for _, c := range []struct {
+		name, query string
+		want        int
+	}{
+		{"daily_basic.reports", `SELECT reports FROM daily_basic`, 1},
+		{"daily_basic.servers_sum", `SELECT servers_sum FROM daily_basic`, 3},
+		{"daily_version rows", `SELECT count(*) FROM daily_version`, 1},
+		{"daily_ext.ext_reports", `SELECT ext_reports FROM daily_ext`, 1},
+		{"daily_ext.active_installs", `SELECT active_installs FROM daily_ext`, 1},
+		{"daily_game installs", `SELECT installs FROM daily_game WHERE module = 'minecraft-java'`, 1},
+		{"daily_dim k8s", `SELECT installs FROM daily_dim WHERE dim = 'k8s'`, 1},
+		{"activity rows", `SELECT count(*) FROM activity`, 1},
+	} {
+		if got := countRows(t.Context(), t, st, c.query); got != c.want {
+			t.Errorf("%s = %d, want %d", c.name, got, c.want)
+		}
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "1" {
+		t.Errorf("reports_total = %s, want 1", got)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_duplicates_total"); got != 1 {
+		t.Errorf("duplicates_total = %v, want 1", got)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_extended_reports_total"); got != 1 {
+		t.Errorf("extended_reports_total = %v, want 1", got)
+	}
+}
+
+func TestIngestExtendedReturningInstallOnALaterDay(t *testing.T) {
+	s, clock := newExtServer(t, config{}, extStart)
+	in := newExtInstall(1)
+	body, sig := in.report(t, extStart, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("day 1: %d", w.Code)
+	}
+	*clock = extStart.Add(24 * time.Hour)
+	body, sig = in.report(t, *clock, func(r *telemetryschema.Report) { r.Version = "1.1.0" })
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("day 2: %d", w.Code)
+	}
+	st := s.store
+	if got := countRows(t.Context(), t, st, `SELECT new_installs FROM daily_ext WHERE day = '2026-10-08'`); got != 0 {
+		t.Errorf("new_installs on day 2 = %d, want 0", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT active_installs FROM daily_ext WHERE day = '2026-10-08'`); got != 1 {
+		t.Errorf("active_installs on day 2 = %d, want 1", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM activity`); got != 1 {
+		t.Errorf("activity rows = %d, want 1", got)
+	}
+	var first, last, version string
+	if err := st.db.QueryRowContext(context.Background(),
+		`SELECT first_seen, last_seen, last_version FROM activity`).Scan(&first, &last, &version); err != nil {
+		t.Fatal(err)
+	}
+	if first != "2026-10-07" || last != "2026-10-08" || version != "1.1.0" {
+		t.Errorf("activity = %s %s %s, want 2026-10-07 2026-10-08 1.1.0", first, last, version)
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "2" {
+		t.Errorf("reports_total = %s, want 2", got)
+	}
+}
+
+func TestIngestExtendedWithUnusableInstallIDIsCountedAsBasic(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	in := newExtInstall(1)
+	// An ID that is not a lowercase UUIDv4 makes the receiver drop ext, so no
+	// signature is needed and the report is a basic one.
+	body, _ := in.report(t, extStart, func(r *telemetryschema.Report) { r.Ext.InstallID = "NOT-A-UUID" })
+	if w := extSend(t, s, body, ""); w.Code != http.StatusNoContent {
+		t.Fatalf("status = %d, want 204 (%s)", w.Code, w.Body)
+	}
+	st := s.store
+	if got := countRows(t.Context(), t, st, `SELECT reports FROM daily_basic`); got != 1 {
+		t.Errorf("daily_basic.reports = %d, want 1", got)
+	}
+	for _, table := range []string{"daily_ext", "daily_dim", "daily_game", "activity"} {
+		if got := countRows(t.Context(), t, st, "SELECT count(*) FROM "+table); got != 0 {
+			t.Errorf("%s has %d rows, want 0", table, got)
+		}
+	}
+}
+
+func TestIngestExtendedStructuralErrorIs400(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	in := newExtInstall(1)
+	before := extDump(t, s.store)
+	for name, mod := range map[string]func(*telemetryschema.Report){
+		"schema 2":        func(r *telemetryschema.Report) { r.Ext.Schema = 2 },
+		"no architecture": func(r *telemetryschema.Report) { r.Ext.Env.Arch = nil },
+		"bad key":         func(r *telemetryschema.Report) { r.Ext.Key = "short" },
+	} {
+		body, sig := in.report(t, extStart, mod)
+		if w := extSend(t, s, body, sig); w.Code != http.StatusBadRequest {
+			t.Errorf("%s: status = %d, want 400", name, w.Code)
+		}
+	}
+	if after := extDump(t, s.store); after != before {
+		t.Errorf("a rejected report changed the store:\nbefore:\n%s\nafter:\n%s", before, after)
+	}
+}
+
+func TestDecodePayloadStillRejectsExtendedReports(t *testing.T) {
+	in := newExtInstall(1)
+	body, _ := in.report(t, extStart, nil)
+	if _, err := decodePayload([]byte(body)); err == nil {
+		t.Fatal("decodePayload accepted a report with ext, want errInvalidPayload")
+	}
+}
+
+func TestIngestExtendedCountsAgainstTheSourceLimit(t *testing.T) {
+	s, _ := newExtServer(t, config{ingestSourceDailyLimit: 1}, extStart)
+	a, aSig := newExtInstall(1).report(t, extStart, nil)
+	b, bSig := newExtInstall(2).report(t, extStart, nil)
+	if w := extSend(t, s, a, aSig); w.Code != http.StatusNoContent {
+		t.Fatalf("first: %d", w.Code)
+	}
+	if w := extSend(t, s, b, bSig); w.Code != http.StatusTooManyRequests {
+		t.Fatalf("second: %d, want 429", w.Code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "ingest"); got != 1 {
+		t.Errorf("rate_limited_total{ingest} = %v, want 1", got)
+	}
+	// The limited report left no activity record.
+	if got := countRows(t.Context(), t, s.store, `SELECT count(*) FROM activity`); got != 1 {
+		t.Errorf("activity rows = %d, want 1", got)
+	}
+}
+
+func TestIngestExtendedStoreFailureIs500AndRollsBack(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	if _, err := s.store.db.ExecContext(context.Background(), "DROP TABLE daily_game"); err != nil {
+		t.Fatal(err)
+	}
+	body, sig := newExtInstall(1).report(t, extStart, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusInternalServerError {
+		t.Fatalf("status = %d, want 500", w.Code)
+	}
+	for _, q := range []string{`SELECT count(*) FROM activity`, `SELECT count(*) FROM daily_basic`, `SELECT count(*) FROM daily_ext`} {
+		if got := countRows(t.Context(), t, s.store, q); got != 0 {
+			t.Errorf("%s = %d after a failed report, want 0 (rolled back)", q, got)
+		}
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_extended_reports_total"); got != 0 {
+		t.Errorf("extended_reports_total = %v, want 0", got)
+	}
+}
+
+func TestActivityTableHasExactlyTheSixColumns(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	rows, err := st.db.QueryContext(context.Background(), `SELECT name FROM pragma_table_info('activity') ORDER BY cid`)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer func() { _ = rows.Close() }()
+	var got []string
+	for rows.Next() {
+		var name string
+		if err := rows.Scan(&name); err != nil {
+			t.Fatal(err)
+		}
+		got = append(got, name)
+	}
+	if err := rows.Err(); err != nil {
+		t.Fatal(err)
+	}
+	want := []string{"id_hmac", "key_fp", "first_seen", "last_seen", "last_sent_at", "last_version"}
+	if !reflect.DeepEqual(got, want) {
+		t.Fatalf("activity columns = %v, want exactly %v (FR-014, SC-012)", got, want)
+	}
+}
diff --git a/telemetry-receiver/ingest_replay_test.go b/telemetry-receiver/ingest_replay_test.go
new file mode 100644
index 000000000..7fda44d87
--- /dev/null
+++ b/telemetry-receiver/ingest_replay_test.go
@@ -0,0 +1,96 @@
+package main
+
+import (
+	"net/http"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// sameDayDuplicate accepts install 1's baseline report at extStart, then a
+// second report from it two hours later, which is a same-day duplicate. It
+// returns the server, its clock, and the duplicate's body and signature.
+func sameDayDuplicate(t *testing.T) (*server, *time.Time, string, string) {
+	t.Helper()
+	s, clock, in, _, _ := signedBaseline(t, config{})
+	*clock = extStart.Add(2 * time.Hour)
+	body, sig := in.report(t, *clock, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("duplicate: status = %d (%s)", w.Code, w.Body)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_duplicates_total"); got != 1 {
+		t.Fatalf("duplicates_total = %v, want 1", got)
+	}
+	return s, clock, body, sig
+}
+
+// assertReplayRefused sends body again and requires a 403 replay refusal that
+// leaves every table unchanged.
+func assertReplayRefused(t *testing.T, s *server, body, sig string) {
+	t.Helper()
+	before := extDump(t, s.store)
+	w := extSend(t, s, body, sig)
+	if w.Code != http.StatusForbidden || !strings.Contains(w.Body.String(), `"replay"`) {
+		t.Fatalf("replay: status = %d (%s), want 403 replay", w.Code, w.Body)
+	}
+	if after := extDump(t, s.store); after != before {
+		t.Errorf("a refused replay changed the tables:\nbefore:\n%s\nafter:\n%s", before, after)
+	}
+}
+
+func TestReplayOfASameDayDuplicateIsRefused(t *testing.T) {
+	s, _, body, sig := sameDayDuplicate(t)
+	assertReplayRefused(t, s, body, sig)
+	if got := extCounter(t, s, "gameplane_telemetry_duplicates_total"); got != 1 {
+		t.Errorf("duplicates_total = %v, want 1", got)
+	}
+}
+
+func TestReplayOfASameDayDuplicateOnTheNextDayIsRefused(t *testing.T) {
+	s, clock, body, sig := sameDayDuplicate(t)
+	// 08:00 the next day: the duplicate (sent at 14:00) is 18 hours old, which
+	// is inside the 36-hour window, and the install has not reported today.
+	*clock = extStart.Add(20 * time.Hour)
+	assertReplayRefused(t, s, body, sig)
+}
+
+func TestReplayWithAFractionalSendTimeIsRefused(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	in := newExtInstall(1)
+	body, _ := in.report(t, extStart, nil)
+	whole := `"sentAt":"` + extStart.Format(time.RFC3339) + `"`
+	if !strings.Contains(body, whole) {
+		t.Fatalf("body has no %s: %s", whole, body)
+	}
+	// Half a second later. The stored send time must keep the fraction, or a
+	// byte-identical replay would look later than the stored whole second.
+	frac := `"sentAt":"` + extStart.Add(500*time.Millisecond).Format(time.RFC3339Nano) + `"`
+	body = strings.Replace(body, whole, frac, 1)
+	priv, err := telemetryschema.DeriveKey(in.secret, in.id)
+	if err != nil {
+		t.Fatalf("DeriveKey: %v", err)
+	}
+	sig := telemetryschema.Sign(priv, []byte(body))
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("first: status = %d (%s)", w.Code, w.Body)
+	}
+	assertReplayRefused(t, s, body, sig)
+}
+
+func TestUnreadableLastSendTimeFailsClosed(t *testing.T) {
+	s, clock, in, _, _ := signedBaseline(t, config{})
+	if _, err := s.store.db.ExecContext(t.Context(), `UPDATE activity SET last_sent_at = 'not a time'`); err != nil {
+		t.Fatalf("corrupt last_sent_at: %v", err)
+	}
+	*clock = extStart.Add(24 * time.Hour)
+	body, sig := in.report(t, *clock, nil)
+	before := extDump(t, s.store)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusInternalServerError {
+		t.Fatalf("status = %d (%s), want 500: an unreadable send time must not disable the replay check", w.Code, w.Body)
+	}
+	if after := extDump(t, s.store); after != before {
+		t.Errorf("a failed report changed the tables:\nbefore:\n%s\nafter:\n%s", before, after)
+	}
+}
diff --git a/telemetry-receiver/ingest_sign_test.go b/telemetry-receiver/ingest_sign_test.go
new file mode 100644
index 000000000..fc76b5e76
--- /dev/null
+++ b/telemetry-receiver/ingest_sign_test.go
@@ -0,0 +1,211 @@
+package main
+
+import (
+	"net/http"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// signedBaseline accepts one report from install 1 and returns the server,
+// its clock, the install and the accepted body and signature (so a test can
+// replay it). The report was sent at extStart.
+func signedBaseline(t *testing.T, cfg config) (*server, *time.Time, extInstall, string, string) {
+	t.Helper()
+	s, clock := newExtServer(t, cfg, extStart)
+	in := newExtInstall(1)
+	body, sig := in.report(t, extStart, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("baseline: status = %d (%s)", w.Code, w.Body)
+	}
+	return s, clock, in, body, sig
+}
+
+// refusalCase is one forged or invalid report and the refusal it must get.
+type refusalCase struct {
+	name   string
+	code   int
+	reason string
+	build  func(t *testing.T, in extInstall, body, sig string, now time.Time) (string, string)
+}
+
+func TestForgeryMatrixIsRefusedWithoutChangingAnyTable(t *testing.T) {
+	cases := []refusalCase{
+		{"another key claims the ID", http.StatusConflict, refuseIDClaimed,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				return in.withSecret(1).report(t, now.Add(time.Minute), nil)
+			}},
+		{"another key with an older sentAt: the claim is checked before replay", http.StatusConflict, refuseIDClaimed,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				return in.withSecret(2).report(t, now.Add(-time.Hour), nil)
+			}},
+		{"unsigned", http.StatusForbidden, refuseBadSignature,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				body, _ := in.report(t, now.Add(time.Minute), nil)
+				return body, ""
+			}},
+		{"malformed signature header", http.StatusForbidden, refuseBadSignature,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				body, _ := in.report(t, now.Add(time.Minute), nil)
+				return body, "ed25519=!!not-base64!!"
+			}},
+		{"one byte of the body changed", http.StatusForbidden, refuseBadSignature,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				body, sig := in.report(t, now.Add(time.Minute), nil)
+				tampered := strings.Replace(body, `"servers":3`, `"servers":4`, 1)
+				if tampered == body {
+					t.Fatal("the tamper did not change the body")
+				}
+				return tampered, sig
+			}},
+		{"a signature from another key", http.StatusForbidden, refuseBadSignature,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				body, _ := in.report(t, now.Add(time.Minute), nil)
+				_, otherSig := in.withSecret(3).report(t, now.Add(time.Minute), nil)
+				return body, otherSig
+			}},
+		{"sentAt more than 36 hours old", http.StatusForbidden, refuseStale,
+			func(t *testing.T, _ extInstall, _, _ string, now time.Time) (string, string) {
+				return newExtInstall(7).report(t, now.Add(-36*time.Hour-time.Second), nil)
+			}},
+		{"sentAt more than an hour ahead", http.StatusForbidden, refuseStale,
+			func(t *testing.T, _ extInstall, _, _ string, now time.Time) (string, string) {
+				return newExtInstall(7).report(t, now.Add(time.Hour+time.Second), nil)
+			}},
+		{"a bad signature wins over a stale sentAt", http.StatusForbidden, refuseBadSignature,
+			func(t *testing.T, _ extInstall, _, _ string, now time.Time) (string, string) {
+				body, _ := newExtInstall(7).report(t, now.Add(-48*time.Hour), nil)
+				return body, ""
+			}},
+		{"a byte-identical replay", http.StatusForbidden, refuseReplay,
+			func(_ *testing.T, _ extInstall, body, sig string, _ time.Time) (string, string) {
+				return body, sig
+			}},
+		{"an older sentAt from the right key", http.StatusForbidden, refuseReplay,
+			func(t *testing.T, in extInstall, _, _ string, now time.Time) (string, string) {
+				return in.report(t, now.Add(-30*time.Minute), nil)
+			}},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			s, clock, in, body, sig := signedBaseline(t, config{})
+			*clock = extStart.Add(time.Minute)
+			before := extDump(t, s.store)
+			reportsBefore := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0")
+			refusedBefore := counterValue(t, s, "gameplane_telemetry_refused_total", "reason", tc.reason)
+			b, g := tc.build(t, in, body, sig, *clock)
+			w := extSend(t, s, b, g)
+			if w.Code != tc.code {
+				t.Fatalf("status = %d, want %d (%s)", w.Code, tc.code, w.Body)
+			}
+			if want := `{"error":"` + tc.reason + `"}`; w.Body.String() != want {
+				t.Fatalf("body = %q, want %q", w.Body, want)
+			}
+			if ct := w.Header().Get("Content-Type"); ct != "application/json" {
+				t.Errorf("Content-Type = %q, want application/json", ct)
+			}
+			if after := extDump(t, s.store); after != before {
+				t.Fatalf("a refused report changed the store (SC-014):\nbefore:\n%s\nafter:\n%s", before, after)
+			}
+			if got := counterValue(t, s, "gameplane_telemetry_refused_total", "reason", tc.reason); got != refusedBefore+1 {
+				t.Errorf("refused_total{%s} = %v, want %v", tc.reason, got, refusedBefore+1)
+			}
+			if got := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0"); got != reportsBefore {
+				t.Errorf("reports_total changed from %v to %v", reportsBefore, got)
+			}
+		})
+	}
+}
+
+func TestRefusedReportsDoNotUseUpTheSourceLimit(t *testing.T) {
+	s, clock, in, body, sig := signedBaseline(t, config{ingestSourceDailyLimit: 2})
+	*clock = extStart.Add(time.Minute)
+	for range 5 {
+		if w := extSend(t, s, body, sig); w.Code != http.StatusForbidden { // replays
+			t.Fatalf("replay: status = %d, want 403", w.Code)
+		}
+		forged, _ := in.report(t, *clock, nil)
+		if w := extSend(t, s, forged, ""); w.Code != http.StatusForbidden {
+			t.Fatalf("unsigned: status = %d, want 403", w.Code)
+		}
+	}
+	// One slot is left (limit 2, one report accepted): a valid report passes.
+	next, nextSig := in.report(t, *clock, nil)
+	if w := extSend(t, s, next, nextSig); w.Code != http.StatusNoContent {
+		t.Fatalf("valid report after forgeries: status = %d, want 204", w.Code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "ingest"); got != 0 {
+		t.Errorf("rate_limited_total = %v, want 0", got)
+	}
+}
+
+func TestBasicReportsSkipTheIdentityChecks(t *testing.T) {
+	s, _, _, _, _ := signedBaseline(t, config{})
+	// No ext part: no header needed, and a stray header is ignored.
+	if w := extSend(t, s, okReport, ""); w.Code != http.StatusNoContent {
+		t.Fatalf("basic report: status = %d, want 204", w.Code)
+	}
+	if w := extSend(t, s, okReport, "ed25519=garbage"); w.Code != http.StatusNoContent {
+		t.Fatalf("basic report with a stray header: status = %d, want 204", w.Code)
+	}
+}
+
+func TestSendTimeWindowIncludesItsBounds(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	for name, sentAt := range map[string]time.Time{
+		"exactly 36 hours old":   extStart.Add(-36 * time.Hour),
+		"exactly one hour ahead": extStart.Add(time.Hour),
+		"inside the window":      extStart.Add(-time.Hour),
+	} {
+		in := newExtInstall(len(name))
+		body, sig := in.report(t, sentAt, nil)
+		if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+			t.Errorf("%s: status = %d, want 204 (%s)", name, w.Code, w.Body)
+		}
+	}
+}
+
+func TestClaimExpiresWithTheActivityRecordAndCanBeReclaimed(t *testing.T) {
+	// FR-038: the claim lives as long as the activity record. The minimum
+	// expiry is 31 days.
+	s, clock, in, _, _ := signedBaseline(t, config{activityExpiryDays: 31})
+	other := in.withSecret(9)
+
+	*clock = extStart.Add(10 * 24 * time.Hour)
+	body, sig := other.report(t, *clock, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusConflict {
+		t.Fatalf("day 10, another key: status = %d, want 409 (the claim is still live)", w.Code)
+	}
+
+	// Day 40: the record, last seen on day 0, is older than 31 days.
+	*clock = extStart.Add(40 * 24 * time.Hour)
+	if err := s.store.lifecycleOnce(t.Context(), *clock, 730); err != nil {
+		t.Fatalf("lifecycleOnce: %v", err)
+	}
+	if got := countRows(t.Context(), t, s.store, `SELECT count(*) FROM activity`); got != 0 {
+		t.Fatalf("activity rows after expiry = %d, want 0", got)
+	}
+	body, sig = other.report(t, *clock, nil)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+		t.Fatalf("re-claim by another key: status = %d, want 204 (%s)", w.Code, w.Body)
+	}
+	var fp string
+	if err := s.store.db.QueryRowContext(t.Context(), `SELECT key_fp FROM activity`).Scan(&fp); err != nil {
+		t.Fatal(err)
+	}
+	priv, err := telemetryschema.DeriveKey(other.secret, other.id)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if fp != telemetryschema.KeyFingerprint(telemetryschema.PublicKeyString(priv)) {
+		t.Errorf("key_fp = %s, want the new key's fingerprint", fp)
+	}
+	// The original key is now the one that is locked out.
+	body, sig = in.report(t, clock.Add(time.Minute), nil)
+	*clock = clock.Add(time.Minute)
+	if w := extSend(t, s, body, sig); w.Code != http.StatusConflict {
+		t.Fatalf("the former owner: status = %d, want 409", w.Code)
+	}
+}
diff --git a/telemetry-receiver/ingest_test.go b/telemetry-receiver/ingest_test.go
new file mode 100644
index 000000000..5354d2753
--- /dev/null
+++ b/telemetry-receiver/ingest_test.go
@@ -0,0 +1,168 @@
+package main
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"net/http"
+	"testing"
+	"time"
+)
+
+func TestIngestWritesBasicAggregatesInOneTransaction(t *testing.T) {
+	s := newServer(config{})
+	now := time.Date(2026, 10, 7, 10, 0, 0, 0, time.UTC)
+	s.now = func() time.Time { return now }
+	for _, body := range []string{
+		`{"version":"1.0.0","servers":2,"templates":5}`,
+		`{"version":"1.0.0","servers":0,"templates":300}`,
+		`{"version":"2.0.0","servers":5000,"templates":5}`,
+		`{"version":"<bad>","servers":1,"templates":1}`,
+	} {
+		if code := ingestFrom(t, s, "192.0.2.1:1000", body); code != http.StatusNoContent {
+			t.Fatalf("%s: status = %d, want 204", body, code)
+		}
+	}
+	now = now.Add(24 * time.Hour)
+	if code := ingestFrom(t, s, "192.0.2.1:1000", `{"version":"1.0.0","servers":3,"templates":3}`); code != http.StatusNoContent {
+		t.Fatalf("next day: status = %d", code)
+	}
+
+	st := s.store
+	day := "2026-10-07"
+	if got := countRows(t.Context(), t, st, `SELECT reports FROM daily_basic WHERE day = ?`, day); got != 4 {
+		t.Errorf("daily_basic.reports = %d, want 4", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT servers_sum FROM daily_basic WHERE day = ?`, day); got != 2+0+5000+1 {
+		t.Errorf("daily_basic.servers_sum = %d, want 5003", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT templates_sum FROM daily_basic WHERE day = ?`, day); got != 5+300+5+1 {
+		t.Errorf("daily_basic.templates_sum = %d, want 311", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT duplicates FROM daily_basic WHERE day = ?`, day); got != 0 {
+		t.Errorf("daily_basic.duplicates = %d, want 0", got)
+	}
+	for version, want := range map[string]int{"1.0.0": 2, "2.0.0": 1, "invalid": 1} {
+		if got := countRows(t.Context(), t, st, `SELECT reports FROM daily_version WHERE day = ? AND version = ?`, day, version); got != want {
+			t.Errorf("daily_version[%s] = %d, want %d", version, got, want)
+		}
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM daily_version WHERE day = ?`, day); got != 3 {
+		t.Errorf("daily_version rows = %d, want 3", got)
+	}
+	// Fleet values are exact up to 1000 and 5000 shares the 1001 row.
+	for _, f := range []struct {
+		metric string
+		value  int
+		want   int
+	}{
+		{"servers", 0, 1}, {"servers", 1, 1}, {"servers", 2, 1}, {"servers", 1001, 1},
+		{"templates", 5, 2}, {"templates", 300, 1}, {"templates", 1, 1},
+	} {
+		got := countRows(t.Context(), t, st, `SELECT reports FROM daily_fleet WHERE day = ? AND metric = ? AND value = ?`, day, f.metric, f.value)
+		if got != f.want {
+			t.Errorf("daily_fleet[%s=%d] = %d, want %d", f.metric, f.value, got, f.want)
+		}
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM daily_fleet WHERE value > 1001`); got != 0 {
+		t.Errorf("%d fleet rows above the 1001 cap", got)
+	}
+	// The second day has its own rows and the total counts every report.
+	if got := countRows(t.Context(), t, st, `SELECT reports FROM daily_basic WHERE day = ?`, "2026-10-08"); got != 1 {
+		t.Errorf("next day daily_basic.reports = %d, want 1", got)
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "5" {
+		t.Errorf("reports_total = %s, want 5", got)
+	}
+	// Nothing extended or identifying was written.
+	for _, table := range []string{"daily_ext", "daily_dim", "daily_game", "activity"} {
+		if got := countRows(t.Context(), t, st, "SELECT count(*) FROM "+table); got != 0 {
+			t.Errorf("%s has %d rows after basic reports, want 0", table, got)
+		}
+	}
+}
+
+func TestIngestClampsSummedCounts(t *testing.T) {
+	s := newServer(config{})
+	s.now = func() time.Time { return time.Date(2026, 10, 7, 10, 0, 0, 0, time.UTC) }
+	for range 2 {
+		if code := ingestFrom(t, s, "192.0.2.1:1000", `{"version":"1.0.0","servers":5000000,"templates":7000000}`); code != http.StatusNoContent {
+			t.Fatalf("status = %d, want 204", code)
+		}
+	}
+	if got := countRows(t.Context(), t, s.store, `SELECT servers_sum FROM daily_basic`); got != 2*maxSummedCount {
+		t.Errorf("servers_sum = %d, want %d", got, 2*maxSummedCount)
+	}
+	if got := countRows(t.Context(), t, s.store, `SELECT templates_sum FROM daily_basic`); got != 2*maxSummedCount {
+		t.Errorf("templates_sum = %d, want %d", got, 2*maxSummedCount)
+	}
+	if got := countRows(t.Context(), t, s.store, `SELECT reports FROM daily_fleet WHERE metric = 'servers' AND value = 1001`); got != 2 {
+		t.Errorf("fleet 1001 row = %d, want 2", got)
+	}
+}
+
+func TestIngestStoreFailureIs500AndCountsNothing(t *testing.T) {
+	s := newServer(config{})
+	if err := s.store.close(); err != nil {
+		t.Fatal(err)
+	}
+	if code := ingestFrom(t, s, "192.0.2.1:1000", okReport); code != http.StatusInternalServerError {
+		t.Fatalf("status = %d, want 500", code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0"); got != 0 {
+		t.Fatalf("a report that was not stored was counted: %v", got)
+	}
+}
+
+func TestRecordBasicRollsBackWhenAnyStatementFails(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	if _, err := st.db.ExecContext(ctx, "DROP TABLE daily_fleet"); err != nil {
+		t.Fatal(err)
+	}
+	if err := st.recordBasic(ctx, "2026-10-07", "1.0.0", 1, 1); err == nil {
+		t.Fatal("recordBasic with a missing table: want an error")
+	}
+	for _, q := range []string{`SELECT count(*) FROM daily_basic`, `SELECT count(*) FROM daily_version`} {
+		if got := countRows(t.Context(), t, st, q); got != 0 {
+			t.Errorf("%s = %d after a failed write, want 0 (rolled back)", q, got)
+		}
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "0" {
+		t.Errorf("reports_total = %s after a failed write, want 0", got)
+	}
+}
+
+func TestWriteTxCommitsOnSuccessAndRollsBackOnError(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	insert := func(tx *sql.Tx, key string) error {
+		_, err := tx.ExecContext(ctx, `INSERT INTO meta (key, value) VALUES (?, 'v')`, key)
+		return err
+	}
+	if err := st.writeTx(ctx, func(tx *sql.Tx) error { return insert(tx, "kept") }); err != nil {
+		t.Fatalf("writeTx: %v", err)
+	}
+	boom := errors.New("boom")
+	err := st.writeTx(ctx, func(tx *sql.Tx) error {
+		if err := insert(tx, "dropped"); err != nil {
+			return err
+		}
+		return boom
+	})
+	if !errors.Is(err, boom) {
+		t.Fatalf("writeTx error = %v, want it to wrap boom", err)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM meta WHERE key = 'kept'`); got != 1 {
+		t.Errorf("committed row count = %d, want 1", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM meta WHERE key = 'dropped'`); got != 0 {
+		t.Errorf("rolled-back row count = %d, want 0", got)
+	}
+	if err := st.close(); err != nil {
+		t.Fatal(err)
+	}
+	if err := st.writeTx(ctx, func(*sql.Tx) error { return nil }); err == nil {
+		t.Fatal("writeTx on a closed store: want an error")
+	}
+}
diff --git a/telemetry-receiver/lifecycle_test.go b/telemetry-receiver/lifecycle_test.go
new file mode 100644
index 000000000..8d3d48c29
--- /dev/null
+++ b/telemetry-receiver/lifecycle_test.go
@@ -0,0 +1,207 @@
+package main
+
+import (
+	"context"
+	"reflect"
+	"testing"
+	"time"
+)
+
+// dailyTables are the day-keyed tables the retention sweep covers.
+var dailyTables = []string{"daily_basic", "daily_version", "daily_fleet", "daily_ext", "daily_dim", "daily_game"}
+
+var lifecycleNow = time.Date(2026, 10, 7, 3, 30, 0, 0, time.UTC) // yesterday is 2026-10-06
+
+func TestPendingDays(t *testing.T) {
+	cases := []struct {
+		name    string
+		through string
+		want    []string
+	}{
+		{"never run gives yesterday only", "", []string{"2026-10-06"}},
+		{"unparsable marker gives yesterday only", "garbage", []string{"2026-10-06"}},
+		{"already through yesterday", "2026-10-06", nil},
+		{"marker in the future", "2026-12-01", nil},
+		{"one day behind", "2026-10-05", []string{"2026-10-06"}},
+		{"three days behind", "2026-10-03", []string{"2026-10-04", "2026-10-05", "2026-10-06"}},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := pendingDays(tc.through, lifecycleNow); !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("pendingDays(%q) = %v, want %v", tc.through, got, tc.want)
+			}
+		})
+	}
+	long := pendingDays("2000-01-01", lifecycleNow)
+	if len(long) != maxRolloverCatchup || long[len(long)-1] != "2026-10-06" {
+		t.Fatalf("a long outage returned %d days ending %s, want %d ending 2026-10-06",
+			len(long), long[len(long)-1], maxRolloverCatchup)
+	}
+}
+
+// seedAllDaily puts one row in every daily_* table for day, plus an
+// activity record that the retention sweep must not touch.
+func seedAllDaily(t *testing.T, st *store, day string) {
+	t.Helper()
+	ctx := context.Background()
+	for _, q := range []string{
+		`INSERT INTO daily_basic (day, reports) VALUES (?, 1)`,
+		`INSERT INTO daily_version (day, version, reports) VALUES (?, '1.0.0', 1)`,
+		`INSERT INTO daily_fleet (day, metric, value, reports) VALUES (?, 'servers', 1, 1)`,
+		`INSERT INTO daily_ext (day, ext_reports) VALUES (?, 1)`,
+		`INSERT INTO daily_dim (day, dim, value, installs) VALUES (?, 'k8s', '1.31', 1)`,
+		`INSERT INTO daily_game (day, module, installs, servers) VALUES (?, 'custom', 1, 1)`,
+	} {
+		if _, err := st.db.ExecContext(ctx, q, day); err != nil {
+			t.Fatalf("seed %s: %v", q, err)
+		}
+	}
+}
+
+func dailyRows(t *testing.T, st *store, day string) int {
+	t.Helper()
+	total := 0
+	for _, table := range dailyTables {
+		total += countRows(t.Context(), t, st, "SELECT count(*) FROM "+table+" WHERE day = ?", day)
+	}
+	return total
+}
+
+func TestLifecycleDeletesDailyRowsOlderThanRetention(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	// With retention 365 and today 2026-10-07 the cutoff is 2025-10-07:
+	// that day is kept, the day before it is deleted.
+	seedAllDaily(t, st, "2025-10-06")
+	seedAllDaily(t, st, "2025-10-07")
+	seedAllDaily(t, st, "2026-10-06")
+	if _, err := st.db.ExecContext(ctx,
+		`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version)
+		 VALUES ('h', 'k', '2020-01-01', '2020-01-02', '2020-01-02T00:00:00Z', '1.0.0')`); err != nil {
+		t.Fatal(err)
+	}
+	if err := st.lifecycleOnce(ctx, lifecycleNow, 365); err != nil {
+		t.Fatalf("lifecycleOnce: %v", err)
+	}
+	if got := dailyRows(t, st, "2025-10-06"); got != 0 {
+		t.Errorf("rows older than the retention remain: %d", got)
+	}
+	if got := dailyRows(t, st, "2025-10-07"); got != len(dailyTables) {
+		t.Errorf("rows on the cutoff day = %d, want %d", got, len(dailyTables))
+	}
+	if got := dailyRows(t, st, "2026-10-06"); got != len(dailyTables) {
+		t.Errorf("recent rows = %d, want %d", got, len(dailyTables))
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM activity`); got != 1 {
+		t.Errorf("the retention sweep touched activity: %d rows", got)
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "0" {
+		t.Errorf("the sweep changed reports_total: %s", got)
+	}
+}
+
+func TestLifecycleIsIdempotentAndResumesFromRolloverMarker(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	if _, ok, err := st.metaGet(ctx, "rollover_through"); err != nil || ok {
+		t.Fatalf("rollover_through before the first run: ok=%v err=%v, want unset", ok, err)
+	}
+	seedAllDaily(t, st, "2026-10-06")
+	for range 3 {
+		if err := st.lifecycleOnce(ctx, lifecycleNow, 365); err != nil {
+			t.Fatal(err)
+		}
+		if got := mustMeta(t, st, "rollover_through"); got != "2026-10-06" {
+			t.Fatalf("rollover_through = %s, want 2026-10-06", got)
+		}
+		if got := dailyRows(t, st, "2026-10-06"); got != len(dailyTables) {
+			t.Fatalf("a repeated run changed the data: %d rows", got)
+		}
+	}
+	// A later run resumes from the marker and advances it.
+	if err := st.lifecycleOnce(ctx, lifecycleNow.Add(48*time.Hour), 365); err != nil {
+		t.Fatal(err)
+	}
+	if got := mustMeta(t, st, "rollover_through"); got != "2026-10-08" {
+		t.Fatalf("rollover_through = %s, want 2026-10-08", got)
+	}
+	// The marker never moves backwards, e.g. after a clock correction.
+	if err := st.lifecycleOnce(ctx, lifecycleNow, 365); err != nil {
+		t.Fatal(err)
+	}
+	if got := mustMeta(t, st, "rollover_through"); got != "2026-10-08" {
+		t.Fatalf("rollover_through moved back to %s", got)
+	}
+}
+
+func TestLifecycleWithoutRetentionDeletesNothing(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	seedAllDaily(t, st, "2001-01-01")
+	for _, retention := range []int{0, -1} {
+		if err := st.lifecycleOnce(ctx, lifecycleNow, retention); err != nil {
+			t.Fatal(err)
+		}
+		if got := dailyRows(t, st, "2001-01-01"); got != len(dailyTables) {
+			t.Fatalf("retention %d deleted rows: %d left", retention, got)
+		}
+	}
+	if got := mustMeta(t, st, "rollover_through"); got != "2026-10-06" {
+		t.Fatalf("rollover_through = %s, want 2026-10-06", got)
+	}
+}
+
+func TestLifecycleFailsOnClosedStore(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	if err := st.close(); err != nil {
+		t.Fatal(err)
+	}
+	if err := st.lifecycleOnce(context.Background(), lifecycleNow, 365); err == nil {
+		t.Fatal("lifecycleOnce on a closed store: want an error")
+	}
+}
+
+func TestRunLifecycleRunsImmediatelyAndStopsOnCancel(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	seedAllDaily(t, st, "2020-01-01")
+	ctx, cancel := context.WithCancel(context.Background())
+	done := make(chan struct{})
+	go func() {
+		defer close(done)
+		st.runLifecycle(ctx, 365, func() time.Time { return lifecycleNow })
+	}()
+	deadline := time.Now().Add(5 * time.Second)
+	for dailyRows(t, st, "2020-01-01") != 0 {
+		if time.Now().After(deadline) {
+			cancel()
+			t.Fatal("the first lifecycle pass did not run")
+		}
+		time.Sleep(10 * time.Millisecond)
+	}
+	cancel()
+	select {
+	case <-done:
+	case <-time.After(5 * time.Second):
+		t.Fatal("runLifecycle did not stop after the context was cancelled")
+	}
+}
+
+func TestRunLifecycleLogsFailuresAndKeepsGoing(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	if err := st.close(); err != nil {
+		t.Fatal(err)
+	}
+	ctx, cancel := context.WithCancel(context.Background())
+	done := make(chan struct{})
+	go func() {
+		defer close(done)
+		st.runLifecycle(ctx, 365, func() time.Time { return lifecycleNow })
+	}()
+	time.Sleep(50 * time.Millisecond)
+	cancel()
+	select {
+	case <-done:
+	case <-time.After(5 * time.Second):
+		t.Fatal("runLifecycle did not stop after a failed pass")
+	}
+}
diff --git a/telemetry-receiver/main.go b/telemetry-receiver/main.go
index ed897aa49..175060734 100644
--- a/telemetry-receiver/main.go
+++ b/telemetry-receiver/main.go
@@ -5,31 +5,32 @@
 // validates it, logs it structurally, and exposes aggregate Prometheus
 // metrics so an operator can chart adoption without storing raw reports.
 //
-// It is deliberately standalone (own module, stdlib + client_golang
-// only) so it can run anywhere: in-cluster via the Helm chart's
-// api.telemetry.receiver.enabled, or on a public host collecting reports
-// from many installs.
+// It is deliberately standalone (own module, stdlib + client_golang +
+// modernc.org/sqlite, no cgo) so it can run anywhere: in-cluster via the
+// Helm chart's api.telemetry.receiver.enabled, or on a public host
+// collecting reports from many installs. Aggregates live in a SQLite file
+// under DATA_DIR (see store.go); raw reports are never stored.
 package main
 
 import (
-	"bytes"
 	"context"
-	"crypto/subtle"
-	"encoding/json"
 	"errors"
 	"fmt"
 	"io"
 	"log/slog"
 	"net/http"
+	"net/netip"
 	"os"
 	"os/signal"
-	"regexp"
+	"strconv"
+	"strings"
 	"sync"
 	"syscall"
 	"time"
+	"unicode/utf8"
 
+	"github.com/GameplanePanel/gameplane/telemetryschema"
 	"github.com/prometheus/client_golang/prometheus"
-	"github.com/prometheus/client_golang/prometheus/promhttp"
 )
 
 // Version is set at build time via -ldflags "-X main.Version=...".
@@ -47,22 +48,155 @@ const (
 	idleTimeout       = 120 * time.Second
 )
 
-// versionRE limits each label's syntax. The separate per-server budget
-// limits how many different valid labels can be retained.
-var versionRE = regexp.MustCompile(`^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$`)
+// Route label values of gameplane_telemetry_rate_limited_total.
+const (
+	routeIngest  = "ingest"
+	routeLogin   = "login"
+	routeSummary = "summary"
+)
 
+// maxVersionLabels bounds how many different valid version labels are
+// retained; telemetryschema.VersionRE limits each label's syntax.
 const maxVersionLabels = 128
 
+// Configuration defaults and the enforced minimums for the two retention
+// settings (spec 022 OD-3, OD-4).
+const (
+	defaultDashboardListen        = ":8081"
+	defaultIngestSourceDailyLimit = 20
+	defaultRetentionDays          = 730
+	defaultActivityExpiryDays     = 90
+	minRetentionDays              = 365
+	minActivityExpiryDays         = 31
+	// minDashboardTokenLen is the shortest DASHBOARD_TOKEN run accepts
+	// (spec 022 FR-041, research R8).
+	minDashboardTokenLen = 32
+)
+
+// config holds the receiver's settings. The zero value is valid and means
+// "no per-source limits, in-memory store, no dashboard"; loadConfig applies
+// the production defaults.
 type config struct {
 	listen    string
 	authToken string
+
+	// dashboardListen is the dashboard listener address; the listener only
+	// starts when dashboardToken is set.
+	dashboardListen string
+	dashboardToken  string
+	// dataDir is the SQLite directory. Empty means an in-memory store.
+	dataDir       string
+	publicSummary bool
+	// trustedProxyCIDRs are the peers whose X-Forwarded-For is trusted.
+	trustedProxyCIDRs []netip.Prefix
+	// ingestSourceDailyLimit is the accepted reports per source per UTC day;
+	// 0 means unlimited.
+	ingestSourceDailyLimit int
+	retentionDays          int
+	activityExpiryDays     int
+	// idPepper is the HMAC pepper for install IDs; empty means the store
+	// generates one and keeps it in meta.
+	idPepper string
+	// ingestPoW requires proof-of-work on /ingest and serves /v1/challenge
+	// (spec 022 R21). powTargetPerMin, powMinBits and powMaxBits are the
+	// normal challenge rate and the lowest and highest difficulty.
+	ingestPoW       bool
+	powTargetPerMin int
+	powMinBits      int
+	powMaxBits      int
+
+	// loadErrs collects environment values that could not be parsed, so that
+	// validate can report them as startup errors.
+	loadErrs []error
 }
 
+// loadConfig reads the environment. It never fails: unparsable values are
+// recorded in loadErrs and reported by validate.
 func loadConfig() config {
-	return config{
-		listen:    envOr("LISTEN_ADDR", ":8080"),
-		authToken: envOr("AUTH_TOKEN", ""),
+	cfg := config{
+		listen:          envOr("LISTEN_ADDR", ":8080"),
+		authToken:       envOr("AUTH_TOKEN", ""),
+		dashboardListen: envOr("DASHBOARD_LISTEN_ADDR", defaultDashboardListen),
+		dashboardToken:  envOr("DASHBOARD_TOKEN", ""),
+		dataDir:         envOr("DATA_DIR", ""),
+		publicSummary:   strings.EqualFold(strings.TrimSpace(envOr("PUBLIC_SUMMARY", "")), "true"),
+		idPepper:        envOr("ID_PEPPER", ""),
+		ingestPoW:       strings.EqualFold(strings.TrimSpace(envOr("INGEST_POW", "")), "true"),
+	}
+	cfg.ingestSourceDailyLimit = cfg.envInt("INGEST_SOURCE_DAILY_LIMIT", defaultIngestSourceDailyLimit)
+	cfg.retentionDays = cfg.envInt("RETENTION_DAYS", defaultRetentionDays)
+	cfg.activityExpiryDays = cfg.envInt("ACTIVITY_EXPIRY_DAYS", defaultActivityExpiryDays)
+	cfg.powTargetPerMin = cfg.envInt("INGEST_POW_TARGET_PER_MIN", defaultPoWTargetPerMin)
+	cfg.powMinBits = cfg.envInt("INGEST_POW_MIN_BITS", defaultPoWMinBits)
+	cfg.powMaxBits = cfg.envInt("INGEST_POW_MAX_BITS", defaultPoWMaxBits)
+	for _, raw := range strings.Split(envOr("TRUSTED_PROXY_CIDRS", ""), ",") {
+		raw = strings.TrimSpace(raw)
+		if raw == "" {
+			continue
+		}
+		p, err := netip.ParsePrefix(raw)
+		if err != nil {
+			cfg.loadErrs = append(cfg.loadErrs, fmt.Errorf("TRUSTED_PROXY_CIDRS: %w", err))
+			continue
+		}
+		cfg.trustedProxyCIDRs = append(cfg.trustedProxyCIDRs, p)
+	}
+	return cfg
+}
+
+// envInt reads an integer variable. Unset or blank gives fallback; a value
+// that is not an integer records an error and gives fallback.
+func (c *config) envInt(key string, fallback int) int {
+	raw := strings.TrimSpace(os.Getenv(key))
+	if raw == "" {
+		return fallback
+	}
+	n, err := strconv.Atoi(raw)
+	if err != nil {
+		c.loadErrs = append(c.loadErrs, fmt.Errorf("%s: %w", key, err))
+		return fallback
+	}
+	return n
+}
+
+// validate rejects settings the receiver must not start with. The zero
+// config is deliberately not validated: tests and newServer use it to mean
+// "no limits"; only run validates the configuration read from the
+// environment.
+func (c config) validate() error {
+	errs := append([]error(nil), c.loadErrs...)
+	if c.retentionDays < minRetentionDays {
+		errs = append(errs, fmt.Errorf("RETENTION_DAYS must be at least %d, got %d", minRetentionDays, c.retentionDays))
+	}
+	if c.activityExpiryDays < minActivityExpiryDays {
+		errs = append(errs, fmt.Errorf("ACTIVITY_EXPIRY_DAYS must be at least %d, got %d", minActivityExpiryDays, c.activityExpiryDays))
+	}
+	if c.ingestSourceDailyLimit < 0 {
+		errs = append(errs, fmt.Errorf("INGEST_SOURCE_DAILY_LIMIT must not be negative, got %d", c.ingestSourceDailyLimit))
+	}
+	if c.powTargetPerMin < 1 {
+		errs = append(errs, fmt.Errorf("INGEST_POW_TARGET_PER_MIN must be at least 1, got %d", c.powTargetPerMin))
+	}
+	if c.powMinBits < 0 {
+		errs = append(errs, fmt.Errorf("INGEST_POW_MIN_BITS must not be negative, got %d", c.powMinBits))
 	}
+	if c.powMaxBits < c.powMinBits || c.powMaxBits > telemetryschema.MaxPoWBits {
+		errs = append(errs, fmt.Errorf("INGEST_POW_MAX_BITS must be between INGEST_POW_MIN_BITS (%d) and %d, got %d",
+			c.powMinBits, telemetryschema.MaxPoWBits, c.powMaxBits))
+	}
+	return errors.Join(errs...)
+}
+
+// validateDashboardToken refuses a dashboard credential that is set but
+// shorter than minDashboardTokenLen characters (spec 022 FR-041). run calls
+// it next to validate; it is separate so that validate, which tests call on
+// configs with placeholder tokens, keeps its behavior.
+func (c config) validateDashboardToken() error {
+	if n := utf8.RuneCountInString(c.dashboardToken); c.dashboardToken != "" && n < minDashboardTokenLen {
+		return fmt.Errorf("DASHBOARD_TOKEN must be at least %d characters, got %d (generate one from 32 random bytes)",
+			minDashboardTokenLen, n)
+	}
+	return nil
 }
 
 func envOr(key, fallback string) string {
@@ -79,137 +213,91 @@ type payload struct {
 	Templates int
 }
 
-// errInvalidPayload is returned by decodePayload for any body that is not
-// exactly one JSON object carrying all three required fields with exact
-// case-sensitive key matching and no duplicates.
+// errInvalidPayload is returned by decodePayload for any body that
+// telemetryschema.Decode rejects, and for any report that carries the
+// extended tier. The ingest handler no longer calls decodePayload: it decodes
+// with telemetryschema.Decode directly and accepts ext (T072).
 var errInvalidPayload = errors.New("invalid payload")
 
-// decodePayload parses a body that has already been read in full. It accepts
-// exactly one JSON object with version, servers and templates present and no
-// other fields; keys are matched case-sensitively and duplicates are rejected;
-// anything after that object other than whitespace is rejected.
+// decodePayload parses a body that has already been read in full. It is a
+// thin wrapper over telemetryschema.Decode, which owns the strict parsing
+// rules (exactly one object, exact case-sensitive keys, no duplicates or
+// nulls, nothing trailing). Every failure, including an unsupported
+// schema, is reported as errInvalidPayload with the cause kept in the
+// chain. Reports carrying ext are rejected too: this wrapper keeps the
+// basic-only parse that main_test.go covers.
 func decodePayload(body []byte) (payload, error) {
-	dec := json.NewDecoder(bytes.NewReader(body))
-
-	// Expect opening brace
-	tok, err := dec.Token()
-	if err != nil {
-		return payload{}, fmt.Errorf("%w: %w", errInvalidPayload, err)
-	}
-	if tok != json.Delim('{') {
-		return payload{}, fmt.Errorf("%w: expected JSON object", errInvalidPayload)
-	}
-
-	var p payload
-	seen := make(map[string]bool)
-	foundVersion, foundServers, foundTemplates := false, false, false
-
-	// Iterate through object key-value pairs
-	for dec.More() {
-		// Get the key
-		tok, err := dec.Token()
-		if err != nil {
-			return payload{}, fmt.Errorf("%w: %w", errInvalidPayload, err)
-		}
-
-		key, ok := tok.(string)
-		if !ok {
-			return payload{}, fmt.Errorf("%w: expected string key", errInvalidPayload)
-		}
-
-		// Check for duplicate keys
-		if seen[key] {
-			return payload{}, fmt.Errorf("%w: duplicate key %q", errInvalidPayload, key)
-		}
-		seen[key] = true
-
-		// Decode the value into a RawMessage to validate type carefully
-		var raw json.RawMessage
-		if err := dec.Decode(&raw); err != nil {
-			return payload{}, fmt.Errorf("%w: %w", errInvalidPayload, err)
-		}
-
-		// Reject null values
-		if bytes.Equal(raw, []byte("null")) {
-			return payload{}, fmt.Errorf("%w: null value for key %q", errInvalidPayload, key)
-		}
-
-		// Handle each key
-		switch key {
-		case "version":
-			foundVersion = true
-			var v string
-			if err := json.Unmarshal(raw, &v); err != nil {
-				return payload{}, fmt.Errorf("%w: version must be string: %w", errInvalidPayload, err)
-			}
-			p.Version = v
-
-		case "servers":
-			foundServers = true
-			var s int
-			if err := json.Unmarshal(raw, &s); err != nil {
-				return payload{}, fmt.Errorf("%w: servers must be integer: %w", errInvalidPayload, err)
-			}
-			p.Servers = s
-
-		case "templates":
-			foundTemplates = true
-			var t int
-			if err := json.Unmarshal(raw, &t); err != nil {
-				return payload{}, fmt.Errorf("%w: templates must be integer: %w", errInvalidPayload, err)
-			}
-			p.Templates = t
-
-		default:
-			return payload{}, fmt.Errorf("%w: unknown field %q", errInvalidPayload, key)
-		}
-	}
-
-	// Expect closing brace
-	tok, err = dec.Token()
+	rep, info, err := telemetryschema.Decode(body)
 	if err != nil {
 		return payload{}, fmt.Errorf("%w: %w", errInvalidPayload, err)
 	}
-	if tok != json.Delim('}') {
-		return payload{}, fmt.Errorf("%w: expected closing brace", errInvalidPayload)
+	if rep.Ext != nil || info.ExtDropped {
+		return payload{}, fmt.Errorf("%w: extended reports are not accepted", errInvalidPayload)
 	}
-
-	// Check that all required fields were present
-	if !foundVersion || !foundServers || !foundTemplates {
-		return payload{}, fmt.Errorf("%w: missing required field", errInvalidPayload)
-	}
-
-	// Check for trailing content
-	switch err := dec.Decode(&struct{}{}); {
-	case errors.Is(err, io.EOF):
-		// exactly one value
-	case err != nil:
-		return payload{}, fmt.Errorf("%w: trailing content after the report: %w", errInvalidPayload, err)
-	default:
-		return payload{}, fmt.Errorf("%w: trailing content after the report", errInvalidPayload)
-	}
-
-	return p, nil
+	return payload{Version: rep.Version, Servers: rep.Servers, Templates: rep.Templates}, nil
 }
 
 type server struct {
-	cfg config
-	reg *prometheus.Registry
+	cfg   config
+	reg   *prometheus.Registry
+	store *store
 
 	versionMu sync.Mutex
 	versions  map[string]struct{}
 
-	reports   *prometheus.CounterVec
-	servers   prometheus.Histogram
-	templates prometheus.Histogram
+	// now is the clock for day bucketing and limiter windows; tests replace it.
+	now func() time.Time
+	// daily is the per-source accepted-reports-per-UTC-day counter (T062).
+	daily *dailyLimiter
+	// summaryLimiter and summaryCache serve GET /v1/summary (T079).
+	summaryLimiter *bucketLimiter
+	summaries      summaryCache
+
+	reports     *prometheus.CounterVec
+	servers     prometheus.Histogram
+	templates   prometheus.Histogram
+	rateLimited *prometheus.CounterVec
+	// duplicates counts same-day repeat extended reports (T072).
+	duplicates prometheus.Counter
+	// extReports counts extended reports that changed the aggregates (T072).
+	extReports prometheus.Counter
+	// refused counts reports refused by the signature, window, claim or
+	// replay checks, by reason (T083).
+	refused *prometheus.CounterVec
+
+	// pow, powLimiter and powChallenges are the proof-of-work state (T102).
+	// pow and powLimiter are nil unless INGEST_POW is on (initPoW).
+	pow           *powState
+	powLimiter    *bucketLimiter
+	powChallenges prometheus.Counter
 }
 
+// newServer builds a server backed by a private in-memory store, whatever
+// cfg.dataDir says. Tests use it; main goes through newServerWithStore.
 func newServer(cfg config) *server {
+	memCfg := cfg
+	memCfg.dataDir = ""
+	st, err := openStore(context.Background(), memCfg)
+	if err != nil {
+		// Opening a private in-memory database only fails if the SQLite
+		// driver itself is broken, which is not recoverable.
+		panic(fmt.Sprintf("telemetry-receiver: in-memory store: %v", err))
+	}
+	return newServerWithStore(cfg, st)
+}
+
+// newServerWithStore builds a server over a store the caller opened and
+// owns.
+func newServerWithStore(cfg config, st *store) *server {
 	reg := prometheus.NewRegistry()
 	s := &server{
-		cfg:      cfg,
-		reg:      reg,
-		versions: make(map[string]struct{}),
+		cfg:            cfg,
+		reg:            reg,
+		store:          st,
+		versions:       make(map[string]struct{}),
+		now:            time.Now,
+		daily:          newDailyLimiter(cfg.ingestSourceDailyLimit),
+		summaryLimiter: newBucketLimiter(summaryPerMinute, summaryBurst),
 		reports: prometheus.NewCounterVec(prometheus.CounterOpts{
 			Name: "gameplane_telemetry_reports_total",
 			Help: "Telemetry reports accepted, by reported Gameplane version.",
@@ -226,8 +314,33 @@ func newServer(cfg config) *server {
 			Help:    "Distribution of GameTemplate counts across reports.",
 			Buckets: []float64{0, 1, 2, 5, 10, 25, 50, 100, 250},
 		}),
+		rateLimited: prometheus.NewCounterVec(prometheus.CounterOpts{
+			Name: "gameplane_telemetry_rate_limited_total",
+			Help: "Requests refused by a per-source limit, by route.",
+		}, []string{"route"}),
+		duplicates: prometheus.NewCounter(prometheus.CounterOpts{
+			Name: "gameplane_telemetry_duplicates_total",
+			Help: "Extended reports that repeated an install's report of the same UTC day.",
+		}),
+		extReports: prometheus.NewCounter(prometheus.CounterOpts{
+			Name: "gameplane_telemetry_extended_reports_total",
+			Help: "Extended reports that were counted in the aggregates.",
+		}),
+		refused: prometheus.NewCounterVec(prometheus.CounterOpts{
+			Name: "gameplane_telemetry_refused_total",
+			Help: "Extended reports refused by the signature, window, claim or replay checks, by reason.",
+		}, []string{"reason"}),
 	}
-	reg.MustRegister(s.reports, s.servers, s.templates)
+	reg.MustRegister(s.reports, s.servers, s.templates, s.rateLimited, s.duplicates, s.extReports, s.refused)
+	s.initPoW()
+	for _, reason := range []string{refuseBadSignature, refuseStale, refuseIDClaimed, refuseReplay} {
+		s.refused.WithLabelValues(reason)
+	}
+	// Make the series visible from the start, so a scrape shows 0 rather
+	// than nothing.
+	s.rateLimited.WithLabelValues(routeIngest)
+	s.rateLimited.WithLabelValues(routeLogin)
+	s.rateLimited.WithLabelValues(routeSummary)
 	return s
 }
 
@@ -236,72 +349,12 @@ func (s *server) routes() http.Handler {
 	mux.HandleFunc("GET /healthz", func(w http.ResponseWriter, _ *http.Request) {
 		_, _ = io.WriteString(w, "ok")
 	})
-	mux.Handle("GET /metrics", promhttp.HandlerFor(s.reg, promhttp.HandlerOpts{}))
 	mux.HandleFunc("POST /ingest", s.ingest)
+	mux.HandleFunc("GET /v1/summary", s.summary)
+	mux.HandleFunc("GET /v1/challenge", s.challenge)
 	return mux
 }
 
-func (s *server) ingest(w http.ResponseWriter, req *http.Request) {
-	if s.cfg.authToken != "" {
-		got := req.Header.Get("Authorization")
-		if subtle.ConstantTimeCompare([]byte(got), []byte(s.cfg.authToken)) != 1 {
-			http.Error(w, "unauthorized", http.StatusUnauthorized)
-			return
-		}
-	}
-	// Read the whole body first so the size limit applies to all of it, not
-	// just to the part a JSON decoder happens to consume.
-	body, err := io.ReadAll(http.MaxBytesReader(w, req.Body, maxBody))
-	if err != nil {
-		var tooBig *http.MaxBytesError
-		if errors.As(err, &tooBig) {
-			http.Error(w, "body too large", http.StatusRequestEntityTooLarge)
-			return
-		}
-		http.Error(w, "invalid payload", http.StatusBadRequest)
-		return
-	}
-	p, err := decodePayload(body)
-	if err != nil {
-		http.Error(w, "invalid payload", http.StatusBadRequest)
-		return
-	}
-	if p.Servers < 0 || p.Templates < 0 {
-		http.Error(w, "invalid payload", http.StatusBadRequest)
-		return
-	}
-	version := s.versionLabel(p.Version)
-
-	slog.Info("telemetry report",
-		"version", version, "servers", p.Servers, "templates", p.Templates)
-	s.reports.WithLabelValues(version).Inc()
-	s.servers.Observe(float64(p.Servers))
-	s.templates.Observe(float64(p.Templates))
-	w.WriteHeader(http.StatusNoContent)
-}
-
-// versionLabel retains the first 128 valid versions for this process.
-// Overflow reports still count, but share one label. Never evict entries:
-// CounterVec would otherwise retain every old label and keep growing.
-func (s *server) versionLabel(version string) string {
-	if !versionRE.MatchString(version) || version == "invalid" {
-		return "invalid"
-	}
-	if version == "other" {
-		return "other"
-	}
-	s.versionMu.Lock()
-	defer s.versionMu.Unlock()
-	if _, ok := s.versions[version]; ok {
-		return version
-	}
-	if len(s.versions) >= maxVersionLabels {
-		return "other"
-	}
-	s.versions[version] = struct{}{}
-	return version
-}
-
 func newHTTPServer(addr string, h http.Handler) *http.Server {
 	return &http.Server{
 		Addr:              addr,
@@ -313,26 +366,70 @@ func newHTTPServer(addr string, h http.Handler) *http.Server {
 }
 
 func run(cfg config) error {
+	if err := errors.Join(cfg.validate(), cfg.validateDashboardToken()); err != nil {
+		return fmt.Errorf("invalid configuration: %w", err)
+	}
 	ctx, stop := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM)
 	defer stop()
 	return serve(ctx, cfg)
 }
 
 func serve(ctx context.Context, cfg config) error {
-	s := newServer(cfg)
+	st, err := openStore(ctx, cfg)
+	if err != nil {
+		return fmt.Errorf("open store: %w", err)
+	}
+	defer func() {
+		if cerr := st.close(); cerr != nil {
+			slog.Error("close store", "err", cerr)
+		}
+	}()
+	s := newServerWithStore(cfg, st)
+
+	// The hourly lifecycle job (retention sweep, day rollover) stops before
+	// the store is closed: defers run last-in first.
+	lifeCtx, stopLife := context.WithCancel(ctx)
+	lifeDone := make(chan struct{})
+	go func() {
+		defer close(lifeDone)
+		st.runLifecycle(lifeCtx, cfg.retentionDays, time.Now)
+	}()
+	defer func() {
+		stopLife()
+		<-lifeDone
+	}()
+
 	srv := newHTTPServer(cfg.listen, s.routes())
-	errCh := make(chan error, 1)
+	servers := []*http.Server{srv}
+	errCh := make(chan error, 2)
 	go func() {
 		slog.Info("telemetry-receiver listening", "addr", cfg.listen, "version", Version, "auth", cfg.authToken != "")
-		errCh <- srv.ListenAndServe()
+		errCh <- fmt.Errorf("listen on %s: %w", cfg.listen, srv.ListenAndServe())
 	}()
+	// The dashboard listener only exists when a token is configured, so an
+	// unconfigured receiver never exposes it.
+	if cfg.dashboardToken != "" {
+		dsrv := newHTTPServer(cfg.dashboardListen, s.dashboardRoutes())
+		servers = append(servers, dsrv)
+		go func() {
+			slog.Info("telemetry-receiver dashboard listening", "addr", cfg.dashboardListen)
+			errCh <- fmt.Errorf("dashboard listen on %s: %w", cfg.dashboardListen, dsrv.ListenAndServe())
+		}()
+	}
 	select {
 	case err := <-errCh:
-		return fmt.Errorf("listen on %s: %w", cfg.listen, err)
+		for _, h := range servers {
+			_ = h.Close()
+		}
+		return err
 	case <-ctx.Done():
 		shutdownCtx, cancel := context.WithTimeout(context.WithoutCancel(ctx), 5*time.Second)
 		defer cancel()
-		return srv.Shutdown(shutdownCtx)
+		var errs []error
+		for _, h := range servers {
+			errs = append(errs, h.Shutdown(shutdownCtx))
+		}
+		return errors.Join(errs...)
 	}
 }
 
diff --git a/telemetry-receiver/main_test.go b/telemetry-receiver/main_test.go
index 85846136d..81b092823 100644
--- a/telemetry-receiver/main_test.go
+++ b/telemetry-receiver/main_test.go
@@ -8,17 +8,44 @@ import (
 	"net/http"
 	"net/http/httptest"
 	"strings"
+	"sync"
 	"testing"
 	"time"
 )
 
+// testDashboardToken is the dashboard credential of every testServer.
+const testDashboardToken = "test-dashboard-token"
+
+// testDashboards maps each public test server to the dashboard handler of
+// the same receiver, because /metrics is served only on the dashboard
+// listener (FR-030, spec Q8).
+var testDashboards sync.Map
+
 func testServer(t *testing.T, cfg config) *httptest.Server {
 	t.Helper()
-	srv := httptest.NewServer(newServer(cfg).routes())
-	t.Cleanup(srv.Close)
+	if cfg.dashboardToken == "" {
+		cfg.dashboardToken = testDashboardToken
+	}
+	s := newServer(cfg)
+	srv := httptest.NewServer(s.routes())
+	testDashboards.Store(srv, s.dashboardRoutes())
+	t.Cleanup(func() {
+		testDashboards.Delete(srv)
+		srv.Close()
+	})
 	return srv
 }
 
+// dashboardHandler returns the dashboard handler paired with a test server.
+func dashboardHandler(t *testing.T, srv *httptest.Server) http.Handler {
+	t.Helper()
+	h, ok := testDashboards.Load(srv)
+	if !ok {
+		t.Fatal("no dashboard handler registered for the test server")
+	}
+	return h.(http.Handler)
+}
+
 func post(t *testing.T, srv *httptest.Server, body string, headers map[string]string) *http.Response {
 	t.Helper()
 	req, err := http.NewRequestWithContext(context.Background(), http.MethodPost, srv.URL+"/ingest", strings.NewReader(body))
@@ -37,17 +64,14 @@ func post(t *testing.T, srv *httptest.Server, body string, headers map[string]st
 
 func metrics(t *testing.T, srv *httptest.Server) string {
 	t.Helper()
-	req, err := http.NewRequestWithContext(context.Background(), http.MethodGet, srv.URL+"/metrics", nil)
-	if err != nil {
-		t.Fatalf("build request: %v", err)
-	}
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		t.Fatalf("get metrics: %v", err)
-	}
-	defer resp.Body.Close()
-	b, _ := io.ReadAll(resp.Body)
-	return string(b)
+	req := httptest.NewRequestWithContext(context.Background(), http.MethodGet, "/metrics", nil)
+	req.Header.Set("Authorization", "Bearer "+testDashboardToken)
+	rec := httptest.NewRecorder()
+	dashboardHandler(t, srv).ServeHTTP(rec, req)
+	if rec.Code != http.StatusOK {
+		t.Fatalf("get metrics: status = %d, want 200", rec.Code)
+	}
+	return rec.Body.String()
 }
 
 func TestIngestCountsReport(t *testing.T) {
@@ -137,17 +161,33 @@ func TestIngestMethodNotAllowed(t *testing.T) {
 
 func TestMetricsMethodNotAllowed(t *testing.T) {
 	srv := testServer(t, config{})
-	req, err := http.NewRequestWithContext(context.Background(), http.MethodPost, srv.URL+"/metrics", nil)
-	if err != nil {
-		t.Fatalf("build request: %v", err)
+	req := httptest.NewRequestWithContext(context.Background(), http.MethodPost, "/metrics", nil)
+	rec := httptest.NewRecorder()
+	dashboardHandler(t, srv).ServeHTTP(rec, req)
+	if rec.Code != http.StatusMethodNotAllowed {
+		t.Fatalf("status = %d, want 405", rec.Code)
 	}
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		t.Fatalf("post: %v", err)
-	}
-	defer resp.Body.Close()
-	if resp.StatusCode != http.StatusMethodNotAllowed {
-		t.Fatalf("status = %d, want 405", resp.StatusCode)
+}
+
+// /metrics is not served on the public listener at all (FR-030, spec Q8).
+func TestMetricsNotServedOnPublicListener(t *testing.T) {
+	srv := testServer(t, config{})
+	for _, auth := range []string{"", "Bearer " + testDashboardToken} {
+		req, err := http.NewRequestWithContext(context.Background(), http.MethodGet, srv.URL+"/metrics", nil)
+		if err != nil {
+			t.Fatalf("build request: %v", err)
+		}
+		if auth != "" {
+			req.Header.Set("Authorization", auth)
+		}
+		resp, err := http.DefaultClient.Do(req)
+		if err != nil {
+			t.Fatalf("get: %v", err)
+		}
+		resp.Body.Close()
+		if resp.StatusCode != http.StatusNotFound {
+			t.Fatalf("Authorization %q: status = %d, want 404", auth, resp.StatusCode)
+		}
 	}
 }
 
diff --git a/telemetry-receiver/population_test.go b/telemetry-receiver/population_test.go
new file mode 100644
index 000000000..ae2a2ec74
--- /dev/null
+++ b/telemetry-receiver/population_test.go
@@ -0,0 +1,404 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// popStart is day 0 of the synthetic population.
+var popStart = time.Date(2026, 7, 1, 0, 0, 0, 0, time.UTC)
+
+const (
+	popDays   = 60 // days 0..59 report; day 60 only finalises day 59
+	popExpiry = 90
+)
+
+// popDay returns the UTC midnight of day d.
+func popDay(d int) time.Time { return popStart.AddDate(0, 0, d) }
+
+// popEntity is one install ID in the synthetic population: the days it
+// reports are first..last, minus an optional gap.
+type popEntity struct {
+	n          int
+	first      int
+	last       int
+	gapFrom    int // inclusive; gapTo < gapFrom means no gap
+	gapTo      int
+	upgradeDay int // from this day the entity reports version 1.1.0; -1 means never
+	twice      bool
+}
+
+func (e popEntity) active(d int) bool {
+	return d >= e.first && d <= e.last && (d < e.gapFrom || d > e.gapTo)
+}
+
+func (e popEntity) version(d int) string {
+	if e.upgradeDay >= 0 && d >= e.upgradeDay {
+		return "1.1.0"
+	}
+	return "1.0.0"
+}
+
+// lastActive returns the latest day <= through on which e reported, or -1.
+func (e popEntity) lastActive(through int) int {
+	for d := min(through, e.last); d >= e.first; d-- {
+		if e.active(d) {
+			return d
+		}
+	}
+	return -1
+}
+
+// popPopulation builds the synthetic installs:
+//   - 0..23: join on day n/2; every 4th stops 20 days after joining (a lapse);
+//     every 5th skips 5 days (a gap far shorter than the lapse window);
+//   - 24..27: an old ID used on days 2..24 (an install that then reset);
+//   - 28..31: the replacement ID, new from day 25;
+//   - every 3rd entity upgrades from 1.0.0 to 1.1.0 on day 30;
+//   - every 6th entity sends a second report on each day (a duplicate).
+func popPopulation() []popEntity {
+	var out []popEntity
+	for n := range 32 {
+		e := popEntity{n: n, gapFrom: 1, gapTo: 0, upgradeDay: -1, twice: n%6 == 0}
+		switch {
+		case n < 24:
+			e.first, e.last = n/2, popDays-1
+			if n%4 == 0 {
+				e.last = e.first + 20
+			}
+			if n%5 == 0 {
+				e.gapFrom, e.gapTo = e.first+10, e.first+14
+			}
+		case n < 28:
+			e.first, e.last = 2, 24
+		default:
+			e.first, e.last = 25, popDays-1
+		}
+		if n%3 == 0 {
+			e.upgradeDay = 30
+		}
+		out = append(out, e)
+	}
+	return out
+}
+
+func TestPopulationProducesExactNewLapsedAndActiveCounts(t *testing.T) {
+	ctx := context.Background()
+	s, clock := newExtServer(t, config{activityExpiryDays: popExpiry}, popDay(0))
+	pop := popPopulation()
+	var wantFresh, wantDuplicates int
+	for d := 0; d <= popDays; d++ {
+		// The hourly job runs shortly after midnight and finalises day d-1.
+		*clock = popDay(d).Add(30 * time.Minute)
+		if err := s.store.lifecycleOnce(ctx, *clock, 730); err != nil {
+			t.Fatalf("lifecycle day %d: %v", d, err)
+		}
+		if d == popDays {
+			break
+		}
+		*clock = popDay(d).Add(12 * time.Hour)
+		for _, e := range pop {
+			if !e.active(d) {
+				continue
+			}
+			in := newExtInstall(e.n)
+			body, sig := in.report(t, *clock, func(r *telemetryschema.Report) { r.Version = e.version(d) })
+			if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+				t.Fatalf("day %d entity %d: status %d (%s)", d, e.n, w.Code, w.Body)
+			}
+			wantFresh++
+			if e.twice {
+				// A second report 30 minutes later is a same-day duplicate.
+				later := clock.Add(30 * time.Minute)
+				body, sig = in.report(t, later, func(r *telemetryschema.Report) { r.Version = e.version(d) })
+				if w := extSend(t, s, body, sig); w.Code != http.StatusNoContent {
+					t.Fatalf("day %d entity %d repeat: status %d", d, e.n, w.Code)
+				}
+				wantDuplicates++
+			}
+		}
+	}
+	st := s.store
+
+	// Per-day new, active and lapsed counts against an independent model.
+	var wantLapsedTotal int
+	for d := 0; d < popDays; d++ {
+		var wantNew, wantActive, wantLapsed int
+		for _, e := range pop {
+			if e.active(d) {
+				wantActive++
+				if d == e.first {
+					wantNew++
+				}
+			}
+			// Lapsed on day d: its last report so far was exactly 30 days ago.
+			if d >= lapsedWindowDays && e.lastActive(d) == d-lapsedWindowDays {
+				wantLapsed++
+			}
+		}
+		wantLapsedTotal += wantLapsed
+		var gotNew, gotActive, gotLapsed int
+		err := st.db.QueryRowContext(ctx,
+			`SELECT COALESCE(SUM(new_installs), 0), COALESCE(SUM(active_installs), 0), COALESCE(SUM(lapsed_installs), 0)
+			 FROM daily_ext WHERE day = ?`, dayString(popDay(d))).Scan(&gotNew, &gotActive, &gotLapsed)
+		if err != nil {
+			t.Fatalf("day %d: %v", d, err)
+		}
+		if gotNew != wantNew || gotActive != wantActive || gotLapsed != wantLapsed {
+			t.Errorf("day %d: new/active/lapsed = %d/%d/%d, want %d/%d/%d",
+				d, gotNew, gotActive, gotLapsed, wantNew, wantActive, wantLapsed)
+		}
+	}
+	if wantLapsedTotal == 0 {
+		t.Fatal("the population has no lapsed installs, so the test proves nothing")
+	}
+
+	// Dedupe: one counted report per install per day, repeats only counted
+	// in duplicates.
+	if got := countRows(t.Context(), t, st, `SELECT COALESCE(SUM(duplicates), 0) FROM daily_basic`); got != wantDuplicates {
+		t.Errorf("duplicates = %d, want %d", got, wantDuplicates)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT COALESCE(SUM(reports), 0) FROM daily_basic`); got != wantFresh {
+		t.Errorf("reports = %d, want %d", got, wantFresh)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT COALESCE(SUM(ext_reports), 0) FROM daily_ext`); got != wantFresh {
+		t.Errorf("ext_reports = %d, want %d", got, wantFresh)
+	}
+	if got := mustMeta(t, st, "reports_total"); got != fmt.Sprint(wantFresh) {
+		t.Errorf("reports_total = %s, want %d", got, wantFresh)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM activity`); got != len(pop) {
+		t.Errorf("activity rows = %d, want %d (nothing expires inside %d days)", got, len(pop), popExpiry)
+	}
+
+	// The views at the end of day 59: active counts and the 30-day unique
+	// count (SC-008 allows 1%; the distinct count is exact).
+	*clock = popDay(popDays).Add(12 * time.Hour)
+	v, err := BuildViews(ctx, st, 30, *clock)
+	if err != nil {
+		t.Fatalf("BuildViews: %v", err)
+	}
+	if v.Extended == nil {
+		t.Fatal("Extended is nil, want the extended block")
+	}
+	asOf := popDays - 1
+	var want1, want7, want30 int
+	for _, e := range pop {
+		switch last := e.lastActive(asOf); {
+		case last < 0:
+		default:
+			if last >= asOf {
+				want1++
+			}
+			if last >= asOf-6 {
+				want7++
+			}
+			if last >= asOf-29 {
+				want30++
+			}
+		}
+	}
+	got := v.Extended.Installs
+	if got.Active1d != int64(want1) || got.Active7d != int64(want7) || got.Active30d != int64(want30) {
+		t.Errorf("active 1d/7d/30d = %d/%d/%d, want %d/%d/%d",
+			got.Active1d, got.Active7d, got.Active30d, want1, want7, want30)
+	}
+	if diff := got.Active30d - int64(want30); diff*100 > int64(want30) || -diff*100 > int64(want30) {
+		t.Errorf("30-day unique count %d is not within 1%% of %d", got.Active30d, want30)
+	}
+
+	// New and lapsed series over days 30..59 against the table.
+	if len(v.Extended.NewPerDay) != 30 || len(v.Extended.LapsedPerDay) != 30 {
+		t.Fatalf("series lengths = %d/%d, want 30", len(v.Extended.NewPerDay), len(v.Extended.LapsedPerDay))
+	}
+	for i := range 30 {
+		d := 30 + i
+		var wantNew, wantLapsed int64
+		for _, e := range pop {
+			if e.active(d) && d == e.first {
+				wantNew++
+			}
+			if d >= lapsedWindowDays && e.lastActive(d) == d-lapsedWindowDays {
+				wantLapsed++
+			}
+		}
+		if n := v.Extended.NewPerDay[i]; n.Day != dayString(popDay(d)) || n.Count != wantNew {
+			t.Errorf("newPerDay[%d] = %+v, want %s %d", i, n, dayString(popDay(d)), wantNew)
+		}
+		if l := v.Extended.LapsedPerDay[i]; l.Day != dayString(popDay(d)) || l.Count != wantLapsed {
+			t.Errorf("lapsedPerDay[%d] = %+v, want %s %d", i, l, dayString(popDay(d)), wantLapsed)
+		}
+	}
+
+	// Version adoption by install covers the 30-day window: each install
+	// that reported in it, by its last version.
+	if v.Extended.VersionsByInstall.WindowDays != 30 {
+		t.Errorf("windowDays = %d, want 30", v.Extended.VersionsByInstall.WindowDays)
+	}
+	wantVersions := map[string]int64{}
+	for _, e := range pop {
+		if last := e.lastActive(asOf); last >= asOf-29 {
+			wantVersions[e.version(last)]++
+		}
+	}
+	gotVersions := map[string]int64{}
+	for _, it := range v.Extended.VersionsByInstall.Items {
+		gotVersions[it.Label] = it.Installs
+	}
+	if fmt.Sprint(gotVersions) != fmt.Sprint(wantVersions) {
+		t.Errorf("versionsByInstall = %v, want %v", gotVersions, wantVersions)
+	}
+}
+
+func TestLifecycleLapsedIsIdempotentAndWritesNothingForQuietDays(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	// One install last seen on 2026-09-06: lapsed on 2026-10-06 (30 days).
+	if _, err := st.db.ExecContext(ctx,
+		`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version)
+		 VALUES ('h', 'k', '2026-08-01', '2026-09-06', '2026-09-06T00:00:00Z', '1.0.0')`); err != nil {
+		t.Fatal(err)
+	}
+	for range 3 {
+		if err := st.lifecycleOnce(ctx, lifecycleNow, 365); err != nil {
+			t.Fatalf("lifecycleOnce: %v", err)
+		}
+	}
+	if got := countRows(t.Context(), t, st, `SELECT lapsed_installs FROM daily_ext WHERE day = '2026-10-06'`); got != 1 {
+		t.Errorf("lapsed_installs[2026-10-06] = %d, want 1", got)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM daily_ext`); got != 1 {
+		t.Errorf("daily_ext rows = %d, want 1 (quiet days write nothing)", got)
+	}
+}
+
+func TestLifecycleExpiresActivityRecordsAndTheirClaims(t *testing.T) {
+	for _, tc := range []struct {
+		name       string
+		expiryDays int
+		wantRows   int
+	}{
+		{"expiry 31 removes records older than 31 days", 31, 2},
+		{"expiry 0 keeps every record", 0, 3},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			expiresActivityCase(t, tc)
+		})
+	}
+}
+
+func expiresActivityCase(t *testing.T, tc struct {
+	name       string
+	expiryDays int
+	wantRows   int
+}) {
+	ctx := t.Context()
+	st := openTestStore(t.Context(), t, config{activityExpiryDays: tc.expiryDays})
+	// lifecycleNow is 2026-10-07: with expiry 31 the cutoff is
+	// 2026-09-06, which is kept; the day before it is deleted.
+	for id, lastSeen := range map[string]string{"a": "2026-09-05", "b": "2026-09-06", "c": "2026-10-06"} {
+		if _, err := st.db.ExecContext(ctx,
+			`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version)
+			 VALUES (?, 'k', '2026-01-01', ?, '2026-01-01T00:00:00Z', '1.0.0')`, id, lastSeen); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if err := st.lifecycleOnce(ctx, lifecycleNow, 365); err != nil {
+		t.Fatalf("lifecycleOnce: %v", err)
+	}
+	if got := countRows(t.Context(), t, st, `SELECT count(*) FROM activity`); got != tc.wantRows {
+		t.Errorf("activity rows = %d, want %d", got, tc.wantRows)
+	}
+	if tc.expiryDays > 0 {
+		if got := countRows(t.Context(), t, st, `SELECT count(*) FROM activity WHERE id_hmac = 'a'`); got != 0 {
+			t.Error("the record last seen before the cutoff was kept")
+		}
+	}
+}
+
+func TestBuildViewsExtendedSharesGamesAndFeatures(t *testing.T) {
+	ctx := context.Background()
+	s, clock := newExtServer(t, config{activityExpiryDays: 31}, extStart)
+	// Two installs on the same day: k3s with minecraft and sso, eks with
+	// terraria plus a custom module on a 2-3 node cluster.
+	a, aSig := newExtInstall(1).report(t, extStart, func(r *telemetryschema.Report) {
+		r.Ext.Features.SSO = true
+		r.Ext.Games = telemetryschema.Games{Official: map[string]int{"minecraft-java": 4}, Custom: 0}
+	})
+	b, bSig := newExtInstall(2).report(t, extStart, func(r *telemetryschema.Report) {
+		r.Ext.Env.Distro, r.Ext.Env.Nodes, r.Ext.Env.K8s = "eks", "2-3", "1.30"
+		r.Ext.Features.Backups, r.Ext.Features.Tunnels = false, []string{}
+		r.Ext.Features.DB, r.Ext.Features.Clusters = "postgres", "2-3"
+		r.Ext.Games = telemetryschema.Games{Official: map[string]int{"terraria": 1}, Custom: 2}
+	})
+	for _, c := range []struct{ body, sig string }{{a, aSig}, {b, bSig}} {
+		if w := extSend(t, s, c.body, c.sig); w.Code != http.StatusNoContent {
+			t.Fatalf("status = %d (%s)", w.Code, w.Body)
+		}
+	}
+	*clock = extStart.Add(24 * time.Hour) // asOf is 2026-10-07
+	v, err := BuildViews(ctx, s.store, 7, *clock)
+	if err != nil {
+		t.Fatal(err)
+	}
+	e := v.Extended
+	if e == nil {
+		t.Fatal("Extended is nil")
+	}
+	if e.Coverage != 1 {
+		t.Errorf("coverage = %v, want 1 (every report is extended)", e.Coverage)
+	}
+	if e.VersionsByInstall.WindowDays != 7 {
+		t.Errorf("windowDays = %d, want min(7, 31) = 7", e.VersionsByInstall.WindowDays)
+	}
+	wantDistro := []ShareRow{{"eks", 0.5}, {"k3s", 0.5}}
+	if fmt.Sprint(e.Env.Distro) != fmt.Sprint(wantDistro) {
+		t.Errorf("distro = %v, want %v (share desc, then label)", e.Env.Distro, wantDistro)
+	}
+	if fmt.Sprint(e.Env.Nodes) != fmt.Sprint([]ShareRow{{"1", 0.5}, {"2-3", 0.5}}) {
+		t.Errorf("nodes = %v, want band order 1, 2-3", e.Env.Nodes)
+	}
+	if fmt.Sprint(e.Clusters) != fmt.Sprint([]ShareRow{{"1", 0.5}, {"2-3", 0.5}}) {
+		t.Errorf("clusters = %v", e.Clusters)
+	}
+	if len(e.Features) != 5 || e.Features[0].Feature != "wakeOnConnect" || e.Features[3].Feature != "sso" ||
+		e.Features[3].Share != 0.5 || e.Features[2].Feature != "backups" || e.Features[2].Share != 0.5 ||
+		e.Features[0].Share != 0 {
+		t.Errorf("features = %+v, want all five in order with sso and backups at 0.5", e.Features)
+	}
+	games := map[string]GameShare{}
+	for _, g := range e.Games {
+		games[g.Module] = g
+	}
+	if games["minecraft-java"].InstallsShare != 0.5 || games["minecraft-java"].ServersPerDay != 4 ||
+		games["custom"].InstallsShare != 0.5 || games["custom"].ServersPerDay != 2 || len(games) != 3 {
+		t.Errorf("games = %+v", e.Games)
+	}
+	if len(e.Tunnels) != 1 || e.Tunnels[0].Label != "playit" || e.Tunnels[0].Share != 0.5 {
+		t.Errorf("tunnels = %+v", e.Tunnels)
+	}
+	// A range without extended reports has no extended block at all.
+	empty, err := BuildViews(ctx, openTestStoreWithBasic(ctx, t), 30, *clock)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if empty.Extended != nil {
+		t.Errorf("Extended = %+v, want nil when no report in range is extended", empty.Extended)
+	}
+}
+
+// openTestStoreWithBasic returns a store holding one basic report on
+// 2026-10-07 and nothing extended.
+func openTestStoreWithBasic(ctx context.Context, t *testing.T) *store {
+	t.Helper()
+	st := openTestStore(ctx, t, config{})
+	if err := st.recordBasic(ctx, "2026-10-07", "1.0.0", 1, 1); err != nil {
+		t.Fatal(err)
+	}
+	return st
+}
diff --git a/telemetry-receiver/pow.go b/telemetry-receiver/pow.go
new file mode 100644
index 000000000..1f879155f
--- /dev/null
+++ b/telemetry-receiver/pow.go
@@ -0,0 +1,378 @@
+package main
+
+import (
+	"crypto/hmac"
+	"crypto/rand"
+	"crypto/sha256"
+	"encoding/base64"
+	"encoding/binary"
+	"encoding/json"
+	"fmt"
+	"math"
+	"net/http"
+	"strings"
+	"sync"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+	"github.com/prometheus/client_golang/prometheus"
+)
+
+// Proof-of-work on report ingestion (spec 022 FR-039, research R21, OD-5).
+// Challenges are stateless: a MAC'd token the receiver can recognise without
+// remembering it. Only solved challenges are remembered (the used set), so
+// issuing cannot exhaust memory.
+const (
+	// Defaults and bounds of INGEST_POW_* (OD-5).
+	defaultPoWTargetPerMin = 60
+	defaultPoWMinBits      = 0
+	defaultPoWMaxBits      = 22
+
+	// powTokenVersion is the first payload byte.
+	powTokenVersion = 1
+	// powTTLSeconds is how long a challenge stays valid after it is issued.
+	powTTLSeconds = 15 * 60
+	// powKeySize is the length of the in-memory MAC key K.
+	powKeySize = 32
+	// powMACSize is the length of the truncated HMAC-SHA256 in a token.
+	powMACSize = 16
+	// powIDSize is the number of random bytes in a payload; they identify the
+	// challenge in the used set.
+	powIDSize = 16
+	// powPayloadSize is version (1) + issue time (8) + bits (1) + random.
+	powPayloadSize = 1 + 8 + 1 + powIDSize
+	// powWindow is the trailing window, in seconds, that sets the difficulty.
+	powWindow = 60
+	// powDecayStep is how long the difficulty peak lasts per bit.
+	powDecayStep = 5 * time.Minute
+	// powPruneEvery is how often the lazy sweep of the used set may run.
+	powPruneEvery = time.Minute
+	// powChallengePerMinute and powChallengeBurst are the per-source bucket of
+	// GET /v1/challenge.
+	powChallengePerMinute = 10
+	powChallengeBurst     = 5
+	// routeChallenge is the route label of rate_limited_total for the
+	// challenge endpoint.
+	routeChallenge = "challenge"
+)
+
+// powUsedCap bounds the used-challenge set. It is a variable so tests can
+// lower it; production code never assigns it.
+var powUsedCap = 1_000_000
+
+// Refusal reasons of the proof-of-work check: the JSON error codes and the
+// label values of gameplane_telemetry_refused_total.
+const (
+	refusePoWRequired = "pow_required"
+	refusePoWInvalid  = "pow_invalid"
+	refusePoWBusy     = "pow_busy"
+)
+
+// powVerdict is the outcome of powState.check.
+type powVerdict int
+
+const (
+	powAccepted powVerdict = iota
+	powMissing
+	powInvalid
+	powBusy
+)
+
+// powSlot is one second of the issue window.
+type powSlot struct {
+	sec int64
+	n   int
+}
+
+// powState issues and verifies challenges. All of it is in memory: a restart
+// invalidates outstanding challenges, and senders recover with the resend of
+// FR-040.
+type powState struct {
+	key                            [powKeySize]byte
+	targetPerMin, minBits, maxBits int
+
+	mu    sync.Mutex
+	slots [powWindow]powSlot
+	// peak and peakAt are the last difficulty that exceeded the decayed one,
+	// and when.
+	peak   int
+	peakAt time.Time
+	// used maps a solved challenge's random bytes to the Unix second at which
+	// the challenge expires, after which the entry is dropped.
+	used      map[[powIDSize]byte]uint64
+	lastPrune time.Time
+}
+
+// newPoW returns the state for cfg, with a new random MAC key. The settings
+// are clamped to a usable range so a zero config cannot divide by zero.
+func newPoW(cfg config) *powState {
+	p := &powState{
+		targetPerMin: max(cfg.powTargetPerMin, 1),
+		minBits:      max(cfg.powMinBits, 0),
+		maxBits:      min(cfg.powMaxBits, telemetryschema.MaxPoWBits),
+		used:         make(map[[powIDSize]byte]uint64),
+	}
+	p.maxBits = max(p.maxBits, p.minBits)
+	if _, err := rand.Read(p.key[:]); err != nil {
+		// crypto/rand failing is not recoverable: tokens would be forgeable.
+		panic(fmt.Sprintf("telemetry-receiver: pow key: %v", err))
+	}
+	return p
+}
+
+// bitsForRate is the difficulty a challenge carries when r challenges were
+// issued in the trailing window, before decay and the minimum:
+// 0 when r <= T, otherwise min(MAX, ceil(2*log2(r/T))).
+func (p *powState) bitsForRate(r int) int {
+	if r <= p.targetPerMin {
+		return 0
+	}
+	bits := int(math.Ceil(2 * math.Log2(float64(r)/float64(p.targetPerMin))))
+	return min(p.maxBits, bits)
+}
+
+// recordLocked counts one issue at now and returns how many challenges were
+// issued in the trailing window, including this one. The caller holds mu.
+func (p *powState) recordLocked(now time.Time) int {
+	sec := now.Unix()
+	slot := &p.slots[((sec%powWindow)+powWindow)%powWindow]
+	if slot.sec != sec {
+		*slot = powSlot{sec: sec}
+	}
+	slot.n++
+	return p.countLocked(now)
+}
+
+// countLocked is the number of challenges issued in the trailing window.
+func (p *powState) countLocked(now time.Time) int {
+	sec := now.Unix()
+	total := 0
+	for _, s := range p.slots {
+		if s.sec > sec-powWindow && s.sec <= sec {
+			total += s.n
+		}
+	}
+	return total
+}
+
+// difficultyLocked is max(MIN, target, peak - floor((now-peakAt)/5m)) for r
+// challenges in the window. With commit it also records a new peak when the
+// target exceeds the decayed one. The caller holds mu.
+func (p *powState) difficultyLocked(now time.Time, r int, commit bool) int {
+	target := p.bitsForRate(r)
+	decayed := 0
+	if p.peak > 0 {
+		steps := max(int(now.Sub(p.peakAt)/powDecayStep), 0)
+		decayed = max(p.peak-steps, 0)
+	}
+	if target > decayed {
+		if commit {
+			p.peak, p.peakAt = target, now
+		}
+		decayed = target
+	}
+	return max(p.minBits, decayed)
+}
+
+// currentBits is the difficulty a challenge issued at now would carry,
+// without issuing one: the gameplane_telemetry_pow_bits gauge.
+func (p *powState) currentBits(now time.Time) int {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	return p.difficultyLocked(now, p.countLocked(now)+1, false)
+}
+
+// mac returns the first powMACSize bytes of HMAC-SHA256(K, payload).
+func (p *powState) mac(payload []byte) []byte {
+	m := hmac.New(sha256.New, p.key[:])
+	m.Write(payload)
+	return m.Sum(nil)[:powMACSize]
+}
+
+// issue creates a challenge at now: its token, its difficulty and its expiry.
+func (p *powState) issue(now time.Time) (token string, bits int, expires time.Time) {
+	p.mu.Lock()
+	r := p.recordLocked(now)
+	bits = p.difficultyLocked(now, r, true)
+	p.mu.Unlock()
+
+	issued := max(now.Unix(), 0)
+	payload := make([]byte, powPayloadSize)
+	payload[0] = powTokenVersion
+	binary.BigEndian.PutUint64(payload[1:9], uint64(issued))
+	payload[9] = byte(bits & 0xff)
+	if _, err := rand.Read(payload[10:]); err != nil {
+		panic(fmt.Sprintf("telemetry-receiver: pow challenge: %v", err))
+	}
+	token = base64.RawURLEncoding.EncodeToString(payload) + "." +
+		base64.RawURLEncoding.EncodeToString(p.mac(payload))
+	return token, bits, time.Unix(issued, 0).Add(powTTLSeconds * time.Second).UTC()
+}
+
+// parseToken checks the token's shape and MAC and returns its payload.
+func (p *powState) parseToken(token string) ([]byte, bool) {
+	rawPayload, rawMAC, ok := strings.Cut(token, ".")
+	if !ok {
+		return nil, false
+	}
+	payload, err := base64.RawURLEncoding.DecodeString(rawPayload)
+	if err != nil || len(payload) != powPayloadSize || payload[0] != powTokenVersion {
+		return nil, false
+	}
+	got, err := base64.RawURLEncoding.DecodeString(rawMAC)
+	if err != nil || !hmac.Equal(got, p.mac(payload)) {
+		return nil, false
+	}
+	return payload, true
+}
+
+// check runs the verification order of research R21 on a PoWHeader value:
+// header present, well formed, MAC valid, not expired, enough leading zero
+// bits (as stated in the token, so a sender cannot lower it), not already
+// used. A solution that passes is marked used before check returns, whatever
+// happens to the report afterwards. When the used set is full it returns
+// powBusy and marks nothing.
+func (p *powState) check(header string, now time.Time) powVerdict {
+	if header == "" {
+		return powMissing
+	}
+	token, nonce, err := telemetryschema.ParsePoW(header)
+	if err != nil {
+		return powInvalid
+	}
+	payload, ok := p.parseToken(token)
+	if !ok {
+		return powInvalid
+	}
+	nowSec := now.Unix()
+	if nowSec < 0 {
+		return powInvalid
+	}
+	issued := binary.BigEndian.Uint64(payload[1:9])
+	expires := issued + powTTLSeconds
+	if uint64(nowSec) > expires {
+		return powInvalid
+	}
+	if !telemetryschema.PoWOK(token, nonce, int(payload[9])) {
+		return powInvalid
+	}
+	var id [powIDSize]byte
+	copy(id[:], payload[10:])
+
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	p.pruneLocked(now)
+	if _, dup := p.used[id]; dup {
+		return powInvalid
+	}
+	if len(p.used) >= powUsedCap {
+		return powBusy
+	}
+	p.used[id] = expires
+	return powAccepted
+}
+
+// pruneLocked drops expired entries of the used set, at most once a minute.
+// An expired challenge is refused by its age, so forgetting it is safe. The
+// caller holds mu.
+func (p *powState) pruneLocked(now time.Time) {
+	if now.Sub(p.lastPrune) < powPruneEvery {
+		return
+	}
+	p.lastPrune = now
+	nowSec := now.Unix()
+	if nowSec < 0 {
+		return
+	}
+	for id, expires := range p.used {
+		if uint64(nowSec) > expires {
+			delete(p.used, id)
+		}
+	}
+}
+
+// initPoW sets up proof-of-work: the two metrics always, and the state and
+// the challenge limiter only when INGEST_POW is on. With it off, s.pow stays
+// nil and /ingest and /v1/challenge behave as before.
+func (s *server) initPoW() {
+	s.powChallenges = prometheus.NewCounter(prometheus.CounterOpts{
+		Name: "gameplane_telemetry_pow_challenges_total",
+		Help: "Proof-of-work challenges issued.",
+	})
+	s.reg.MustRegister(s.powChallenges, prometheus.NewGaugeFunc(prometheus.GaugeOpts{
+		Name: "gameplane_telemetry_pow_bits",
+		Help: "Difficulty, in leading zero bits, of a challenge issued now (0 when proof-of-work is off).",
+	}, func() float64 {
+		if s.pow == nil {
+			return 0
+		}
+		return float64(s.pow.currentBits(s.now()))
+	}))
+	if !s.cfg.ingestPoW {
+		return
+	}
+	s.pow = newPoW(s.cfg)
+	s.powLimiter = newBucketLimiter(powChallengePerMinute, powChallengeBurst)
+	for _, reason := range []string{refusePoWRequired, refusePoWInvalid, refusePoWBusy} {
+		s.refused.WithLabelValues(reason)
+	}
+	s.rateLimited.WithLabelValues(routeChallenge)
+}
+
+// requirePoW enforces proof-of-work on /ingest. It returns true when the
+// request may go on (proof-of-work is off, or the solution verified) and has
+// answered the request itself when it returns false.
+func (s *server) requirePoW(w http.ResponseWriter, req *http.Request) bool {
+	if s.pow == nil {
+		return true
+	}
+	switch s.pow.check(req.Header.Get(telemetryschema.PoWHeader), s.now()) {
+	case powAccepted:
+		return true
+	case powMissing:
+		s.refusePoW(w, refusePoWRequired, http.StatusPreconditionRequired)
+	case powBusy:
+		w.Header().Set("Retry-After", "60")
+		s.refusePoW(w, refusePoWBusy, http.StatusServiceUnavailable)
+	default:
+		s.refusePoW(w, refusePoWInvalid, http.StatusPreconditionRequired)
+	}
+	return false
+}
+
+// refusePoW answers a refused report with a fixed JSON body and counts it. A
+// refused report changes no stored data.
+func (s *server) refusePoW(w http.ResponseWriter, reason string, status int) {
+	s.refused.WithLabelValues(reason).Inc()
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(status)
+	_, _ = w.Write([]byte(`{"error":"` + reason + `"}`))
+}
+
+// challengeReply is the body of GET /v1/challenge.
+type challengeReply struct {
+	Challenge string `json:"challenge"`
+	Bits      int    `json:"bits"`
+	ExpiresAt string `json:"expiresAt"`
+}
+
+// challenge serves GET /v1/challenge: 404 when proof-of-work is off, 429
+// past the per-source bucket, otherwise a new challenge.
+func (s *server) challenge(w http.ResponseWriter, r *http.Request) {
+	if s.pow == nil {
+		http.NotFound(w, r)
+		return
+	}
+	now := s.now()
+	if !s.powLimiter.allow(sourceIP(r, s.cfg.trustedProxyCIDRs), now) {
+		s.rateLimited.WithLabelValues(routeChallenge).Inc()
+		http.Error(w, "rate limit exceeded", http.StatusTooManyRequests)
+		return
+	}
+	token, bits, expires := s.pow.issue(now)
+	s.powChallenges.Inc()
+	h := w.Header()
+	h.Set("Content-Type", "application/json")
+	h.Set("Cache-Control", "no-store")
+	_ = json.NewEncoder(w).Encode(challengeReply{Challenge: token, Bits: bits, ExpiresAt: expires.Format(time.RFC3339)})
+}
diff --git a/telemetry-receiver/pow_test.go b/telemetry-receiver/pow_test.go
new file mode 100644
index 000000000..4baa77564
--- /dev/null
+++ b/telemetry-receiver/pow_test.go
@@ -0,0 +1,596 @@
+package main
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// Spec 022 US7 (T102 to T104): proof-of-work on /ingest, the challenge
+// endpoint and the difficulty curve (research R21, OD-5).
+
+// powCfg is a proof-of-work config with the OD-5 normal rate (60 a minute).
+func powCfg(minBits, maxBits int) config {
+	return config{ingestPoW: true, powTargetPerMin: 60, powMinBits: minBits, powMaxBits: maxBits}
+}
+
+// newPoWServer returns a receiver with proof-of-work on, a controllable clock
+// starting at extStart, and an in-memory store.
+func newPoWServer(t *testing.T, minBits, maxBits int) (*server, *time.Time) {
+	t.Helper()
+	return newExtServer(t, powCfg(minBits, maxBits), extStart)
+}
+
+// powGet sends GET /v1/challenge through the router from remote.
+func powGet(t *testing.T, s *server, remote string) *httptest.ResponseRecorder {
+	t.Helper()
+	r := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/v1/challenge", nil)
+	r.RemoteAddr = remote
+	w := httptest.NewRecorder()
+	s.routes().ServeHTTP(w, r)
+	return w
+}
+
+// powSolved issues a challenge directly (not through the endpoint, so the
+// per-source bucket is untouched), solves it and returns the header value.
+func powSolved(t *testing.T, s *server) string {
+	t.Helper()
+	token, bits, _ := s.pow.issue(s.now())
+	nonce, err := telemetryschema.SolvePoW(t.Context(), token, bits)
+	if err != nil {
+		t.Fatalf("solve: %v", err)
+	}
+	return telemetryschema.FormatPoW(token, nonce)
+}
+
+// powPost POSTs body to /ingest through the router from a fixed source. The
+// proof-of-work header is sent when header is not empty; extra headers are
+// added as given.
+func powPost(t *testing.T, s *server, body io.Reader, header string, extra map[string]string) *httptest.ResponseRecorder {
+	t.Helper()
+	r := httptest.NewRequestWithContext(t.Context(), http.MethodPost, "/ingest", body)
+	r.RemoteAddr = "192.0.2.1:1000"
+	if header != "" {
+		r.Header.Set(telemetryschema.PoWHeader, header)
+	}
+	for k, v := range extra {
+		r.Header.Set(k, v)
+	}
+	w := httptest.NewRecorder()
+	s.routes().ServeHTTP(w, r)
+	return w
+}
+
+// trackedBody is a request body that records whether it was read.
+type trackedBody struct {
+	read atomic.Bool
+}
+
+func (b *trackedBody) Read([]byte) (int, error) {
+	b.read.Store(true)
+	return 0, io.EOF
+}
+
+// powBitsGauge reads gameplane_telemetry_pow_bits.
+func powBitsGauge(t *testing.T, s *server) float64 {
+	t.Helper()
+	families, err := s.reg.Gather()
+	if err != nil {
+		t.Fatalf("gather: %v", err)
+	}
+	for _, f := range families {
+		if f.GetName() == "gameplane_telemetry_pow_bits" {
+			return f.Metric[0].GetGauge().GetValue()
+		}
+	}
+	t.Fatal("gameplane_telemetry_pow_bits not found")
+	return 0
+}
+
+// issueN issues n challenges at the clock's current instant and returns the
+// difficulty of the last one.
+func issueN(s *server, n int) int {
+	bits := 0
+	for range n {
+		_, bits, _ = s.pow.issue(s.now())
+	}
+	return bits
+}
+
+func TestPoWChallengeIsNotFoundWhenOff(t *testing.T) {
+	s, _ := newExtServer(t, config{}, extStart)
+	if w := powGet(t, s, "192.0.2.1:1000"); w.Code != http.StatusNotFound {
+		t.Fatalf("GET /v1/challenge with proof-of-work off = %d, want 404", w.Code)
+	}
+	// Off means /ingest takes reports as before: no header needed.
+	if w := powPost(t, s, strings.NewReader(okReport), "", nil); w.Code != http.StatusNoContent {
+		t.Fatalf("ingest with proof-of-work off = %d, want 204", w.Code)
+	}
+	if got := powBitsGauge(t, s); got != 0 {
+		t.Fatalf("pow_bits with proof-of-work off = %v, want 0", got)
+	}
+}
+
+func TestPoWChallengeEndpointServesASolvableChallenge(t *testing.T) {
+	s, _ := newPoWServer(t, 8, 22)
+	w := powGet(t, s, "192.0.2.1:1000")
+	if w.Code != http.StatusOK {
+		t.Fatalf("GET /v1/challenge = %d (%s), want 200", w.Code, w.Body)
+	}
+	if cc := w.Header().Get("Cache-Control"); cc != "no-store" {
+		t.Errorf("Cache-Control = %q, want no-store", cc)
+	}
+	if ct := w.Header().Get("Content-Type"); ct != "application/json" {
+		t.Errorf("Content-Type = %q, want application/json", ct)
+	}
+	var c challengeReply
+	if err := json.Unmarshal(w.Body.Bytes(), &c); err != nil {
+		t.Fatalf("decode %q: %v", w.Body, err)
+	}
+	if c.Bits != 8 {
+		t.Errorf("bits = %d, want the minimum 8", c.Bits)
+	}
+	if want := extStart.Add(15 * time.Minute).Format(time.RFC3339); c.ExpiresAt != want {
+		t.Errorf("expiresAt = %q, want %q", c.ExpiresAt, want)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_pow_challenges_total"); got != 1 {
+		t.Errorf("pow_challenges_total = %v, want 1", got)
+	}
+	nonce, err := telemetryschema.SolvePoW(t.Context(), c.Challenge, c.Bits)
+	if err != nil {
+		t.Fatalf("solve: %v", err)
+	}
+	header := telemetryschema.FormatPoW(c.Challenge, nonce)
+	if w := powPost(t, s, strings.NewReader(okReport), header, nil); w.Code != http.StatusNoContent {
+		t.Fatalf("report with the solved challenge = %d (%s), want 204", w.Code, w.Body)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0"); got != 1 {
+		t.Errorf("reports_total = %v, want 1", got)
+	}
+}
+
+func TestPoWChallengeRateLimitPerSource(t *testing.T) {
+	s, clock := newPoWServer(t, 0, 22)
+	for i := range powChallengeBurst {
+		if w := powGet(t, s, "192.0.2.1:1000"); w.Code != http.StatusOK {
+			t.Fatalf("challenge %d = %d, want 200 (inside the burst)", i, w.Code)
+		}
+	}
+	if w := powGet(t, s, "192.0.2.1:2000"); w.Code != http.StatusTooManyRequests {
+		t.Fatalf("challenge past the burst = %d, want 429", w.Code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "challenge"); got != 1 {
+		t.Errorf("rate_limited_total{route=challenge} = %v, want 1", got)
+	}
+	if got := extCounter(t, s, "gameplane_telemetry_pow_challenges_total"); got != powChallengeBurst {
+		t.Errorf("pow_challenges_total = %v, want %d: a limited request issues nothing", got, powChallengeBurst)
+	}
+	if w := powGet(t, s, "198.51.100.7:1000"); w.Code != http.StatusOK {
+		t.Fatalf("another source = %d, want 200: the bucket is per source", w.Code)
+	}
+	*clock = extStart.Add(7 * time.Second)
+	if w := powGet(t, s, "192.0.2.1:1000"); w.Code != http.StatusOK {
+		t.Fatalf("after the bucket refilled = %d, want 200", w.Code)
+	}
+}
+
+func TestPoWCurveFollowsTheRequestRate(t *testing.T) {
+	cases := []struct {
+		name     string
+		issues   int
+		min, max int
+		want     int
+	}{
+		{"at the normal rate", 60, 0, 22, 0},
+		{"at the normal rate with a minimum", 60, 3, 22, 3},
+		{"just over the normal rate", 61, 0, 22, 1},
+		{"10 times the normal rate", 600, 0, 22, 7},
+		{"100 times the normal rate", 6000, 0, 22, 14},
+		{"1000 times the normal rate", 60000, 0, 22, 20},
+		{"capped at the maximum", 6000, 0, 10, 10},
+		{"minimum above the curve", 600, 9, 22, 9},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			s, _ := newPoWServer(t, tc.min, tc.max)
+			if got := issueN(s, tc.issues); got != tc.want {
+				t.Fatalf("bits after %d challenges in one minute = %d, want %d", tc.issues, got, tc.want)
+			}
+		})
+	}
+}
+
+func TestPoWDifficultyRisesAtOnceAndDecaysOneBitPerFiveMinutes(t *testing.T) {
+	s, clock := newPoWServer(t, 0, 22)
+	if got := issueN(s, 6000); got != 14 {
+		t.Fatalf("bits at 100 times the rate = %d, want 14", got)
+	}
+	if got := powBitsGauge(t, s); got != 14 {
+		t.Fatalf("pow_bits right after the flood = %v, want 14", got)
+	}
+	for _, step := range []struct {
+		after time.Duration
+		want  int
+	}{
+		{4*time.Minute + 59*time.Second, 14},
+		{5 * time.Minute, 13},
+		{10 * time.Minute, 12},
+		{70 * time.Minute, 0},
+	} {
+		*clock = extStart.Add(step.after)
+		if got := issueN(s, 1); got != step.want {
+			t.Fatalf("bits %v after the flood = %d, want %d", step.after, got, step.want)
+		}
+	}
+
+	// A new flood raises the very next challenge to the new target.
+	*clock = extStart.Add(2 * time.Hour)
+	if got := issueN(s, 600); got != 7 {
+		t.Fatalf("bits at 10 times the rate = %d, want 7", got)
+	}
+	*clock = extStart.Add(2*time.Hour + 10*time.Minute)
+	if got := powBitsGauge(t, s); got != 5 {
+		t.Fatalf("pow_bits 10 minutes after a 7-bit peak = %v, want 5", got)
+	}
+}
+
+func TestPoWMinimumHoldsWhenIdle(t *testing.T) {
+	s, clock := newPoWServer(t, 4, 22)
+	if got := issueN(s, 1); got != 4 {
+		t.Fatalf("bits = %d, want the minimum 4", got)
+	}
+	*clock = extStart.Add(24 * time.Hour)
+	if got := issueN(s, 1); got != 4 {
+		t.Fatalf("bits a day later = %d, want the minimum 4", got)
+	}
+}
+
+func TestPoWAcceptsEachSolvedChallengeOnce(t *testing.T) {
+	s, _ := newPoWServer(t, 8, 22)
+	header := powSolved(t, s)
+	if w := powPost(t, s, strings.NewReader(okReport), header, nil); w.Code != http.StatusNoContent {
+		t.Fatalf("first use = %d (%s), want 204", w.Code, w.Body)
+	}
+	w := powPost(t, s, strings.NewReader(okReport), header, nil)
+	if w.Code != http.StatusPreconditionRequired || w.Body.String() != `{"error":"pow_invalid"}` {
+		t.Fatalf("second use = %d %q, want 428 pow_invalid", w.Code, w.Body)
+	}
+}
+
+// powRefusal is one header that must be refused with 428.
+type powRefusal struct {
+	name   string
+	reason string
+	// header builds the PoWHeader value; clock may be moved.
+	header func(t *testing.T, s *server, clock *time.Time) string
+}
+
+func TestPoWRefusalsChangeNoTable(t *testing.T) {
+	cases := []powRefusal{
+		{"no header", refusePoWRequired,
+			func(*testing.T, *server, *time.Time) string { return "" }},
+		{"no nonce separator", refusePoWInvalid,
+			func(*testing.T, *server, *time.Time) string { return "garbage" }},
+		{"nonce is not decimal", refusePoWInvalid,
+			func(_ *testing.T, s *server, _ *time.Time) string {
+				token, _, _ := s.pow.issue(s.now())
+				return token + ":abc"
+			}},
+		{"tampered MAC", refusePoWInvalid,
+			func(t *testing.T, s *server, _ *time.Time) string {
+				header := powSolved(t, s)
+				token, nonce, err := telemetryschema.ParsePoW(header)
+				if err != nil {
+					t.Fatalf("parse: %v", err)
+				}
+				// Change the first character of the MAC. (The last character of
+				// an unpadded base64url string can carry unused bits, so
+				// changing it might not change the decoded MAC.)
+				i := strings.IndexByte(token, '.') + 1
+				flipped := byte('A')
+				if token[i] == 'A' {
+					flipped = 'B'
+				}
+				return telemetryschema.FormatPoW(token[:i]+string(flipped)+token[i+1:], nonce)
+			}},
+		{"bits lowered inside the payload", refusePoWInvalid,
+			func(t *testing.T, s *server, _ *time.Time) string {
+				token, _, _ := s.pow.issue(s.now())
+				rawPayload, rawMAC, _ := strings.Cut(token, ".")
+				payload, err := base64.RawURLEncoding.DecodeString(rawPayload)
+				if err != nil {
+					t.Fatalf("decode payload: %v", err)
+				}
+				payload[9] = 0
+				// Nonce 0 satisfies zero bits, so only the MAC can catch this.
+				return telemetryschema.FormatPoW(base64.RawURLEncoding.EncodeToString(payload)+"."+rawMAC, 0)
+			}},
+		{"token from another receiver", refusePoWInvalid,
+			func(t *testing.T, _ *server, _ *time.Time) string {
+				other, _ := newPoWServer(t, 0, 22)
+				return powSolved(t, other)
+			}},
+		{"nonce does not meet the difficulty", refusePoWInvalid,
+			func(_ *testing.T, s *server, _ *time.Time) string {
+				token, bits, _ := s.pow.issue(s.now())
+				for nonce := uint64(0); ; nonce++ {
+					if !telemetryschema.PoWOK(token, nonce, bits) {
+						return telemetryschema.FormatPoW(token, nonce)
+					}
+				}
+			}},
+		{"expired", refusePoWInvalid,
+			func(t *testing.T, s *server, clock *time.Time) string {
+				header := powSolved(t, s)
+				*clock = extStart.Add(15*time.Minute + time.Second)
+				return header
+			}},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			s, clock := newPoWServer(t, 12, 22)
+			header := tc.header(t, s, clock)
+			before := extDump(t, s.store)
+			refusedBefore := counterValue(t, s, "gameplane_telemetry_refused_total", "reason", tc.reason)
+
+			w := powPost(t, s, strings.NewReader(okReport), header, nil)
+			if w.Code != http.StatusPreconditionRequired {
+				t.Fatalf("status = %d (%s), want 428", w.Code, w.Body)
+			}
+			if want := `{"error":"` + tc.reason + `"}`; w.Body.String() != want {
+				t.Fatalf("body = %q, want %q", w.Body, want)
+			}
+			if ct := w.Header().Get("Content-Type"); ct != "application/json" {
+				t.Errorf("Content-Type = %q, want application/json", ct)
+			}
+			if after := extDump(t, s.store); after != before {
+				t.Fatalf("a refused report changed the store:\nbefore:\n%s\nafter:\n%s", before, after)
+			}
+			if got := counterValue(t, s, "gameplane_telemetry_refused_total", "reason", tc.reason); got != refusedBefore+1 {
+				t.Errorf("refused_total{%s} = %v, want %v", tc.reason, got, refusedBefore+1)
+			}
+			if got := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0"); got != 0 {
+				t.Errorf("reports_total = %v, want 0", got)
+			}
+		})
+	}
+}
+
+func TestPoWChallengeIsValidForExactlyFifteenMinutes(t *testing.T) {
+	s, clock := newPoWServer(t, 0, 22)
+	header := powSolved(t, s)
+	*clock = extStart.Add(15 * time.Minute)
+	if w := powPost(t, s, strings.NewReader(okReport), header, nil); w.Code != http.StatusNoContent {
+		t.Fatalf("at 15 minutes = %d (%s), want 204", w.Code, w.Body)
+	}
+}
+
+func TestPoWSolutionIsSpentEvenWhenTheReportIsRejected(t *testing.T) {
+	s, _ := newPoWServer(t, 0, 22)
+	header := powSolved(t, s)
+	if w := powPost(t, s, strings.NewReader(`{not json`), header, nil); w.Code != http.StatusBadRequest {
+		t.Fatalf("malformed report = %d, want 400 (the proof of work was fine)", w.Code)
+	}
+	w := powPost(t, s, strings.NewReader(okReport), header, nil)
+	if w.Code != http.StatusPreconditionRequired || w.Body.String() != `{"error":"pow_invalid"}` {
+		t.Fatalf("reuse after a 400 = %d %q, want 428 pow_invalid", w.Code, w.Body)
+	}
+}
+
+func TestPoWIsCheckedAfterAuthAndBeforeTheBody(t *testing.T) {
+	cfg := powCfg(0, 22)
+	cfg.authToken = "secret"
+	s, _ := newExtServer(t, cfg, extStart)
+	auth := map[string]string{"Authorization": "secret"}
+
+	// AUTH_TOKEN first: a wrong token is 401 even with no proof of work.
+	if w := powPost(t, s, strings.NewReader(okReport), "", nil); w.Code != http.StatusUnauthorized {
+		t.Fatalf("no token and no proof = %d, want 401", w.Code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_refused_total", "reason", refusePoWRequired); got != 0 {
+		t.Fatalf("refused_total{pow_required} = %v after a 401, want 0", got)
+	}
+	// With the token, the missing proof is next, and the body is never read.
+	body := &trackedBody{}
+	if w := powPost(t, s, body, "", auth); w.Code != http.StatusPreconditionRequired {
+		t.Fatalf("token but no proof = %d, want 428", w.Code)
+	}
+	if body.read.Load() {
+		t.Fatal("the body was read before the proof of work was checked")
+	}
+	// An oversized or malformed body gets 428, not 413 or 400, without proof.
+	huge := strings.NewReader(strings.Repeat("a", maxBody+1))
+	if w := powPost(t, s, huge, "", auth); w.Code != http.StatusPreconditionRequired {
+		t.Fatalf("oversized body without proof = %d, want 428", w.Code)
+	}
+	// With both, the report goes through.
+	if w := powPost(t, s, strings.NewReader(okReport), powSolved(t, s), auth); w.Code != http.StatusNoContent {
+		t.Fatalf("token and proof = %d (%s), want 204", w.Code, w.Body)
+	}
+}
+
+func TestPoWBusyWhenTheUsedSetIsFull(t *testing.T) {
+	old := powUsedCap
+	powUsedCap = 2
+	t.Cleanup(func() { powUsedCap = old })
+
+	s, clock := newPoWServer(t, 0, 22)
+	for i := range 2 {
+		if w := powPost(t, s, strings.NewReader(okReport), powSolved(t, s), nil); w.Code != http.StatusNoContent {
+			t.Fatalf("report %d = %d, want 204", i, w.Code)
+		}
+	}
+	before := extDump(t, s.store)
+	full := powSolved(t, s)
+	w := powPost(t, s, strings.NewReader(okReport), full, nil)
+	if w.Code != http.StatusServiceUnavailable || w.Body.String() != `{"error":"pow_busy"}` {
+		t.Fatalf("report with a full used set = %d %q, want 503 pow_busy", w.Code, w.Body)
+	}
+	if ra := w.Header().Get("Retry-After"); ra != "60" {
+		t.Errorf("Retry-After = %q, want 60", ra)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_refused_total", "reason", refusePoWBusy); got != 1 {
+		t.Errorf("refused_total{pow_busy} = %v, want 1", got)
+	}
+	if extDump(t, s.store) != before {
+		t.Error("a pow_busy refusal changed the store")
+	}
+	if n := len(s.pow.used); n != 2 {
+		t.Fatalf("used set holds %d entries, want 2: pow_busy must mark nothing", n)
+	}
+
+	// Entries are forgotten once their challenges have expired, which frees
+	// room (the sweep is lazy, at most once a minute).
+	*clock = extStart.Add(16 * time.Minute)
+	if w := powPost(t, s, strings.NewReader(okReport), powSolved(t, s), nil); w.Code != http.StatusNoContent {
+		t.Fatalf("report after the old entries expired = %d (%s), want 204", w.Code, w.Body)
+	}
+	if n := len(s.pow.used); n != 1 {
+		t.Fatalf("used set holds %d entries after the sweep, want 1", n)
+	}
+}
+
+func TestPoWAcceptsOneConcurrentUseOfAChallenge(t *testing.T) {
+	s, _ := newPoWServer(t, 0, 22)
+	header := powSolved(t, s)
+	var accepted atomic.Int32
+	var wg sync.WaitGroup
+	for range 32 {
+		wg.Go(func() {
+			if s.pow.check(header, s.now()) == powAccepted {
+				accepted.Add(1)
+			}
+		})
+	}
+	wg.Wait()
+	if got := accepted.Load(); got != 1 {
+		t.Fatalf("%d concurrent uses of one challenge were accepted, want exactly 1", got)
+	}
+}
+
+func TestNewPoWClampsItsSettings(t *testing.T) {
+	p := newPoW(config{ingestPoW: true, powTargetPerMin: 0, powMinBits: -3, powMaxBits: 99})
+	if p.targetPerMin != 1 || p.minBits != 0 || p.maxBits != telemetryschema.MaxPoWBits {
+		t.Fatalf("clamped = target %d min %d max %d, want 1, 0, %d", p.targetPerMin, p.minBits, p.maxBits, telemetryschema.MaxPoWBits)
+	}
+	q := newPoW(config{ingestPoW: true, powTargetPerMin: 60, powMinBits: 9, powMaxBits: 4})
+	if q.maxBits != 9 {
+		t.Fatalf("max = %d, want it raised to the minimum 9", q.maxBits)
+	}
+}
+
+// clearPoWEnv unsets every INGEST_POW* variable for the test.
+func clearPoWEnv(t *testing.T) {
+	t.Helper()
+	clearConfigEnv(t)
+	for _, k := range []string{"INGEST_POW", "INGEST_POW_TARGET_PER_MIN", "INGEST_POW_MIN_BITS", "INGEST_POW_MAX_BITS"} {
+		t.Setenv(k, "")
+		if err := os.Unsetenv(k); err != nil {
+			t.Fatalf("unset %s: %v", k, err)
+		}
+	}
+}
+
+func TestLoadConfigPoWDefaultsAndEnv(t *testing.T) {
+	clearPoWEnv(t)
+	cfg := loadConfig()
+	if cfg.ingestPoW || cfg.powTargetPerMin != 60 || cfg.powMinBits != 0 || cfg.powMaxBits != 22 {
+		t.Fatalf("defaults = %+v, want off, 60, 0 and 22", cfg)
+	}
+	if err := cfg.validate(); err != nil {
+		t.Fatalf("defaults must validate: %v", err)
+	}
+	t.Setenv("INGEST_POW", " TRUE ")
+	t.Setenv("INGEST_POW_TARGET_PER_MIN", "120")
+	t.Setenv("INGEST_POW_MIN_BITS", "8")
+	t.Setenv("INGEST_POW_MAX_BITS", "26")
+	cfg = loadConfig()
+	if !cfg.ingestPoW || cfg.powTargetPerMin != 120 || cfg.powMinBits != 8 || cfg.powMaxBits != 26 {
+		t.Fatalf("env = %+v, want on, 120, 8 and 26", cfg)
+	}
+	if err := cfg.validate(); err != nil {
+		t.Fatalf("the ceiling 26 must validate: %v", err)
+	}
+	t.Setenv("INGEST_POW", "yes")
+	if loadConfig().ingestPoW {
+		t.Error("INGEST_POW other than true must stay off")
+	}
+}
+
+func TestConfigValidatePoWRanges(t *testing.T) {
+	cases := []struct {
+		name string
+		env  map[string]string
+		want string
+	}{
+		{"target below 1", map[string]string{"INGEST_POW_TARGET_PER_MIN": "0"}, "INGEST_POW_TARGET_PER_MIN"},
+		{"negative target", map[string]string{"INGEST_POW_TARGET_PER_MIN": "-5"}, "INGEST_POW_TARGET_PER_MIN"},
+		{"negative minimum", map[string]string{"INGEST_POW_MIN_BITS": "-1"}, "INGEST_POW_MIN_BITS"},
+		{"maximum above the cap", map[string]string{"INGEST_POW_MAX_BITS": "27"}, "INGEST_POW_MAX_BITS"},
+		{"maximum below the minimum", map[string]string{"INGEST_POW_MIN_BITS": "10", "INGEST_POW_MAX_BITS": "9"}, "INGEST_POW_MAX_BITS"},
+		{"non-integer maximum", map[string]string{"INGEST_POW_MAX_BITS": "high"}, "INGEST_POW_MAX_BITS"},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			clearPoWEnv(t)
+			for k, v := range tc.env {
+				t.Setenv(k, v)
+			}
+			err := loadConfig().validate()
+			if err == nil || !strings.Contains(err.Error(), tc.want) {
+				t.Fatalf("validate() = %v, want an error mentioning %s", err, tc.want)
+			}
+		})
+	}
+	// The edges are valid.
+	clearPoWEnv(t)
+	t.Setenv("INGEST_POW_MIN_BITS", "26")
+	t.Setenv("INGEST_POW_MAX_BITS", "26")
+	t.Setenv("INGEST_POW_TARGET_PER_MIN", "1")
+	if err := loadConfig().validate(); err != nil {
+		t.Fatalf("min = max = 26 and target 1 must validate: %v", err)
+	}
+}
+
+func TestDashboardTokenMinimum(t *testing.T) {
+	for _, tc := range []struct {
+		name  string
+		token string
+		ok    bool
+	}{
+		{"unset", "", true},
+		{"31 characters", strings.Repeat("a", 31), false},
+		{"32 characters", strings.Repeat("a", 32), true},
+		{"31 multi-byte characters", strings.Repeat("é", 31), false},
+		{"long", strings.Repeat("a", 64), true},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			err := config{dashboardToken: tc.token}.validateDashboardToken()
+			if tc.ok && err != nil {
+				t.Fatalf("validateDashboardToken() = %v, want nil", err)
+			}
+			if !tc.ok && (err == nil || !strings.Contains(err.Error(), "32")) {
+				t.Fatalf("validateDashboardToken() = %v, want an error naming the 32-character minimum", err)
+			}
+		})
+	}
+}
+
+func TestRunRefusesAShortDashboardToken(t *testing.T) {
+	clearPoWEnv(t)
+	t.Setenv("DASHBOARD_TOKEN", strings.Repeat("a", 31))
+	err := run(loadConfig())
+	if err == nil || !strings.Contains(err.Error(), "DASHBOARD_TOKEN") || !strings.Contains(err.Error(), "32") {
+		t.Fatalf("run() = %v, want a configuration error naming DASHBOARD_TOKEN and 32", err)
+	}
+}
diff --git a/telemetry-receiver/ratelimit.go b/telemetry-receiver/ratelimit.go
new file mode 100644
index 000000000..6aff6c3a3
--- /dev/null
+++ b/telemetry-receiver/ratelimit.go
@@ -0,0 +1,259 @@
+package main
+
+import (
+	"container/list"
+	"net"
+	"net/http"
+	"net/netip"
+	"strings"
+	"sync"
+	"time"
+)
+
+// Per-source limiter bounds (research R6). All limiter state is in memory
+// only; source addresses are never written to the store or the logs (FR-014).
+const (
+	// limiterIdleTTL is how long an idle token bucket is kept before it is
+	// purged. An idle bucket has refilled completely, so purging loses nothing.
+	limiterIdleTTL = 10 * time.Minute
+	// limiterSweepEvery is how often the lazy idle sweep runs.
+	limiterSweepEvery = time.Minute
+	// limiterMaxSources bounds how many source prefixes one limiter tracks. When
+	// the map reaches capacity, the least-recently-used entry is evicted and
+	// replaced with the new source. This keeps memory bounded without pooling
+	// requests together. Eviction only resets a source's budget for an attacker
+	// who controls more distinct /64-or-IPv4 sources than the cap, a scale where
+	// per-source limiting no longer applies anyway, and the dashboard token is
+	// high-entropy.
+	limiterMaxSources = 100_000
+)
+
+// invalidKey is the single key that every invalid address maps to. It is an
+// ordinary tracked source with its own budget.
+var invalidKey = netip.MustParsePrefix("192.0.2.0/24")
+
+// sourceKey derives a rate-limit key from an address. IPv4 addresses and
+// IPv4-mapped IPv6 addresses (after Unmap) give a /32. Other IPv6 addresses
+// give a /64. Invalid addresses give a fixed sentinel. This prevents IPv6
+// address rotation bypasses while keeping routing subnets together.
+func sourceKey(a netip.Addr) netip.Prefix {
+	if !a.IsValid() {
+		return invalidKey
+	}
+	a = a.Unmap()
+	if a.Is4() {
+		return netip.PrefixFrom(a, 32)
+	}
+	p, err := a.WithZone("").Prefix(64)
+	if err != nil {
+		return invalidKey
+	}
+	return p
+}
+
+// dayString formats t as a UTC calendar day, YYYY-MM-DD.
+func dayString(t time.Time) string {
+	return t.UTC().Format(time.DateOnly)
+}
+
+// dailyLimiter counts accepted reports per source per UTC day. The counts
+// are reset when the UTC day changes. A limit of 0 means unlimited and keeps
+// no state.
+type dailyLimiter struct {
+	mu     sync.Mutex
+	limit  int
+	max    int
+	day    string
+	counts map[netip.Prefix]*dailyEntry
+	lru    *list.List // tracks recency; elements are *netip.Prefix
+}
+
+type dailyEntry struct {
+	count   int
+	element *list.Element
+}
+
+func newDailyLimiter(limit int) *dailyLimiter {
+	return &dailyLimiter{
+		limit:  limit,
+		max:    limiterMaxSources,
+		counts: make(map[netip.Prefix]*dailyEntry),
+		lru:    list.New(),
+	}
+}
+
+// take records one accepted report from src at now. It returns false, and
+// records nothing, when src has already used its limit for the UTC day of now.
+func (l *dailyLimiter) take(src netip.Addr, now time.Time) bool {
+	if l.limit <= 0 {
+		return true
+	}
+	l.mu.Lock()
+	defer l.mu.Unlock()
+	if day := dayString(now); day != l.day {
+		l.day = day
+		l.counts = make(map[netip.Prefix]*dailyEntry)
+		l.lru = list.New()
+	}
+	key := sourceKey(src)
+	entry, tracked := l.counts[key]
+	if !tracked {
+		// If the map is full, evict the LRU entry
+		if len(l.counts) >= l.max {
+			if lruKey, ok := l.lru.Remove(l.lru.Back()).(*netip.Prefix); ok {
+				delete(l.counts, *lruKey)
+			}
+		}
+		// Track the new source with a fresh budget
+		keyPtr := new(netip.Prefix)
+		*keyPtr = key
+		elem := l.lru.PushFront(keyPtr)
+		entry = &dailyEntry{count: 0, element: elem}
+		l.counts[key] = entry
+	} else {
+		// Move to front (most recently used)
+		l.lru.MoveToFront(entry.element)
+	}
+	if entry.count >= l.limit {
+		return false
+	}
+	entry.count++
+	return true
+}
+
+// bucketLimiter is a generic per-source token bucket.
+type bucketLimiter struct {
+	mu        sync.Mutex
+	rate      float64 // tokens added per second
+	burst     float64
+	max       int
+	day       string
+	lastSweep time.Time
+	buckets   map[netip.Prefix]*bucket
+	lru       *list.List // tracks recency; elements are *netip.Prefix
+}
+
+type bucket struct {
+	tokens  float64
+	last    time.Time
+	element *list.Element
+}
+
+// newBucketLimiter returns a limiter that refills perMinute tokens per
+// minute up to burst. A new source starts with a full bucket.
+func newBucketLimiter(perMinute, burst int) *bucketLimiter {
+	return &bucketLimiter{
+		rate:    float64(perMinute) / 60,
+		burst:   float64(burst),
+		max:     limiterMaxSources,
+		buckets: make(map[netip.Prefix]*bucket),
+		lru:     list.New(),
+	}
+}
+
+// allow takes one token for src at now and reports whether one was left.
+func (l *bucketLimiter) allow(src netip.Addr, now time.Time) bool {
+	l.mu.Lock()
+	defer l.mu.Unlock()
+	l.sweep(now)
+	key := sourceKey(src)
+	b, ok := l.buckets[key]
+	if !ok {
+		// If the map is full, evict the LRU entry
+		if len(l.buckets) >= l.max {
+			if lruKey, ok := l.lru.Remove(l.lru.Back()).(*netip.Prefix); ok {
+				delete(l.buckets, *lruKey)
+			}
+		}
+		// Track the new source with a fresh bucket
+		keyPtr := new(netip.Prefix)
+		*keyPtr = key
+		elem := l.lru.PushFront(keyPtr)
+		b = &bucket{tokens: l.burst, last: now, element: elem}
+		l.buckets[key] = b
+	} else {
+		// Move to front (most recently used)
+		l.lru.MoveToFront(b.element)
+	}
+	if elapsed := now.Sub(b.last).Seconds(); elapsed > 0 {
+		b.tokens = min(l.burst, b.tokens+elapsed*l.rate)
+		b.last = now
+	}
+	if b.tokens < 1 {
+		return false
+	}
+	b.tokens--
+	return true
+}
+
+// sweep resets every bucket at UTC midnight and, at most once a minute,
+// purges buckets idle for longer than limiterIdleTTL. The caller holds mu.
+func (l *bucketLimiter) sweep(now time.Time) {
+	if day := dayString(now); day != l.day {
+		l.day = day
+		l.buckets = make(map[netip.Prefix]*bucket)
+		l.lru = list.New()
+		l.lastSweep = now
+		return
+	}
+	if now.Sub(l.lastSweep) < limiterSweepEvery {
+		return
+	}
+	l.lastSweep = now
+	for src, b := range l.buckets {
+		if now.Sub(b.last) >= limiterIdleTTL {
+			l.lru.Remove(b.element)
+			delete(l.buckets, src)
+		}
+	}
+}
+
+// sourceIP returns the address a request is attributed to: the TCP peer,
+// unless the peer is inside trusted, in which case it is the right-most
+// X-Forwarded-For entry that is not itself trusted. An unparsable
+// X-Forwarded-For falls back to the peer. An unparsable peer yields the zero
+// Addr, which all such requests share.
+func sourceIP(r *http.Request, trusted []netip.Prefix) netip.Addr {
+	peer := peerAddr(r.RemoteAddr)
+	if !peer.IsValid() || !inPrefixes(trusted, peer) {
+		return peer
+	}
+	parts := strings.Split(strings.Join(r.Header.Values("X-Forwarded-For"), ","), ",")
+	for i := len(parts) - 1; i >= 0; i-- {
+		raw := strings.TrimSpace(parts[i])
+		if raw == "" {
+			continue
+		}
+		a, err := netip.ParseAddr(raw)
+		if err != nil {
+			return peer
+		}
+		a = a.Unmap().WithZone("")
+		if !inPrefixes(trusted, a) {
+			return a
+		}
+	}
+	return peer
+}
+
+// peerAddr parses a net/http RemoteAddr ("host:port").
+func peerAddr(remote string) netip.Addr {
+	host, _, err := net.SplitHostPort(remote)
+	if err != nil {
+		host = remote
+	}
+	a, err := netip.ParseAddr(host)
+	if err != nil {
+		return netip.Addr{}
+	}
+	return a.Unmap().WithZone("")
+}
+
+func inPrefixes(prefixes []netip.Prefix, a netip.Addr) bool {
+	for _, p := range prefixes {
+		if p.Contains(a) {
+			return true
+		}
+	}
+	return false
+}
diff --git a/telemetry-receiver/ratelimit_test.go b/telemetry-receiver/ratelimit_test.go
new file mode 100644
index 000000000..4fc4f1f20
--- /dev/null
+++ b/telemetry-receiver/ratelimit_test.go
@@ -0,0 +1,581 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"net/netip"
+	"strings"
+	"testing"
+	"time"
+)
+
+var limiterNow = time.Date(2026, 10, 7, 10, 0, 0, 0, time.UTC)
+
+func addr(s string) netip.Addr { return netip.MustParseAddr(s) }
+
+func TestDailyLimiterCapsPerSourcePerUTCDay(t *testing.T) {
+	l := newDailyLimiter(2)
+	a, b := addr("192.0.2.1"), addr("192.0.2.2")
+	first, second := l.take(a, limiterNow), l.take(a, limiterNow)
+	if !first || !second {
+		t.Fatal("first two reports from a source must be accepted")
+	}
+	if l.take(a, limiterNow) {
+		t.Fatal("third report from the same source must be refused")
+	}
+	if !l.take(b, limiterNow) {
+		t.Fatal("another source has its own budget")
+	}
+	if l.take(a, limiterNow.Add(13*time.Hour-time.Second)) {
+		t.Fatal("still the same UTC day: must stay refused")
+	}
+	if !l.take(a, limiterNow.Add(14*time.Hour)) {
+		t.Fatal("the counter resets at UTC midnight")
+	}
+}
+
+func TestDailyLimiterZeroMeansUnlimitedAndKeepsNoState(t *testing.T) {
+	l := newDailyLimiter(0)
+	for range 500 {
+		if !l.take(addr("192.0.2.1"), limiterNow) {
+			t.Fatal("limit 0 must never refuse")
+		}
+	}
+	if len(l.counts) != 0 {
+		t.Fatalf("limit 0 tracked %d sources, want 0", len(l.counts))
+	}
+}
+
+func TestDailyLimiterLRUEviction(t *testing.T) {
+	l := newDailyLimiter(1)
+	l.max = 2
+	a, b, c := addr("192.0.2.1"), addr("192.0.2.2"), addr("192.0.2.3")
+
+	// First two sources get tracked
+	if !l.take(a, limiterNow) {
+		t.Fatal("source a, first report")
+	}
+	if !l.take(b, limiterNow) {
+		t.Fatal("source b, first report")
+	}
+
+	// Touch a again to make it recently used
+	if l.take(a, limiterNow) {
+		t.Fatal("source a is limited after first report")
+	}
+
+	// Add c: b should be evicted (least recently used)
+	if !l.take(c, limiterNow) {
+		t.Fatal("source c gets tracked after eviction")
+	}
+
+	// Verify the map never exceeds the cap
+	if len(l.counts) != 2 {
+		t.Fatalf("counts map size = %d, want 2", len(l.counts))
+	}
+
+	// b should be evicted, so we can add it again
+	if !l.take(b, limiterNow) {
+		t.Fatal("evicted source b can be added again with fresh budget")
+	}
+}
+
+func TestDailyLimiterEvictedSourceHasFreshBudget(t *testing.T) {
+	l := newDailyLimiter(1)
+	l.max = 2
+	a, b, c := addr("192.0.2.1"), addr("192.0.2.2"), addr("192.0.2.3")
+
+	// Track a
+	if !l.take(a, limiterNow) {
+		t.Fatal("source a, first report")
+	}
+	// Track b and use its budget
+	if !l.take(b, limiterNow) {
+		t.Fatal("source b, first report")
+	}
+	if l.take(b, limiterNow) {
+		t.Fatal("source b is limited")
+	}
+	// Touch a so that b is the least recently used entry
+	if l.take(a, limiterNow) {
+		t.Fatal("source a is limited")
+	}
+
+	// Add c, evicting b
+	if !l.take(c, limiterNow) {
+		t.Fatal("source c gets tracked")
+	}
+
+	// Now b has a fresh budget if we add it again
+	if !l.take(b, limiterNow) {
+		t.Fatal("evicted source b starts with fresh budget")
+	}
+	if l.take(b, limiterNow) {
+		t.Fatal("fresh budget of b should be exhausted")
+	}
+}
+
+func TestDailyLimiterTrackedSourceKeepsSpentBudget(t *testing.T) {
+	l := newDailyLimiter(3)
+	l.max = 2
+	a, b, c := addr("192.0.2.1"), addr("192.0.2.2"), addr("192.0.2.3")
+
+	// Track a and spend one token
+	if !l.take(a, limiterNow) {
+		t.Fatal("source a, first report")
+	}
+	// Track b
+	if !l.take(b, limiterNow) {
+		t.Fatal("source b, first report")
+	}
+
+	// Touch a to make it recently used, then add c (evicting b)
+	if !l.take(a, limiterNow) {
+		t.Fatal("source a, second report")
+	}
+	if !l.take(c, limiterNow) {
+		t.Fatal("source c gets tracked")
+	}
+
+	// a should still have only one token left (not reset)
+	if !l.take(a, limiterNow) {
+		t.Fatal("source a should still have its second token")
+	}
+	if l.take(a, limiterNow) {
+		t.Fatal("source a's spent budget is kept")
+	}
+}
+
+func TestBucketLimiterBurstRefillAndSeparateSources(t *testing.T) {
+	l := newBucketLimiter(60, 2) // one token per second, burst 2
+	a, b := addr("192.0.2.1"), addr("192.0.2.2")
+	first, second := l.allow(a, limiterNow), l.allow(a, limiterNow)
+	if !first || !second {
+		t.Fatal("the burst of 2 must be allowed")
+	}
+	if l.allow(a, limiterNow) {
+		t.Fatal("burst exhausted: must be refused")
+	}
+	if !l.allow(b, limiterNow) {
+		t.Fatal("another source has its own bucket")
+	}
+	if !l.allow(a, limiterNow.Add(time.Second)) {
+		t.Fatal("one token is refilled after a second")
+	}
+	if l.allow(a, limiterNow.Add(time.Second)) {
+		t.Fatal("only one token was refilled")
+	}
+	// The bucket never holds more than the burst, however long it idles.
+	later := limiterNow.Add(5 * time.Second)
+	first, second, third := l.allow(a, later), l.allow(a, later), l.allow(a, later)
+	if !first || !second || third {
+		t.Fatal("after a long idle the bucket holds exactly the burst")
+	}
+}
+
+func TestBucketLimiterPurgesIdleSources(t *testing.T) {
+	l := newBucketLimiter(1, 1)
+	a, b := addr("192.0.2.1"), addr("192.0.2.2")
+	l.allow(a, limiterNow)
+	l.allow(b, limiterNow.Add(5*time.Minute))
+	if len(l.buckets) != 2 {
+		t.Fatalf("buckets = %d, want 2 before the idle purge", len(l.buckets))
+	}
+	l.allow(b, limiterNow.Add(11*time.Minute))
+	if _, ok := l.buckets[sourceKey(a)]; ok {
+		t.Fatal("source a idle for 11 minutes must be purged")
+	}
+	if _, ok := l.buckets[sourceKey(b)]; !ok || len(l.buckets) != 1 {
+		t.Fatalf("source b idle for 6 minutes must be kept; buckets = %d", len(l.buckets))
+	}
+}
+
+func TestBucketLimiterResetsAtUTCMidnight(t *testing.T) {
+	l := newBucketLimiter(1, 1) // one token per minute
+	a := addr("192.0.2.1")
+	late := time.Date(2026, 10, 7, 23, 59, 50, 0, time.UTC)
+	if !l.allow(a, late) {
+		t.Fatal("first request")
+	}
+	if l.allow(a, late.Add(10*time.Second-time.Nanosecond)) {
+		t.Fatal("before midnight the bucket is still empty")
+	}
+	if !l.allow(a, late.Add(10*time.Second)) {
+		t.Fatal("limiter state is reset at UTC midnight")
+	}
+}
+
+func TestBucketLimiterLRUEviction(t *testing.T) {
+	l := newBucketLimiter(1, 1) // one token per minute, burst 1
+	l.max = 2
+	a, b, c := addr("192.0.2.1"), addr("192.0.2.2"), addr("192.0.2.3")
+
+	// First two sources get tracked with burst 1 each
+	if !l.allow(a, limiterNow) {
+		t.Fatal("source a, first request")
+	}
+	if !l.allow(b, limiterNow) {
+		t.Fatal("source b, first request")
+	}
+
+	// Touch a to make it recently used, then add c (should evict b)
+	if l.allow(a, limiterNow) {
+		t.Fatal("source a is limited after using its burst")
+	}
+	if !l.allow(c, limiterNow) {
+		t.Fatal("source c gets tracked after evicting b")
+	}
+
+	// Verify the map never exceeds the cap
+	if len(l.buckets) != 2 {
+		t.Fatalf("buckets map size = %d, want 2", len(l.buckets))
+	}
+
+	// b should be evicted, so it can be added again
+	if !l.allow(b, limiterNow) {
+		t.Fatal("evicted source b can be added again with fresh burst")
+	}
+}
+
+func TestBucketLimiterEvictedSourceHasFreshBudget(t *testing.T) {
+	l := newBucketLimiter(1, 1) // one token per minute, burst 1
+	l.max = 2
+	a, b, c := addr("192.0.2.1"), addr("192.0.2.2"), addr("192.0.2.3")
+
+	// Track a and use its burst
+	if !l.allow(a, limiterNow) {
+		t.Fatal("source a, first request")
+	}
+	if l.allow(a, limiterNow) {
+		t.Fatal("source a is limited")
+	}
+
+	// Track b with its burst
+	if !l.allow(b, limiterNow) {
+		t.Fatal("source b, first request")
+	}
+	// Touch a so that b is the least recently used entry
+	if l.allow(a, limiterNow) {
+		t.Fatal("source a is still limited")
+	}
+
+	// Add c, evicting b
+	if !l.allow(c, limiterNow) {
+		t.Fatal("source c gets tracked")
+	}
+
+	// b starts with fresh burst
+	if !l.allow(b, limiterNow) {
+		t.Fatal("evicted source b starts with fresh burst")
+	}
+	if l.allow(b, limiterNow) {
+		t.Fatal("fresh burst of b should be exhausted")
+	}
+}
+
+func TestBucketLimiterTrackedSourceKeepsSpentBudget(t *testing.T) {
+	l := newBucketLimiter(60, 3) // one token per second, burst 3
+	l.max = 2
+	a, b, c := addr("192.0.2.1"), addr("192.0.2.2"), addr("192.0.2.3")
+
+	// Track a and spend one token
+	if !l.allow(a, limiterNow) {
+		t.Fatal("source a, first request")
+	}
+	// Track b with its burst
+	if !l.allow(b, limiterNow) {
+		t.Fatal("source b, first request")
+	}
+
+	// Touch a to make it recently used, then add c (evicting b)
+	if !l.allow(a, limiterNow) {
+		t.Fatal("source a, second request")
+	}
+	if !l.allow(c, limiterNow) {
+		t.Fatal("source c gets tracked")
+	}
+
+	// a should still have only one token left (not reset)
+	if !l.allow(a, limiterNow) {
+		t.Fatal("source a should still have its second token")
+	}
+	if l.allow(a, limiterNow) {
+		t.Fatal("source a's spent budget is kept")
+	}
+}
+
+func reqFrom(remote string, xff ...string) *http.Request {
+	r := httptest.NewRequestWithContext(context.Background(), http.MethodGet, "/", nil)
+	r.RemoteAddr = remote
+	for _, v := range xff {
+		r.Header.Add("X-Forwarded-For", v)
+	}
+	return r
+}
+
+func TestSourceIPHonoursForwardedForOnlyFromTrustedPeers(t *testing.T) {
+	trusted := []netip.Prefix{netip.MustParsePrefix("10.0.0.0/8"), netip.MustParsePrefix("2001:db8::/32")}
+	cases := []struct {
+		name    string
+		remote  string
+		xff     []string
+		trusted []netip.Prefix
+		want    string // empty means the zero Addr
+	}{
+		{"untrusted peer ignores header", "192.0.2.1:4000", []string{"203.0.113.9"}, trusted, "192.0.2.1"},
+		{"no trusted list ignores header", "10.0.0.1:4000", []string{"203.0.113.9"}, nil, "10.0.0.1"},
+		{"trusted peer uses header", "10.0.0.1:4000", []string{"203.0.113.9"}, trusted, "203.0.113.9"},
+		{"right-most untrusted entry wins", "10.0.0.1:4000", []string{"198.51.100.1, 203.0.113.9"}, trusted, "203.0.113.9"},
+		{"trusted hops are skipped", "10.0.0.1:4000", []string{"203.0.113.9, 10.0.0.5"}, trusted, "203.0.113.9"},
+		{"all entries trusted gives the peer", "10.0.0.1:4000", []string{"10.0.0.7"}, trusted, "10.0.0.1"},
+		{"no header gives the peer", "10.0.0.1:4000", nil, trusted, "10.0.0.1"},
+		{"unparsable entry gives the peer", "10.0.0.1:4000", []string{"garbage"}, trusted, "10.0.0.1"},
+		{"empty entries give the peer", "10.0.0.1:4000", []string{", ,"}, trusted, "10.0.0.1"},
+		{"several header lines are joined", "10.0.0.1:4000", []string{"198.51.100.1", "203.0.113.9"}, trusted, "203.0.113.9"},
+		{"ipv6 trusted peer", "[2001:db8::1]:4000", []string{"203.0.113.9"}, trusted, "203.0.113.9"},
+		{"ipv4-mapped peer is unmapped", "[::ffff:10.0.0.1]:4000", []string{"::ffff:203.0.113.9"}, trusted, "203.0.113.9"},
+		{"peer without a port", "10.0.0.1", []string{"203.0.113.9"}, trusted, "203.0.113.9"},
+		{"unparsable peer is the zero address", "garbage", []string{"203.0.113.9"}, trusted, ""},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			got := sourceIP(reqFrom(tc.remote, tc.xff...), tc.trusted)
+			if tc.want == "" {
+				if got.IsValid() {
+					t.Fatalf("sourceIP = %v, want the zero Addr", got)
+				}
+				return
+			}
+			if got != addr(tc.want) {
+				t.Fatalf("sourceIP = %v, want %s", got, tc.want)
+			}
+		})
+	}
+}
+
+// counterValue reads a counter series from the server's registry; it is 0
+// when the series does not exist.
+func counterValue(t *testing.T, s *server, name, labelName, labelValue string) float64 {
+	t.Helper()
+	families, err := s.reg.Gather()
+	if err != nil {
+		t.Fatalf("gather: %v", err)
+	}
+	for _, f := range families {
+		if f.GetName() != name {
+			continue
+		}
+		for _, m := range f.Metric {
+			for _, l := range m.Label {
+				if l.GetName() == labelName && l.GetValue() == labelValue {
+					return m.GetCounter().GetValue()
+				}
+			}
+		}
+	}
+	return 0
+}
+
+const okReport = `{"version":"1.0.0","servers":1,"templates":1}`
+
+func ingestFrom(t *testing.T, s *server, remote, body string, xff ...string) int {
+	t.Helper()
+	r := httptest.NewRequestWithContext(t.Context(), http.MethodPost, "/ingest", strings.NewReader(body))
+	r.RemoteAddr = remote
+	for _, v := range xff {
+		r.Header.Add("X-Forwarded-For", v)
+	}
+	w := httptest.NewRecorder()
+	s.ingest(w, r)
+	return w.Code
+}
+
+func TestIngestRateLimitReturns429(t *testing.T) {
+	s := newServer(config{ingestSourceDailyLimit: 2})
+	now := limiterNow
+	s.now = func() time.Time { return now }
+	for i := range 2 {
+		if code := ingestFrom(t, s, "192.0.2.1:1000", okReport); code != http.StatusNoContent {
+			t.Fatalf("report %d: status = %d, want 204", i, code)
+		}
+	}
+	r := httptest.NewRequestWithContext(t.Context(), http.MethodPost, "/ingest", strings.NewReader(okReport))
+	r.RemoteAddr = "192.0.2.1:2000" // another port, same source
+	w := httptest.NewRecorder()
+	s.ingest(w, r)
+	if w.Code != http.StatusTooManyRequests {
+		t.Fatalf("third report: status = %d, want 429", w.Code)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "ingest"); got != 1 {
+		t.Fatalf("rate_limited_total{route=ingest} = %v, want 1", got)
+	}
+	// A refused report changes nothing: two reports are stored and counted.
+	if got := mustMeta(t, s.store, "reports_total"); got != "2" {
+		t.Fatalf("reports_total = %s, want 2", got)
+	}
+	if got := countRows(t.Context(), t, s.store, `SELECT reports FROM daily_basic WHERE day = ?`, "2026-10-07"); got != 2 {
+		t.Fatalf("daily_basic.reports = %d, want 2", got)
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_reports_total", "version", "1.0.0"); got != 2 {
+		t.Fatalf("reports_total{version} = %v, want 2", got)
+	}
+	// Another source is unaffected, and the next UTC day starts afresh.
+	if code := ingestFrom(t, s, "192.0.2.9:1000", okReport); code != http.StatusNoContent {
+		t.Fatalf("other source: status = %d, want 204", code)
+	}
+	now = now.Add(24 * time.Hour)
+	if code := ingestFrom(t, s, "192.0.2.1:1000", okReport); code != http.StatusNoContent {
+		t.Fatalf("next day: status = %d, want 204", code)
+	}
+}
+
+func TestIngestRateLimitOnlyCountsAcceptedReports(t *testing.T) {
+	s := newServer(config{ingestSourceDailyLimit: 1})
+	for range 5 {
+		if code := ingestFrom(t, s, "192.0.2.1:1000", `{not json`); code != http.StatusBadRequest {
+			t.Fatalf("invalid report: status = %d, want 400", code)
+		}
+	}
+	if code := ingestFrom(t, s, "192.0.2.1:1000", okReport); code != http.StatusNoContent {
+		t.Fatalf("valid report after invalid ones: status = %d, want 204", code)
+	}
+	if code := ingestFrom(t, s, "192.0.2.1:1000", okReport); code != http.StatusTooManyRequests {
+		t.Fatalf("second valid report: status = %d, want 429", code)
+	}
+}
+
+func TestIngestRateLimitZeroIsUnlimited(t *testing.T) {
+	s := newServer(config{})
+	for i := range 60 {
+		if code := ingestFrom(t, s, "192.0.2.1:1000", okReport); code != http.StatusNoContent {
+			t.Fatalf("report %d: status = %d, want 204", i, code)
+		}
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "ingest"); got != 0 {
+		t.Fatalf("rate_limited_total = %v, want 0", got)
+	}
+}
+
+func TestIngestRateLimitHonoursForwardedForOnlyFromTrustedPeers(t *testing.T) {
+	s := newServer(config{
+		ingestSourceDailyLimit: 1,
+		trustedProxyCIDRs:      []netip.Prefix{netip.MustParsePrefix("10.0.0.0/8")},
+	})
+	// A trusted proxy: the forwarded client is the source.
+	if code := ingestFrom(t, s, "10.0.0.1:1000", okReport, "203.0.113.5"); code != http.StatusNoContent {
+		t.Fatalf("client 1: status = %d, want 204", code)
+	}
+	if code := ingestFrom(t, s, "10.0.0.1:1000", okReport, "203.0.113.5"); code != http.StatusTooManyRequests {
+		t.Fatalf("client 1 again: status = %d, want 429", code)
+	}
+	if code := ingestFrom(t, s, "10.0.0.1:1000", okReport, "203.0.113.6"); code != http.StatusNoContent {
+		t.Fatalf("client 2 behind the same proxy: status = %d, want 204", code)
+	}
+	// An untrusted peer cannot choose its source by sending the header.
+	if code := ingestFrom(t, s, "192.0.2.1:1000", okReport, "203.0.113.50"); code != http.StatusNoContent {
+		t.Fatalf("untrusted peer: status = %d, want 204", code)
+	}
+	for i := range 3 {
+		spoof := fmt.Sprintf("203.0.113.%d", 100+i)
+		if code := ingestFrom(t, s, "192.0.2.1:1000", okReport, spoof); code != http.StatusTooManyRequests {
+			t.Fatalf("spoofed header %s: status = %d, want 429", spoof, code)
+		}
+	}
+}
+
+func TestPeerAddr(t *testing.T) {
+	for in, want := range map[string]string{
+		"192.0.2.1:80":          "192.0.2.1",
+		"[2001:db8::1]:80":      "2001:db8::1",
+		"192.0.2.1":             "192.0.2.1",
+		"[::ffff:192.0.2.1]:80": "192.0.2.1",
+		"[fe80::1%eth0]:80":     "fe80::1",
+	} {
+		if got := peerAddr(in); got != addr(want) {
+			t.Errorf("peerAddr(%q) = %v, want %s", in, got, want)
+		}
+	}
+	if peerAddr("not an address").IsValid() {
+		t.Error("peerAddr of garbage must be the zero Addr")
+	}
+}
+
+func TestSourceKeyIPv6SlashSixtyFour(t *testing.T) {
+	// Two IPv6 addresses in the same /64 share a key
+	a1 := addr("2001:db8::1")
+	a2 := addr("2001:db8::2")
+	k1 := sourceKey(a1)
+	k2 := sourceKey(a2)
+	if k1 != k2 {
+		t.Fatalf("sourceKey(%v) = %v, sourceKey(%v) = %v, want equal", a1, k1, a2, k2)
+	}
+	// But a different /64 has its own key
+	a3 := addr("2001:db9::1")
+	k3 := sourceKey(a3)
+	if k3 == k1 {
+		t.Fatalf("sourceKey(%v) = %v, sourceKey(%v) = %v, want different", a1, k1, a3, k3)
+	}
+}
+
+func TestSourceKeyIPv4MappedSharedWithIPv4(t *testing.T) {
+	// An IPv4 address and its IPv4-mapped IPv6 form share a key
+	a4 := addr("192.0.2.1")
+	a6mapped := addr("::ffff:192.0.2.1")
+	k4 := sourceKey(a4)
+	k6mapped := sourceKey(a6mapped)
+	if k4 != k6mapped {
+		t.Fatalf("sourceKey(%v) = %v, sourceKey(%v) = %v, want equal", a4, k4, a6mapped, k6mapped)
+	}
+}
+
+func TestSourceKeyInvalidAddressUsesSentinel(t *testing.T) {
+	// Invalid addresses map to the sentinel key
+	k := sourceKey(netip.Addr{})
+	if k != invalidKey {
+		t.Fatalf("sourceKey(invalid) = %v, want %v", k, invalidKey)
+	}
+}
+
+func TestDailyLimiterIPv6SharingSameBudget(t *testing.T) {
+	l := newDailyLimiter(2)
+	a1 := addr("2001:db8::1")
+	a2 := addr("2001:db8::2")
+	// Both addresses share one /64, so they share the budget
+	if !l.take(a1, limiterNow) || !l.take(a2, limiterNow) {
+		t.Fatal("two addresses in same /64 must share one budget")
+	}
+	if l.take(a1, limiterNow) {
+		t.Fatal("shared budget exhausted")
+	}
+	if l.take(a2, limiterNow) {
+		t.Fatal("shared budget exhausted")
+	}
+}
+
+func TestDailyLimiterIPv6DifferentSubnets(t *testing.T) {
+	l := newDailyLimiter(1)
+	a1 := addr("2001:db8::1")
+	a2 := addr("2001:db9::1")
+	// Different /64 subnets have separate budgets
+	if !l.take(a1, limiterNow) || !l.take(a2, limiterNow) {
+		t.Fatal("two addresses in different /64 must have separate budgets")
+	}
+	if l.take(a1, limiterNow) || l.take(a2, limiterNow) {
+		t.Fatal("each budget should be exhausted")
+	}
+}
+
+func TestBucketLimiterIPv6SharingSameBudget(t *testing.T) {
+	l := newBucketLimiter(60, 2) // one token per second, burst 2
+	a1 := addr("2001:db8::1")
+	a2 := addr("2001:db8::2")
+	// Both addresses in same /64 share the budget
+	if !l.allow(a1, limiterNow) || !l.allow(a2, limiterNow) {
+		t.Fatal("two addresses in same /64 must share burst")
+	}
+	if l.allow(a1, limiterNow) || l.allow(a2, limiterNow) {
+		t.Fatal("shared burst should be exhausted")
+	}
+}
diff --git a/telemetry-receiver/specs.md b/telemetry-receiver/specs.md
index b6185206f..863025920 100644
--- a/telemetry-receiver/specs.md
+++ b/telemetry-receiver/specs.md
@@ -6,21 +6,29 @@
 
 ## Purpose
 
-Optional collector for the anonymous usage telemetry the API reports daily. Provides a public or in-cluster HTTP endpoint that accepts tiny, identifying-information-free JSON reports, validates them, and aggregates the metrics without retaining raw data.
+Optional collector for the usage telemetry that Gameplane installs report daily. It runs as the chart's bundled in-cluster receiver, as a self-hosted provider for other installs, or as the project's default receiver. It accepts small JSON reports (a basic tier and a signed extended tier), validates them strictly, folds them into daily aggregates and expiring activity records, and shows the result on a private dashboard.
 
 ## Responsibilities
 
-- **HTTP server**: three routes — `/ingest` (POST), `/metrics` (GET), `/healthz` (GET)
-- **Payload validation**: strict JSON schema (`{version, servers, templates}` only); keys matched exactly (case-sensitive) with duplicates rejected; rejects malformed JSON, exactly one JSON object required (trailing non-whitespace content rejected), missing or null required fields, unknown fields, negative counts, oversized bodies (>16 KiB)
-- **Version sanitization**: invalid syntax is bucketed as `"invalid"`. Retain at most 128 distinct strings matching `^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$` per process; additional versions share `"other"`. The two bucket names are reserved, for at most 130 series. Retained labels are never evicted; restart resets the budget with the counters.
-- **Authentication**: optional constant-time token validation when `AUTH_TOKEN` is set
-- **Metrics aggregation**: three in-memory Prometheus metrics — `gameplane_telemetry_reports_total` (counter by version), `gameplane_telemetry_servers` (histogram), `gameplane_telemetry_templates` (histogram)
-- **Structured logging**: logs each accepted report via `log/slog` with version/servers/templates fields
-- **Request timeouts**: whole request read is time-bounded (15 s read timeout, 10 s header timeout) to prevent clients holding connections open after sending a report
+- **Two HTTP listeners**:
+  - public (`LISTEN_ADDR`, default `:8080`): `/ingest` (POST), `/v1/summary` (GET), `/v1/challenge` (GET), `/healthz` (GET)
+  - dashboard (`DASHBOARD_LISTEN_ADDR`, default `:8081`): started only when `DASHBOARD_TOKEN` is set; serves `/login`, `/logout`, `/`, `/api/v1/views`, `/metrics` and `/static/*`
+- **Payload validation**: delegated to `telemetryschema.Decode`: exactly one JSON object, exact case-sensitive keys, duplicates and nulls rejected, trailing non-whitespace rejected, unknown fields rejected, negative counts rejected, oversized bodies (>16 KiB) rejected. A report is a basic report (`version`, `servers`, `templates`) or a basic report with an `ext` part; both are strictly validated
+- **Extended identity checks**: an extended report must carry a valid `Gameplane-Telemetry-Signature` (Ed25519 over the exact body bytes, under the key in `ext.key`). The receiver also refuses a send time outside `[now - 36h, now + 1h]` (`stale`), a key that differs from the one that first claimed the install ID (`id_claimed`) and a send time not later than the last accepted one (`replay`)
+- **Proof-of-work (optional)**: with `INGEST_POW=true`, `/ingest` requires a solved challenge from `/v1/challenge` before the body is read; difficulty adapts to the challenge rate
+- **Aggregation and storage**: daily aggregates and expiring per-install activity records in SQLite (`$DATA_DIR/telemetry.db`); an install ID is stored only as `HMAC-SHA256(pepper, installID)`
+- **Per-source limits**: accepted reports per source per UTC day (`INGEST_SOURCE_DAILY_LIMIT`), login attempts, summary reads and challenge requests, all held in memory; source addresses come from the TCP peer, or from `X-Forwarded-For` only when the peer is inside `TRUSTED_PROXY_CIDRS`
+- **Dashboard**: server-rendered HTML with inline SVG charts and no JavaScript, behind one operator token; the same view model is served as JSON at `/api/v1/views`
+- **Public summary (optional)**: `GET /v1/summary` returns five counts when `PUBLIC_SUMMARY=true`
+- **Version sanitization**: invalid syntax is bucketed as `"invalid"`. Retain at most 128 distinct strings matching `^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$` per process for the Prometheus label; additional versions share `"other"`. The two bucket names are reserved, for at most 130 series. Retained labels are never evicted; restart resets the budget with the counters.
+- **Metrics**: Prometheus series on the dashboard listener only, behind the token
+- **Lifecycle**: an hourly job finalizes completed UTC days, expires activity records and deletes daily aggregates older than `RETENTION_DAYS`
+- **Structured logging**: logs each accepted report via `log/slog` with version/servers/templates fields (and `extended`); source addresses are never logged
+- **Request timeouts**: whole request read is time-bounded (15 s read timeout, 10 s header timeout)
 
 ## Non-goals / boundaries
 
-Stores **nothing** persistent — raw reports are never written to disk or database. The API's opt-in (`Admin Settings → Telemetry`) is the privacy gate; this receiver assumes incoming data is already anonymized at the source. Refer to `telemetry-receiver/README.md` for configuration, environment variables, and run instructions.
+The receiver trusts nothing it is sent: reports are self-reported and unauthenticated by design on a public provider, so figures are approximate and the dashboard labels them that way. It does not issue credentials to installs, does not run alongside a second writer on the same database (single replica), and has no multi-user accounts: one dashboard token is the only credential. The API's consent switches (`Admin Settings → Telemetry`) decide whether an install sends anything; the receiver cannot see or enforce them. Refer to `telemetry-receiver/README.md` for configuration and run instructions and to `docs/telemetry-provider.md` for the provider runbook.
 
 ## Directory & package layout
 
@@ -28,90 +36,149 @@ Single package `main`:
 
 ```
 telemetry-receiver/
-├── main.go             # HTTP server, config, ingest handler, metrics setup
-├── main_test.go        # Unit tests (validation, auth, shutdown, config loading)
-├── go.mod / go.sum     # Dependencies: prometheus/client_golang only (+ transitives)
+├── main.go             # config (loadConfig, validate), server wiring, both listeners, graceful shutdown
+├── ingest.go           # POST /ingest: auth, proof-of-work gate, body read, basic reports
+├── ingest_ext.go       # extended reports: signature, window, claim, replay, activity records
+├── pow.go              # proof-of-work: challenges, difficulty, verification, GET /v1/challenge
+├── store.go            # SQLite schema, meta, write transactions, retention and lifecycle job
+├── ratelimit.go        # per-source limiters, source-address derivation
+├── summary.go          # GET /v1/summary and its snapshot cache
+├── dashboard.go        # dashboard listener: login, sessions, views JSON, metrics, static files
+├── views.go            # dashboard view model (BuildViews)
+├── charts.go, charts_ext.go  # inline SVG chart rendering
+├── web/                # embedded HTML templates and static CSS/icon
+├── *_test.go           # unit tests
+├── go.mod / go.sum     # Dependencies: prometheus/client_golang, modernc.org/sqlite, telemetryschema (+ transitives)
 ├── .testcoverage.yml   # Coverage gate: 70% total
-├── Dockerfile          # Multi-stage: build→distroless:nonroot
-├── README.md           # User-facing: behavior table, config, run examples
+├── Dockerfile          # Multi-stage: build→distroless:nonroot, CGO_ENABLED=0
+├── telemetry-dashboard.pen, design-export/  # dashboard designs and their export
+├── README.md           # User-facing: behavior, configuration, run examples
 └── .gitignore          # Standard Go ignores
 ```
 
 ## External interface / contracts
 
-### HTTP routes
+The full contract is `specs/022-default-telemetry-dashboard/contracts/receiver-http.md`; the report format is `contracts/report-schema.md`.
+
+### Public listener (`LISTEN_ADDR`)
 
 | Route | Method | Success response | Failures |
 |-------|--------|------------------|----------|
-| `/ingest` | POST | `204 No Content` | `400` malformed JSON / not exactly one JSON object / missing or null required fields / unknown fields / negative counts; `401` missing/wrong Authorization (when `AUTH_TOKEN` set); `413` body >16 KiB |
-| `/metrics` | GET | Prometheus text format | Never errors |
+| `/ingest` | POST | `204 No Content` (also for a same-day duplicate extended report, which only counts in `duplicates`) | `400` structural error; `401` missing/wrong Authorization (when `AUTH_TOKEN` set); `403` `bad_signature`, `stale` or `replay`; `409` `id_claimed`; `413` body >16 KiB; `428` `pow_required` or `pow_invalid`; `429` per-source daily limit; `503` `pow_busy` with `Retry-After: 60` |
+| `/v1/summary` | GET | `200` JSON with exactly `asOf`, `reportsLatestDay`, `reports30d`, `reportsTotal`, `activeInstalls30d` | `404` unless `PUBLIC_SUMMARY=true`; `429` per-source rate limit |
+| `/v1/challenge` | GET | `200` JSON `{challenge, bits, expiresAt}`, `Cache-Control: no-store` | `404` unless `INGEST_POW=true`; `429` (10 per minute, burst 5 per source) |
 | `/healthz` | GET | `200 OK`, body `"ok"` | Never errors |
 
-### Ingest payload
+`/ingest` runs its checks in this order: `AUTH_TOKEN`, proof-of-work, body read, decode, extended identity checks, per-source daily limit, store. A refused report changes no stored data. Every other path, including `/metrics`, answers `404`.
 
-```json
-{ "version": "0.3.0", "servers": 3, "templates": 7 }
-```
+### Dashboard listener (`DASHBOARD_LISTEN_ADDR`)
+
+| Route | Method | Auth | Result |
+|-------|--------|------|--------|
+| `/login` | GET, POST | none; POST takes form field `token`, same-origin `Origin` required | form; on success `303` to `/` and a session cookie; "Invalid credentials" otherwise; `429` after 5 attempts per minute per source |
+| `/logout` | POST | session, same-origin | `303` to `/login`, clears the cookie |
+| `/` | GET | session | overview for `?range=7\|30\|90\|365` (default 30); unauthenticated gets `303` to `/login` |
+| `/api/v1/views` | GET | session cookie or `Authorization: Bearer <DASHBOARD_TOKEN>` | `200` JSON view model; otherwise `401 {"error":"unauthorized"}` |
+| `/metrics` | GET | Bearer token only | Prometheus text; otherwise `401 {"error":"unauthorized"}` |
+| `/static/*` | GET | none | embedded CSS and icon only |
+
+The session cookie is `gp_telemetry_session` (`HttpOnly; Secure; SameSite=Strict; Path=/`, 12 hours); its key derives from `DASHBOARD_TOKEN`, so replacing the token invalidates every session. Every dashboard response carries a strict `Content-Security-Policy`, `X-Content-Type-Options: nosniff`, `Referrer-Policy: no-referrer` and `Cache-Control: no-store`.
+
+### Configuration (environment variables)
 
-The body must be exactly one JSON object with all three required fields and no trailing non-whitespace content. Keys are matched exactly, case-sensitively; duplicate keys are rejected. Missing or null required fields and unknown fields are rejected (16 KiB body cap applies to the entire request).
+| Variable | Default | Meaning |
+|---|---|---|
+| `LISTEN_ADDR` | `:8080` | Public listener |
+| `DASHBOARD_LISTEN_ADDR` | `:8081` | Dashboard listener |
+| `DASHBOARD_TOKEN` | *(empty)* | Dashboard credential. Empty means no dashboard listener. When set it must be at least 32 characters or the receiver exits at startup |
+| `AUTH_TOKEN` | *(empty)* | When set, `/ingest` requires an exactly-matching `Authorization` header (constant-time compare) |
+| `DATA_DIR` | *(empty)* | SQLite directory. Empty means in-memory (a warning is logged and everything is lost on restart) |
+| `PUBLIC_SUMMARY` | `false` | `true` enables `/v1/summary` |
+| `TRUSTED_PROXY_CIDRS` | *(empty)* | Comma-separated CIDRs whose `X-Forwarded-For` is trusted; a malformed entry stops startup |
+| `INGEST_SOURCE_DAILY_LIMIT` | `20` | Accepted reports per source per UTC day; `0` means unlimited; negative is refused |
+| `RETENTION_DAYS` | `730` | Daily aggregate retention; minimum `365` |
+| `ACTIVITY_EXPIRY_DAYS` | `90` | Activity record expiry; minimum `31` |
+| `ID_PEPPER` | *(empty)* | HMAC pepper for install IDs. Empty means one is generated and kept in the database |
+| `INGEST_POW` | `false` | `true` requires proof-of-work on `/ingest` and serves `/v1/challenge` |
+| `INGEST_POW_TARGET_PER_MIN` | `60` | Normal challenge rate: at or below it no work is required. Must be at least 1 |
+| `INGEST_POW_MIN_BITS` | `0` | Lowest difficulty issued. Must not be negative |
+| `INGEST_POW_MAX_BITS` | `22` | Highest difficulty issued. At least `INGEST_POW_MIN_BITS` and at most 26 (the hardest challenge an install solves) |
 
-- **version** (string, required): free-form version string; sanitized to `"invalid"` if it doesn't match `^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$` (printable ASCII, at most 32 chars)
-- **servers** (integer, required): GameServer count; must be ≥ 0
-- **templates** (integer, required): GameTemplate count; must be ≥ 0
+An unparsable or out-of-range value stops the receiver at start with an `invalid configuration` error.
 
-### Prometheus metrics
+### Proof-of-work
+
+Challenges are stateless: `base64url(payload) "." base64url(mac)`, where the payload holds a version byte, the issue time, the difficulty in bits and 16 random bytes, and the MAC is the first 16 bytes of HMAC-SHA256 under a 32-byte key generated at process start and kept in memory. A challenge expires after 15 minutes. The sender finds a decimal nonce so that `SHA-256(challenge ":" nonce)` starts with at least `bits` zero bits and sends `Gameplane-Telemetry-PoW: <challenge>:<nonce>`.
+
+Difficulty: with `r` challenges issued in the trailing 60 seconds (counting the new one) and `T = INGEST_POW_TARGET_PER_MIN`, the target is `0` when `r <= T`, otherwise `min(MAX, ceil(2*log2(r/T)))`. The issued difficulty is `max(MIN, target, peak - floor((now - peakAt) / 5 min))`, so it rises on the next challenge and falls one bit per five minutes.
+
+Verification (before the body is read): header present and well formed, MAC valid, not expired, enough leading zero bits as stated in the token, not already used. A missing header is `428 pow_required`; any other failure is `428 pow_invalid`. A verified solution is marked used at once, whatever happens to the report. The used set is in memory, pruned when entries expire, and capped at 1,000,000; when full, `/ingest` answers `503 pow_busy` with `Retry-After: 60`. A restart invalidates outstanding challenges.
+
+### Prometheus metrics (dashboard listener, Bearer token)
 
 ```
-gameplane_telemetry_reports_total{version="0.3.0"}  # counter, by version label
-gameplane_telemetry_servers_bucket{le="…"}                 # histogram (buckets: 0,1,2,5,10,25,50,100,250,+Inf)
-gameplane_telemetry_servers_sum                            # histogram sum
-gameplane_telemetry_servers_count                          # histogram count
-gameplane_telemetry_templates_bucket{le="…"}               # histogram (same buckets)
-gameplane_telemetry_templates_sum                          # histogram sum
-gameplane_telemetry_templates_count                        # histogram count
+gameplane_telemetry_reports_total{version="0.3.0"}      # counter, by version label
+gameplane_telemetry_servers_bucket{le="…"}              # histogram (buckets: 0,1,2,5,10,25,50,100,250,+Inf), plus _sum and _count
+gameplane_telemetry_templates_bucket{le="…"}            # histogram (same buckets), plus _sum and _count
+gameplane_telemetry_duplicates_total                    # same-day repeat extended reports
+gameplane_telemetry_extended_reports_total              # extended reports counted in the aggregates
+gameplane_telemetry_rate_limited_total{route}           # route: ingest, login, summary, challenge
+gameplane_telemetry_refused_total{reason}               # bad_signature, stale, id_claimed, replay, pow_required, pow_invalid, pow_busy
+gameplane_telemetry_pow_challenges_total                # challenges issued
+gameplane_telemetry_pow_bits                            # gauge: difficulty a challenge issued now would carry (0 when proof-of-work is off)
 ```
 
+All series are in memory and reset on restart; the durable figures are the aggregates in SQLite.
+
 ## Key invariants
 
-- **No persistent storage**: all metrics are in-memory, ephemeral across restart
+- **Stores daily aggregates and expiring activity records only, never raw reports or addresses**: the schema (`meta`, `daily_basic`, `daily_version`, `daily_fleet`, `daily_ext`, `daily_dim`, `daily_game`, `activity`) holds counts, bands and categories per UTC day, plus one activity record per install keyed by `HMAC-SHA256(pepper, installID)`. Source addresses live in limiter memory only and are never written to the store or the logs. No extended attribute is stored next to an install ID.
+- **Basic or extended report, both strictly validated**: a body is accepted only when it decodes as exactly one basic report or one basic report with a valid `ext` part; anything else is `400`. Out-of-set values in extended categories fold to `other`.
+- **Extended reports must be signed**: a report with `ext` and a missing or invalid signature is refused (`403 bad_signature`) before any write, and an install ID is bound to the first valid key that claims it.
+- **Refusal invariant (dashboard)**: an unauthenticated dashboard response never contains a figure, a date other than page chrome, a version, category or module name, or anything that varies with whether data exists. A wrong token gets the same "Invalid credentials" login page whether or not the receiver is empty.
+- **No token, no dashboard**: the dashboard listener is not started unless `DASHBOARD_TOKEN` is set, and a token shorter than 32 characters stops startup.
 - **Version label bounded**: malformed strings become `version="invalid"`; after 128 distinct valid versions, new versions become `version="other"`. Concurrent requests share the same budget, and all accepted reports remain counted.
-- **Strict validation**: body must be exactly one JSON object with all three required fields (no extras, no renames); keys matched exactly and case-sensitively with duplicates rejected; missing or null fields rejected; trailing non-whitespace content rejected; negative counts immediately rejected; body size capped at 16 KiB
-- **Request timing**: whole-request read is time-bounded (15 s read timeout, 10 s header timeout) to prevent clients holding connections open after sending a report
-- **Authentication is optional**: if `AUTH_TOKEN` is empty, `/ingest` is public; otherwise, the exact `Authorization` header must match (constant-time comparison defeats timing attacks)
-- **Anonymity by contract**: payload contains no names, namespaces, hostnames, cluster IDs, or pod IPs — privacy is enforced upstream (by the API's telemetry reporter), and this receiver has no way to add PII
-- **Graceful shutdown**: catches SIGINT/SIGTERM, shuts down HTTP server with 5s context timeout
+- **Refused reports change nothing**: signature, window, claim, replay and proof-of-work refusals write no data; a proof-of-work refusal costs one HMAC and one hash.
+- **Single writer**: SQLite writes are serialized by one mutex; run one replica per database.
+- **Graceful shutdown**: catches SIGINT/SIGTERM and shuts both listeners down with a 5s context timeout; the lifecycle job stops before the store closes.
 
 ## Data & persistence
 
-None. In-memory Prometheus metrics only. On restart, all counters and histograms reset.
+SQLite at `$DATA_DIR/telemetry.db` (WAL, 5 s busy timeout). Aggregates are kept `RETENTION_DAYS` (default 730) and activity records `ACTIVITY_EXPIRY_DAYS` (default 90); an hourly job sweeps both. `meta` holds the schema version, collection start, the running report total and, unless `ID_PEPPER` is set, the pepper. Prometheus series, limiter state and the proof-of-work key and used set are in memory only. With `DATA_DIR` empty the whole store is in memory.
 
 ## Security considerations
 
-- **Input boundary**: strict JSON token-walking with exact case-sensitive key validation + explicit length validation prevents injection or DoS via malformed payloads (no silently-accepted case-insensitive renames, no duplicate-key silencing)
-- **Label safety**: version string sanitization with regex prevents arbitrary label values and protects the metrics endpoint (a common Prometheus DoS vector)
-- **Authentication**: constant-time token comparison (via `crypto/subtle.ConstantTimeCompare`) is timing-attack-resistant; token transmitted in plaintext (use TLS in production)
-- **Minimal dependencies**: only `prometheus/client_golang` — no database, no serialization frameworks, no dynamic code loading
-- **Container hardening**: distroless image, nonroot user (UID 65532), no shell or package manager
-- **Privacy by design**: no storage means no breach risk; opt-in flag at the API side (the receiver is point-blank trustworthy — verify the API's admin toggle gating instead)
+- **Input boundary**: strict token-walking decode with exact case-sensitive keys, a 16 KiB body cap and per-field patterns or fixed lists; hostile text cannot create unbounded categories or labels.
+- **Label safety**: version sanitization keeps the Prometheus label set bounded.
+- **Authentication**: `AUTH_TOKEN` and the dashboard token are compared in constant time; the dashboard token needs at least 32 characters because per-source login limits can be outrun by a holder of many IPv6 /64s, so length is what makes guessing infeasible; the session cookie is HMAC-signed with a key derived from the token.
+- **Proof-of-work**: raises the cost of bulk fabricated reports in proportion to request rate; it does not stop a determined, well-resourced sender (SHA-256 is cheap on dedicated hardware) and does not prove an install is real.
+- **Signing**: stops impersonation of an existing install and replays; it does not stop invented installs.
+- **Container hardening**: distroless image, nonroot user (UID 65532), no shell or package manager; static binary built with `CGO_ENABLED=0`.
+- **Dependencies**: `github.com/prometheus/client_golang`, `modernc.org/sqlite` (pure Go SQLite, no cgo) and the in-repo `telemetryschema` module (stdlib only); no serialization frameworks and no dynamic code loading.
 
 ## Testing & coverage
 
 Coverage gate: **70%** (`.testcoverage.yml`).
 
 Test suite covers:
-- **Validation**: malformed JSON, unknown fields, negative counts, oversized bodies all rejected with correct HTTP status
-- **Authentication**: missing auth returns 401; wrong token returns 401; correct token passes
-- **Label sanitization**: hostile version strings bucketed as `"invalid"`, not leaked raw into metrics
-- **Metrics side effects**: accepted reports increment counters and populate histograms
-- **Config loading**: environment variables override defaults
-- **Graceful shutdown**: context cancellation shuts down the server cleanly
-- **HTTP method guards**: non-POST to `/ingest`, non-GET to `/metrics`/`/healthz` return 405
+- **Validation and ingest**: malformed, unknown-field, negative and oversized bodies; per-source daily limit; duplicate and replay handling
+- **Signing and claims**: bad signature, stale send time, claimed ID, replay
+- **Proof-of-work**: challenge issue and verification, difficulty rise and decay, used-set cap, `pow_busy`
+- **Dashboard**: login, session cookie, CSRF origin check, refusal invariant, views JSON, metrics Bearer-only
+- **Summary and limiters**: snapshot cache, rate limits, source-address derivation
+- **Store and lifecycle**: schema, retention sweep, rollover, activity expiry
+- **Config loading**: defaults, environment overrides, minimums and the 32-character token check
+- **Cardinality**: version label budget
 
 Untested (main process wiring): `main()` signal handling and server startup errors — not unit-testable without spawning goroutines, deferred to integration tests.
 
 ## References
 
-- **`telemetry-receiver/README.md`** — configuration table, environment variables, behavior examples, run via Helm or Docker
+- **`telemetry-receiver/README.md`** — configuration table, behavior, run via Helm or Docker
+- **`docs/telemetry-provider.md`** — provider runbook (TLS, secrets, proof-of-work tuning, backups)
+- **`docs/security.md`** — Telemetry threat model
+- **`telemetryschema/specs.md`** — shared report contract, signing and proof-of-work helpers
 - **`api/internal/telemetry`** — the API's reporter that POSTs to this endpoint
-- **`charts/gameplane/`** — Helm chart integration (`api.telemetry.receiver.enabled`)
+- **`charts/gameplane/`** — Helm chart integration (`api.telemetry.receiver.*`)
+- **`specs/022-default-telemetry-dashboard/`** — feature spec and contracts
 - **`CLAUDE.md`** — project architecture summary
diff --git a/telemetry-receiver/store.go b/telemetry-receiver/store.go
new file mode 100644
index 000000000..0ae84af39
--- /dev/null
+++ b/telemetry-receiver/store.go
@@ -0,0 +1,417 @@
+package main
+
+import (
+	"context"
+	"crypto/rand"
+	"database/sql"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"log/slog"
+	"net/url"
+	"os"
+	"path/filepath"
+	"sync"
+	"time"
+
+	_ "modernc.org/sqlite" // registers the "sqlite" database/sql driver
+)
+
+// storeFileName is the SQLite file created inside DATA_DIR.
+const storeFileName = "telemetry.db"
+
+// schemaVersion is written to meta.schema_version on first open.
+const schemaVersion = "1"
+
+// Keys of the meta table (data-model.md, Receiver).
+const (
+	metaSchemaVersion   = "schema_version"
+	metaPepper          = "pepper"
+	metaCollectionStart = "collection_started"
+	metaReportsTotal    = "reports_total"
+	// metaRolloverThrough is the last completed UTC day the lifecycle job
+	// has finalised (data-model.md, Lifecycle jobs).
+	metaRolloverThrough = "rollover_through"
+)
+
+const (
+	// pepperBytes is the size of a generated install-ID pepper.
+	pepperBytes = 32
+	// storeBusyTimeoutMsec bounds how long a connection waits on a locked
+	// database before failing.
+	storeBusyTimeoutMsec = 5000
+)
+
+// storeSchema creates every receiver table. All statements are idempotent
+// so reopening an existing DATA_DIR is a no-op. Days are UTC calendar days
+// written YYYY-MM-DD; other timestamps are RFC 3339 UTC strings bound from
+// Go. Nothing here stores a raw report, a source address or a raw install
+// ID.
+var storeSchema = []string{
+	`CREATE TABLE IF NOT EXISTS meta (
+		key   TEXT PRIMARY KEY,
+		value TEXT NOT NULL
+	)`,
+	`CREATE TABLE IF NOT EXISTS daily_basic (
+		day           TEXT PRIMARY KEY,
+		reports       INTEGER NOT NULL DEFAULT 0,
+		duplicates    INTEGER NOT NULL DEFAULT 0,
+		servers_sum   INTEGER NOT NULL DEFAULT 0,
+		templates_sum INTEGER NOT NULL DEFAULT 0
+	)`,
+	`CREATE TABLE IF NOT EXISTS daily_version (
+		day     TEXT NOT NULL,
+		version TEXT NOT NULL,
+		reports INTEGER NOT NULL DEFAULT 0,
+		PRIMARY KEY (day, version)
+	)`,
+	`CREATE TABLE IF NOT EXISTS daily_fleet (
+		day     TEXT NOT NULL,
+		metric  TEXT NOT NULL,
+		value   INTEGER NOT NULL,
+		reports INTEGER NOT NULL DEFAULT 0,
+		PRIMARY KEY (day, metric, value)
+	)`,
+	`CREATE TABLE IF NOT EXISTS daily_ext (
+		day             TEXT PRIMARY KEY,
+		ext_reports     INTEGER NOT NULL DEFAULT 0,
+		active_installs INTEGER NOT NULL DEFAULT 0,
+		new_installs    INTEGER NOT NULL DEFAULT 0,
+		lapsed_installs INTEGER NOT NULL DEFAULT 0
+	)`,
+	`CREATE TABLE IF NOT EXISTS daily_dim (
+		day      TEXT NOT NULL,
+		dim      TEXT NOT NULL,
+		value    TEXT NOT NULL,
+		installs INTEGER NOT NULL DEFAULT 0,
+		PRIMARY KEY (day, dim, value)
+	)`,
+	`CREATE TABLE IF NOT EXISTS daily_game (
+		day      TEXT NOT NULL,
+		module   TEXT NOT NULL,
+		installs INTEGER NOT NULL DEFAULT 0,
+		servers  INTEGER NOT NULL DEFAULT 0,
+		PRIMARY KEY (day, module)
+	)`,
+	`CREATE TABLE IF NOT EXISTS activity (
+		id_hmac      TEXT PRIMARY KEY,
+		key_fp       TEXT NOT NULL,
+		first_seen   TEXT NOT NULL,
+		last_seen    TEXT NOT NULL,
+		last_sent_at TEXT NOT NULL,
+		last_version TEXT NOT NULL
+	)`,
+	`CREATE INDEX IF NOT EXISTS activity_last_seen ON activity (last_seen)`,
+}
+
+// store is the receiver's SQLite-backed aggregate store. A single writer
+// is enforced with mu: every write goes through exec, so WAL readers never
+// contend with more than one writer.
+type store struct {
+	db     *sql.DB
+	mu     sync.Mutex // serializes writers
+	pepper []byte
+	// mem reports whether the store is a private in-memory database.
+	mem bool
+	// activityExpiryDays is ACTIVITY_EXPIRY_DAYS; zero (the zero config)
+	// disables the activity-record expiry (T073).
+	activityExpiryDays int
+}
+
+// storeDSN builds the modernc.org/sqlite DSN for the on-disk database: WAL
+// journaling, a busy timeout and enforced foreign keys.
+func storeDSN(path string) string {
+	q := url.Values{}
+	q.Add("_pragma", "journal_mode(WAL)")
+	q.Add("_pragma", fmt.Sprintf("busy_timeout(%d)", storeBusyTimeoutMsec))
+	q.Add("_pragma", "foreign_keys(1)")
+	return (&url.URL{Scheme: "file", Path: filepath.ToSlash(path), RawQuery: q.Encode()}).String()
+}
+
+// openStore opens (creating if needed) the store described by cfg. With
+// cfg.dataDir empty the database is private to this store and lives in
+// memory (a warning is logged); otherwise it is $DATA_DIR/telemetry.db in
+// WAL mode. The pepper is cfg.idPepper when set, else a random value that
+// is generated once and kept in meta so it survives restarts.
+func openStore(ctx context.Context, cfg config) (*store, error) {
+	var db *sql.DB
+	mem := cfg.dataDir == ""
+	if mem {
+		slog.Warn("DATA_DIR is empty: telemetry aggregates are kept in memory and lost on restart")
+		// ":memory:" without a shared cache gives every connection its own
+		// database, so the pool is pinned to one connection that is never
+		// recycled. Each store therefore owns a private database.
+		var err error
+		db, err = sql.Open("sqlite", ":memory:")
+		if err != nil {
+			return nil, fmt.Errorf("open in-memory store: %w", err)
+		}
+		db.SetMaxOpenConns(1)
+		db.SetMaxIdleConns(1)
+		db.SetConnMaxLifetime(0)
+		db.SetConnMaxIdleTime(0)
+	} else {
+		if err := os.MkdirAll(cfg.dataDir, 0o750); err != nil {
+			return nil, fmt.Errorf("create data dir %s: %w", cfg.dataDir, err)
+		}
+		var err error
+		db, err = sql.Open("sqlite", storeDSN(filepath.Join(cfg.dataDir, storeFileName)))
+		if err != nil {
+			return nil, fmt.Errorf("open store in %s: %w", cfg.dataDir, err)
+		}
+	}
+	st := &store{db: db, mem: mem, activityExpiryDays: cfg.activityExpiryDays}
+	if err := st.init(ctx, cfg.idPepper); err != nil {
+		return nil, errors.Join(err, db.Close())
+	}
+	return st, nil
+}
+
+// init creates the schema and seeds the meta keys. It is safe to run on an
+// existing database: existing meta values are never overwritten.
+func (s *store) init(ctx context.Context, envPepper string) error {
+	if err := s.db.PingContext(ctx); err != nil {
+		return fmt.Errorf("ping store: %w", err)
+	}
+	for _, stmt := range storeSchema {
+		if err := s.exec(ctx, stmt); err != nil {
+			return fmt.Errorf("create schema: %w", err)
+		}
+	}
+	if err := s.metaInit(ctx, metaSchemaVersion, schemaVersion); err != nil {
+		return err
+	}
+	if err := s.metaInit(ctx, metaCollectionStart, time.Now().UTC().Format(time.RFC3339)); err != nil {
+		return err
+	}
+	if err := s.metaInit(ctx, metaReportsTotal, "0"); err != nil {
+		return err
+	}
+	if envPepper != "" {
+		s.pepper = []byte(envPepper)
+		return nil
+	}
+	raw := make([]byte, pepperBytes)
+	if _, err := rand.Read(raw); err != nil {
+		return fmt.Errorf("generate pepper: %w", err)
+	}
+	if err := s.metaInit(ctx, metaPepper, hex.EncodeToString(raw)); err != nil {
+		return err
+	}
+	stored, ok, err := s.metaGet(ctx, metaPepper)
+	if err != nil {
+		return err
+	}
+	if !ok {
+		return errors.New("pepper missing from meta after initialization")
+	}
+	s.pepper = []byte(stored)
+	return nil
+}
+
+// exec runs one write statement under the single-writer lock.
+func (s *store) exec(ctx context.Context, query string, args ...any) error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	if _, err := s.db.ExecContext(ctx, query, args...); err != nil {
+		return fmt.Errorf("exec: %w", err)
+	}
+	return nil
+}
+
+// metaInit inserts a meta key only when it does not exist yet.
+func (s *store) metaInit(ctx context.Context, key, value string) error {
+	if err := s.exec(ctx,
+		`INSERT INTO meta (key, value) VALUES (?, ?) ON CONFLICT (key) DO NOTHING`,
+		key, value); err != nil {
+		return fmt.Errorf("init meta %s: %w", key, err)
+	}
+	return nil
+}
+
+// metaGet returns the value for a meta key and whether it exists.
+func (s *store) metaGet(ctx context.Context, key string) (string, bool, error) {
+	var v string
+	err := s.db.QueryRowContext(ctx, `SELECT value FROM meta WHERE key = ?`, key).Scan(&v)
+	if errors.Is(err, sql.ErrNoRows) {
+		return "", false, nil
+	}
+	if err != nil {
+		return "", false, fmt.Errorf("read meta %s: %w", key, err)
+	}
+	return v, true, nil
+}
+
+// close releases the database.
+func (s *store) close() error {
+	if err := s.db.Close(); err != nil {
+		return fmt.Errorf("close store: %w", err)
+	}
+	return nil
+}
+
+// writeTx runs fn in one transaction under the single-writer lock. The
+// transaction commits when fn returns nil and rolls back otherwise. fn must
+// use only tx: the in-memory store has a single connection, so reading
+// through s.db inside fn would deadlock.
+func (s *store) writeTx(ctx context.Context, fn func(tx *sql.Tx) error) error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	tx, err := s.db.BeginTx(ctx, nil)
+	if err != nil {
+		return fmt.Errorf("begin transaction: %w", err)
+	}
+	if err := fn(tx); err != nil {
+		return errors.Join(err, rollbackErr(tx.Rollback()))
+	}
+	if err := tx.Commit(); err != nil {
+		return fmt.Errorf("commit transaction: %w", err)
+	}
+	return nil
+}
+
+// rollbackErr hides sql.ErrTxDone, which only means the transaction had
+// already ended.
+func rollbackErr(err error) error {
+	if errors.Is(err, sql.ErrTxDone) {
+		return nil
+	}
+	return err
+}
+
+const (
+	// lifecycleInterval is how often the lifecycle job runs.
+	lifecycleInterval = time.Hour
+	// maxRolloverCatchup bounds how many missed days one run finalises after
+	// a long outage.
+	maxRolloverCatchup = 400
+)
+
+// retentionSweeps delete the daily_* rows older than the cutoff day (the one
+// bound parameter). The statements are constants, never built from input.
+var retentionSweeps = []string{
+	`DELETE FROM daily_basic WHERE day < ?`,
+	`DELETE FROM daily_version WHERE day < ?`,
+	`DELETE FROM daily_fleet WHERE day < ?`,
+	`DELETE FROM daily_ext WHERE day < ?`,
+	`DELETE FROM daily_dim WHERE day < ?`,
+	`DELETE FROM daily_game WHERE day < ?`,
+}
+
+// pendingDays returns the completed UTC days after through, up to and
+// including yesterday (relative to now), oldest first. An empty through
+// yields just yesterday. At most maxRolloverCatchup days are returned.
+func pendingDays(through string, now time.Time) []string {
+	yesterday := now.UTC().Truncate(24*time.Hour).AddDate(0, 0, -1)
+	last, err := time.Parse(time.DateOnly, through)
+	if through == "" || err != nil {
+		return []string{dayString(yesterday)}
+	}
+	first := last.AddDate(0, 0, 1)
+	if earliest := yesterday.AddDate(0, 0, 1-maxRolloverCatchup); first.Before(earliest) {
+		first = earliest
+	}
+	var days []string
+	for d := first; !d.After(yesterday); d = d.AddDate(0, 0, 1) {
+		days = append(days, dayString(d))
+	}
+	return days
+}
+
+// lifecycleOnce runs one pass of the lifecycle job. It is idempotent: it
+// finalises the completed days after meta.rollover_through, then deletes
+// daily_* rows older than retentionDays. A retentionDays of zero or less
+// (the zero config) deletes nothing. For every finalised day D it records
+// lapsed_installs[D] (activity records last seen on D - 30), then it expires
+// activity records older than activityExpiryDays (T073).
+func (s *store) lifecycleOnce(ctx context.Context, now time.Time, retentionDays int) error {
+	through, _, err := s.metaGet(ctx, metaRolloverThrough)
+	if err != nil {
+		return err
+	}
+	now = now.UTC()
+	days := pendingDays(through, now)
+	cutoff := dayString(now.AddDate(0, 0, -retentionDays))
+	return s.writeTx(ctx, func(tx *sql.Tx) error {
+		if len(days) > 0 {
+			// Never move the marker backwards.
+			if _, err := tx.ExecContext(ctx,
+				`INSERT INTO meta (key, value) VALUES (?, ?)
+				 ON CONFLICT (key) DO UPDATE SET value = excluded.value WHERE excluded.value > meta.value`,
+				metaRolloverThrough, days[len(days)-1]); err != nil {
+				return fmt.Errorf("advance rollover_through: %w", err)
+			}
+		}
+		for _, day := range days {
+			if err := recordLapsed(ctx, tx, day); err != nil {
+				return err
+			}
+		}
+		if s.activityExpiryDays > 0 {
+			expiry := dayString(now.AddDate(0, 0, -s.activityExpiryDays))
+			if _, err := tx.ExecContext(ctx, `DELETE FROM activity WHERE last_seen < ?`, expiry); err != nil {
+				return fmt.Errorf("expire activity records: %w", err)
+			}
+		}
+		if retentionDays <= 0 {
+			return nil
+		}
+		for _, sweep := range retentionSweeps {
+			if _, err := tx.ExecContext(ctx, sweep, cutoff); err != nil {
+				return fmt.Errorf("retention sweep: %w", err)
+			}
+		}
+		return nil
+	})
+}
+
+// lapsedWindowDays is how long an install must stay silent to count as lapsed.
+const lapsedWindowDays = 30
+
+// recordLapsed sets daily_ext[day].lapsed_installs to the number of activity
+// records whose last report was lapsedWindowDays before day. It writes nothing
+// when that number is 0, so quiet days leave no row, and it is idempotent.
+func recordLapsed(ctx context.Context, tx *sql.Tx, day string) error {
+	d, err := time.Parse(time.DateOnly, day)
+	if err != nil {
+		return fmt.Errorf("lapsed installs: bad day %q: %w", day, err)
+	}
+	var n int
+	if err := tx.QueryRowContext(ctx,
+		`SELECT count(*) FROM activity WHERE last_seen = ?`,
+		dayString(d.AddDate(0, 0, -lapsedWindowDays))).Scan(&n); err != nil {
+		return fmt.Errorf("count lapsed installs: %w", err)
+	}
+	if n == 0 {
+		return nil
+	}
+	if _, err := tx.ExecContext(ctx,
+		`INSERT INTO daily_ext (day, lapsed_installs) VALUES (?, ?)
+		 ON CONFLICT (day) DO UPDATE SET lapsed_installs = excluded.lapsed_installs`,
+		day, n); err != nil {
+		return fmt.Errorf("record lapsed installs: %w", err)
+	}
+	return nil
+}
+
+// runLifecycle runs lifecycleOnce immediately and then every
+// lifecycleInterval until ctx is cancelled. Failures are logged and retried
+// on the next tick.
+func (s *store) runLifecycle(ctx context.Context, retentionDays int, now func() time.Time) {
+	run := func() {
+		if err := s.lifecycleOnce(ctx, now(), retentionDays); err != nil && ctx.Err() == nil {
+			slog.Error("telemetry lifecycle job failed", "err", err)
+		}
+	}
+	run()
+	t := time.NewTicker(lifecycleInterval)
+	defer t.Stop()
+	for {
+		select {
+		case <-ctx.Done():
+			return
+		case <-t.C:
+			run()
+		}
+	}
+}
diff --git a/telemetry-receiver/store_test.go b/telemetry-receiver/store_test.go
new file mode 100644
index 000000000..f31b82f63
--- /dev/null
+++ b/telemetry-receiver/store_test.go
@@ -0,0 +1,474 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"io/fs"
+	"net"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"path/filepath"
+	"strings"
+	"sync"
+	"testing"
+	"time"
+)
+
+// wantTables lists every table data-model.md § Receiver requires.
+var wantTables = []string{
+	"meta", "daily_basic", "daily_version", "daily_fleet",
+	"daily_ext", "daily_dim", "daily_game", "activity",
+}
+
+func openTestStore(ctx context.Context, t *testing.T, cfg config) *store {
+	t.Helper()
+	st, err := openStore(ctx, cfg)
+	if err != nil {
+		t.Fatalf("openStore: %v", err)
+	}
+	t.Cleanup(func() { _ = st.close() })
+	return st
+}
+
+func mustMeta(t *testing.T, st *store, key string) string {
+	t.Helper()
+	v, ok, err := st.metaGet(context.Background(), key)
+	if err != nil {
+		t.Fatalf("metaGet(%s): %v", key, err)
+	}
+	if !ok {
+		t.Fatalf("meta key %q missing", key)
+	}
+	return v
+}
+
+func countRows(ctx context.Context, t *testing.T, st *store, query string, args ...any) int {
+	t.Helper()
+	var n int
+	if err := st.db.QueryRowContext(ctx, query, args...).Scan(&n); err != nil {
+		t.Fatalf("count (%s): %v", query, err)
+	}
+	return n
+}
+
+func TestStoreCreatesSchemaAndMeta(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{dataDir: t.TempDir()})
+	for _, name := range wantTables {
+		if n := countRows(t.Context(), t, st, `SELECT count(*) FROM sqlite_master WHERE type = 'table' AND name = ?`, name); n != 1 {
+			t.Errorf("table %s: found %d, want 1", name, n)
+		}
+	}
+	// The activity claim columns the spec calls out by name.
+	for _, col := range []string{"key_fp", "last_sent_at"} {
+		if n := countRows(t.Context(), t, st, `SELECT count(*) FROM pragma_table_info('activity') WHERE name = ?`, col); n != 1 {
+			t.Errorf("activity.%s: found %d, want 1", col, n)
+		}
+	}
+	if got := mustMeta(t, st, "schema_version"); got != "1" {
+		t.Errorf("schema_version = %q, want 1", got)
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "0" {
+		t.Errorf("reports_total = %q, want 0", got)
+	}
+	if _, err := time.Parse(time.RFC3339, mustMeta(t, st, "collection_started")); err != nil {
+		t.Errorf("collection_started is not RFC 3339: %v", err)
+	}
+	// A generated pepper is 32 random bytes, hex encoded, and kept in meta.
+	pepper := mustMeta(t, st, "pepper")
+	if len(pepper) != 64 || string(st.pepper) != pepper {
+		t.Errorf("pepper = %q (store holds %q), want 64 hex chars matching the store", pepper, st.pepper)
+	}
+	if st.mem {
+		t.Error("an on-disk store reported itself as in-memory")
+	}
+}
+
+func TestStoreUsesWALOnDisk(t *testing.T) {
+	dir := t.TempDir()
+	st := openTestStore(t.Context(), t, config{dataDir: dir})
+	var mode string
+	if err := st.db.QueryRowContext(context.Background(), `PRAGMA journal_mode`).Scan(&mode); err != nil {
+		t.Fatalf("read journal_mode: %v", err)
+	}
+	if mode != "wal" {
+		t.Errorf("journal_mode = %q, want wal", mode)
+	}
+	if _, err := os.Stat(filepath.Join(dir, "telemetry.db")); err != nil {
+		t.Errorf("telemetry.db not created in DATA_DIR: %v", err)
+	}
+}
+
+func TestStoreCreatesMissingDataDir(t *testing.T) {
+	dir := filepath.Join(t.TempDir(), "a", "b")
+	st := openTestStore(t.Context(), t, config{dataDir: dir})
+	if st.mem {
+		t.Error("store with DATA_DIR set must not be in-memory")
+	}
+	if _, err := os.Stat(filepath.Join(dir, "telemetry.db")); err != nil {
+		t.Errorf("telemetry.db not created in new directory: %v", err)
+	}
+}
+
+// SC-009: aggregates and the pepper survive a restart on the same DATA_DIR.
+func TestStoreReopenKeepsAggregatesAndPepper(t *testing.T) {
+	ctx := context.Background()
+	dir := t.TempDir()
+
+	first, err := openStore(context.Background(), config{dataDir: dir})
+	if err != nil {
+		t.Fatalf("first open: %v", err)
+	}
+	pepper := string(first.pepper)
+	started := mustMeta(t, first, "collection_started")
+	if err := first.exec(ctx,
+		`INSERT INTO daily_basic (day, reports, servers_sum, templates_sum) VALUES (?, ?, ?, ?)`,
+		"2026-10-05", 7, 21, 14); err != nil {
+		t.Fatalf("insert daily_basic: %v", err)
+	}
+	if err := first.exec(ctx,
+		`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version) VALUES (?, ?, ?, ?, ?, ?)`,
+		"abc123", "fp", "2026-10-01", "2026-10-05", "2026-10-05T10:00:00Z", "0.3.0"); err != nil {
+		t.Fatalf("insert activity: %v", err)
+	}
+	if err := first.exec(ctx, `UPDATE meta SET value = ? WHERE key = 'reports_total'`, "42"); err != nil {
+		t.Fatalf("update reports_total: %v", err)
+	}
+	if err := first.close(); err != nil {
+		t.Fatalf("close: %v", err)
+	}
+
+	second := openTestStore(t.Context(), t, config{dataDir: dir})
+	if got := string(second.pepper); got != pepper {
+		t.Errorf("pepper changed across restart: %q -> %q", pepper, got)
+	}
+	if got := mustMeta(t, second, "collection_started"); got != started {
+		t.Errorf("collection_started changed across restart: %q -> %q", started, got)
+	}
+	if got := mustMeta(t, second, "reports_total"); got != "42" {
+		t.Errorf("reports_total = %q after restart, want 42 (initialisation must not reset it)", got)
+	}
+	if n := countRows(t.Context(), t, second, `SELECT reports FROM daily_basic WHERE day = ?`, "2026-10-05"); n != 7 {
+		t.Errorf("daily_basic reports = %d after restart, want 7", n)
+	}
+	if n := countRows(t.Context(), t, second, `SELECT count(*) FROM activity WHERE id_hmac = ?`, "abc123"); n != 1 {
+		t.Errorf("activity rows = %d after restart, want 1", n)
+	}
+}
+
+func TestStoreEnvPepperIsUsedAndNotStored(t *testing.T) {
+	dir := t.TempDir()
+	st := openTestStore(t.Context(), t, config{dataDir: dir, idPepper: "from-secret"})
+	if got := string(st.pepper); got != "from-secret" {
+		t.Errorf("pepper = %q, want the configured value", got)
+	}
+	if n := countRows(t.Context(), t, st, `SELECT count(*) FROM meta WHERE key = 'pepper'`); n != 0 {
+		t.Errorf("meta holds %d pepper rows, want 0 when ID_PEPPER is set", n)
+	}
+}
+
+func TestStoreInMemoryIsPrivatePerStore(t *testing.T) {
+	ctx := context.Background()
+	a := openTestStore(t.Context(), t, config{})
+	b := openTestStore(t.Context(), t, config{})
+	if !a.mem || !b.mem {
+		t.Fatal("DATA_DIR empty must give in-memory stores")
+	}
+	if err := a.exec(ctx, `INSERT INTO daily_basic (day, reports) VALUES (?, ?)`, "2026-10-05", 1); err != nil {
+		t.Fatalf("insert into a: %v", err)
+	}
+	if n := countRows(t.Context(), t, a, `SELECT count(*) FROM daily_basic`); n != 1 {
+		t.Errorf("store a has %d rows, want 1", n)
+	}
+	if n := countRows(t.Context(), t, b, `SELECT count(*) FROM daily_basic`); n != 0 {
+		t.Errorf("store b sees %d rows from store a, want 0 (no shared cache)", n)
+	}
+	if string(a.pepper) == string(b.pepper) {
+		t.Error("two in-memory stores generated the same pepper")
+	}
+}
+
+// newServer keeps its signature and always uses a private in-memory store,
+// even when the config names a DATA_DIR.
+func TestNewServerOpensPrivateMemoryStore(t *testing.T) {
+	dir := t.TempDir()
+	s1 := newServer(config{dataDir: dir})
+	s2 := newServer(config{})
+	t.Cleanup(func() { _ = s1.store.close(); _ = s2.store.close() })
+	if !s1.store.mem || !s2.store.mem {
+		t.Fatal("newServer must open an in-memory store")
+	}
+	if _, err := os.Stat(filepath.Join(dir, "telemetry.db")); !errors.Is(err, fs.ErrNotExist) {
+		t.Errorf("newServer created a file in DATA_DIR (stat err = %v)", err)
+	}
+	if s1.store == s2.store {
+		t.Error("two servers share one store")
+	}
+}
+
+func TestStoreSerialisesConcurrentWriters(t *testing.T) {
+	ctx := context.Background()
+	st := openTestStore(t.Context(), t, config{dataDir: t.TempDir()})
+	const writers = 20
+	var wg sync.WaitGroup
+	errs := make(chan error, writers)
+	for range writers {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			errs <- st.exec(ctx, `UPDATE meta SET value = CAST(value AS INTEGER) + 1 WHERE key = 'reports_total'`)
+		}()
+	}
+	wg.Wait()
+	close(errs)
+	for err := range errs {
+		if err != nil {
+			t.Errorf("concurrent write: %v", err)
+		}
+	}
+	if got := mustMeta(t, st, "reports_total"); got != "20" {
+		t.Errorf("reports_total = %q after %d increments, want 20", got, writers)
+	}
+}
+
+func TestStoreMetaGetMissingKey(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	v, ok, err := st.metaGet(context.Background(), "no-such-key")
+	if err != nil || ok || v != "" {
+		t.Errorf("metaGet(missing) = %q, %v, %v; want empty, false, nil", v, ok, err)
+	}
+}
+
+func TestOpenStoreErrors(t *testing.T) {
+	// DATA_DIR that cannot be created because a regular file is in the way.
+	blocker := filepath.Join(t.TempDir(), "file")
+	if err := os.WriteFile(blocker, []byte("x"), 0o600); err != nil {
+		t.Fatalf("write blocker: %v", err)
+	}
+	if _, err := openStore(context.Background(), config{dataDir: filepath.Join(blocker, "sub")}); err == nil {
+		t.Error("expected an error when DATA_DIR cannot be created")
+	}
+
+	// A DATA_DIR whose telemetry.db is not a SQLite database.
+	dir := t.TempDir()
+	junk := strings.Repeat("this is not a sqlite database\n", 20)
+	if err := os.WriteFile(filepath.Join(dir, "telemetry.db"), []byte(junk), 0o600); err != nil {
+		t.Fatalf("write junk db: %v", err)
+	}
+	if _, err := openStore(context.Background(), config{dataDir: dir}); err == nil {
+		t.Error("expected an error opening a corrupt telemetry.db")
+	}
+}
+
+func clearConfigEnv(t *testing.T) {
+	t.Helper()
+	for _, k := range []string{
+		"LISTEN_ADDR", "AUTH_TOKEN", "DASHBOARD_LISTEN_ADDR", "DASHBOARD_TOKEN", "DATA_DIR",
+		"PUBLIC_SUMMARY", "TRUSTED_PROXY_CIDRS", "INGEST_SOURCE_DAILY_LIMIT",
+		"RETENTION_DAYS", "ACTIVITY_EXPIRY_DAYS", "ID_PEPPER",
+	} {
+		// t.Setenv registers the restore; the variable must then be truly
+		// unset so loadConfig sees "not set", not "set to empty".
+		t.Setenv(k, "")
+		if err := os.Unsetenv(k); err != nil {
+			t.Fatalf("unset %s: %v", k, err)
+		}
+	}
+}
+
+func TestLoadConfigNewDefaults(t *testing.T) {
+	clearConfigEnv(t)
+	cfg := loadConfig()
+	if cfg.dashboardListen != ":8081" || cfg.dashboardToken != "" || cfg.dataDir != "" ||
+		cfg.publicSummary || len(cfg.trustedProxyCIDRs) != 0 || cfg.idPepper != "" {
+		t.Fatalf("defaults = %+v", cfg)
+	}
+	if cfg.ingestSourceDailyLimit != 20 || cfg.retentionDays != 730 || cfg.activityExpiryDays != 90 {
+		t.Fatalf("numeric defaults = %+v", cfg)
+	}
+	if err := cfg.validate(); err != nil {
+		t.Fatalf("defaults must validate: %v", err)
+	}
+}
+
+func TestLoadConfigNewEnv(t *testing.T) {
+	clearConfigEnv(t)
+	t.Setenv("DASHBOARD_LISTEN_ADDR", ":9091")
+	t.Setenv("DASHBOARD_TOKEN", "dash")
+	t.Setenv("DATA_DIR", "/data")
+	t.Setenv("PUBLIC_SUMMARY", "true")
+	t.Setenv("TRUSTED_PROXY_CIDRS", "10.0.0.0/8, 192.168.1.0/24,")
+	t.Setenv("INGEST_SOURCE_DAILY_LIMIT", "0")
+	t.Setenv("RETENTION_DAYS", "365")
+	t.Setenv("ACTIVITY_EXPIRY_DAYS", "31")
+	t.Setenv("ID_PEPPER", "pep")
+	cfg := loadConfig()
+	if cfg.dashboardListen != ":9091" || cfg.dashboardToken != "dash" || cfg.dataDir != "/data" ||
+		!cfg.publicSummary || cfg.idPepper != "pep" {
+		t.Fatalf("env override = %+v", cfg)
+	}
+	if cfg.ingestSourceDailyLimit != 0 || cfg.retentionDays != 365 || cfg.activityExpiryDays != 31 {
+		t.Fatalf("numeric override = %+v", cfg)
+	}
+	if len(cfg.trustedProxyCIDRs) != 2 || cfg.trustedProxyCIDRs[0].String() != "10.0.0.0/8" ||
+		cfg.trustedProxyCIDRs[1].String() != "192.168.1.0/24" {
+		t.Fatalf("trustedProxyCIDRs = %v", cfg.trustedProxyCIDRs)
+	}
+	if err := cfg.validate(); err != nil {
+		t.Fatalf("minimum values must validate: %v", err)
+	}
+	t.Setenv("PUBLIC_SUMMARY", "yes")
+	if loadConfig().publicSummary {
+		t.Error("PUBLIC_SUMMARY other than true must stay off")
+	}
+}
+
+func TestConfigValidateErrors(t *testing.T) {
+	cases := []struct {
+		name string
+		env  map[string]string
+		want string
+	}{
+		{"retention below minimum", map[string]string{"RETENTION_DAYS": "364"}, "RETENTION_DAYS"},
+		{"activity expiry below minimum", map[string]string{"ACTIVITY_EXPIRY_DAYS": "30"}, "ACTIVITY_EXPIRY_DAYS"},
+		{"negative source limit", map[string]string{"INGEST_SOURCE_DAILY_LIMIT": "-1"}, "INGEST_SOURCE_DAILY_LIMIT"},
+		{"non-integer retention", map[string]string{"RETENTION_DAYS": "forever"}, "RETENTION_DAYS"},
+		{"non-integer limit", map[string]string{"INGEST_SOURCE_DAILY_LIMIT": "many"}, "INGEST_SOURCE_DAILY_LIMIT"},
+		{"bad proxy CIDR", map[string]string{"TRUSTED_PROXY_CIDRS": "10.0.0.0/8,nonsense"}, "TRUSTED_PROXY_CIDRS"},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			clearConfigEnv(t)
+			for k, v := range tc.env {
+				t.Setenv(k, v)
+			}
+			err := loadConfig().validate()
+			if err == nil || !strings.Contains(err.Error(), tc.want) {
+				t.Fatalf("validate() = %v, want an error mentioning %s", err, tc.want)
+			}
+		})
+	}
+
+	// Every problem is reported, not just the first.
+	clearConfigEnv(t)
+	t.Setenv("RETENTION_DAYS", "1")
+	t.Setenv("ACTIVITY_EXPIRY_DAYS", "1")
+	err := loadConfig().validate()
+	if err == nil || !strings.Contains(err.Error(), "RETENTION_DAYS") || !strings.Contains(err.Error(), "ACTIVITY_EXPIRY_DAYS") {
+		t.Fatalf("validate() = %v, want both settings reported", err)
+	}
+}
+
+func TestRunRejectsInvalidConfig(t *testing.T) {
+	clearConfigEnv(t)
+	t.Setenv("RETENTION_DAYS", "30")
+	err := run(loadConfig())
+	if err == nil || !strings.Contains(err.Error(), "RETENTION_DAYS") {
+		t.Fatalf("run() = %v, want a configuration error", err)
+	}
+}
+
+func TestDashboardRoutesRedirectUnauthenticatedToLogin(t *testing.T) {
+	s := newServer(config{})
+	t.Cleanup(func() { _ = s.store.close() })
+	rec := httptest.NewRecorder()
+	s.dashboardRoutes().ServeHTTP(rec, httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/", nil))
+	if rec.Code != http.StatusSeeOther || rec.Header().Get("Location") != "/login" {
+		t.Fatalf("dashboard / = %d with Location %q, want 303 to /login", rec.Code, rec.Header().Get("Location"))
+	}
+}
+
+// freeAddr returns a loopback address that was free a moment ago.
+func freeAddr(t *testing.T) string {
+	t.Helper()
+	l, err := (&net.ListenConfig{}).Listen(context.Background(), "tcp", "127.0.0.1:0")
+	if err != nil {
+		t.Fatalf("reserve port: %v", err)
+	}
+	addr := l.Addr().String()
+	if err := l.Close(); err != nil {
+		t.Fatalf("release port: %v", err)
+	}
+	return addr
+}
+
+func TestServeStartsDashboardOnlyWithToken(t *testing.T) {
+	dashAddr := freeAddr(t)
+	ctx, cancel := context.WithCancel(context.Background())
+	done := make(chan error, 1)
+	go func() {
+		done <- serve(ctx, config{
+			listen:          "127.0.0.1:0",
+			dashboardListen: dashAddr,
+			dashboardToken:  "tok",
+		})
+	}()
+
+	// Live dashboard listener serves the login page after redirecting unauthenticated requests.
+	var status int
+	deadline := time.Now().Add(5 * time.Second)
+	for time.Now().Before(deadline) {
+		req, err := http.NewRequestWithContext(ctx, http.MethodGet, "http://"+dashAddr+"/", nil)
+		if err != nil {
+			t.Fatalf("build request: %v", err)
+		}
+		resp, err := http.DefaultClient.Do(req)
+		if err == nil {
+			status = resp.StatusCode
+			_ = resp.Body.Close()
+			break
+		}
+		time.Sleep(50 * time.Millisecond)
+	}
+	if status != http.StatusOK {
+		t.Fatalf("dashboard listener status = %d, want 200 (login page after redirect)", status)
+	}
+	cancel()
+	select {
+	case err := <-done:
+		if err != nil {
+			t.Fatalf("serve returned %v after cancel, want nil", err)
+		}
+	case <-time.After(5 * time.Second):
+		t.Fatal("serve did not shut down")
+	}
+}
+
+func TestServeNoDashboardWithoutToken(t *testing.T) {
+	dashAddr := freeAddr(t)
+	ctx, cancel := context.WithCancel(context.Background())
+	done := make(chan error, 1)
+	go func() { done <- serve(ctx, config{listen: "127.0.0.1:0", dashboardListen: dashAddr}) }()
+	time.Sleep(200 * time.Millisecond)
+	conn, err := (&net.Dialer{Timeout: time.Second}).DialContext(context.Background(), "tcp", dashAddr)
+	if err == nil {
+		_ = conn.Close()
+		t.Error("dashboard listener is up although DASHBOARD_TOKEN is unset")
+	}
+	cancel()
+	if err := <-done; err != nil {
+		t.Fatalf("serve returned %v after cancel, want nil", err)
+	}
+}
+
+func TestServeBadDashboardAddr(t *testing.T) {
+	err := serve(context.Background(), config{
+		listen:          "127.0.0.1:0",
+		dashboardListen: "not-an-addr",
+		dashboardToken:  "tok",
+	})
+	if err == nil || !strings.Contains(err.Error(), "dashboard listen") {
+		t.Fatalf("serve() = %v, want a dashboard listen error", err)
+	}
+}
+
+func TestServeFailsWhenStoreCannotOpen(t *testing.T) {
+	blocker := filepath.Join(t.TempDir(), "file")
+	if err := os.WriteFile(blocker, []byte("x"), 0o600); err != nil {
+		t.Fatalf("write blocker: %v", err)
+	}
+	err := serve(context.Background(), config{listen: "127.0.0.1:0", dataDir: filepath.Join(blocker, "sub")})
+	if err == nil || !strings.Contains(err.Error(), "open store") {
+		t.Fatalf("serve() = %v, want an open store error", err)
+	}
+}
diff --git a/telemetry-receiver/summary.go b/telemetry-receiver/summary.go
new file mode 100644
index 000000000..4c90bbeda
--- /dev/null
+++ b/telemetry-receiver/summary.go
@@ -0,0 +1,152 @@
+package main
+
+import (
+	"context"
+	"crypto/sha256"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"log/slog"
+	"net/http"
+	"strconv"
+	"strings"
+	"sync"
+	"time"
+)
+
+const (
+	// summaryTTL is how long a computed snapshot is served before it is
+	// recomputed (FR-029: at most every 5 minutes).
+	summaryTTL = 5 * time.Minute
+	// summaryPerMinute and summaryBurst are the per-source token bucket of
+	// GET /v1/summary (research R9).
+	summaryPerMinute = 60
+	summaryBurst     = 10
+	// summaryWindowDays is the span of the reports30d figure.
+	summaryWindowDays = 30
+	// summaryCacheControl lets clients and CDNs cache a response for an hour.
+	summaryCacheControl = "public, max-age=3600"
+)
+
+// summaryResponse is the whole body of GET /v1/summary: exactly these five
+// keys (FR-029, FR-030).
+type summaryResponse struct {
+	AsOf              string `json:"asOf"`
+	ReportsLatestDay  int64  `json:"reportsLatestDay"`
+	Reports30d        int64  `json:"reports30d"`
+	ReportsTotal      int64  `json:"reportsTotal"`
+	ActiveInstalls30d int64  `json:"activeInstalls30d"`
+}
+
+// summarySnapshot is one encoded response with its entity tag.
+type summarySnapshot struct {
+	body []byte
+	etag string
+	at   time.Time
+}
+
+// summaryCache holds the latest snapshot. Computing it takes the lock, so
+// heavy polling costs one computation per summaryTTL, not one per request.
+type summaryCache struct {
+	mu   sync.Mutex
+	snap *summarySnapshot
+}
+
+// get returns the cached snapshot, recomputing it when it is older than
+// summaryTTL. When the recomputation fails and an older snapshot exists, the
+// older one is served.
+func (c *summaryCache) get(ctx context.Context, st *store, now time.Time) (*summarySnapshot, error) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	if c.snap != nil && now.Sub(c.snap.at) < summaryTTL {
+		return c.snap, nil
+	}
+	resp, err := computeSummary(ctx, st, now)
+	if err != nil {
+		if c.snap != nil {
+			return c.snap, nil
+		}
+		return nil, err
+	}
+	body, err := json.Marshal(resp)
+	if err != nil {
+		return nil, fmt.Errorf("encode summary: %w", err)
+	}
+	sum := sha256.Sum256(body)
+	c.snap = &summarySnapshot{body: body, etag: `"` + hex.EncodeToString(sum[:8]) + `"`, at: now}
+	return c.snap, nil
+}
+
+// computeSummary reads the five headline values. asOf is the latest complete
+// UTC day. With no data every count is 0 (the summary is a counter, not a
+// chart). reportsTotal comes from meta.reports_total, which retention sweeps
+// never change.
+func computeSummary(ctx context.Context, st *store, now time.Time) (summaryResponse, error) {
+	asOf := now.UTC().Truncate(24*time.Hour).AddDate(0, 0, -1)
+	resp := summaryResponse{AsOf: dayString(asOf)}
+	if err := st.db.QueryRowContext(ctx,
+		`SELECT COALESCE(SUM(CASE WHEN day = ? THEN reports END), 0), COALESCE(SUM(reports), 0)
+		 FROM daily_basic WHERE day >= ? AND day <= ?`,
+		resp.AsOf, dayString(asOf.AddDate(0, 0, 1-summaryWindowDays)), resp.AsOf).
+		Scan(&resp.ReportsLatestDay, &resp.Reports30d); err != nil {
+		return summaryResponse{}, fmt.Errorf("query summary reports: %w", err)
+	}
+	total, ok, err := st.metaGet(ctx, metaReportsTotal)
+	if err != nil {
+		return summaryResponse{}, err
+	}
+	if ok {
+		if resp.ReportsTotal, err = strconv.ParseInt(total, 10, 64); err != nil {
+			return summaryResponse{}, fmt.Errorf("parse meta %s: %w", metaReportsTotal, err)
+		}
+	}
+	if err := st.db.QueryRowContext(ctx,
+		`SELECT COUNT(*) FROM activity WHERE last_seen >= ?`,
+		dayString(asOf.AddDate(0, 0, 1-summaryWindowDays))).Scan(&resp.ActiveInstalls30d); err != nil {
+		return summaryResponse{}, fmt.Errorf("query summary installs: %w", err)
+	}
+	return resp, nil
+}
+
+// summary serves GET /v1/summary on the public listener.
+func (s *server) summary(w http.ResponseWriter, r *http.Request) {
+	if !s.cfg.publicSummary {
+		http.NotFound(w, r)
+		return
+	}
+	now := s.now()
+	if !s.summaryLimiter.allow(sourceIP(r, s.cfg.trustedProxyCIDRs), now) {
+		s.rateLimited.WithLabelValues(routeSummary).Inc()
+		w.Header().Set("Retry-After", "60")
+		http.Error(w, "rate limit exceeded", http.StatusTooManyRequests)
+		return
+	}
+	snap, err := s.summaries.get(r.Context(), s.store, now)
+	if err != nil {
+		slog.Error("compute summary", "err", err)
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
+	h := w.Header()
+	h.Set("Cache-Control", summaryCacheControl)
+	h.Set("ETag", snap.etag)
+	h.Set("Access-Control-Allow-Origin", "*")
+	if etagMatches(r.Header.Get("If-None-Match"), snap.etag) {
+		w.WriteHeader(http.StatusNotModified)
+		return
+	}
+	h.Set("Content-Type", "application/json")
+	_, _ = w.Write(snap.body)
+}
+
+// etagMatches reports whether an If-None-Match header names etag (weak
+// validators and "*" included).
+func etagMatches(header, etag string) bool {
+	for _, part := range strings.Split(header, ",") {
+		p := strings.TrimPrefix(strings.TrimSpace(part), "W/")
+		if p == "*" || p == etag {
+			return true
+		}
+	}
+	return false
+}
diff --git a/telemetry-receiver/summary_test.go b/telemetry-receiver/summary_test.go
new file mode 100644
index 000000000..e58fe2454
--- /dev/null
+++ b/telemetry-receiver/summary_test.go
@@ -0,0 +1,244 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"sort"
+	"testing"
+	"time"
+)
+
+// summaryNow is the clock of the summary tests: the latest complete day is
+// 2026-10-06.
+var summaryNow = time.Date(2026, 10, 7, 12, 0, 0, 0, time.UTC)
+
+// newSummaryServer returns a receiver with PUBLIC_SUMMARY on (unless cfg says
+// otherwise) and a controllable clock, seeded with a known dataset:
+//   - 2026-10-06: 2 reports; 2026-10-05: 1; 2026-08-01 (outside 30 days): 1
+//   - three activity records, of which two were seen in the last 30 days.
+func newSummaryServer(t *testing.T, cfg config) (*server, *time.Time) {
+	t.Helper()
+	s, clock := newExtServer(t, cfg, summaryNow)
+	ctx := context.Background()
+	for _, day := range []string{"2026-10-06", "2026-10-06", "2026-10-05", "2026-08-01"} {
+		if err := s.store.recordBasic(ctx, day, "1.0.0", 1, 1); err != nil {
+			t.Fatal(err)
+		}
+	}
+	for id, lastSeen := range map[string]string{"a": "2026-10-06", "b": "2026-09-08", "c": "2026-09-06"} {
+		if _, err := s.store.db.ExecContext(ctx,
+			`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version)
+			 VALUES (?, 'k', '2026-01-01', ?, '2026-01-01T00:00:00Z', '1.0.0')`, id, lastSeen); err != nil {
+			t.Fatal(err)
+		}
+	}
+	return s, clock
+}
+
+func getSummary(t *testing.T, s *server, remote string, header map[string]string) *httptest.ResponseRecorder {
+	t.Helper()
+	r := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/v1/summary", nil)
+	r.RemoteAddr = remote
+	for k, v := range header {
+		r.Header.Set(k, v)
+	}
+	w := httptest.NewRecorder()
+	s.routes().ServeHTTP(w, r)
+	return w
+}
+
+func TestSummaryHasExactlyFiveKeys(t *testing.T) {
+	s, _ := newSummaryServer(t, config{publicSummary: true})
+	w := getSummary(t, s, "192.0.2.1:1000", nil)
+	if w.Code != http.StatusOK {
+		t.Fatalf("status = %d, want 200", w.Code)
+	}
+	var raw map[string]json.RawMessage
+	if err := json.Unmarshal(w.Body.Bytes(), &raw); err != nil {
+		t.Fatalf("decode: %v", err)
+	}
+	if len(raw) != 5 {
+		t.Fatalf("summary has %d keys, want exactly 5: %s", len(raw), w.Body)
+	}
+	var keys []string
+	for k := range raw {
+		keys = append(keys, k)
+	}
+	sort.Strings(keys)
+	if got := keys; len(got) != 5 || got[0] != "activeInstalls30d" || got[1] != "asOf" ||
+		got[2] != "reports30d" || got[3] != "reportsLatestDay" || got[4] != "reportsTotal" {
+		t.Fatalf("keys = %v", got)
+	}
+	var v summaryResponse
+	if err := json.Unmarshal(w.Body.Bytes(), &v); err != nil {
+		t.Fatal(err)
+	}
+	want := summaryResponse{AsOf: "2026-10-06", ReportsLatestDay: 2, Reports30d: 3, ReportsTotal: 4, ActiveInstalls30d: 2}
+	if v != want {
+		t.Fatalf("summary = %+v, want %+v", v, want)
+	}
+}
+
+func TestSummaryIs404WhenDisabled(t *testing.T) {
+	s, _ := newSummaryServer(t, config{})
+	if w := getSummary(t, s, "192.0.2.1:1000", nil); w.Code != http.StatusNotFound {
+		t.Fatalf("status = %d, want 404", w.Code)
+	}
+	// A disabled summary does not use up the limiter either.
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "summary"); got != 0 {
+		t.Fatalf("rate_limited_total{summary} = %v, want 0", got)
+	}
+}
+
+func TestSummaryHeadersETagAndNotModified(t *testing.T) {
+	s, _ := newSummaryServer(t, config{publicSummary: true})
+	w := getSummary(t, s, "192.0.2.1:1000", nil)
+	for h, want := range map[string]string{
+		"Content-Type":                "application/json",
+		"Cache-Control":               "public, max-age=3600",
+		"Access-Control-Allow-Origin": "*",
+	} {
+		if got := w.Header().Get(h); got != want {
+			t.Errorf("%s = %q, want %q", h, got, want)
+		}
+	}
+	etag := w.Header().Get("ETag")
+	if len(etag) < 3 || etag[0] != '"' || etag[len(etag)-1] != '"' {
+		t.Fatalf("ETag = %q, want a quoted tag", etag)
+	}
+	for name, inm := range map[string]string{"exact": etag, "weak": "W/" + etag, "list": `"other", ` + etag, "star": "*"} {
+		n := getSummary(t, s, "192.0.2.1:1000", map[string]string{"If-None-Match": inm})
+		if n.Code != http.StatusNotModified || n.Body.Len() != 0 {
+			t.Errorf("%s: status = %d with %d body bytes, want an empty 304", name, n.Code, n.Body.Len())
+		}
+		for _, h := range []string{"ETag", "Cache-Control", "Access-Control-Allow-Origin"} {
+			if n.Header().Get(h) == "" {
+				t.Errorf("%s: 304 lacks %s", name, h)
+			}
+		}
+	}
+	if other := getSummary(t, s, "192.0.2.1:1000", map[string]string{"If-None-Match": `"nope"`}); other.Code != http.StatusOK {
+		t.Errorf("a different tag: status = %d, want 200", other.Code)
+	}
+}
+
+func TestSummarySnapshotIsRecomputedAtMostEveryFiveMinutes(t *testing.T) {
+	s, clock := newSummaryServer(t, config{publicSummary: true})
+	first := getSummary(t, s, "192.0.2.1:1000", nil)
+	if err := s.store.recordBasic(context.Background(), "2026-10-06", "1.0.0", 1, 1); err != nil {
+		t.Fatal(err)
+	}
+	*clock = summaryNow.Add(4 * time.Minute)
+	if again := getSummary(t, s, "192.0.2.1:1000", nil); again.Body.String() != first.Body.String() {
+		t.Fatalf("snapshot changed within 5 minutes:\n%s\n%s", first.Body, again.Body)
+	}
+	*clock = summaryNow.Add(5 * time.Minute)
+	later := getSummary(t, s, "192.0.2.1:1000", nil)
+	var v summaryResponse
+	if err := json.Unmarshal(later.Body.Bytes(), &v); err != nil {
+		t.Fatal(err)
+	}
+	if v.ReportsLatestDay != 3 || v.ReportsTotal != 5 {
+		t.Fatalf("after 5 minutes: %+v, want the new report counted", v)
+	}
+	if later.Header().Get("ETag") == first.Header().Get("ETag") {
+		t.Fatal("the ETag did not change with the content")
+	}
+}
+
+func TestSummaryLimiterIsTenBurstPerSource(t *testing.T) {
+	s, clock := newSummaryServer(t, config{publicSummary: true})
+	for i := range summaryBurst {
+		if w := getSummary(t, s, "192.0.2.1:1000", nil); w.Code != http.StatusOK {
+			t.Fatalf("request %d: status = %d, want 200", i, w.Code)
+		}
+	}
+	w := getSummary(t, s, "192.0.2.1:2000", nil) // same source, another port
+	if w.Code != http.StatusTooManyRequests || w.Header().Get("Retry-After") == "" {
+		t.Fatalf("over the burst: status = %d Retry-After %q, want 429 with Retry-After", w.Code, w.Header().Get("Retry-After"))
+	}
+	if got := counterValue(t, s, "gameplane_telemetry_rate_limited_total", "route", "summary"); got != 1 {
+		t.Fatalf("rate_limited_total{summary} = %v, want 1", got)
+	}
+	if other := getSummary(t, s, "192.0.2.9:1000", nil); other.Code != http.StatusOK {
+		t.Fatalf("another source: status = %d, want 200", other.Code)
+	}
+	*clock = summaryNow.Add(2 * time.Second) // 60 per minute refills one token a second
+	if w := getSummary(t, s, "192.0.2.1:1000", nil); w.Code != http.StatusOK {
+		t.Fatalf("after a refill: status = %d, want 200", w.Code)
+	}
+}
+
+func TestSummaryTotalSurvivesARetentionSweep(t *testing.T) {
+	s, clock := newSummaryServer(t, config{publicSummary: true})
+	before := getSummary(t, s, "192.0.2.1:1000", nil)
+	// Sweep with a retention of 365 days from a "now" so late that every
+	// daily aggregate is deleted.
+	*clock = time.Date(2028, 1, 1, 12, 0, 0, 0, time.UTC)
+	if err := s.store.lifecycleOnce(context.Background(), *clock, 365); err != nil {
+		t.Fatal(err)
+	}
+	if got := countRows(t.Context(), t, s.store, `SELECT count(*) FROM daily_basic`); got != 0 {
+		t.Fatalf("daily_basic rows after the sweep = %d, want 0", got)
+	}
+	after := getSummary(t, s, "192.0.2.1:1000", nil)
+	var b, a summaryResponse
+	if err := json.Unmarshal(before.Body.Bytes(), &b); err != nil {
+		t.Fatal(err)
+	}
+	if err := json.Unmarshal(after.Body.Bytes(), &a); err != nil {
+		t.Fatal(err)
+	}
+	if a.ReportsTotal != b.ReportsTotal || a.ReportsTotal != 4 {
+		t.Fatalf("reportsTotal = %d after the sweep, was %d, want 4 unchanged", a.ReportsTotal, b.ReportsTotal)
+	}
+	if a.Reports30d != 0 || a.ReportsLatestDay != 0 {
+		t.Fatalf("after the sweep %+v, want the windowed counts at 0", a)
+	}
+}
+
+func TestSummaryWithoutDataIsZeros(t *testing.T) {
+	s, _ := newExtServer(t, config{publicSummary: true}, summaryNow)
+	w := getSummary(t, s, "192.0.2.1:1000", nil)
+	var v summaryResponse
+	if err := json.Unmarshal(w.Body.Bytes(), &v); err != nil {
+		t.Fatal(err)
+	}
+	if v != (summaryResponse{AsOf: "2026-10-06"}) {
+		t.Fatalf("empty summary = %+v, want zeros and asOf 2026-10-06", v)
+	}
+}
+
+func TestSummaryFailureIs500ButServesTheLastSnapshot(t *testing.T) {
+	s, _ := newSummaryServer(t, config{publicSummary: true})
+	if _, err := s.store.db.ExecContext(context.Background(), "DROP TABLE daily_basic"); err != nil {
+		t.Fatal(err)
+	}
+	if w := getSummary(t, s, "192.0.2.1:1000", nil); w.Code != http.StatusInternalServerError {
+		t.Fatalf("no snapshot yet: status = %d, want 500", w.Code)
+	}
+	s2, clock2 := newSummaryServer(t, config{publicSummary: true})
+	good := getSummary(t, s2, "192.0.2.1:1000", nil)
+	*clock2 = summaryNow.Add(10 * time.Minute)
+	if _, err := s2.store.db.ExecContext(context.Background(), "DROP TABLE daily_basic"); err != nil {
+		t.Fatal(err)
+	}
+	if w := getSummary(t, s2, "192.0.2.1:1000", nil); w.Code != http.StatusOK || w.Body.String() != good.Body.String() {
+		t.Fatalf("recomputation failed: status = %d body %q, want the last snapshot", w.Code, w.Body)
+	}
+}
+
+func TestEtagMatches(t *testing.T) {
+	for _, tc := range []struct {
+		header string
+		want   bool
+	}{
+		{"", false}, {`"a"`, true}, {`W/"a"`, true}, {`"b", "a"`, true}, {"*", true}, {`"b"`, false},
+	} {
+		if got := etagMatches(tc.header, `"a"`); got != tc.want {
+			t.Errorf("etagMatches(%q) = %v, want %v", tc.header, got, tc.want)
+		}
+	}
+}
diff --git a/telemetry-receiver/telemetry-dashboard.pen b/telemetry-receiver/telemetry-dashboard.pen
new file mode 100644
index 000000000..68ec79346
--- /dev/null
+++ b/telemetry-receiver/telemetry-dashboard.pen
@@ -0,0 +1,19838 @@
+{
+  "version": "2.20",
+  "children": [
+    {
+      "type": "frame",
+      "id": "kGRVB",
+      "x": -250.0409164428729,
+      "y": -39.121093750000455,
+      "name": "HeroUI: Design System Components",
+      "theme": {
+        "semantic": "light"
+      },
+      "width": 3116,
+      "height": 3588,
+      "fill": "$background/background",
+      "layout": "none",
+      "children": [
+        {
+          "type": "text",
+          "id": "U7P9v3",
+          "x": 160,
+          "y": 230,
+          "name": "lbl1",
+          "fill": "$muted",
+          "content": "Accordion",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "XMjnF",
+          "x": 160,
+          "y": 510,
+          "name": "lbl2",
+          "fill": "$muted",
+          "content": "Alerts",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "gW4RF",
+          "x": 160,
+          "y": 1611,
+          "name": "lbl3",
+          "fill": "$muted",
+          "content": "Avatars",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "VxMDo",
+          "x": 173,
+          "y": 2071,
+          "name": "lbl5",
+          "fill": "$muted",
+          "content": "Tabs",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "NABLJ",
+          "x": 166,
+          "y": 2317,
+          "name": "lbl6",
+          "fill": "$muted",
+          "content": "Link",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "RUrGz",
+          "x": 170,
+          "y": 2479,
+          "name": "lbl7",
+          "fill": "$muted",
+          "content": "Buttons",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "i2bZL",
+          "x": 160,
+          "y": 3282,
+          "name": "lbl9",
+          "fill": "$muted",
+          "content": "Spinner",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "bUDCx",
+          "x": 220,
+          "y": 3282,
+          "name": "lbl10",
+          "fill": "$muted",
+          "content": "Tooltip",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "TgcH2",
+          "x": 160,
+          "y": 250,
+          "name": "Accordion/Open",
+          "reusable": true,
+          "width": 480,
+          "layout": "vertical",
+          "children": [
+            {
+              "type": "frame",
+              "id": "KwoX0",
+              "name": "Trigger",
+              "width": "fill_container",
+              "gap": "$spacing/3",
+              "padding": 16,
+              "justifyContent": "space_between",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "vCZrt",
+                  "name": "Frame 5",
+                  "width": "fill_container",
+                  "gap": "$spacing/3",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "r1nAQl",
+                      "name": "icon1",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "shopping-bag",
+                      "library": "lucide",
+                      "fill": "$muted"
+                    },
+                    {
+                      "type": "text",
+                      "id": "Ovx9n",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "How do I place an order?",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "icon",
+                  "id": "tSdNO",
+                  "name": "Indicator",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "chevron-up",
+                  "library": "lucide",
+                  "fill": "$muted"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "OFKsD",
+              "name": "Body",
+              "width": "fill_container",
+              "gap": "$spacing/3",
+              "padding": [
+                0,
+                16,
+                16,
+                16
+              ],
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "JL8cb",
+                  "name": "icon1",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "shopping-bag",
+                  "library": "lucide",
+                  "fill": {
+                    "type": "color",
+                    "color": "$muted",
+                    "enabled": false
+                  }
+                },
+                {
+                  "type": "text",
+                  "id": "QFzcp",
+                  "name": "Content",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Browse our products, add items to your cart, and proceed to checkout. You'll need to provide shipping and payment information to complete your purchase.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "line",
+              "id": "U0bOlY",
+              "name": "accSep",
+              "fill": "$separator/separator",
+              "width": "fill_container",
+              "height": 1
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "krDMR",
+          "x": 160,
+          "y": 1631,
+          "name": "Avatar/Small",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "fill": "$default/default",
+          "cornerRadius": 9999,
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "WBJYt",
+              "name": "Initials",
+              "fill": "$foreground/foreground",
+              "content": "AS",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "f6heXB",
+          "x": 208,
+          "y": 1627,
+          "name": "Avatar/Text",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": 9999,
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "dDrQ2",
+              "name": "Initials",
+              "fill": "$foreground/foreground",
+              "content": "AS",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "VDZcQ",
+          "x": 264,
+          "y": 1623,
+          "name": "Avatar/Large",
+          "reusable": true,
+          "width": 48,
+          "height": 48,
+          "fill": "$default/default",
+          "cornerRadius": 9999,
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "J97YG1",
+              "name": "Initials",
+              "fill": "$foreground/foreground",
+              "content": "AS",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "skyDG",
+          "x": 350,
+          "y": 1627,
+          "name": "Avatar/Image",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": {
+            "type": "image",
+            "enabled": true,
+            "mode": "cover"
+          },
+          "cornerRadius": 9999
+        },
+        {
+          "type": "frame",
+          "id": "WOmU9",
+          "x": 166,
+          "y": 2337,
+          "name": "Link",
+          "reusable": true,
+          "gap": 4,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "mShJP",
+              "name": "Label",
+              "fill": "$foreground/link",
+              "content": "Link text",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "icon",
+              "id": "aapPy",
+              "name": "linkIcon",
+              "opacity": 0.6,
+              "width": 12,
+              "height": 12,
+              "icon": "external-link",
+              "library": "lucide",
+              "fill": "$foreground/link"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "SMzFV",
+          "x": 160,
+          "y": 3302,
+          "name": "Spinner",
+          "reusable": true,
+          "width": 24,
+          "height": 24,
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "ellipse",
+              "id": "s6lml",
+              "name": "spinnerCircle",
+              "innerRadius": 0.75,
+              "sweepAngle": 270,
+              "width": "fill_container",
+              "height": "fill_container",
+              "stroke": "$accent/accent",
+              "strokeWidth": 2.5,
+              "strokeAlignment": "inner"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Lmo9O",
+          "x": 220,
+          "y": 3302,
+          "name": "Tooltip",
+          "reusable": true,
+          "fill": "$overlay",
+          "cornerRadius": "$radius/xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000F",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 8
+          },
+          "padding": [
+            4,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "Y2gTnB",
+              "name": "Content",
+              "fill": "$foreground/foreground",
+              "content": "Tooltip text",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Y05FxQ",
+          "x": 165,
+          "y": 2972,
+          "name": "Menu Item/Active",
+          "reusable": true,
+          "width": 240,
+          "height": 36,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 12,
+          "padding": [
+            6,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "bUS1f",
+              "name": "menuActIcon",
+              "width": 16,
+              "height": 16,
+              "icon": "user",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "SKKUq",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Profile",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "nO9fb",
+          "x": 165,
+          "y": 3022,
+          "name": "Menu Item/Default",
+          "reusable": true,
+          "width": 240,
+          "height": 36,
+          "cornerRadius": "$radius/2xl",
+          "gap": 12,
+          "padding": [
+            6,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "jqu3l",
+              "name": "menuIcon",
+              "width": 16,
+              "height": 16,
+              "icon": "settings",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "iwdfq",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Settings",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "G28hI",
+          "x": 160,
+          "y": 380,
+          "name": "Accordion/Closed",
+          "reusable": true,
+          "width": 480,
+          "layout": "vertical",
+          "children": [
+            {
+              "type": "frame",
+              "id": "r52xY",
+              "name": "Trigger",
+              "width": "fill_container",
+              "gap": "$spacing/3",
+              "padding": 16,
+              "justifyContent": "space_between",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "xcQqf",
+                  "name": "Frame 4",
+                  "width": "fill_container",
+                  "gap": "$spacing/3",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "k3BqUh",
+                      "name": "icon2",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "shopping-bag",
+                      "library": "lucide",
+                      "fill": "$muted"
+                    },
+                    {
+                      "type": "text",
+                      "id": "N3yiU",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "How do I place an order?",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "icon",
+                  "id": "J3c0zV",
+                  "name": "Indicator",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "chevron-down",
+                  "library": "lucide",
+                  "fill": "$muted"
+                }
+              ]
+            },
+            {
+              "type": "line",
+              "id": "X6yVA",
+              "name": "accSep",
+              "fill": "$separator/separator",
+              "width": "fill_container",
+              "height": 1
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "OjVp7",
+          "x": 160,
+          "y": 530,
+          "name": "Alert/Default",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "vHqkN",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "e7BW3a",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "info",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "bzqwP",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "oXf3G",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "New features available",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "WGFDW",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Check out our latest updates including dark mode support and improved accessibility features.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "IdLLu",
+          "x": 160,
+          "y": 650,
+          "name": "Alert/Accent",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "TZgc6",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "FaHmS",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "info",
+                  "library": "lucide",
+                  "fill": "$accent/accent"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "OC6ti",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "PhFj4",
+                  "name": "Title",
+                  "fill": "$accent/accent",
+                  "content": "Update available",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "j5eH0",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "A new version of the application is available. Please refresh to get the latest features and bug fixes.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "yIfzn",
+              "name": "Button/Primary/SM",
+              "height": 32,
+              "fill": "$accent/accent",
+              "cornerRadius": "$radius/3xl",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "sKPVB",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i1",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$accent/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "Mc7em",
+                  "name": "Label",
+                  "fill": "$accent/foreground",
+                  "content": "Refresh",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "LFPu5",
+          "x": 160,
+          "y": 780,
+          "name": "Alert/Success",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "V6kpc",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "fxMER",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "circle-check",
+                  "library": "lucide",
+                  "fill": "$success/success"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "j0AG1",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "mhlaQ",
+                  "name": "Title",
+                  "fill": "$success/success",
+                  "content": "Payment successful",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "h191W",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Your payment of $49.99 has been processed. A confirmation email has been sent to your inbox.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "BnUlR",
+              "name": "Button/Outline/SM",
+              "height": 32,
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "TDGe3",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i4",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "slSgV",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "View receipt",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "S6XBme",
+          "x": 160,
+          "y": 910,
+          "name": "Alert/Warning",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "G7nu3",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "r6vihP",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "triangle-alert",
+                  "library": "lucide",
+                  "fill": "$warning/warning"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "dmXI3",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "dbYgN",
+                  "name": "Title",
+                  "fill": "$warning/warning",
+                  "content": "Storage almost full",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "QrqhL",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "You're using 90% of your storage quota. Consider upgrading your plan or removing unused files to avoid service interruption.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "b1ToU",
+              "name": "Button/Outline/SM",
+              "height": 32,
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "i1E6h",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i4",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "xBddT",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Manage storage",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "YxI4e",
+          "x": 160,
+          "y": 1060,
+          "name": "Alert/Danger",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "ozeck",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "eItLA",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "circle-alert",
+                  "library": "lucide",
+                  "fill": "$danger/danger"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "G8N4mO",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "K5BCAi",
+                  "name": "Title",
+                  "fill": "$danger/danger",
+                  "content": "Unable to connect to server",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "jLj0v",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "We're experiencing connection issues. Please try the following:\n•  Check your internet connection\n•  Refresh the page\n•  Clear your browser cache",
+                  "lineHeight": 1.6,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "BLuJ9",
+              "name": "Button/Danger/SM",
+              "height": 32,
+              "fill": "$danger/danger",
+              "cornerRadius": "$radius/3xl",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "O8NSXe",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i1",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$danger/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "bM0WW",
+                  "name": "Label",
+                  "fill": "$danger/foreground",
+                  "content": "Retry",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "d7raV",
+          "x": 160,
+          "y": 1240,
+          "name": "Alert/Success Dismissible",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "tNmdg",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "nMexd",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "circle-check",
+                  "library": "lucide",
+                  "fill": "$success/success"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "s0OmFp",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "m2NwJ",
+                  "name": "Title",
+                  "fill": "$success/success",
+                  "content": "Profile updated successfully",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "vMP6P",
+              "name": "Close",
+              "width": 24,
+              "height": 24,
+              "cornerRadius": "$radius/md",
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "XtgqZ",
+                  "width": 14,
+                  "height": 14,
+                  "icon": "x",
+                  "library": "lucide",
+                  "fill": "$muted"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "j1FWr5",
+          "x": 160,
+          "y": 1310,
+          "name": "Alert/Accent Loading",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "NEfoH",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "Q22Ro",
+                  "name": "Spinner",
+                  "width": 16,
+                  "height": 16,
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "ellipse",
+                      "id": "DF6ao",
+                      "name": "spinnerCircle",
+                      "innerRadius": 0.75,
+                      "sweepAngle": 270,
+                      "width": "fill_container",
+                      "height": "fill_container",
+                      "stroke": "$accent/accent",
+                      "strokeWidth": 2.5,
+                      "strokeAlignment": "inner"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "D9A8C",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "x8U9q",
+                  "name": "Title",
+                  "fill": "$accent/accent",
+                  "content": "Processing your request",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "F5Hp1",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Please wait while we sync your data. This may take a few moments.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "oECDo",
+          "x": 160,
+          "y": 1410,
+          "name": "Alert/Warning Simple",
+          "reusable": true,
+          "width": 540,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "gap": 16,
+          "padding": [
+            12,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "JtrpU",
+              "name": "Icon",
+              "padding": 4,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "C5ps4w",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "triangle-alert",
+                  "library": "lucide",
+                  "fill": "$warning/warning"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "QBo46",
+              "name": "Content",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "h9LciS",
+                  "name": "Title",
+                  "fill": "$warning/warning",
+                  "content": "Scheduled maintenance",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "L3gUE",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Our services will be unavailable on Sunday, March 15th from 2:00 AM to 6:00 AM UTC for scheduled maintenance.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "XA1WX",
+          "x": 170,
+          "y": 2499,
+          "name": "Button/Primary/SM",
+          "reusable": true,
+          "height": 32,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/3xl",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "OILti",
+              "name": "i1",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/foreground"
+            },
+            {
+              "type": "text",
+              "id": "MymPz",
+              "name": "Label",
+              "fill": "$accent/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "hvQ4m",
+          "x": 280,
+          "y": 2499,
+          "name": "Button/Primary/MD",
+          "reusable": true,
+          "height": 36,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "UYKSN",
+              "name": "i2",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/foreground"
+            },
+            {
+              "type": "text",
+              "id": "y9bBK0",
+              "name": "Label",
+              "fill": "$accent/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "RL95G",
+          "x": 400,
+          "y": 2499,
+          "name": "Button/Primary/LG",
+          "reusable": true,
+          "height": 40,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "LcUKQ",
+              "name": "i3",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/foreground"
+            },
+            {
+              "type": "text",
+              "id": "M8s38",
+              "name": "Label",
+              "fill": "$accent/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "pnetq",
+          "x": 540,
+          "y": 2499,
+          "name": "Button/Primary/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "vsnEO",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "eYZ4x",
+          "x": 590,
+          "y": 2499,
+          "name": "Button/Primary/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "l02YX",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "gt6cG",
+          "x": 644,
+          "y": 2499,
+          "name": "Button/Primary/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "cV8Dn",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Bn8pk",
+          "x": 170,
+          "y": 2549,
+          "name": "Button/Secondary/SM",
+          "reusable": true,
+          "height": 32,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "ZbCsD",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/accent"
+            },
+            {
+              "type": "text",
+              "id": "y91YdS",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "fPavj",
+          "x": 280,
+          "y": 2549,
+          "name": "Button/Secondary/MD",
+          "reusable": true,
+          "height": 36,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "tQtkd",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/accent"
+            },
+            {
+              "type": "text",
+              "id": "UBm8s",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "unLeT",
+          "x": 400,
+          "y": 2549,
+          "name": "Button/Secondary/LG",
+          "reusable": true,
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "Mw4oD",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/accent"
+            },
+            {
+              "type": "text",
+              "id": "VdorP",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "A8gzDH",
+          "x": 540,
+          "y": 2549,
+          "name": "Button/Secondary/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "ZQvpK",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/accent"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "hPqUL",
+          "x": 590,
+          "y": 2549,
+          "name": "Button/Secondary/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "L3o73U",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/accent"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "wqGHs",
+          "x": 644,
+          "y": 2549,
+          "name": "Button/Secondary/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "k6FhJ",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$accent/accent"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "bCpKh",
+          "x": 170,
+          "y": 2649,
+          "name": "Button/Outline/SM",
+          "reusable": true,
+          "height": 32,
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "Watg8",
+              "name": "i4",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "U8ICg",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "jofN0",
+          "x": 280,
+          "y": 2649,
+          "name": "Button/Outline/MD",
+          "reusable": true,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "OrMV5",
+              "name": "i5",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "zdnHO",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "KghgF",
+          "x": 400,
+          "y": 2649,
+          "name": "Button/Outline/LG",
+          "reusable": true,
+          "height": 40,
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "nBLWu",
+              "name": "i6",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "c1Djy",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "u765nY",
+          "x": 540,
+          "y": 2649,
+          "name": "Button/Outline/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "z1RfsI",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "qVgpQ",
+          "x": 590,
+          "y": 2649,
+          "name": "Button/Outline/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "UYD8B",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "NM5TH",
+          "x": 644,
+          "y": 2649,
+          "name": "Button/Outline/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "Ekegw",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "VeGSR",
+          "x": 170,
+          "y": 2699,
+          "name": "Button/Ghost/SM",
+          "reusable": true,
+          "height": 32,
+          "cornerRadius": "$radius/3xl",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "O8y9A",
+              "name": "i7",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "gZoB3",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "P0ImB",
+          "x": 280,
+          "y": 2699,
+          "name": "Button/Ghost/MD",
+          "reusable": true,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "UhyWu",
+              "name": "i8",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "SuaS7",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "KYsvL",
+          "x": 400,
+          "y": 2699,
+          "name": "Button/Ghost/LG",
+          "reusable": true,
+          "height": 40,
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "rnA1U",
+              "name": "i9",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "rcDYU",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "ECF78",
+          "x": 540,
+          "y": 2699,
+          "name": "Button/Ghost/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "zju9R",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "ckBzU",
+          "x": 590,
+          "y": 2699,
+          "name": "Button/Ghost/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "aKPXG",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "W927L",
+          "x": 644,
+          "y": 2699,
+          "name": "Button/Ghost/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "hsY8B",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "HeoK3",
+          "x": 170,
+          "y": 2749,
+          "name": "Button/Danger/SM",
+          "reusable": true,
+          "height": 32,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/3xl",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "UeE9n",
+              "name": "i1",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/foreground"
+            },
+            {
+              "type": "text",
+              "id": "c3TpHc",
+              "name": "Label",
+              "fill": "$danger/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "S76A99",
+          "x": 280,
+          "y": 2749,
+          "name": "Button/Danger/MD",
+          "reusable": true,
+          "height": 36,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "FanuJ",
+              "name": "i2",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/foreground"
+            },
+            {
+              "type": "text",
+              "id": "Ytf4p",
+              "name": "Label",
+              "fill": "$danger/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "wjOcx",
+          "x": 400,
+          "y": 2749,
+          "name": "Button/Danger/LG",
+          "reusable": true,
+          "height": 40,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "ZKPlr",
+              "name": "i3",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/foreground"
+            },
+            {
+              "type": "text",
+              "id": "S1bCr",
+              "name": "Label",
+              "fill": "$danger/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "RzFgG",
+          "x": 540,
+          "y": 2749,
+          "name": "Button/Danger/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "FQHk3",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "q7WJY",
+          "x": 590,
+          "y": 2749,
+          "name": "Button/Danger/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "or7Ay",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "a9sph",
+          "x": 644,
+          "y": 2749,
+          "name": "Button/Danger/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "zd0xt",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "cuiyH",
+          "x": 170,
+          "y": 2799,
+          "name": "Button/Danger Soft/SM",
+          "reusable": true,
+          "height": 32,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/3xl",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "IxwO9",
+              "name": "i4",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/soft-foreground"
+            },
+            {
+              "type": "text",
+              "id": "aZH2D",
+              "name": "Label",
+              "fill": "$danger/soft-foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "BZjcC",
+          "x": 280,
+          "y": 2799,
+          "name": "Button/Danger Soft/MD",
+          "reusable": true,
+          "height": 36,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "pfm2o",
+              "name": "i5",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/soft-foreground"
+            },
+            {
+              "type": "text",
+              "id": "lVJMh",
+              "name": "Label",
+              "fill": "$danger/soft-foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "AFLga",
+          "x": 400,
+          "y": 2799,
+          "name": "Button/Danger Soft/LG",
+          "reusable": true,
+          "height": 40,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "Lqbon",
+              "name": "i6",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/soft-foreground"
+            },
+            {
+              "type": "text",
+              "id": "OCmMy",
+              "name": "Label",
+              "fill": "$danger/soft-foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "CbEaH",
+          "x": 540,
+          "y": 2799,
+          "name": "Button/Danger Soft/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "dv4Np",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/soft-foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "ipx2E",
+          "x": 590,
+          "y": 2799,
+          "name": "Button/Danger Soft/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "KJ8vu",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/soft-foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "KGqWs",
+          "x": 644,
+          "y": 2799,
+          "name": "Button/Danger Soft/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "EXN8c",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$danger/soft-foreground"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "WKfS4",
+          "x": 540,
+          "y": 2479,
+          "fill": "$muted",
+          "content": "Icon Only",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "gkFXG",
+          "x": 740,
+          "y": 2479,
+          "fill": "$muted",
+          "content": "CloseButton",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "UJNDs",
+          "x": 170,
+          "y": 2599,
+          "name": "Button/Tertiary/SM",
+          "reusable": true,
+          "height": 32,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "gap": 5,
+          "padding": [
+            8,
+            "$spacing/3"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "Lpo3F",
+              "name": "i7",
+              "width": 14,
+              "height": 14,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "P8tvhz",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "YkUUc",
+          "x": 280,
+          "y": 2599,
+          "name": "Button/Tertiary/MD",
+          "reusable": true,
+          "height": 36,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/4"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "cvv7Z",
+              "name": "i8",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "I3MlN",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "scT61",
+          "x": 400,
+          "y": 2599,
+          "name": "Button/Tertiary/LG",
+          "reusable": true,
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "gap": "$spacing/2",
+          "padding": [
+            8,
+            "$spacing/5"
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "zeNux",
+              "name": "i9",
+              "width": 18,
+              "height": 18,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            },
+            {
+              "type": "text",
+              "id": "FSlBA",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Button",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "yysYd",
+          "x": 540,
+          "y": 2599,
+          "name": "Button/Tertiary/Icon/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 32,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "B6Xjn",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Xbz53",
+          "x": 590,
+          "y": 2599,
+          "name": "Button/Tertiary/Icon/MD",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "eYqcr",
+              "width": 16,
+              "height": 16,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "s7vap",
+          "x": 644,
+          "y": 2599,
+          "name": "Button/Tertiary/Icon/LG",
+          "reusable": true,
+          "width": 40,
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "OLGgx",
+              "width": 20,
+              "height": 20,
+              "icon": "plus",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "kR8PC",
+          "x": 166,
+          "y": 1807,
+          "name": "Chip/Primary/Default/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "z70AU",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "pByni",
+          "x": 204,
+          "y": 1807,
+          "name": "Chip/Primary/Default/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "lSsxQ",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "EwMuq",
+          "x": 252,
+          "y": 1807,
+          "name": "Chip/Primary/Default/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "pgaXe",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "k2g7h",
+          "x": 322,
+          "y": 1807,
+          "name": "Chip/Primary/Accent/SM",
+          "reusable": true,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "jpmQP",
+              "name": "Label",
+              "fill": "$accent/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "S0qKU",
+          "x": 360,
+          "y": 1807,
+          "name": "Chip/Primary/Accent/MD",
+          "reusable": true,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "qIRLS",
+              "name": "Label",
+              "fill": "$accent/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "ghm8u",
+          "x": 408,
+          "y": 1807,
+          "name": "Chip/Primary/Accent/LG",
+          "reusable": true,
+          "fill": "$accent/accent",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "g73tie",
+              "name": "Label",
+              "fill": "$accent/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Oljfe",
+          "x": 478,
+          "y": 1807,
+          "name": "Chip/Primary/Success/SM",
+          "reusable": true,
+          "fill": "$success/success",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "MCPqS",
+              "name": "Label",
+              "fill": "$success/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "uJByV",
+          "x": 516,
+          "y": 1807,
+          "name": "Chip/Primary/Success/MD",
+          "reusable": true,
+          "fill": "$success/success",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "Vfhh4",
+              "name": "Label",
+              "fill": "$success/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Hu0Qb",
+          "x": 564,
+          "y": 1807,
+          "name": "Chip/Primary/Success/LG",
+          "reusable": true,
+          "fill": "$success/success",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "agtoR",
+              "name": "Label",
+              "fill": "$success/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "sI9GT",
+          "x": 634,
+          "y": 1807,
+          "name": "Chip/Primary/Warning/SM",
+          "reusable": true,
+          "fill": "$warning/warning",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "dBSAU",
+              "name": "Label",
+              "fill": "$warning/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "DMbMi",
+          "x": 672,
+          "y": 1807,
+          "name": "Chip/Primary/Warning/MD",
+          "reusable": true,
+          "fill": "$warning/warning",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "RzEob",
+              "name": "Label",
+              "fill": "$warning/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "RMGNr",
+          "x": 720,
+          "y": 1807,
+          "name": "Chip/Primary/Warning/LG",
+          "reusable": true,
+          "fill": "$warning/warning",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "CSw9S",
+              "name": "Label",
+              "fill": "$warning/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "ArCOh",
+          "x": 790,
+          "y": 1807,
+          "name": "Chip/Primary/Danger/SM",
+          "reusable": true,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "g97OKi",
+              "name": "Label",
+              "fill": "$danger/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "vg2CV",
+          "x": 828,
+          "y": 1807,
+          "name": "Chip/Primary/Danger/MD",
+          "reusable": true,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "AmaW1",
+              "name": "Label",
+              "fill": "$danger/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "VLVLo",
+          "x": 876,
+          "y": 1807,
+          "name": "Chip/Primary/Danger/LG",
+          "reusable": true,
+          "fill": "$danger/danger",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "m9H3Fb",
+              "name": "Label",
+              "fill": "$danger/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "PgAgb",
+          "x": 166,
+          "y": 1842,
+          "name": "Chip/Secondary/Default/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "DJoht",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "AxcSH",
+          "x": 204,
+          "y": 1842,
+          "name": "Chip/Secondary/Default/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "asJAG",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "M4uhYD",
+          "x": 252,
+          "y": 1842,
+          "name": "Chip/Secondary/Default/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "j6bvE",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "HGebS",
+          "x": 322,
+          "y": 1842,
+          "name": "Chip/Secondary/Accent/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "GZGml",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "cZsr2",
+          "x": 360,
+          "y": 1842,
+          "name": "Chip/Secondary/Accent/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "G0WFCq",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "hSMlI",
+          "x": 408,
+          "y": 1842,
+          "name": "Chip/Secondary/Accent/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "L0varl",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "shlrt",
+          "x": 478,
+          "y": 1842,
+          "name": "Chip/Secondary/Success/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "a1QOr",
+              "name": "Label",
+              "fill": "$success/success",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "C7vNBu",
+          "x": 516,
+          "y": 1842,
+          "name": "Chip/Secondary/Success/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "ql8N6",
+              "name": "Label",
+              "fill": "$success/success",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "i69B9X",
+          "x": 564,
+          "y": 1842,
+          "name": "Chip/Secondary/Success/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "ntvNu",
+              "name": "Label",
+              "fill": "$success/success",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "PKMHu",
+          "x": 634,
+          "y": 1842,
+          "name": "Chip/Secondary/Warning/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "C9Ilf",
+              "name": "Label",
+              "fill": "$warning/warning",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "tRIPk",
+          "x": 672,
+          "y": 1842,
+          "name": "Chip/Secondary/Warning/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "yZoX0",
+              "name": "Label",
+              "fill": "$warning/warning",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "RrgsK",
+          "x": 720,
+          "y": 1842,
+          "name": "Chip/Secondary/Warning/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "t9jhT9",
+              "name": "Label",
+              "fill": "$warning/warning",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "wOs08",
+          "x": 790,
+          "y": 1842,
+          "name": "Chip/Secondary/Danger/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "O6weG7",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "o1sHJY",
+          "x": 828,
+          "y": 1842,
+          "name": "Chip/Secondary/Danger/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "b2sFB0",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "SHx4V",
+          "x": 876,
+          "y": 1842,
+          "name": "Chip/Secondary/Danger/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "VOaB8",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "rMgeC",
+          "x": 166,
+          "y": 1877,
+          "name": "Chip/Soft/Default/SM",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "Xctwp",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "wFH1T",
+          "x": 204,
+          "y": 1877,
+          "name": "Chip/Soft/Default/MD",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "s7beWH",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "EClkt",
+          "x": 252,
+          "y": 1877,
+          "name": "Chip/Soft/Default/LG",
+          "reusable": true,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "uCkaP",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Q401P",
+          "x": 322,
+          "y": 1877,
+          "name": "Chip/Soft/Accent/SM",
+          "reusable": true,
+          "fill": "$accent/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "wH6ey",
+              "name": "Label",
+              "fill": "$accent/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Hwshl",
+          "x": 360,
+          "y": 1877,
+          "name": "Chip/Soft/Accent/MD",
+          "reusable": true,
+          "fill": "$accent/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "ItOdh",
+              "name": "Label",
+              "fill": "$accent/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "olXZC",
+          "x": 408,
+          "y": 1877,
+          "name": "Chip/Soft/Accent/LG",
+          "reusable": true,
+          "fill": "$accent/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "HIACL",
+              "name": "Label",
+              "fill": "$accent/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "b5JXJV",
+          "x": 478,
+          "y": 1877,
+          "name": "Chip/Soft/Success/SM",
+          "reusable": true,
+          "fill": "$success/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "yIxeA",
+              "name": "Label",
+              "fill": "$success/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "pGdvt",
+          "x": 516,
+          "y": 1877,
+          "name": "Chip/Soft/Success/MD",
+          "reusable": true,
+          "fill": "$success/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "m5qZM",
+              "name": "Label",
+              "fill": "$success/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "AEqkE",
+          "x": 564,
+          "y": 1877,
+          "name": "Chip/Soft/Success/LG",
+          "reusable": true,
+          "fill": "$success/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "d1kTnl",
+              "name": "Label",
+              "fill": "$success/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "xgXVi",
+          "x": 634,
+          "y": 1877,
+          "name": "Chip/Soft/Warning/SM",
+          "reusable": true,
+          "fill": "$warning/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "lWXgK",
+              "name": "Label",
+              "fill": "$warning/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "fneKc",
+          "x": 672,
+          "y": 1877,
+          "name": "Chip/Soft/Warning/MD",
+          "reusable": true,
+          "fill": "$warning/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "rmGlM",
+              "name": "Label",
+              "fill": "$warning/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "psce1",
+          "x": 720,
+          "y": 1877,
+          "name": "Chip/Soft/Warning/LG",
+          "reusable": true,
+          "fill": "$warning/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "uJo8h",
+              "name": "Label",
+              "fill": "$warning/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "wDQvP",
+          "x": 790,
+          "y": 1877,
+          "name": "Chip/Soft/Danger/SM",
+          "reusable": true,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "U6dx86",
+              "name": "Label",
+              "fill": "$danger/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "QwyBa",
+          "x": 828,
+          "y": 1877,
+          "name": "Chip/Soft/Danger/MD",
+          "reusable": true,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "u8GpBZ",
+              "name": "Label",
+              "fill": "$danger/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "DX9KE",
+          "x": 876,
+          "y": 1877,
+          "name": "Chip/Soft/Danger/LG",
+          "reusable": true,
+          "fill": "$danger/soft",
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "SSEtZ",
+              "name": "Label",
+              "fill": "$danger/soft-foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "f4uddM",
+          "x": 166,
+          "y": 1912,
+          "name": "Chip/Tertiary/Default/SM",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "BJjYb",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "j1G2xk",
+          "x": 204,
+          "y": 1912,
+          "name": "Chip/Tertiary/Default/MD",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "b11P8",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "GxG8a",
+          "x": 252,
+          "y": 1912,
+          "name": "Chip/Tertiary/Default/LG",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "Weksh",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "FUTe5",
+          "x": 322,
+          "y": 1912,
+          "name": "Chip/Tertiary/Accent/SM",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "ri3mS",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "dxKZm",
+          "x": 360,
+          "y": 1912,
+          "name": "Chip/Tertiary/Accent/MD",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "J2xVeI",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "tW6Qn",
+          "x": 408,
+          "y": 1912,
+          "name": "Chip/Tertiary/Accent/LG",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "gWzEP",
+              "name": "Label",
+              "fill": "$accent/accent",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "p2TeeK",
+          "x": 478,
+          "y": 1912,
+          "name": "Chip/Tertiary/Success/SM",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "st1OJ",
+              "name": "Label",
+              "fill": "$success/success",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "EgSuf",
+          "x": 516,
+          "y": 1912,
+          "name": "Chip/Tertiary/Success/MD",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "o32jS5",
+              "name": "Label",
+              "fill": "$success/success",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "F7JNh3",
+          "x": 564,
+          "y": 1912,
+          "name": "Chip/Tertiary/Success/LG",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "ylIXK",
+              "name": "Label",
+              "fill": "$success/success",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Xc9Oy",
+          "x": 634,
+          "y": 1912,
+          "name": "Chip/Tertiary/Warning/SM",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "l3jL01",
+              "name": "Label",
+              "fill": "$warning/warning",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "gMENT",
+          "x": 672,
+          "y": 1912,
+          "name": "Chip/Tertiary/Warning/MD",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "I1LaU",
+              "name": "Label",
+              "fill": "$warning/warning",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "q1V25S",
+          "x": 720,
+          "y": 1912,
+          "name": "Chip/Tertiary/Warning/LG",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "XZiqn",
+              "name": "Label",
+              "fill": "$warning/warning",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "UwUzW",
+          "x": 790,
+          "y": 1912,
+          "name": "Chip/Tertiary/Danger/SM",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            4
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "tK0Mb",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 11,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "uXMcI",
+          "x": 828,
+          "y": 1912,
+          "name": "Chip/Tertiary/Danger/MD",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            2,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "UXBSl",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "P7trl6",
+          "x": 876,
+          "y": 1912,
+          "name": "Chip/Tertiary/Danger/LG",
+          "reusable": true,
+          "cornerRadius": "$radius/2xl",
+          "gap": 2,
+          "padding": [
+            4,
+            12
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "Ncvhn",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Chip",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "uFdbm",
+          "x": 163,
+          "y": 1787,
+          "name": "lbl3",
+          "fill": "$muted",
+          "content": "Chips",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "iEQse",
+          "x": 160,
+          "y": 2100,
+          "name": "Tab/Active",
+          "reusable": true,
+          "height": 32,
+          "fill": "$segment",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 1
+            },
+            "blur": 3
+          },
+          "padding": [
+            0,
+            16
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "BtgBT",
+              "name": "Label",
+              "fill": "$foreground/segment",
+              "content": "Account",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "nO0GM",
+          "x": 270,
+          "y": 2100,
+          "name": "Tab/Inactive",
+          "reusable": true,
+          "height": 32,
+          "cornerRadius": "$radius/3xl",
+          "padding": [
+            0,
+            16
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "x5KZZd",
+              "name": "Label",
+              "fill": "$muted",
+              "content": "Settings",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "sklNL",
+          "x": 380,
+          "y": 2100,
+          "name": "Tabs",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(300)",
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": 20,
+          "padding": 4
+        },
+        {
+          "type": "frame",
+          "id": "ic6kX",
+          "x": 442,
+          "y": 3049,
+          "name": "Menu Divider",
+          "reusable": true,
+          "width": 240,
+          "layout": "vertical",
+          "padding": [
+            4,
+            0
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "rectangle",
+              "id": "Treu9",
+              "fill": "$separator/separator",
+              "width": "fill_container",
+              "height": 1
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "xrGB7",
+          "x": 444,
+          "y": 3002,
+          "name": "Menu Item/Danger",
+          "reusable": true,
+          "width": 240,
+          "height": 36,
+          "cornerRadius": "$radius/2xl",
+          "gap": 12,
+          "padding": [
+            6,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "w5yaR",
+              "width": 16,
+              "height": 16,
+              "icon": "trash-2",
+              "library": "lucide",
+              "fill": "$danger/danger"
+            },
+            {
+              "type": "text",
+              "id": "TIfVD",
+              "name": "Label",
+              "fill": "$danger/danger",
+              "content": "Delete",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "QavWX",
+          "x": 442,
+          "y": 2967,
+          "name": "Menu Title",
+          "reusable": true,
+          "width": 240,
+          "padding": [
+            6,
+            8
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "gKhyn",
+              "name": "Label",
+              "fill": "$muted",
+              "content": "Section",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "l73kJ",
+          "x": 160,
+          "y": 3104,
+          "name": "Dropdown",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(240)",
+          "height": "fit_content(80)",
+          "fill": "$overlay",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#00000014",
+            "offset": {
+              "x": 0,
+              "y": 4
+            },
+            "blur": 12
+          },
+          "layout": "vertical",
+          "gap": 4,
+          "padding": 4
+        },
+        {
+          "type": "text",
+          "id": "r4U3Jx",
+          "x": 165,
+          "y": 2952,
+          "fill": "$muted",
+          "content": "Dropdown Items",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "wzfGC",
+          "x": 160,
+          "y": 3084,
+          "fill": "$muted",
+          "content": "Dropdown",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "mDMuy",
+          "x": 160,
+          "y": 2157,
+          "name": "Tabs",
+          "height": 40,
+          "fill": "$default/default",
+          "cornerRadius": 20,
+          "padding": 4,
+          "children": [
+            {
+              "type": "frame",
+              "id": "AV2jW",
+              "name": "Tab/Active",
+              "height": 32,
+              "fill": "$segment",
+              "cornerRadius": "$radius/3xl",
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000000A",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 3
+              },
+              "padding": [
+                0,
+                16
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "kg2Y8",
+                  "name": "Label",
+                  "fill": "$foreground/segment",
+                  "content": "Account",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "fjozE",
+              "name": "Tab/Inactive",
+              "height": 32,
+              "cornerRadius": "$radius/3xl",
+              "padding": [
+                0,
+                16
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "QsKZV",
+                  "name": "Label",
+                  "fill": "$muted",
+                  "content": "Settings",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "ieod9",
+              "name": "Tab/Inactive",
+              "height": 32,
+              "cornerRadius": "$radius/3xl",
+              "padding": [
+                0,
+                16
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "T1i1U",
+                  "name": "Label",
+                  "fill": "$muted",
+                  "content": "Notifications",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "tYByf",
+              "name": "Tab/Inactive",
+              "height": 32,
+              "cornerRadius": "$radius/3xl",
+              "padding": [
+                0,
+                16
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "Clpb2",
+                  "name": "Label",
+                  "fill": "$muted",
+                  "content": "Security",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "N7Y7P9",
+          "x": 2372,
+          "y": 2052,
+          "fill": "$muted",
+          "content": "Alert Dialog",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "GWd4y",
+          "x": 2372,
+          "y": 2072,
+          "name": "AlertDialog/Danger",
+          "reusable": true,
+          "width": 400,
+          "fill": "$overlay",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#00000018",
+            "offset": {
+              "x": 0,
+              "y": 8
+            },
+            "blur": 24
+          },
+          "layout": "vertical",
+          "padding": "$spacing/6",
+          "children": [
+            {
+              "type": "frame",
+              "id": "F8Fyx",
+              "name": "Header",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 12,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "a4jqT",
+                  "name": "Icon",
+                  "width": 40,
+                  "height": 40,
+                  "fill": "$danger/soft",
+                  "cornerRadius": 9999,
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "u8MfM6",
+                      "width": 20,
+                      "height": 20,
+                      "icon": "triangle-alert",
+                      "library": "lucide",
+                      "fill": "$danger/soft-foreground"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "HZuJV",
+                  "name": "Heading",
+                  "fill": "$foreground/foreground",
+                  "content": "Delete project permanently?",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 16,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "fLN98",
+              "name": "Body",
+              "width": "fill_container",
+              "layout": "vertical",
+              "padding": [
+                8,
+                0,
+                0,
+                0
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "Z2Ag56",
+                  "name": "Content",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "This will permanently delete My Awesome Project and all of its data. This action cannot be undone.",
+                  "lineHeight": 1.43,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "cKmob",
+              "name": "Footer",
+              "width": "fill_container",
+              "gap": 8,
+              "padding": [
+                20,
+                0,
+                0,
+                0
+              ],
+              "justifyContent": "end",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "fXhpG",
+                  "name": "cancelBtn",
+                  "height": 32,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "cHOkr",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i7",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$foreground/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "kTzBK",
+                      "name": "Label",
+                      "fill": "$foreground/foreground",
+                      "content": "Cancel",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "dOicj",
+                  "name": "dangerBtn",
+                  "height": 32,
+                  "fill": "$danger/danger",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "xLSvC",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i1",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$danger/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "rAJiq",
+                      "name": "Label",
+                      "fill": "$danger/foreground",
+                      "content": "Delete Project",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Gl1Qx",
+              "layoutPosition": "absolute",
+              "x": 362,
+              "y": 14,
+              "name": "CloseButton",
+              "width": 24,
+              "height": 24,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "mV77C",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "x",
+                  "library": "lucide",
+                  "fill": "$muted"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "F7BQBR",
+          "x": 2372,
+          "y": 2322,
+          "name": "AlertDialog/Accent",
+          "reusable": true,
+          "width": 400,
+          "fill": "$overlay",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#00000018",
+            "offset": {
+              "x": 0,
+              "y": 8
+            },
+            "blur": 24
+          },
+          "layout": "vertical",
+          "padding": "$spacing/6",
+          "children": [
+            {
+              "type": "frame",
+              "id": "qM5ON",
+              "name": "Header",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 12,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "liwxH",
+                  "name": "Icon",
+                  "width": 40,
+                  "height": 40,
+                  "fill": "$accent/soft",
+                  "cornerRadius": 9999,
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "U8bR4J",
+                      "width": 20,
+                      "height": 20,
+                      "icon": "info",
+                      "library": "lucide",
+                      "fill": "$accent/soft-foreground"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "buKH4",
+                  "name": "Heading",
+                  "fill": "$foreground/foreground",
+                  "content": "Sign out of your account?",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 16,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "e2p4jr",
+              "name": "Body",
+              "width": "fill_container",
+              "layout": "vertical",
+              "padding": [
+                8,
+                0,
+                0,
+                0
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "hNBfP",
+                  "name": "Content",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "You'll need to sign in again to access your account. Any unsaved changes will be lost.",
+                  "lineHeight": 1.43,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "V4HVe",
+              "name": "Footer",
+              "width": "fill_container",
+              "gap": 8,
+              "padding": [
+                20,
+                0,
+                0,
+                0
+              ],
+              "justifyContent": "end",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "I45MrS",
+                  "name": "Button/Tertiary/SM",
+                  "height": 32,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "CfMBS",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i7",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$foreground/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "Vq168",
+                      "name": "Label",
+                      "fill": "$foreground/foreground",
+                      "content": "Stay Signed In",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "lxvsH",
+                  "name": "Button/Primary/SM",
+                  "height": 32,
+                  "fill": "$accent/accent",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "kMC8i",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i1",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$accent/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "LwF1R",
+                      "name": "Label",
+                      "fill": "$accent/foreground",
+                      "content": "Sign Out",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "jTFoQ",
+              "layoutPosition": "absolute",
+              "x": 362,
+              "y": 14,
+              "name": "CloseButton",
+              "width": 24,
+              "height": 24,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "s4Y7Q",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "x",
+                  "library": "lucide",
+                  "fill": "$muted"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "sf7q1",
+          "x": 741,
+          "y": 2507,
+          "name": "CloseButton",
+          "reusable": true,
+          "width": 24,
+          "height": 24,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "W7DThp",
+              "width": 16,
+              "height": 16,
+              "icon": "x",
+              "library": "lucide",
+              "fill": "$muted"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "iJ2l3",
+          "x": 2367,
+          "y": 2691,
+          "fill": "$muted",
+          "content": "Modal",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "G35SO",
+          "x": 2367,
+          "y": 2725,
+          "name": "Modal Header",
+          "reusable": true,
+          "width": 160,
+          "layout": "vertical",
+          "gap": 12,
+          "children": [
+            {
+              "type": "frame",
+              "id": "khPQy",
+              "name": "Icon",
+              "width": 40,
+              "height": 40,
+              "fill": "$default/default",
+              "cornerRadius": 9999,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "J8Y72U",
+                  "width": 20,
+                  "height": 20,
+                  "icon": "rocket",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "TWihB",
+              "name": "Heading",
+              "fill": "$foreground/foreground",
+              "content": "Modal Heading",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 16,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "g2k72",
+          "x": 2367,
+          "y": 2823,
+          "name": "Modal Body",
+          "reusable": true,
+          "width": 320,
+          "layout": "vertical",
+          "children": [
+            {
+              "type": "text",
+              "id": "X5zCW2",
+              "name": "Content",
+              "fill": "$muted",
+              "textGrowth": "fixed-width",
+              "width": "fill_container",
+              "content": "This is the modal body content. You can place any content here.",
+              "lineHeight": 1.43,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "YOvHj",
+          "x": 2367,
+          "y": 2888,
+          "name": "Modal Footer",
+          "reusable": true,
+          "width": 160,
+          "gap": 8,
+          "justifyContent": "end",
+          "children": [
+            {
+              "type": "frame",
+              "id": "N0zno",
+              "name": "Button/Tertiary/SM",
+              "height": 32,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/3xl",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "uRAkP",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i7",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "HdgQG",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Cancel",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "fQh1k",
+              "name": "Button/Primary/SM",
+              "height": 32,
+              "fill": "$accent/accent",
+              "cornerRadius": "$radius/3xl",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "jGn90",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i1",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$accent/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "dTyAN",
+                  "name": "Label",
+                  "fill": "$accent/foreground",
+                  "content": "Confirm",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "aMIQ2",
+          "x": 2367,
+          "y": 2982,
+          "name": "Modal",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(400)",
+          "height": "fit_content(200)",
+          "fill": "$overlay",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#00000018",
+            "offset": {
+              "x": 0,
+              "y": 8
+            },
+            "blur": 24
+          },
+          "layout": "vertical",
+          "padding": 24
+        },
+        {
+          "type": "text",
+          "id": "H3gdE",
+          "x": 2367,
+          "y": 3212,
+          "fill": "$muted",
+          "content": "Example modal",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "tbptT",
+          "x": 2367,
+          "y": 3232,
+          "name": "Modal Example",
+          "width": 400,
+          "fill": "$overlay",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#00000018",
+            "offset": {
+              "x": 0,
+              "y": 8
+            },
+            "blur": 24
+          },
+          "layout": "vertical",
+          "padding": 24,
+          "children": [
+            {
+              "type": "frame",
+              "id": "lbKEu",
+              "name": "exHeader",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 12,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "p90uAD",
+                  "name": "Icon",
+                  "width": 40,
+                  "height": 40,
+                  "fill": "$accent/soft",
+                  "cornerRadius": 9999,
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "x8igE",
+                      "width": 20,
+                      "height": 20,
+                      "icon": "folder-plus",
+                      "library": "lucide",
+                      "fill": "$accent/soft-foreground"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "V7XdH",
+                  "name": "Heading",
+                  "fill": "$foreground/foreground",
+                  "content": "Create new project",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 16,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "q7Ijv4",
+              "name": "exBody",
+              "width": "fill_container",
+              "layout": "vertical",
+              "padding": [
+                8,
+                0,
+                0,
+                0
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "P75isW",
+                  "name": "Content",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Enter a name for your new project. You can change this later in your project settings.",
+                  "lineHeight": 1.43,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "YS8y0",
+              "name": "exFooter",
+              "width": "fill_container",
+              "gap": 8,
+              "padding": [
+                20,
+                0,
+                0,
+                0
+              ],
+              "justifyContent": "end",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "emRNX",
+                  "name": "Button/Tertiary/SM",
+                  "height": 32,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "DZ0GC",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i7",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$foreground/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "PLzgc",
+                      "name": "Label",
+                      "fill": "$foreground/foreground",
+                      "content": "Cancel",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "jUVoW",
+                  "name": "Button/Primary/SM",
+                  "height": 32,
+                  "fill": "$accent/accent",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "L7fPQo",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i1",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$accent/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "nDTdE",
+                      "name": "Label",
+                      "fill": "$accent/foreground",
+                      "content": "Confirm",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "L7ftGw",
+              "layoutPosition": "absolute",
+              "x": 348,
+              "y": 24,
+              "name": "exClose",
+              "width": 24,
+              "height": 24,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "vvRq1",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "x",
+                  "library": "lucide",
+                  "fill": "$muted"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "prKcu",
+          "x": 1286,
+          "y": 397,
+          "fill": "$foreground/foreground",
+          "content": "Table",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 20,
+          "fontWeight": "600"
+        },
+        {
+          "type": "text",
+          "id": "blvc6",
+          "x": 1286,
+          "y": 437,
+          "fill": "$muted",
+          "content": "Table Column",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "RCNNc",
+          "x": 1286,
+          "y": 457,
+          "name": "Table Column",
+          "reusable": true,
+          "fill": "$surface/secondary",
+          "padding": [
+            10,
+            16
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "U3RmG",
+              "name": "Label",
+              "fill": "$muted",
+              "content": "Column",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "EQPsw",
+          "x": 1466,
+          "y": 437,
+          "fill": "$muted",
+          "content": "Table Cell",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "ek6t4",
+          "x": 1466,
+          "y": 457,
+          "name": "Table Cell",
+          "reusable": true,
+          "fill": "$surface/surface",
+          "stroke": "$separator/separator",
+          "strokeWidth": {
+            "bottom": 1
+          },
+          "strokeAlignment": "inner",
+          "strokeLinejoin": "round",
+          "padding": [
+            12,
+            16
+          ],
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "l97WfG",
+              "name": "Value",
+              "fill": "$foreground/foreground",
+              "content": "Cell value",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "IWws2",
+          "x": 1646,
+          "y": 437,
+          "fill": "$muted",
+          "content": "Table Row",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "g15EzV",
+          "x": 1646,
+          "y": 457,
+          "name": "Table Row",
+          "reusable": true,
+          "width": 600,
+          "height": "fit_content(42)"
+        },
+        {
+          "type": "text",
+          "id": "Hgest",
+          "x": 1286,
+          "y": 517,
+          "fill": "$muted",
+          "content": "Table Header",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "Jq5VG",
+          "x": 1286,
+          "y": 537,
+          "name": "Table Header",
+          "reusable": true,
+          "width": 600,
+          "height": "fit_content(36)",
+          "fill": "$surface/secondary",
+          "stroke": "$separator/separator",
+          "strokeWidth": {
+            "bottom": 1
+          },
+          "strokeAlignment": "inner",
+          "strokeLinejoin": "round"
+        },
+        {
+          "type": "text",
+          "id": "rPtQP",
+          "x": 1286,
+          "y": 597,
+          "fill": "$muted",
+          "content": "Table Body",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "NGXHT",
+          "x": 1286,
+          "y": 617,
+          "name": "Table Body",
+          "reusable": true,
+          "clip": true,
+          "width": 600,
+          "height": "fit_content(120)",
+          "cornerRadius": "$radius/2xl",
+          "layout": "vertical"
+        },
+        {
+          "type": "text",
+          "id": "x7bu2",
+          "x": 1286,
+          "y": 769,
+          "fill": "$muted",
+          "content": "Table Footer",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "AnMqF",
+          "x": 1286,
+          "y": 789,
+          "name": "Table Footer",
+          "reusable": true,
+          "width": "fill_container(600)",
+          "padding": [
+            10,
+            16
+          ],
+          "justifyContent": "space_between",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "SpskA",
+              "name": "Summary",
+              "fill": "$muted",
+              "content": "1-5 of 24",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "q5iIzM",
+          "x": 1286,
+          "y": 849,
+          "fill": "$muted",
+          "content": "Pagination",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "Sd2Ze",
+          "x": 1286,
+          "y": 869,
+          "name": "Pagination/Active",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "fill": "$default/default",
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "WnJnO",
+              "name": "Label",
+              "fill": "$default/foreground",
+              "content": "1",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "lMXsB",
+          "x": 1336,
+          "y": 869,
+          "name": "Pagination/Default",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "NBoIZ",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "2",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Odlac",
+          "x": 1386,
+          "y": 869,
+          "name": "Pagination/Ellipsis",
+          "reusable": true,
+          "width": 36,
+          "height": 36,
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "h48BL0",
+              "fill": "$muted",
+              "content": "...",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "KM6Mi",
+          "x": 1436,
+          "y": 869,
+          "name": "Pagination/Next",
+          "reusable": true,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "gap": 6,
+          "padding": [
+            0,
+            10
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "lHfxn",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Next",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "icon",
+              "id": "P3V94",
+              "width": 16,
+              "height": 16,
+              "icon": "chevron-right",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "GDQCg",
+          "x": 1523,
+          "y": 869,
+          "name": "Pagination/Prev",
+          "reusable": true,
+          "height": 36,
+          "cornerRadius": "$radius/3xl",
+          "gap": 6,
+          "padding": [
+            0,
+            10
+          ],
+          "justifyContent": "center",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "e58SRb",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Previous",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "icon",
+              "id": "dMBh3",
+              "width": 16,
+              "height": 16,
+              "icon": "chevron-left",
+              "library": "lucide",
+              "fill": "$foreground/foreground"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "Fx5bB",
+          "x": 1286,
+          "y": 929,
+          "fill": "$muted",
+          "content": "Table Container (slot)",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "u1zjY",
+          "x": 1286,
+          "y": 949,
+          "name": "Table",
+          "reusable": true,
+          "slot": [],
+          "clip": true,
+          "width": "fit_content(700)",
+          "height": "fit_content(300)",
+          "fill": "$surface/secondary",
+          "cornerRadius": 20,
+          "layout": "vertical",
+          "padding": [
+            0,
+            4,
+            4,
+            4
+          ]
+        },
+        {
+          "type": "text",
+          "id": "nb1K4",
+          "x": 1286,
+          "y": 1288,
+          "fill": "$muted",
+          "content": "Example",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "BGfU0",
+          "x": 1286,
+          "y": 1314,
+          "name": "tableEx",
+          "clip": true,
+          "width": 700,
+          "fill": "$surface/secondary",
+          "cornerRadius": 20,
+          "layout": "vertical",
+          "padding": [
+            0,
+            4,
+            4,
+            4
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "iXm5j",
+              "name": "header",
+              "width": "fill_container",
+              "fill": "$surface/secondary",
+              "stroke": "$separator/separator",
+              "strokeWidth": {
+                "bottom": 1
+              },
+              "strokeAlignment": "inner",
+              "strokeLinejoin": "round",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "BDNXc",
+                  "name": "hc1",
+                  "width": "fill_container",
+                  "fill": "$surface/secondary",
+                  "padding": [
+                    10,
+                    16
+                  ],
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "eKlh6",
+                      "name": "Label",
+                      "fill": "$muted",
+                      "content": "Name",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "hCzTy",
+                  "name": "hc2",
+                  "width": "fill_container",
+                  "fill": "$surface/secondary",
+                  "padding": [
+                    10,
+                    16
+                  ],
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "BZuG2",
+                      "name": "Label",
+                      "fill": "$muted",
+                      "content": "Status",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "stQjM",
+                  "name": "hc3",
+                  "width": "fill_container",
+                  "fill": "$surface/secondary",
+                  "padding": [
+                    10,
+                    16
+                  ],
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "t3obN",
+                      "name": "Label",
+                      "fill": "$muted",
+                      "content": "Role",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "XDNrx",
+                  "name": "hc4",
+                  "width": "fill_container",
+                  "fill": "$surface/secondary",
+                  "padding": [
+                    10,
+                    16
+                  ],
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "cc6ED",
+                      "name": "Label",
+                      "fill": "$muted",
+                      "content": "Email",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 12,
+                      "fontWeight": "500"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "BZ50C",
+              "name": "body",
+              "clip": true,
+              "width": "fill_container",
+              "cornerRadius": "$radius/2xl",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "h02fQ",
+                  "name": "r1",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "b5GZas",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "gcke0",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "John Doe",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "DD9CP",
+                      "name": "c2",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "pFSfb",
+                          "name": "Chip/Primary/Accent/SM",
+                          "fill": "$accent/accent",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "yz8ve",
+                              "name": "Label",
+                              "fill": "$accent/foreground",
+                              "content": "Active",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "XMy8L",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "A1u3x",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Developer",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "j3XBUr",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "Shcqe",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "john@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "C7hzqw",
+                  "name": "r2",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "lpNxO",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "DPr69",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Jane Smith",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "KTHyV",
+                      "name": "c6",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "aleeK",
+                          "name": "Chip/Primary/Warning/SM",
+                          "fill": "$warning/warning",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "fTMYt",
+                              "name": "Label",
+                              "fill": "$warning/foreground",
+                              "content": "Inactive",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "K1Dc5c",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "L8ZttA",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Designer",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "XOgq8",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "RCaZI",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "jane@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "Hz6de",
+                  "name": "r3",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "DvAZN",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "BVRhs",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Bob Wilson",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "BMTPD",
+                      "name": "c10",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "NTlhO",
+                          "name": "Chip/Primary/Accent/SM",
+                          "fill": "$accent/accent",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "ZcuFt",
+                              "name": "Label",
+                              "fill": "$accent/foreground",
+                              "content": "Active",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "w51VF",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "rYZdk",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Manager",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "U1A7Au",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "czu6P",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "bob@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "R21ek",
+                  "name": "r3",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "gAWsw",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "vA5IX",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Bob Wilson",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "g8tOHz",
+                      "name": "c10",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "zqowL",
+                          "name": "Chip/Primary/Accent/SM",
+                          "fill": "$accent/accent",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "TP2eN",
+                              "name": "Label",
+                              "fill": "$accent/foreground",
+                              "content": "Active",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "tn5la",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "pTxlf",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Manager",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "fUUWu",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "U2MA6",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "bob@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "bSZKf",
+                  "name": "r3",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "S9ZYLi",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "h3DJX",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Bob Wilson",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "UjzdQ",
+                      "name": "c10",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "Z3LGbN",
+                          "name": "Chip/Primary/Accent/SM",
+                          "fill": "$accent/accent",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "hIDZD",
+                              "name": "Label",
+                              "fill": "$accent/foreground",
+                              "content": "Active",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "sDf6Z",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "CynsY",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Manager",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "FEe9M",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "EBekY",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "bob@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "cNByW",
+                  "name": "r3",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "bOMy6",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "H8XjNt",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Bob Wilson",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "ivxno",
+                      "name": "c10",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "zTt1q",
+                          "name": "Chip/Primary/Accent/SM",
+                          "fill": "$accent/accent",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "b50tb",
+                              "name": "Label",
+                              "fill": "$accent/foreground",
+                              "content": "Active",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "OKOoS",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "riX81",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Manager",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "bwKez",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "G5q6I8",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "bob@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "HxrLn",
+                  "name": "r3",
+                  "width": "fill_container",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "M38CIs",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "C991jA",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Bob Wilson",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "a0NpyM",
+                      "name": "c10",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "Db8Zg",
+                          "name": "Chip/Primary/Accent/SM",
+                          "fill": "$accent/accent",
+                          "cornerRadius": "$radius/2xl",
+                          "gap": 2,
+                          "padding": [
+                            2,
+                            4
+                          ],
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "w880cY",
+                              "name": "Label",
+                              "fill": "$accent/foreground",
+                              "content": "Active",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "500"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "UQNms",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "ysdfX",
+                          "name": "Value",
+                          "fill": "$foreground/foreground",
+                          "content": "Manager",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "tJhWn",
+                      "name": "Table Cell",
+                      "width": "fill_container",
+                      "fill": "$surface/surface",
+                      "stroke": "$separator/separator",
+                      "strokeWidth": {
+                        "bottom": 1
+                      },
+                      "strokeAlignment": "inner",
+                      "strokeLinejoin": "round",
+                      "padding": [
+                        12,
+                        16
+                      ],
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "ccblP",
+                          "name": "Value",
+                          "fill": "$muted",
+                          "content": "bob@example.com",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "yDSpI",
+              "name": "Footer",
+              "width": "fill_container",
+              "padding": [
+                10,
+                16
+              ],
+              "justifyContent": "space_between",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "s6M2lg",
+                  "fill": "$muted",
+                  "content": "1-3 of 24 rows",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "frame",
+                  "id": "nAhEr",
+                  "name": "Pagination",
+                  "gap": 4,
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "YApPW",
+                      "name": "Pagination/Prev",
+                      "opacity": "$disabled-opacity",
+                      "height": 36,
+                      "cornerRadius": "$radius/3xl",
+                      "gap": 6,
+                      "padding": [
+                        0,
+                        10
+                      ],
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "Lf6bb",
+                          "name": "Label",
+                          "fill": "$foreground/foreground",
+                          "content": "Previous",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "500"
+                        },
+                        {
+                          "type": "icon",
+                          "id": "M757x",
+                          "width": 16,
+                          "height": 16,
+                          "icon": "chevron-left",
+                          "library": "lucide",
+                          "fill": "$foreground/foreground"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "cilvy",
+                      "name": "Pagination/Active",
+                      "width": 36,
+                      "height": 36,
+                      "fill": "$default/default",
+                      "cornerRadius": "$radius/3xl",
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "Aeu1t",
+                          "name": "Label",
+                          "fill": "$default/foreground",
+                          "content": "1",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "500"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "H6K1A7",
+                      "name": "p2",
+                      "width": 36,
+                      "height": 36,
+                      "cornerRadius": "$radius/3xl",
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "l90xVu",
+                          "name": "Label",
+                          "fill": "$foreground/foreground",
+                          "content": "2",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "500"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "gEjhr",
+                      "name": "p3",
+                      "width": 36,
+                      "height": 36,
+                      "cornerRadius": "$radius/3xl",
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "vRoVX",
+                          "name": "Label",
+                          "fill": "$foreground/foreground",
+                          "content": "3",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "500"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "oFPgY",
+                      "name": "Pagination/Ellipsis",
+                      "width": 36,
+                      "height": 36,
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "d2aGOz",
+                          "fill": "$muted",
+                          "content": "...",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "c4cth",
+                      "name": "p5",
+                      "width": 36,
+                      "height": 36,
+                      "cornerRadius": "$radius/3xl",
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "tp4Ej",
+                          "name": "Label",
+                          "fill": "$foreground/foreground",
+                          "content": "5",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "500"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "epfzU",
+                      "name": "Pagination/Next",
+                      "height": 36,
+                      "cornerRadius": "$radius/3xl",
+                      "gap": 6,
+                      "padding": [
+                        0,
+                        10
+                      ],
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "dsMEo",
+                          "name": "Label",
+                          "fill": "$foreground/foreground",
+                          "content": "Next",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 14,
+                          "fontWeight": "500"
+                        },
+                        {
+                          "type": "icon",
+                          "id": "y65Wb",
+                          "width": 16,
+                          "height": 16,
+                          "icon": "chevron-right",
+                          "library": "lucide",
+                          "fill": "$foreground/foreground"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "LZC77",
+          "x": 1286,
+          "y": 1870,
+          "fill": "$foreground/foreground",
+          "content": "Card",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 20,
+          "fontWeight": "600"
+        },
+        {
+          "type": "text",
+          "id": "a2hGCc",
+          "x": 1286,
+          "y": 1910,
+          "fill": "$muted",
+          "content": "Card Header",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "cuaDy",
+          "x": 1286,
+          "y": 1930,
+          "name": "Card Header",
+          "reusable": true,
+          "width": "fill_container(320)",
+          "layout": "vertical",
+          "children": [
+            {
+              "type": "text",
+              "id": "C7lTvr",
+              "name": "Title",
+              "fill": "$foreground/foreground",
+              "content": "Card Title",
+              "lineHeight": 1.7,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "text",
+              "id": "pOvZX",
+              "name": "Description",
+              "fill": "$muted",
+              "content": "Card description text goes here.",
+              "lineHeight": 1.43,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "ImTcH",
+          "x": 1286,
+          "y": 2000,
+          "fill": "$muted",
+          "content": "Card Content",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "gljUG",
+          "x": 1286,
+          "y": 2020,
+          "name": "Card Content",
+          "reusable": true,
+          "width": "fill_container(320)",
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "xWqNh",
+              "name": "Content",
+              "fill": "$muted",
+              "content": "Card body content area.",
+              "lineHeight": 1.43,
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "DwSPf",
+          "x": 1286,
+          "y": 2082,
+          "fill": "$muted",
+          "content": "Card Footer",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "JaZjF",
+          "x": 1286,
+          "y": 2102,
+          "name": "Card Footer",
+          "reusable": true,
+          "width": "fill_container(320)",
+          "gap": 8,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "unTWp",
+              "name": "Button/Tertiary/SM",
+              "height": 32,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/3xl",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "Sj9FR",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i7",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "T8l9Pw",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Cancel",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "IfPP7",
+              "name": "Button/Primary/SM",
+              "height": 32,
+              "fill": "$accent/accent",
+              "cornerRadius": "$radius/3xl",
+              "gap": 5,
+              "padding": [
+                8,
+                "$spacing/3"
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "KeRNe",
+                  "x": 12,
+                  "y": 9,
+                  "name": "i1",
+                  "enabled": false,
+                  "width": 14,
+                  "height": 14,
+                  "icon": "plus",
+                  "library": "lucide",
+                  "fill": "$accent/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "c15gg8",
+                  "name": "Label",
+                  "fill": "$accent/foreground",
+                  "content": "Submit",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "500"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "io62V",
+          "x": 1286,
+          "y": 2181,
+          "fill": "$muted",
+          "content": "Surface",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "f07b1",
+          "x": 1286,
+          "y": 2201,
+          "name": "Card/Default",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(320)",
+          "height": "fit_content(120)",
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 16
+        },
+        {
+          "type": "frame",
+          "id": "KPiOO",
+          "x": 1636,
+          "y": 2201,
+          "name": "Card/Secondary",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(320)",
+          "height": "fit_content(120)",
+          "fill": "$surface/secondary",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 16
+        },
+        {
+          "type": "frame",
+          "id": "C1BdJ",
+          "x": 1286,
+          "y": 2377,
+          "name": "Card/Tertiary",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(320)",
+          "height": "fit_content(120)",
+          "fill": "$surface/tertiary",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 16
+        },
+        {
+          "type": "frame",
+          "id": "i74kt",
+          "x": 1636,
+          "y": 2377,
+          "name": "Card/Transparent",
+          "reusable": true,
+          "slot": [],
+          "width": "fit_content(320)",
+          "height": "fit_content(120)",
+          "cornerRadius": "$radius/3xl",
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 16
+        },
+        {
+          "type": "text",
+          "id": "O86Xp",
+          "x": 1286,
+          "y": 2331,
+          "fill": "$muted",
+          "content": "default",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "M7ZPv",
+          "x": 1636,
+          "y": 2331,
+          "fill": "$muted",
+          "content": "secondary",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "o0x42",
+          "x": 1286,
+          "y": 2507,
+          "fill": "$muted",
+          "content": "tertiary",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "VKkcL",
+          "x": 1636,
+          "y": 2507,
+          "fill": "$muted",
+          "content": "transparent",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "text",
+          "id": "yVWXV",
+          "x": 1286,
+          "y": 2672,
+          "fill": "$muted",
+          "content": "Examples",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "VUUuj",
+          "x": 1286,
+          "y": 2692,
+          "name": "ex1",
+          "width": 320,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "Y3qrx8",
+              "name": "ex1h",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "m2tQQb",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "Notifications",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "HELAN",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "content": "Manage your notification preferences.",
+                  "lineHeight": 1.43,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "V7WF4",
+              "name": "ex1c",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "O9Ifr",
+                  "fill": "$muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Choose which notifications you'd like to receive and how you'd like to be notified.",
+                  "lineHeight": 1.43,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Vb5ba",
+              "name": "ex1f",
+              "width": "fill_container",
+              "gap": 8,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "DmKGe",
+                  "name": "Button/Tertiary/SM",
+                  "height": 32,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "n4DO1",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i7",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$foreground/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "e0T8gJ",
+                      "name": "Label",
+                      "fill": "$foreground/foreground",
+                      "content": "Cancel",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "sl895",
+                  "name": "Button/Primary/SM",
+                  "height": 32,
+                  "fill": "$accent/accent",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "F6EkT",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i1",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$accent/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "V9jeCP",
+                      "name": "Label",
+                      "fill": "$accent/foreground",
+                      "content": "Submit",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "OaBdm",
+          "x": 1636,
+          "y": 2692,
+          "name": "ex2",
+          "width": 320,
+          "fill": "$surface/secondary",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "layout": "vertical",
+          "gap": 12,
+          "padding": 16,
+          "children": [
+            {
+              "type": "frame",
+              "id": "QZUm4",
+              "name": "ex2h",
+              "width": "fill_container",
+              "layout": "vertical",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "FlUoc",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "Team Members",
+                  "lineHeight": 1.7,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "AZoB2",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "content": "Invite and manage your team.",
+                  "lineHeight": 1.43,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "QL7Vy",
+              "name": "ex2f",
+              "width": "fill_container",
+              "gap": 8,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "THHAj",
+                  "name": "Button/Tertiary/SM",
+                  "height": 32,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "CMeYf",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i7",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$foreground/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "ofWGs",
+                      "name": "Label",
+                      "fill": "$foreground/foreground",
+                      "content": "Cancel",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "l6DG81",
+                  "name": "Button/Primary/SM",
+                  "height": 32,
+                  "fill": "$accent/accent",
+                  "cornerRadius": "$radius/3xl",
+                  "gap": 5,
+                  "padding": [
+                    8,
+                    "$spacing/3"
+                  ],
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "FwKLE",
+                      "x": 12,
+                      "y": 9,
+                      "name": "i1",
+                      "enabled": false,
+                      "width": 14,
+                      "height": 14,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$accent/foreground"
+                    },
+                    {
+                      "type": "text",
+                      "id": "eHnKc",
+                      "name": "Label",
+                      "fill": "$accent/foreground",
+                      "content": "Submit",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "500"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "G00gn",
+          "x": 2367,
+          "y": 281,
+          "fill": "$muted",
+          "content": "TextField",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "sOPOt",
+          "x": 2689,
+          "y": 301,
+          "name": "Input/Secondary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "QxU0e",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Email",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "VmxQP",
+              "name": "Input",
+              "width": "fill_container",
+              "height": 40,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "padding": [
+                8,
+                12
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "lnTss",
+                  "name": "Placeholder",
+                  "fill": "$field/placeholder",
+                  "content": "you@example.com",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "s3qeW",
+              "name": "Description Wrap",
+              "padding": [
+                0,
+                4
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "ID9dV",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "content": "We'll never share your email.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "oSeYc",
+          "x": 2367,
+          "y": 471,
+          "fill": "$muted",
+          "content": "Textarea",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "nHX34",
+          "x": 2367,
+          "y": 491,
+          "name": "Textarea/Primary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "W0EGTF",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Message",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "NlpkG",
+              "name": "Textarea",
+              "width": "fill_container",
+              "height": 80,
+              "fill": "$field/background",
+              "cornerRadius": "$radius/xl",
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000000F",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 2
+              },
+              "layout": "vertical",
+              "padding": [
+                8,
+                12
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "xREXa",
+                  "name": "Placeholder",
+                  "fill": "$field/placeholder",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Type your message...",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "T6jUJ",
+              "name": "taDescW",
+              "padding": [
+                0,
+                4
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "w1ITdR",
+                  "fill": "$muted",
+                  "content": "Max 500 characters.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "B6xJL",
+          "x": 2689,
+          "y": 491,
+          "name": "Textarea/Secondary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "FnAB6",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Message",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "E80uz",
+              "name": "Textarea",
+              "width": "fill_container",
+              "height": 80,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "layout": "vertical",
+              "padding": [
+                8,
+                12
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "CSZ65",
+                  "name": "Placeholder",
+                  "fill": "$field/placeholder",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Type your message...",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "V2jnNR",
+              "name": "taDescWS",
+              "padding": [
+                0,
+                4
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "AZYvJ",
+                  "fill": "$muted",
+                  "content": "Max 500 characters.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "N7ktcR",
+          "x": 2367,
+          "y": 681,
+          "fill": "$muted",
+          "content": "NumberField",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "k5bah",
+          "x": 2367,
+          "y": 701,
+          "name": "NumberField/Primary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "HqNJC",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Quantity",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "olYiJ",
+              "name": "Group",
+              "clip": true,
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$field/background",
+              "cornerRadius": "$radius/xl",
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000000F",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 2
+              },
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "QpBEM",
+                  "name": "Decrement",
+                  "width": 40,
+                  "height": "fill_container",
+                  "stroke": "#00000008",
+                  "strokeWidth": {
+                    "right": 1
+                  },
+                  "strokeAlignment": "inner",
+                  "strokeLinejoin": "round",
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "gWdzT",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "minus",
+                      "library": "lucide",
+                      "fill": "$field/foreground"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "YNqUC",
+                  "name": "Input",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "padding": [
+                    0,
+                    12
+                  ],
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "wuE52",
+                      "fill": "$field/foreground",
+                      "content": "1",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "Fry1U",
+                  "name": "Increment",
+                  "width": 40,
+                  "height": "fill_container",
+                  "stroke": "#00000008",
+                  "strokeWidth": {
+                    "left": 1
+                  },
+                  "strokeAlignment": "inner",
+                  "strokeLinejoin": "round",
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "qAo56",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$field/foreground"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "athBI",
+          "x": 2689,
+          "y": 701,
+          "name": "NumberField/Secondary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "ebRs0",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Quantity",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "S2oLc",
+              "name": "Group",
+              "clip": true,
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "wrJRv",
+                  "name": "Decrement",
+                  "width": 40,
+                  "height": "fill_container",
+                  "stroke": "#00000008",
+                  "strokeWidth": {
+                    "right": 1
+                  },
+                  "strokeAlignment": "inner",
+                  "strokeLinejoin": "round",
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "J8BNTN",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "minus",
+                      "library": "lucide",
+                      "fill": "$field/foreground"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "dvLDX",
+                  "name": "Input",
+                  "width": "fill_container",
+                  "height": "fill_container",
+                  "padding": [
+                    0,
+                    12
+                  ],
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "KxEJQ",
+                      "fill": "$field/foreground",
+                      "content": "1",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "lWiZw",
+                  "name": "Increment",
+                  "width": 40,
+                  "height": "fill_container",
+                  "stroke": "#00000008",
+                  "strokeWidth": {
+                    "left": 1
+                  },
+                  "strokeAlignment": "inner",
+                  "strokeLinejoin": "round",
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "flyjH",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "plus",
+                      "library": "lucide",
+                      "fill": "$field/foreground"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "YaxBV",
+          "x": 2367,
+          "y": 841,
+          "fill": "$muted",
+          "content": "SearchField",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "UyyZd",
+          "x": 2367,
+          "y": 861,
+          "name": "SearchField/Primary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "zLfw5",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Search",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "O0dxx",
+              "name": "Group",
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$field/background",
+              "cornerRadius": "$radius/xl",
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000000F",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 2
+              },
+              "padding": [
+                0,
+                "$spacing/3"
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "YhC10",
+                  "name": "Frame 2",
+                  "width": "fill_container",
+                  "gap": 6,
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "dqNN9",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "search",
+                      "library": "lucide",
+                      "fill": "$field/placeholder"
+                    },
+                    {
+                      "type": "text",
+                      "id": "KlAvj",
+                      "name": "Placeholder",
+                      "fill": "$field/placeholder",
+                      "content": "Search...",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "lbfy4",
+                  "name": "sfClear",
+                  "width": 20,
+                  "height": 20,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "SD55f",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "x",
+                      "library": "lucide",
+                      "fill": "$muted"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "YEEfK",
+          "x": 2689,
+          "y": 861,
+          "name": "SearchField/Secondary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "h3S4q",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Search",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "ZWp0D",
+              "name": "Group",
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "padding": [
+                0,
+                "$spacing/3"
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "AHJCi",
+                  "name": "Frame 1",
+                  "width": "fill_container",
+                  "gap": 6,
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "iRL5F",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "search",
+                      "library": "lucide",
+                      "fill": "$field/placeholder"
+                    },
+                    {
+                      "type": "text",
+                      "id": "N4BHZ",
+                      "name": "Placeholder",
+                      "fill": "$field/placeholder",
+                      "content": "Search...",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "i3D33",
+                  "name": "sfClearS",
+                  "width": 20,
+                  "height": 20,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "CYEKj",
+                      "width": 16,
+                      "height": 16,
+                      "icon": "x",
+                      "library": "lucide",
+                      "fill": "$muted"
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "K8bgn",
+          "x": 2367,
+          "y": 1001,
+          "fill": "$muted",
+          "content": "Select",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "fZUcK",
+          "x": 2367,
+          "y": 1021,
+          "name": "Select/Primary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "G1Dp59",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Country",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "qTJGS",
+              "name": "Trigger",
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$field/background",
+              "cornerRadius": "$radius/xl",
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000000F",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 2
+              },
+              "padding": [
+                8,
+                12
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "m1h2Yp",
+                  "name": "Value",
+                  "fill": "$field/placeholder",
+                  "content": "Select option...",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "icon",
+                  "id": "zv2H4",
+                  "layoutPosition": "absolute",
+                  "x": 252,
+                  "y": 10,
+                  "name": "selChev",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "chevron-down",
+                  "library": "lucide",
+                  "fill": "$field/placeholder"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "tep5q",
+              "name": "selDescW",
+              "padding": [
+                0,
+                4
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "o1NWs",
+                  "fill": "$muted",
+                  "content": "Choose your country.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "G4Lu2i",
+          "x": 2689,
+          "y": 1021,
+          "name": "Select/Secondary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "TV8uv",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Country",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "I8Ilp",
+              "name": "Trigger",
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/xl",
+              "padding": [
+                8,
+                12
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "dzb7j",
+                  "name": "Value",
+                  "fill": "$field/placeholder",
+                  "content": "Select option...",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "icon",
+                  "id": "J3nIW",
+                  "layoutPosition": "absolute",
+                  "x": 252,
+                  "y": 10,
+                  "name": "selChevS",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "chevron-down",
+                  "library": "lucide",
+                  "fill": "$field/placeholder"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "fbx9a",
+              "name": "selDescWS",
+              "padding": [
+                0,
+                4
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "U1Ohev",
+                  "fill": "$muted",
+                  "content": "Choose your country.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "FDysg",
+          "x": 2367,
+          "y": 1171,
+          "fill": "$muted",
+          "content": "InputOTP",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "t97Kg",
+          "x": 2367,
+          "y": 1191,
+          "name": "InputOTP/Primary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "uWMap",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Verification Code",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "AdACq",
+              "name": "Group",
+              "gap": 8,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "y80DXS",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$field/background",
+                  "cornerRadius": "$radius/xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000F",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 2
+                  },
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "uC1Yc",
+                      "fill": "$field/foreground",
+                      "content": "4",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 18,
+                      "fontWeight": "600"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "pGSHo",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$field/background",
+                  "cornerRadius": "$radius/xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000F",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 2
+                  },
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "J91yb",
+                      "fill": "$field/foreground",
+                      "content": "2",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 18,
+                      "fontWeight": "600"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "m9914F",
+                  "name": "Slot Empty",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$field/background",
+                  "cornerRadius": "$radius/xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000F",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 2
+                  },
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "ngMPT",
+                  "name": "Separator",
+                  "width": 6,
+                  "height": 2,
+                  "fill": "$separator/separator",
+                  "cornerRadius": 2
+                },
+                {
+                  "type": "frame",
+                  "id": "RxOmO",
+                  "name": "Slot Empty",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$field/background",
+                  "cornerRadius": "$radius/xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000F",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 2
+                  },
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "rq5HA",
+                  "name": "Slot Empty",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$field/background",
+                  "cornerRadius": "$radius/xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000F",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 2
+                  },
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "b2KfkQ",
+          "x": 2689,
+          "y": 1191,
+          "name": "InputOTP/Secondary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "bIUkU",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Verification Code",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "r4rw4",
+              "name": "Group",
+              "gap": 8,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "o3YUZ",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "LvQ9Q",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "d4F73",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "BcCW4",
+                  "name": "Separator",
+                  "width": 6,
+                  "height": 2,
+                  "fill": "$separator/separator",
+                  "cornerRadius": 2
+                },
+                {
+                  "type": "frame",
+                  "id": "ZAGyr",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                },
+                {
+                  "type": "frame",
+                  "id": "BMaxJ",
+                  "name": "Slot",
+                  "width": 38,
+                  "height": 40,
+                  "fill": "$default/default",
+                  "cornerRadius": "$radius/xl",
+                  "justifyContent": "center",
+                  "alignItems": "center"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "YujKT",
+          "x": 2367,
+          "y": 1341,
+          "fill": "$muted",
+          "content": "Slider",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "Kzh0d",
+          "x": 2367,
+          "y": 1361,
+          "name": "Slider",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "frame",
+              "id": "H9LiKi",
+              "name": "Header",
+              "width": "fill_container",
+              "justifyContent": "space_between",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "Rt4fZ",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Volume",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                },
+                {
+                  "type": "text",
+                  "id": "bsPxy",
+                  "name": "Output",
+                  "fill": "$foreground/foreground",
+                  "content": "65%",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "pNd8H",
+              "name": "Track",
+              "rotation": -0.07866774988585055,
+              "width": "fill_container",
+              "height": 20,
+              "fill": "$default/default",
+              "cornerRadius": 9999,
+              "layout": "none",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "ldAa6",
+                  "x": 0,
+                  "y": 0,
+                  "name": "Fill",
+                  "width": 170,
+                  "height": 20,
+                  "fill": "$accent/accent",
+                  "cornerRadius": 9999
+                },
+                {
+                  "type": "frame",
+                  "id": "I4LyM",
+                  "x": 143,
+                  "y": 0,
+                  "name": "Thumb",
+                  "width": 26,
+                  "height": 20,
+                  "cornerRadius": 9999,
+                  "layout": "none",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "cNYjk",
+                      "x": 1,
+                      "y": 2,
+                      "name": "Thumb Inner",
+                      "width": 24,
+                      "height": 16,
+                      "fill": "$accent/foreground",
+                      "cornerRadius": 9999,
+                      "effect": {
+                        "type": "shadow",
+                        "shadowType": "outer",
+                        "color": "#0000000F",
+                        "offset": {
+                          "x": 0,
+                          "y": 2
+                        },
+                        "blur": 4
+                      }
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "YtrvV",
+          "x": 2367,
+          "y": 1501,
+          "fill": "$muted",
+          "content": "Radio",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "DGiaR",
+          "x": 2367,
+          "y": 1521,
+          "name": "Radio/Selected",
+          "reusable": true,
+          "gap": 12,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "G1WlAg",
+              "name": "Control",
+              "width": 16,
+              "height": 16,
+              "fill": "$accent/accent",
+              "cornerRadius": 9999,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "ellipse",
+                  "id": "VkGwh",
+                  "name": "Dot",
+                  "fill": "$accent/foreground",
+                  "width": 6,
+                  "height": 6
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "q4zhl",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Option A",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "GEjii",
+          "x": 2489,
+          "y": 1521,
+          "name": "Radio/Unselected",
+          "reusable": true,
+          "gap": 12,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "u68zT9",
+              "name": "Control",
+              "width": 16,
+              "height": 16,
+              "fill": "$field/background",
+              "cornerRadius": 9999,
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "justifyContent": "center",
+              "alignItems": "center"
+            },
+            {
+              "type": "text",
+              "id": "g23Yp",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Option B",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "e8U8Fp",
+          "x": 2367,
+          "y": 1621,
+          "fill": "$muted",
+          "content": "Switch",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "jjbaV",
+          "x": 2367,
+          "y": 1641,
+          "name": "Switch/Off",
+          "reusable": true,
+          "gap": 12,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "M7SaD",
+              "name": "Track",
+              "width": 40,
+              "height": 20,
+              "fill": "$default/default",
+              "cornerRadius": 9999,
+              "layout": "none",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "migx7",
+                  "x": 2,
+                  "y": 2,
+                  "name": "Thumb",
+                  "width": 18,
+                  "height": 16,
+                  "fill": "#FFFFFF",
+                  "cornerRadius": 9999,
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000001A",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 3
+                  }
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "ekALt",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Notifications",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "o4D9Z9",
+          "x": 2589,
+          "y": 1641,
+          "name": "Switch/On",
+          "reusable": true,
+          "gap": 12,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "xlakM",
+              "name": "Track",
+              "width": 40,
+              "height": 20,
+              "fill": "$accent/accent",
+              "cornerRadius": 9999,
+              "layout": "none",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "A2ySG",
+                  "x": 20,
+                  "y": 2,
+                  "name": "Thumb",
+                  "width": 18,
+                  "height": 16,
+                  "fill": "$accent/foreground",
+                  "cornerRadius": 9999,
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000001A",
+                    "offset": {
+                      "x": 0,
+                      "y": 1
+                    },
+                    "blur": 3
+                  }
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "mIFLm",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Notifications",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "QJ4F2",
+          "x": 2367,
+          "y": 1716,
+          "fill": "$muted",
+          "content": "sm",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "C53ktI",
+          "x": 2389,
+          "y": 1714,
+          "name": "Switch/SM",
+          "reusable": true,
+          "width": 32,
+          "height": 16,
+          "fill": "$accent/accent",
+          "cornerRadius": 9999,
+          "layout": "none",
+          "children": [
+            {
+              "type": "frame",
+              "id": "FwB3b",
+              "x": 16,
+              "y": 2,
+              "name": "Thumb",
+              "width": 14,
+              "height": 12,
+              "fill": "$accent/foreground",
+              "cornerRadius": 9999,
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000001A",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 2
+              }
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "Fn8BZ",
+          "x": 2439,
+          "y": 1716,
+          "fill": "$muted",
+          "content": "md",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "FnKwM",
+          "x": 2461,
+          "y": 1712,
+          "name": "Switch/MD",
+          "reusable": true,
+          "width": 40,
+          "height": 20,
+          "fill": "$accent/accent",
+          "cornerRadius": 9999,
+          "layout": "none",
+          "children": [
+            {
+              "type": "frame",
+              "id": "gHOB6",
+              "x": 20,
+              "y": 2,
+              "name": "Thumb",
+              "width": 18,
+              "height": 16,
+              "fill": "$accent/foreground",
+              "cornerRadius": 9999,
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000001A",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 3
+              }
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "iC76a",
+          "x": 2519,
+          "y": 1716,
+          "fill": "$muted",
+          "content": "lg",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 10,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "A2DlZq",
+          "x": 2541,
+          "y": 1710,
+          "name": "Switch/LG",
+          "reusable": true,
+          "width": 48,
+          "height": 24,
+          "fill": "$accent/accent",
+          "cornerRadius": 9999,
+          "layout": "none",
+          "children": [
+            {
+              "type": "frame",
+              "id": "OqISq",
+              "x": 24,
+              "y": 2,
+              "name": "Thumb",
+              "width": 22,
+              "height": 20,
+              "fill": "$accent/foreground",
+              "cornerRadius": 9999,
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000001A",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 3
+              }
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "Tu3H4",
+          "x": 2367,
+          "y": 301,
+          "name": "Input/Primary",
+          "reusable": true,
+          "width": 280,
+          "layout": "vertical",
+          "gap": 4,
+          "children": [
+            {
+              "type": "text",
+              "id": "I4m7NO",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Email",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            },
+            {
+              "type": "frame",
+              "id": "q93sBX",
+              "name": "Input",
+              "width": "fill_container",
+              "height": 40,
+              "fill": "$field/background",
+              "cornerRadius": "$radius/xl",
+              "effect": {
+                "type": "shadow",
+                "shadowType": "outer",
+                "color": "#0000000F",
+                "offset": {
+                  "x": 0,
+                  "y": 1
+                },
+                "blur": 2
+              },
+              "padding": [
+                8,
+                12
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "DJsYb",
+                  "name": "Placeholder",
+                  "fill": "$field/placeholder",
+                  "content": "you@example.com",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Oiuc9",
+              "name": "Description Wrap",
+              "padding": [
+                0,
+                4
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "PvRXY",
+                  "name": "Description",
+                  "fill": "$muted",
+                  "content": "We'll never share your email.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "VC9Q9",
+          "x": 2367,
+          "y": 1836,
+          "name": "lbl12",
+          "fill": "$muted",
+          "content": "Checkbox",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 11,
+          "fontWeight": "500"
+        },
+        {
+          "type": "frame",
+          "id": "F6BITY",
+          "x": 2367,
+          "y": 1863,
+          "name": "Checkbox/Checked",
+          "reusable": true,
+          "gap": 8,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "e1d66",
+              "name": "Control",
+              "width": 16,
+              "height": 16,
+              "fill": "$accent/accent",
+              "cornerRadius": "$radius/md",
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "fmr9I",
+                  "name": "cbCheck",
+                  "width": 10,
+                  "height": 10,
+                  "icon": "check",
+                  "library": "lucide",
+                  "fill": "$accent/foreground"
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "ihcL7",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Remember me",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "hAyb5",
+          "x": 2367,
+          "y": 1903,
+          "name": "Checkbox/Unchecked",
+          "reusable": true,
+          "gap": 8,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "iga1F",
+              "name": "Control",
+              "width": 16,
+              "height": 16,
+              "fill": "$field/background",
+              "cornerRadius": "$radius/md",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "justifyContent": "center",
+              "alignItems": "center"
+            },
+            {
+              "type": "text",
+              "id": "x3lD1",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Remember me",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "Jx5as",
+          "x": 2367,
+          "y": 229,
+          "fill": "$foreground/foreground",
+          "content": "Form Controls",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 20,
+          "fontWeight": "600"
+        },
+        {
+          "type": "frame",
+          "id": "GHhR1",
+          "x": 2367,
+          "y": 1944,
+          "name": "Checkbox/Indeterminate",
+          "reusable": true,
+          "gap": 8,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "VANo8",
+              "name": "Control",
+              "width": 16,
+              "height": 16,
+              "fill": "$accent/accent",
+              "cornerRadius": "$radius/md",
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "F3WUBs",
+                  "width": 10,
+                  "height": 10,
+                  "icon": "minus",
+                  "library": "lucide",
+                  "fill": "$accent/foreground"
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "c3HGA",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "content": "Select all",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "500"
+            }
+          ]
+        },
+        {
+          "type": "text",
+          "id": "aWCoR",
+          "x": 161,
+          "y": 87,
+          "fill": "$foreground/foreground",
+          "content": "HeroUI Design System",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 20,
+          "fontWeight": "600"
+        },
+        {
+          "type": "text",
+          "id": "FFL2N",
+          "x": 160,
+          "y": 117,
+          "fill": "$muted",
+          "content": "Learn more www.heroui.com",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 12,
+          "fontWeight": "normal"
+        },
+        {
+          "type": "frame",
+          "id": "xiBez",
+          "x": 1531,
+          "y": 64,
+          "name": "Frame",
+          "width": 209,
+          "height": 64,
+          "layout": "none",
+          "children": [
+            {
+              "type": "path",
+              "id": "NW6P9",
+              "x": 0,
+              "y": -4.547473508864641e-13,
+              "opacity": 0.3,
+              "geometry": "M0 20.94789l0 25.098c0 1.187 0.61 2.289 1.613 2.916l17.115 10.7c2.28 1.427 5.234-0.219 5.234-2.915l0-21.09699c0-1.214 0.639-2.337 1.68-2.95601l10.439-6.205 0 54.07c0 2.687 2.936 4.334 5.217 2.927l17.665-10.9c1.01383-0.62729 1.63058-1.7348 1.63-2.927l0-51.923c0-2.674-2.91-4.323-5.192-2.942l-19.321 11.696 0-23.049c0-2.667-2.897-4.317-5.179-2.95l-29.231 17.507c-1.03616 0.62176-1.67011 1.7416-1.67 2.95m125.354 25.15801c0-7.117-2.91201-10.402-8.738-10.402-6.671 0-11.36901 4.471-11.36901 14.50799l0 22.995-12.02699 0 0-63.874 12.027 0 0 23.36c2.913-4.745 7.705-7.118 14.282-7.118 11.18099 0 17.758 6.844 17.758 18.341l0 29.29-11.933 0 0-27.09999z m41.7 28.561c-14.94 0-24.429-9.673-24.429-24.546 0-14.69 9.396-24.546 24.429-24.546 16.25501 0 25.08701 11.498 22.644 27.649l-35.047 0c0.65801 7.664 5.168 12.044 12.403 12.04401 5.91901 0 9.49001-3.011 10.429-6.022l11.933 0c-1.879 8.942-10.147 15.42-22.362 15.42m-12.121-29.382l23.114 0c-0.094-6.296-4.228-10.585-11.275-10.585-6.29499 0-10.711 3.65-11.839 10.585m41.324-6.569c0-7.574 4.228-11.68 12.30901-11.68l15.409 0 0 9.855-15.691 0 0 36.317-12.02699 0-0.00002-34.492z m54.032 35.952c-15.222 0-24.89999-9.764-24.89999-24.546 0-14.782 9.67799-24.546 24.89999-24.546 15.03299 0 24.711 9.764 24.711 24.546 0 14.782-9.67801 24.546-24.711 24.546m0-9.946c7.51599 0 12.496-5.749 12.496-14.6 0-8.851-4.98001-14.69-12.496-14.69-7.61099 0-12.591 5.839-12.591 14.69 0 8.851 4.97999 14.6 12.591 14.6",
+              "fill": "$foreground/muted",
+              "width": 209,
+              "height": 64
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "C2MoyK",
+          "x": 448,
+          "y": 3071,
+          "name": "Dropdown",
+          "fill": "$overlay",
+          "cornerRadius": "$radius/3xl",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#00000014",
+            "offset": {
+              "x": 0,
+              "y": 4
+            },
+            "blur": 12
+          },
+          "layout": "vertical",
+          "gap": 4,
+          "padding": 4,
+          "children": [
+            {
+              "type": "frame",
+              "id": "b90JA0",
+              "name": "Menu Title",
+              "width": 240,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "Ck2xr",
+                  "name": "Label",
+                  "fill": "$muted",
+                  "content": "Actions",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "uZ2Z3",
+              "name": "Menu Item/Default",
+              "width": 240,
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "jTADt",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "copy",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "Qdhbx",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Duplicate",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "xCDNZ",
+              "name": "Menu Item/Default",
+              "width": 240,
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "xkT2i",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "download",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "M6Cg3V",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Download",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "e8SlQ",
+              "name": "Menu Item/Default",
+              "width": 240,
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "e1A7w",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "share-2",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "BL3gB",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Share",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "uE9P9",
+              "name": "Menu Divider",
+              "width": 240,
+              "layout": "vertical",
+              "padding": [
+                4,
+                0
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "rectangle",
+                  "id": "UwG3F",
+                  "fill": "$separator/separator",
+                  "width": "fill_container",
+                  "height": 1
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "L2phGW",
+              "name": "Menu Item/Danger",
+              "width": 240,
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "Z3SUCQ",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "trash-2",
+                  "library": "lucide",
+                  "fill": "$danger/danger"
+                },
+                {
+                  "type": "text",
+                  "id": "Ynlxj",
+                  "name": "Label",
+                  "fill": "$danger/danger",
+                  "content": "Delete",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "prompt",
+      "id": "X9kNez",
+      "x": 3567.959083557127,
+      "y": -437.12109375000045,
+      "model": "cursor-composer",
+      "width": 400,
+      "height": 219,
+      "content": "Design a dashboard with a sidebar on the left into \"dashboard-utility\" frame for a utility company showing current usage and a history in a table."
+    },
+    {
+      "type": "frame",
+      "id": "fximY",
+      "x": 3567.959083557127,
+      "y": -39.121093750000455,
+      "name": "dashboard-utility",
+      "theme": {
+        "semantic": "light"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 900,
+      "children": [
+        {
+          "type": "frame",
+          "id": "r7dNzQ",
+          "name": "Sidebar",
+          "width": 240,
+          "height": "fill_container",
+          "fill": "$surface/surface",
+          "stroke": "$separator/separator",
+          "strokeWidth": {
+            "right": 1
+          },
+          "strokeAlignment": "inner",
+          "strokeLinejoin": "round",
+          "layout": "vertical",
+          "padding": [
+            24,
+            16
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "c1czR9",
+              "name": "Logo",
+              "width": "fill_container",
+              "height": 36,
+              "gap": 10,
+              "padding": [
+                0,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "dKSWS",
+                  "name": "logoIcon",
+                  "width": 20,
+                  "height": 20,
+                  "icon": "zap",
+                  "library": "lucide",
+                  "fill": "$accent/accent"
+                },
+                {
+                  "type": "text",
+                  "id": "JEgkR",
+                  "name": "logoText",
+                  "fill": "$foreground/foreground",
+                  "content": "PowerGrid",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 18,
+                  "fontWeight": "600"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Eica6",
+              "name": "spacer1",
+              "width": "fill_container",
+              "height": 24
+            },
+            {
+              "type": "frame",
+              "id": "GmeXc",
+              "name": "navTitle",
+              "width": "fill_container",
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "hbhMn",
+                  "name": "Label",
+                  "fill": "$muted",
+                  "content": "MAIN",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "G8KZEQ",
+              "name": "navDash",
+              "width": "fill_container",
+              "height": 36,
+              "fill": "$default/default",
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "XJgt6",
+                  "name": "menuActIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "layout-dashboard",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "jmRSD",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Dashboard",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "lrs5h",
+              "name": "navUsage",
+              "width": "fill_container",
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "hV67P",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "activity",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "VAXR8",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Usage",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "GLNdE",
+              "name": "navBilling",
+              "width": "fill_container",
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "Qr8pc",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "credit-card",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "A5Dz1",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Billing",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "Ade1u",
+              "name": "navReports",
+              "width": "fill_container",
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "cPCM5",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "file-text",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "TqCRw",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Reports",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "m1N9En",
+              "name": "divider1",
+              "width": "fill_container",
+              "layout": "vertical",
+              "padding": [
+                4,
+                0
+              ],
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "rectangle",
+                  "id": "O1RQg",
+                  "fill": "$separator/separator",
+                  "width": "fill_container",
+                  "height": 1
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "H3XOc",
+              "name": "navTitle2",
+              "width": "fill_container",
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "L31NI",
+                  "name": "Label",
+                  "fill": "$muted",
+                  "content": "SETTINGS",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "500"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "gxoDX",
+              "name": "navSettings",
+              "width": "fill_container",
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "Gls8v",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "settings",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "N2y0Le",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Settings",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "j7c0dO",
+              "name": "navSupport",
+              "width": "fill_container",
+              "height": 36,
+              "cornerRadius": "$radius/2xl",
+              "gap": 12,
+              "padding": [
+                6,
+                8
+              ],
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "icon",
+                  "id": "Qj510",
+                  "name": "menuIcon",
+                  "width": 16,
+                  "height": 16,
+                  "icon": "life-buoy",
+                  "library": "lucide",
+                  "fill": "$foreground/foreground"
+                },
+                {
+                  "type": "text",
+                  "id": "UMSWq",
+                  "name": "Label",
+                  "fill": "$foreground/foreground",
+                  "content": "Support",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "UmtFa",
+          "name": "Main Content",
+          "width": "fill_container",
+          "height": "fill_container",
+          "fill": "$background/background",
+          "layout": "vertical",
+          "gap": 32,
+          "padding": [
+            32,
+            40
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "u3e5bl",
+              "name": "Header",
+              "width": "fill_container",
+              "justifyContent": "space_between",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "Eh7vq",
+                  "name": "headerLeft",
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "wjLt3",
+                      "name": "headerTitle",
+                      "fill": "$foreground/foreground",
+                      "content": "Dashboard",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 28,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "lfqBo",
+                      "name": "headerSub",
+                      "fill": "$foreground/secondary",
+                      "content": "Monitor your energy consumption and billing",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "QNp69",
+              "name": "Metrics",
+              "width": "fill_container",
+              "gap": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "Qdem9",
+                  "name": "card1",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "fEy3t",
+                      "name": "c1hdr",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "TRiYF",
+                          "name": "c1top",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "gvOIB",
+                              "name": "c1label",
+                              "fill": "$foreground/secondary",
+                              "content": "Current Usage",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 13,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "icon",
+                              "id": "XiABP",
+                              "name": "c1icon",
+                              "width": 18,
+                              "height": 18,
+                              "icon": "zap",
+                              "library": "lucide",
+                              "fill": "$accent/accent"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "text",
+                          "id": "z7Ci7l",
+                          "name": "c1val",
+                          "fill": "$foreground/foreground",
+                          "content": "2,847 kWh",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 28,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "mFCq8",
+                          "name": "c1chip",
+                          "fill": "$success/success",
+                          "content": "+12.5% from last month",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "AN1pl",
+                  "name": "card2",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "Juh1h",
+                      "name": "c2hdr",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "s0T36",
+                          "name": "c2top",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "F20xI",
+                              "name": "c2label",
+                              "fill": "$foreground/secondary",
+                              "content": "Monthly Bill",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 13,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "icon",
+                              "id": "Vb5Ft",
+                              "name": "c2icon",
+                              "width": 18,
+                              "height": 18,
+                              "icon": "dollar-sign",
+                              "library": "lucide",
+                              "fill": "$success/success"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "text",
+                          "id": "Yp6ht",
+                          "name": "c2val",
+                          "fill": "$foreground/foreground",
+                          "content": "$342.18",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 28,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "W0TdR1",
+                          "name": "c2chip",
+                          "fill": "$success/success",
+                          "content": "-3.2% from last month",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "Okqqc",
+                  "name": "card3",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "TOAlG",
+                      "name": "c3hdr",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "CuWD3",
+                          "name": "c3top",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "Igrhf",
+                              "name": "c3label",
+                              "fill": "$foreground/secondary",
+                              "content": "Avg Daily Usage",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 13,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "icon",
+                              "id": "JBZN4",
+                              "name": "c3icon",
+                              "width": 18,
+                              "height": 18,
+                              "icon": "trending-up",
+                              "library": "lucide",
+                              "fill": "$warning/warning"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "text",
+                          "id": "y20ZC",
+                          "name": "c3val",
+                          "fill": "$foreground/foreground",
+                          "content": "94.9 kWh",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 28,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "Ixc9p",
+                          "name": "c3chip",
+                          "fill": "$warning/warning",
+                          "content": "+5.1% from last month",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "QNt7U",
+                  "name": "card4",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "color": "#0000000A",
+                    "offset": {
+                      "x": 0,
+                      "y": 2
+                    },
+                    "blur": 4
+                  },
+                  "layout": "vertical",
+                  "gap": 12,
+                  "padding": 16,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "XDTj2",
+                      "name": "c4hdr",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "B7w7GE",
+                          "name": "c4top",
+                          "width": "fill_container",
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "aw5TA",
+                              "name": "c4label",
+                              "fill": "$foreground/secondary",
+                              "content": "Peak Demand",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 13,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "icon",
+                              "id": "A2pBoj",
+                              "name": "c4icon",
+                              "width": 18,
+                              "height": 18,
+                              "icon": "gauge",
+                              "library": "lucide",
+                              "fill": "$danger/danger"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "text",
+                          "id": "mRK2I",
+                          "name": "c4val",
+                          "fill": "$foreground/foreground",
+                          "content": "8.4 kW",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 28,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "UVuWj",
+                          "name": "c4chip",
+                          "fill": "$danger/danger",
+                          "content": "+2.8% from last month",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 12,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "hHRhX",
+              "name": "Frame 3",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": "$spacing/3",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "FEP4f",
+                  "name": "tHeader",
+                  "width": "fill_container",
+                  "justifyContent": "space_between",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "KqsSp",
+                      "name": "tTitle",
+                      "fill": "$foreground/foreground",
+                      "content": "Usage History",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 18,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "ZzzPD",
+                      "name": "tAction",
+                      "height": 32,
+                      "fill": "$default/default",
+                      "cornerRadius": "$radius/3xl",
+                      "gap": 5,
+                      "padding": [
+                        8,
+                        "$spacing/3"
+                      ],
+                      "justifyContent": "center",
+                      "alignItems": "center",
+                      "children": [
+                        {
+                          "type": "icon",
+                          "id": "haa7Q",
+                          "width": 14,
+                          "height": 14,
+                          "icon": "download",
+                          "library": "lucide",
+                          "fill": "$accent/accent"
+                        },
+                        {
+                          "type": "text",
+                          "id": "RgdHa",
+                          "name": "Label",
+                          "fill": "$accent/accent",
+                          "content": "Export",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "500"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "GSdYn",
+                  "name": "tableCard",
+                  "clip": true,
+                  "width": "fill_container",
+                  "fill": "$surface/secondary",
+                  "cornerRadius": 20,
+                  "effect": {
+                    "type": "shadow",
+                    "shadowType": "outer",
+                    "enabled": false,
+                    "color": "#000000"
+                  },
+                  "layout": "vertical",
+                  "padding": [
+                    0,
+                    4,
+                    4,
+                    4
+                  ],
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "aq4pj",
+                      "name": "table",
+                      "clip": true,
+                      "width": "fill_container",
+                      "fill": "#00000000",
+                      "layout": "vertical",
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "KjzKb",
+                          "name": "headerRow",
+                          "width": "fill_container",
+                          "fill": "$surface/secondary",
+                          "stroke": "$separator/separator",
+                          "strokeWidth": {
+                            "bottom": 1
+                          },
+                          "strokeAlignment": "inner",
+                          "strokeLinejoin": "round",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "jgYmV",
+                              "name": "hCol1",
+                              "width": 140,
+                              "fill": "$surface/secondary",
+                              "padding": [
+                                10,
+                                16
+                              ],
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "Rr4f2",
+                                  "name": "Label",
+                                  "fill": "$muted",
+                                  "content": "Date",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "500"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "FEjpg",
+                              "name": "hCol2",
+                              "width": "fill_container",
+                              "fill": "$surface/secondary",
+                              "padding": [
+                                10,
+                                16
+                              ],
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "axEzx",
+                                  "name": "Label",
+                                  "fill": "$muted",
+                                  "content": "Description",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "500"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "X4smcF",
+                              "name": "hCol3",
+                              "width": 120,
+                              "fill": "$surface/secondary",
+                              "padding": [
+                                10,
+                                16
+                              ],
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "lVPCL",
+                                  "name": "Label",
+                                  "fill": "$muted",
+                                  "content": "Usage (kWh)",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "500"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "zeYLm",
+                              "name": "hCol4",
+                              "width": 120,
+                              "fill": "$surface/secondary",
+                              "padding": [
+                                10,
+                                16
+                              ],
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "e1YvdW",
+                                  "name": "Label",
+                                  "fill": "$muted",
+                                  "content": "Cost",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "500"
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "cNL1W",
+                              "name": "hCol5",
+                              "width": 120,
+                              "fill": "$surface/secondary",
+                              "padding": [
+                                10,
+                                16
+                              ],
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "ruvLO",
+                                  "name": "Label",
+                                  "fill": "$muted",
+                                  "content": "Status",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 12,
+                                  "fontWeight": "500"
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "Cw0tt",
+                          "name": "tbody",
+                          "clip": true,
+                          "width": "fill_container",
+                          "cornerRadius": "$radius/2xl",
+                          "layout": "vertical",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "m1JDgP",
+                              "name": "row1",
+                              "width": "fill_container",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "TjsJh",
+                                  "name": "r1c1",
+                                  "width": 140,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "VtdKT",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Mar 23, 2026",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "hK1ZI",
+                                  "name": "r1c2",
+                                  "width": "fill_container",
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "ew6yF",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Residential electricity",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "v7xfmu",
+                                  "name": "r1c3",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "GKy58",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "98.2",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "I76OJ",
+                                  "name": "r1c4",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "bYaUI",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "$11.78",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "GneV3",
+                                  "name": "r1c5",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "R12IO",
+                                      "name": "chip1",
+                                      "fill": "$success/success",
+                                      "cornerRadius": "$radius/2xl",
+                                      "gap": 2,
+                                      "padding": [
+                                        2,
+                                        4
+                                      ],
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "Ivtle",
+                                          "name": "Label",
+                                          "fill": "$success/foreground",
+                                          "content": "Paid",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "500"
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "NTJAT",
+                              "name": "row2",
+                              "width": "fill_container",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "bilv7",
+                                  "name": "r2c1",
+                                  "width": 140,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "yJLlU",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Mar 22, 2026",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "uJpIH",
+                                  "name": "r2c2",
+                                  "width": "fill_container",
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "ggibG",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Residential electricity",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "w4Arp",
+                                  "name": "r2c3",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "S8VdqV",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "102.5",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "LuoGN",
+                                  "name": "r2c4",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "M1DV5V",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "$12.30",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "wIr1v",
+                                  "name": "r2c5",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "sWMHO",
+                                      "name": "chip2",
+                                      "fill": "$success/success",
+                                      "cornerRadius": "$radius/2xl",
+                                      "gap": 2,
+                                      "padding": [
+                                        2,
+                                        4
+                                      ],
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "Z2sJO",
+                                          "name": "Label",
+                                          "fill": "$success/foreground",
+                                          "content": "Paid",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "500"
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "L0E7Y",
+                              "name": "row3",
+                              "width": "fill_container",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "Bwhc7",
+                                  "name": "r3c1",
+                                  "width": 140,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "oI8qn",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Mar 21, 2026",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "i08iu",
+                                  "name": "r3c2",
+                                  "width": "fill_container",
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "XJ8aI",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Residential electricity",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "E7bfrs",
+                                  "name": "r3c3",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "n55ji",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "87.6",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "j1mOM",
+                                  "name": "r3c4",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "e5WWDI",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "$10.51",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "XtGOa",
+                                  "name": "r3c5",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "V4CO60",
+                                      "name": "chip3",
+                                      "fill": "$success/success",
+                                      "cornerRadius": "$radius/2xl",
+                                      "gap": 2,
+                                      "padding": [
+                                        2,
+                                        4
+                                      ],
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "ezEM0",
+                                          "name": "Label",
+                                          "fill": "$success/foreground",
+                                          "content": "Paid",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "500"
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "f0zki5",
+                              "name": "row4",
+                              "width": "fill_container",
+                              "stroke": "$separator/separator",
+                              "strokeWidth": {
+                                "bottom": 1
+                              },
+                              "strokeAlignment": "inner",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "BOWWn",
+                                  "name": "r4c1",
+                                  "width": 140,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "ezOGo",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Mar 20, 2026",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "K8FEi",
+                                  "name": "r4c2",
+                                  "width": "fill_container",
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "PgE85",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Peak hour surcharge",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "RLWkC",
+                                  "name": "r4c3",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "tQjZA",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "112.3",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ulEuZ",
+                                  "name": "r4c4",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "idJjm",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "$15.72",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "hwaCv",
+                                  "name": "r4c5",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "ubqmv",
+                                      "name": "chip4",
+                                      "fill": "$warning/warning",
+                                      "cornerRadius": "$radius/2xl",
+                                      "gap": 2,
+                                      "padding": [
+                                        2,
+                                        4
+                                      ],
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "I5pMyx",
+                                          "name": "Label",
+                                          "fill": "$warning/foreground",
+                                          "content": "Pending",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "500"
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ySuHB",
+                              "name": "row5",
+                              "width": "fill_container",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "TIVdL",
+                                  "name": "r5c1",
+                                  "width": 140,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "wVqno",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Mar 19, 2026",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "MdI5o",
+                                  "name": "r5c2",
+                                  "width": "fill_container",
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "R49IK",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "Residential electricity",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "iffSR",
+                                  "name": "r5c3",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "nFOKO",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "91.4",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "EtoGh",
+                                  "name": "r5c4",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "Q8KbdY",
+                                      "name": "Value",
+                                      "fill": "$foreground/foreground",
+                                      "content": "$10.97",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 14,
+                                      "fontWeight": "normal"
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "viqaq",
+                                  "name": "r5c5",
+                                  "width": 120,
+                                  "fill": "$surface/surface",
+                                  "stroke": "$separator/separator",
+                                  "strokeWidth": {
+                                    "bottom": 1
+                                  },
+                                  "strokeAlignment": "inner",
+                                  "strokeLinejoin": "round",
+                                  "padding": [
+                                    12,
+                                    16
+                                  ],
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "frame",
+                                      "id": "Q9cwsI",
+                                      "name": "chip5",
+                                      "fill": "$success/success",
+                                      "cornerRadius": "$radius/2xl",
+                                      "gap": 2,
+                                      "padding": [
+                                        2,
+                                        4
+                                      ],
+                                      "alignItems": "center",
+                                      "children": [
+                                        {
+                                          "type": "text",
+                                          "id": "l9L8Q",
+                                          "name": "Label",
+                                          "fill": "$success/foreground",
+                                          "content": "Paid",
+                                          "fontFamily": "$typography/font-sans",
+                                          "fontSize": 11,
+                                          "fontWeight": "500"
+                                        }
+                                      ]
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "T5Ma5",
+                          "name": "footer",
+                          "width": "fill_container",
+                          "padding": [
+                            10,
+                            16
+                          ],
+                          "justifyContent": "space_between",
+                          "alignItems": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "kcR6A",
+                              "name": "Summary",
+                              "fill": "$muted",
+                              "content": "1-5 of 31",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 13,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "HBYBE",
+      "x": 3567.959083557127,
+      "y": 1020.8789062499995,
+      "name": "Receiver / Login",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 900,
+      "fill": "$background/background",
+      "layout": "vertical",
+      "justifyContent": "center",
+      "alignItems": "center",
+      "children": [
+        {
+          "id": "f7gFY",
+          "type": "ref",
+          "ref": "f07b1",
+          "name": "Login card",
+          "width": 400,
+          "padding": 32,
+          "gap": 24,
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "children": [
+            {
+              "type": "frame",
+              "id": "RFl9o",
+              "name": "Heading",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 10,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "yItF3",
+                  "name": "Brand",
+                  "gap": 10,
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "rectangle",
+                      "id": "Nn2ic",
+                      "name": "Logo",
+                      "fill": {
+                        "type": "image",
+                        "enabled": true,
+                        "url": "../website/design-assets/gameplane-icon.png",
+                        "mode": "contain"
+                      },
+                      "width": 24,
+                      "height": 24
+                    },
+                    {
+                      "type": "text",
+                      "id": "v4e5d",
+                      "name": "Wordmark",
+                      "fill": "$foreground/foreground",
+                      "content": "gameplane",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "dsE3s",
+                  "name": "Eyebrow",
+                  "fill": "$accent/accent",
+                  "content": "PRIVATE DASHBOARD",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 11,
+                  "fontWeight": "normal",
+                  "letterSpacing": 1.5
+                },
+                {
+                  "type": "text",
+                  "id": "CC9oc",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "Gameplane telemetry",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 24,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "c0nVDt",
+                  "name": "Subtitle",
+                  "fill": "$foreground/secondary",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Private dashboard. Sign in with the dashboard token.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "MTBth",
+              "name": "Form",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 16,
+              "children": [
+                {
+                  "id": "w3zMra",
+                  "type": "ref",
+                  "ref": "Tu3H4",
+                  "name": "Token field",
+                  "width": "fill_container",
+                  "descendants": {
+                    "I4m7NO": {
+                      "content": "Dashboard token"
+                    },
+                    "DJsYb": {
+                      "content": "••••••••••••••••••••••••"
+                    },
+                    "PvRXY": {
+                      "content": "The DASHBOARD_TOKEN value from the receiver's Secret."
+                    }
+                  }
+                },
+                {
+                  "id": "V9VTdg",
+                  "type": "ref",
+                  "ref": "hvQ4m",
+                  "name": "Sign in",
+                  "width": "fill_container",
+                  "justifyContent": "center",
+                  "descendants": {
+                    "UYKSN": {
+                      "enabled": false
+                    },
+                    "y9bBK0": {
+                      "content": "Sign in"
+                    }
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "eKQ9o",
+          "name": "Footer gap",
+          "width": 10,
+          "height": 24
+        },
+        {
+          "type": "text",
+          "id": "UKIoU",
+          "name": "Footnote",
+          "fill": "$foreground/muted",
+          "content": "Sessions last 12 hours. Rotating the token signs everyone out.",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 12,
+          "fontWeight": "normal"
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "a7wUpP",
+      "x": 5127.959083557127,
+      "y": 1020.8789062499995,
+      "name": "Receiver / Login — refused",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 900,
+      "fill": "$background/background",
+      "layout": "vertical",
+      "justifyContent": "center",
+      "alignItems": "center",
+      "children": [
+        {
+          "id": "v4MbR",
+          "type": "ref",
+          "ref": "f07b1",
+          "name": "Login card",
+          "width": 400,
+          "padding": 32,
+          "gap": 24,
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "children": [
+            {
+              "type": "frame",
+              "id": "ojnmT",
+              "name": "Heading",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 10,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "d3ASU",
+                  "name": "Brand",
+                  "gap": 10,
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "rectangle",
+                      "id": "tOXnc",
+                      "name": "Logo",
+                      "fill": {
+                        "type": "image",
+                        "enabled": true,
+                        "url": "../website/design-assets/gameplane-icon.png",
+                        "mode": "contain"
+                      },
+                      "width": 24,
+                      "height": 24
+                    },
+                    {
+                      "type": "text",
+                      "id": "Rj0dV",
+                      "name": "Wordmark",
+                      "fill": "$foreground/foreground",
+                      "content": "gameplane",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 15,
+                      "fontWeight": "600"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "E5yaH",
+                  "name": "Eyebrow",
+                  "fill": "$accent/accent",
+                  "content": "PRIVATE DASHBOARD",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 11,
+                  "fontWeight": "normal",
+                  "letterSpacing": 1.5
+                },
+                {
+                  "type": "text",
+                  "id": "bVf7f",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "Gameplane telemetry",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 24,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "GZktc",
+                  "name": "Subtitle",
+                  "fill": "$foreground/secondary",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Private dashboard. Sign in with the dashboard token.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "id": "D2oxw0",
+              "type": "ref",
+              "ref": "YxI4e",
+              "name": "Refusal alert",
+              "width": "fill_container",
+              "descendants": {
+                "K5BCAi": {
+                  "content": "Invalid credentials"
+                },
+                "jLj0v": {
+                  "enabled": false
+                },
+                "BLuJ9": {
+                  "enabled": false
+                }
+              }
+            },
+            {
+              "type": "frame",
+              "id": "XgGt2",
+              "name": "Form",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 16,
+              "children": [
+                {
+                  "id": "lZ2GC",
+                  "type": "ref",
+                  "ref": "Tu3H4",
+                  "name": "Token field",
+                  "width": "fill_container",
+                  "descendants": {
+                    "I4m7NO": {
+                      "content": "Dashboard token"
+                    },
+                    "DJsYb": {
+                      "content": "••••••••••••••••••••••••"
+                    },
+                    "PvRXY": {
+                      "content": "The DASHBOARD_TOKEN value from the receiver's Secret."
+                    }
+                  }
+                },
+                {
+                  "id": "W9k1fv",
+                  "type": "ref",
+                  "ref": "hvQ4m",
+                  "name": "Sign in",
+                  "width": "fill_container",
+                  "justifyContent": "center",
+                  "descendants": {
+                    "UYKSN": {
+                      "enabled": false
+                    },
+                    "y9bBK0": {
+                      "content": "Sign in"
+                    }
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "E1qJ3",
+          "name": "Footer gap",
+          "width": 10,
+          "height": 24
+        },
+        {
+          "type": "text",
+          "id": "vbkKX",
+          "name": "Footnote",
+          "fill": "$foreground/muted",
+          "content": "Sessions last 12 hours. Rotating the token signs everyone out.",
+          "fontFamily": "$typography/font-sans",
+          "fontSize": 12,
+          "fontWeight": "normal"
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "y49Ie",
+      "x": 3567.959083557127,
+      "y": 2040.8789062499995,
+      "name": "Telemetry components",
+      "theme": {
+        "semantic": "dark"
+      },
+      "fill": "$background/background",
+      "gap": 48,
+      "padding": 32,
+      "children": [
+        {
+          "type": "frame",
+          "id": "sDDfo",
+          "name": "Telemetry/Stat tile",
+          "reusable": true,
+          "width": 280,
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "effect": {
+            "type": "shadow",
+            "shadowType": "outer",
+            "color": "#0000000A",
+            "offset": {
+              "x": 0,
+              "y": 2
+            },
+            "blur": 4
+          },
+          "layout": "vertical",
+          "gap": 6,
+          "padding": 16,
+          "children": [
+            {
+              "type": "text",
+              "id": "yia1E",
+              "name": "Label",
+              "fill": "$foreground/secondary",
+              "content": "Reports, latest day",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            },
+            {
+              "type": "text",
+              "id": "tZRdh",
+              "name": "Value",
+              "fill": "$foreground/foreground",
+              "content": "1,284",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 28,
+              "fontWeight": "600"
+            },
+            {
+              "type": "text",
+              "id": "oPQEN",
+              "name": "Note",
+              "fill": "$foreground/muted",
+              "content": "2026-10-06 (UTC)",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 12,
+              "fontWeight": "normal"
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "wPbIp",
+          "name": "Telemetry/Share row",
+          "reusable": true,
+          "width": 420,
+          "gap": 12,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "text",
+              "id": "j1J75",
+              "name": "Label",
+              "fill": "$foreground/foreground",
+              "textGrowth": "fixed-width",
+              "width": 128,
+              "content": "k3s",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            },
+            {
+              "type": "frame",
+              "id": "L6Z5jA",
+              "name": "Track",
+              "width": "fill_container",
+              "height": 12,
+              "children": [
+                {
+                  "type": "rectangle",
+                  "cornerRadius": [
+                    0,
+                    4,
+                    4,
+                    0
+                  ],
+                  "id": "dMFUm",
+                  "name": "Bar",
+                  "fill": "$chart/series-1",
+                  "width": 140,
+                  "height": 12
+                }
+              ]
+            },
+            {
+              "type": "text",
+              "id": "uTqdm",
+              "name": "Value",
+              "fill": "$foreground/secondary",
+              "textGrowth": "fixed-width",
+              "width": 48,
+              "content": "48%",
+              "textAlign": "right",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 13,
+              "fontWeight": "normal"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "i0xK1E",
+      "x": 6727.959083557127,
+      "y": 1020.8789062499995,
+      "name": "Receiver / Overview",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "type": "frame",
+          "id": "PrCYy",
+          "name": "Top bar",
+          "width": "fill_container",
+          "height": 64,
+          "stroke": "$border",
+          "strokeWidth": {
+            "bottom": 1
+          },
+          "strokeAlignment": "inner",
+          "padding": [
+            0,
+            40
+          ],
+          "justifyContent": "space_between",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "EsFiy",
+              "name": "Brand",
+              "gap": 10,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "rectangle",
+                  "id": "RDJgN",
+                  "name": "Logo",
+                  "fill": {
+                    "type": "image",
+                    "enabled": true,
+                    "url": "../website/design-assets/gameplane-icon.png",
+                    "mode": "contain"
+                  },
+                  "width": 24,
+                  "height": 24
+                },
+                {
+                  "type": "text",
+                  "id": "ma9hV",
+                  "name": "Wordmark",
+                  "fill": "$foreground/foreground",
+                  "content": "gameplane",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 15,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "bBhW1",
+                  "name": "Slash",
+                  "fill": "$foreground/muted",
+                  "content": "/",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 15,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "text",
+                  "id": "BZqrR",
+                  "name": "Product",
+                  "fill": "$foreground/foreground",
+                  "content": "Telemetry",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 15,
+                  "fontWeight": "normal"
+                },
+                {
+                  "id": "Y4ENwh",
+                  "type": "ref",
+                  "ref": "Q401P",
+                  "name": "Approx chip",
+                  "descendants": {
+                    "wH6ey": {
+                      "content": "Approximate · self-reported"
+                    }
+                  }
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "lIxVZ",
+              "name": "Session",
+              "gap": 16,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "W416z",
+                  "name": "As of",
+                  "fill": "$foreground/muted",
+                  "content": "Data through 2026-10-06 (UTC)",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                },
+                {
+                  "id": "vkzqR",
+                  "type": "ref",
+                  "ref": "bCpKh",
+                  "name": "Sign out",
+                  "descendants": {
+                    "Watg8": {
+                      "icon": "log-out"
+                    },
+                    "U8ICg": {
+                      "content": "Sign out"
+                    }
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "ZDH5z",
+          "name": "Content",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 32,
+          "padding": [
+            32,
+            40,
+            48,
+            40
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "EEm5G",
+              "name": "Title row",
+              "width": "fill_container",
+              "justifyContent": "space_between",
+              "alignItems": "end",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "cHCb4",
+                  "name": "Title block",
+                  "width": 760,
+                  "layout": "vertical",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "BLOll",
+                      "name": "Eyebrow",
+                      "fill": "$accent/accent",
+                      "content": "PROVIDER OVERVIEW",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 12,
+                      "fontWeight": "normal",
+                      "letterSpacing": 1.5
+                    },
+                    {
+                      "type": "text",
+                      "id": "gTaru",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Usage across reporting installs",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 32,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "v8Ohz",
+                      "name": "Subtitle",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Daily aggregates from self-reported, anonymous reports. Every figure is approximate: installs choose to report, and nothing is verified beyond the report signature.",
+                      "lineHeight": 1.5,
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "id": "Gwgkx",
+                  "type": "ref",
+                  "ref": "sklNL",
+                  "name": "Range",
+                  "children": [
+                    {
+                      "id": "spB9q",
+                      "type": "ref",
+                      "ref": "nO0GM",
+                      "name": "7 days",
+                      "descendants": {
+                        "x5KZZd": {
+                          "content": "7 days"
+                        }
+                      }
+                    },
+                    {
+                      "id": "CEvvH",
+                      "type": "ref",
+                      "ref": "iEQse",
+                      "name": "30 days",
+                      "descendants": {
+                        "BtgBT": {
+                          "content": "30 days"
+                        }
+                      }
+                    },
+                    {
+                      "id": "rcNte",
+                      "type": "ref",
+                      "ref": "nO0GM",
+                      "name": "90 days",
+                      "descendants": {
+                        "x5KZZd": {
+                          "content": "90 days"
+                        }
+                      }
+                    },
+                    {
+                      "id": "kZitx",
+                      "type": "ref",
+                      "ref": "nO0GM",
+                      "name": "365 days",
+                      "descendants": {
+                        "x5KZZd": {
+                          "content": "365 days"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "WyzQu",
+              "name": "Basic heading",
+              "width": "fill_container",
+              "layout": "vertical",
+              "gap": 4,
+              "children": [
+                {
+                  "type": "text",
+                  "id": "NaBPb",
+                  "name": "Heading",
+                  "fill": "$foreground/foreground",
+                  "content": "Basic reports",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 20,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "YTarC",
+                  "name": "Sub",
+                  "fill": "$foreground/muted",
+                  "content": "Version, server count and template count from every report, basic or extended.",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "iOskc",
+              "name": "Basic KPIs",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "id": "WySx8",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Reports, latest day",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Reports, latest day"
+                    },
+                    "tZRdh": {
+                      "content": "1,284"
+                    },
+                    "oPQEN": {
+                      "content": "2026-10-06 (UTC)"
+                    }
+                  }
+                },
+                {
+                  "id": "kzCOI",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Reports, last 30 days",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Reports, last 30 days"
+                    },
+                    "tZRdh": {
+                      "content": "37,912"
+                    },
+                    "oPQEN": {
+                      "content": "Sep 7 – Oct 6"
+                    }
+                  }
+                },
+                {
+                  "id": "hubU0",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Reports since collection began",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Reports since collection began"
+                    },
+                    "tZRdh": {
+                      "content": "412,055"
+                    },
+                    "oPQEN": {
+                      "content": "Since 2026-03-02"
+                    }
+                  }
+                },
+                {
+                  "id": "LI86z",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Median servers per install",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Median servers per install"
+                    },
+                    "tZRdh": {
+                      "content": "3"
+                    },
+                    "oPQEN": {
+                      "content": "Latest day; mean 4.6"
+                    }
+                  }
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "rTyW6",
+              "name": "Reports per day",
+              "width": "fill_container",
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 16,
+              "padding": 20,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "EHBKg",
+                  "name": "Header",
+                  "width": "fill_container",
+                  "justifyContent": "space_between",
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "poOcW",
+                      "name": "Titles",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "wurGm",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Reports per day",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "rZQiH",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "content": "Accepted reports per UTC day, last 30 days",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "text",
+                      "id": "LWxly",
+                      "name": "Table link",
+                      "fill": "$accent/accent",
+                      "content": "View as table",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "FZz94",
+                  "name": "Plot row",
+                  "width": "fill_container",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "r2jIv",
+                      "name": "Y axis",
+                      "width": 44,
+                      "height": 208,
+                      "layout": "vertical",
+                      "justifyContent": "space_between",
+                      "alignItems": "end",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "lDbNf",
+                          "name": "Tick 1,500",
+                          "fill": "$foreground/muted",
+                          "content": "1,500",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "gfX9J",
+                          "name": "Tick 1,000",
+                          "fill": "$foreground/muted",
+                          "content": "1,000",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "RpyKE",
+                          "name": "Tick 500",
+                          "fill": "$foreground/muted",
+                          "content": "500",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "uhswv",
+                          "name": "Tick 0",
+                          "fill": "$foreground/muted",
+                          "content": "0",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "itl6U",
+                      "name": "Plot",
+                      "width": 1260,
+                      "height": 208,
+                      "layout": "none",
+                      "children": [
+                        {
+                          "type": "rectangle",
+                          "id": "ehS8J",
+                          "x": 0,
+                          "y": 4,
+                          "name": "Grid 0",
+                          "fill": "$chart/grid",
+                          "width": 1260,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "RM4fJ",
+                          "x": 0,
+                          "y": 70.66666666666667,
+                          "name": "Grid 1",
+                          "fill": "$chart/grid",
+                          "width": 1260,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "scHGZ",
+                          "x": 0,
+                          "y": 137.33333333333334,
+                          "name": "Grid 2",
+                          "fill": "$chart/grid",
+                          "width": 1260,
+                          "height": 1
+                        },
+                        {
+                          "type": "rectangle",
+                          "id": "DogbT",
+                          "x": 0,
+                          "y": 204,
+                          "name": "Baseline",
+                          "fill": "$chart/baseline",
+                          "width": 1260,
+                          "height": 1
+                        },
+                        {
+                          "type": "frame",
+                          "id": "z70gC",
+                          "x": 0,
+                          "y": -20,
+                          "name": "Columns",
+                          "width": 1260,
+                          "height": 224,
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "frame",
+                              "id": "z5eSP5",
+                              "name": "Day 1",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "NpPE9",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 149
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "InasO",
+                              "name": "Day 2",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "blVmn",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 152
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "S0c3P5",
+                              "name": "Day 3",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "xVz1h",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 153
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "gIes7",
+                              "name": "Day 4",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "h00jy",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 155
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "cZqOZ",
+                              "name": "Day 5",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "S4olM",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 156
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "zpa9L",
+                              "name": "Day 6",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "akFYW",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 147
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "UQMno",
+                              "name": "Day 7",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "K4f0E8",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 145
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "ZtVqm",
+                              "name": "Day 8",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "c41OTM",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 155
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "CzyFK",
+                              "name": "Day 9",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "wuxFw",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 157
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "JkRh7",
+                              "name": "Day 10",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "O0XwqM",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 159
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "GPoP1",
+                              "name": "Day 11",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "jJg0u",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 160
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "IKV9c",
+                              "name": "Day 12",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "AVr3K",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 161
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "YaNBo",
+                              "name": "Day 13",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "xrTlP",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 151
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "KxeCR",
+                              "name": "Day 14",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "wNeIt",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 149
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "jUFhJ",
+                              "name": "Day 15",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "S2bIOp",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 160
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "wniFH",
+                              "name": "Day 16",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "G4H63L",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 162
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "xUpKT",
+                              "name": "Day 17",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "ylFmR",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 163
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "LVN8u",
+                              "name": "Day 18",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "JNSrg",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 164
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "p7bhT",
+                              "name": "Day 19",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "YvPGq",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 166
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "tzVMN",
+                              "name": "Day 20",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "Cwn6p",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 155
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "jt3C1",
+                              "name": "Day 21",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "B3ZW9n",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 152
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "qsYxX",
+                              "name": "Day 22",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "VOVr1",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 163
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "myPLG",
+                              "name": "Day 23",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "t1rje",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 165
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "NV5dX",
+                              "name": "Day 24",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "zGHCv",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 167
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "UbiJU",
+                              "name": "Day 25",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "T2GSn7",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 168
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "thEOO",
+                              "name": "Day 26",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "LbbCa",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 169
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "N08Apm",
+                              "name": "Day 27",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "jyLUn",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 158
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "gNm4A",
+                              "name": "Day 28",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "fSZus",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 157
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "cvTAF",
+                              "name": "Day 29",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "M8UwO0",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 168
+                                }
+                              ]
+                            },
+                            {
+                              "type": "frame",
+                              "id": "snyg0",
+                              "name": "Day 30",
+                              "width": 42,
+                              "layout": "vertical",
+                              "gap": 4,
+                              "alignItems": "center",
+                              "children": [
+                                {
+                                  "type": "text",
+                                  "id": "rbAnN",
+                                  "name": "Value label",
+                                  "fill": "$foreground/foreground",
+                                  "content": "1,284",
+                                  "fontFamily": "$typography/font-sans",
+                                  "fontSize": 11,
+                                  "fontWeight": "600"
+                                },
+                                {
+                                  "type": "rectangle",
+                                  "cornerRadius": [
+                                    4,
+                                    4,
+                                    0,
+                                    0
+                                  ],
+                                  "id": "g1YRBL",
+                                  "name": "Column",
+                                  "fill": "$chart/series-1",
+                                  "width": 20,
+                                  "height": 171
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "Bt3QV",
+                  "name": "X axis",
+                  "width": "fill_container",
+                  "padding": [
+                    0,
+                    0,
+                    0,
+                    52
+                  ],
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "M4cUj",
+                      "name": "X 1",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "S4zhC",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 7",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "irNR9",
+                      "name": "X 2",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "XTio8",
+                      "name": "X 3",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "k38ubo",
+                      "name": "X 4",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "meJSb",
+                      "name": "X 5",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "fvMy1",
+                      "name": "X 6",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "Gi10h",
+                      "name": "X 7",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "sxkq4",
+                      "name": "X 8",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "W8qe74",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 14",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "c8FG2",
+                      "name": "X 9",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "xlbNh",
+                      "name": "X 10",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "MTXE9",
+                      "name": "X 11",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "vQUPg",
+                      "name": "X 12",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "A0jjv",
+                      "name": "X 13",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "KuEti",
+                      "name": "X 14",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "WG8Df",
+                      "name": "X 15",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "MUVNi",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 21",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "fXfoH",
+                      "name": "X 16",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "vMXSq",
+                      "name": "X 17",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "qf1sj",
+                      "name": "X 18",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "YzSdz",
+                      "name": "X 19",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "ENZVx",
+                      "name": "X 20",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "x0qIV",
+                      "name": "X 21",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "Og5PT",
+                      "name": "X 22",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "n2HIzG",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 28",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "d67ks",
+                      "name": "X 23",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "SE93c",
+                      "name": "X 24",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "iusfp",
+                      "name": "X 25",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "etd4K",
+                      "name": "X 26",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "lGgoB",
+                      "name": "X 27",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "jH0Zu",
+                      "name": "X 28",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "A29IAZ",
+                      "name": "X 29",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "kTkYU",
+                          "name": "Label",
+                          "fill": "$foreground/muted",
+                          "content": "Oct 5",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "IPQap",
+                      "name": "X 30",
+                      "width": 42,
+                      "height": 14,
+                      "justifyContent": "center"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "p8RL2",
+              "name": "Basic breakdowns",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "Waady",
+                  "name": "Versions",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 16,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "BTPQR",
+                      "name": "Titles",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "HlgPb",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Versions",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "uO6sB",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": 600,
+                          "content": "Reports on the latest day by reported version. Top 10, then Other and Invalid.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "jjkwN",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "UYCro",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version 0.3.0",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "0.3.0",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 432
+                            },
+                            "uTqdm": {
+                              "content": "812"
+                            }
+                          }
+                        },
+                        {
+                          "id": "GIRd2",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version 0.3.0-rc.1",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "0.3.0-rc.1",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 107
+                            },
+                            "uTqdm": {
+                              "content": "201"
+                            }
+                          }
+                        },
+                        {
+                          "id": "tKNOd",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version 0.2.0-beta.8",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "0.2.0-beta.8",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 76
+                            },
+                            "uTqdm": {
+                              "content": "143"
+                            }
+                          }
+                        },
+                        {
+                          "id": "o7v436",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version 0.2.0-beta.7",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "0.2.0-beta.7",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 32
+                            },
+                            "uTqdm": {
+                              "content": "61"
+                            }
+                          }
+                        },
+                        {
+                          "id": "vmMgu",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version 0.2.0-beta.6",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "0.2.0-beta.6",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 14
+                            },
+                            "uTqdm": {
+                              "content": "27"
+                            }
+                          }
+                        },
+                        {
+                          "id": "J6DG4",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version 0.2.0-beta.5",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "0.2.0-beta.5",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 5
+                            },
+                            "uTqdm": {
+                              "content": "9"
+                            }
+                          }
+                        },
+                        {
+                          "id": "n1k1ys",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version dev",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "dev",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 2
+                            },
+                            "uTqdm": {
+                              "content": "4"
+                            }
+                          }
+                        },
+                        {
+                          "id": "aFTHI",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version Other",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Other",
+                              "fill": "$foreground/muted"
+                            },
+                            "dMFUm": {
+                              "width": 13
+                            },
+                            "uTqdm": {
+                              "content": "24"
+                            }
+                          }
+                        },
+                        {
+                          "id": "EmQ33",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Version Invalid",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Invalid",
+                              "fill": "$foreground/muted"
+                            },
+                            "dMFUm": {
+                              "width": 2
+                            },
+                            "uTqdm": {
+                              "content": "3"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "U44h65",
+                  "name": "Fleet size",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 16,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "DIXJG",
+                      "name": "Titles",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "adjqS",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Servers per install",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "YGPWl",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": 600,
+                          "content": "Installs on the latest day by game-server count. Median 3, mean 4.6.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "YDYbk",
+                      "name": "Plot row",
+                      "width": "fill_container",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "mpEfM",
+                          "name": "Y axis",
+                          "width": 44,
+                          "height": 188,
+                          "layout": "vertical",
+                          "justifyContent": "space_between",
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "nT2NS",
+                              "name": "Tick 400",
+                              "fill": "$foreground/muted",
+                              "content": "400",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "iL2Mm",
+                              "name": "Tick 200",
+                              "fill": "$foreground/muted",
+                              "content": "200",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "ovHB0",
+                              "name": "Tick 0",
+                              "fill": "$foreground/muted",
+                              "content": "0",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "CG2nD",
+                          "name": "Plot",
+                          "width": 580,
+                          "height": 188,
+                          "layout": "none",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "id": "aXWl4",
+                              "x": 0,
+                              "y": 94,
+                              "name": "Grid mid",
+                              "fill": "$chart/grid",
+                              "width": 580,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "cYdRA",
+                              "x": 0,
+                              "y": 4,
+                              "name": "Grid top",
+                              "fill": "$chart/grid",
+                              "width": 580,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "rszg8",
+                              "x": 0,
+                              "y": 184,
+                              "name": "Baseline",
+                              "fill": "$chart/baseline",
+                              "width": 580,
+                              "height": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "s9D8Th",
+                              "x": 0,
+                              "y": -16,
+                              "name": "Columns",
+                              "width": 580,
+                              "height": 200,
+                              "alignItems": "end",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "reyUt",
+                                  "name": "Band 0",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "p84xhn",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 18
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "RpQdP",
+                                  "name": "Band 1",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "C6TPdA",
+                                      "name": "Value label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "388",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "AaTqq",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 175
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ho3un",
+                                  "name": "Band 2",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "wAb0H",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 111
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "s0YGas",
+                                  "name": "Band 3–5",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "lNkS6",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 153
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "dpBDC",
+                                  "name": "Band 6–10",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "hiiSo",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 68
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Pp20f",
+                                  "name": "Band 11–25",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "c0IdCw",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 35
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "bUATG",
+                                  "name": "Band 26–50",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "AWB3G",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 11
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Ln3uf",
+                                  "name": "Band 51–100",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "l9OsCk",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 4
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "VwdWm",
+                                  "name": "Band 101–250",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "yUnHi",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 2
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "d07UWo",
+                                  "name": "Band 250+",
+                                  "width": 58,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        4,
+                                        4,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "vcnPm",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 24,
+                                      "height": 2
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "J39J9",
+                      "name": "X axis",
+                      "width": "fill_container",
+                      "padding": [
+                        0,
+                        0,
+                        0,
+                        52
+                      ],
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "J3Ib1",
+                          "name": "X 0",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "TqaxM",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "0",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "uRPEI",
+                          "name": "X 1",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "zDLJt",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "1",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "h7vLr",
+                          "name": "X 2",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "yLtgH",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "2",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "TtGcG",
+                          "name": "X 3–5",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "vHWYV",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "3–5",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "nG5OI",
+                          "name": "X 6–10",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "ecex2",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "6–10",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "ENTZH",
+                          "name": "X 11–25",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "nOODW",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "11–25",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "Th42X",
+                          "name": "X 26–50",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "YQgnf",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "26–50",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "w9yqCf",
+                          "name": "X 51–100",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "Deys8",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "51–100",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "qm5a7",
+                          "name": "X 101–250",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "vDHQs",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "101–250",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "NLU1i",
+                          "name": "X 250+",
+                          "width": 58,
+                          "height": 14,
+                          "justifyContent": "center",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "MY7si",
+                              "name": "Label",
+                              "fill": "$foreground/muted",
+                              "content": "250+",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "text",
+                      "id": "KeDpH",
+                      "name": "Axis title",
+                      "fill": "$foreground/muted",
+                      "content": "Game servers per install",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 11,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "rectangle",
+              "id": "N3PIj",
+              "name": "Section divider",
+              "fill": "$separator/separator",
+              "width": "fill_container",
+              "height": 1
+            },
+            {
+              "type": "frame",
+              "id": "oW2pt",
+              "name": "Extended heading",
+              "width": "fill_container",
+              "justifyContent": "space_between",
+              "alignItems": "end",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "D8zEc",
+                  "name": "Titles",
+                  "width": 900,
+                  "layout": "vertical",
+                  "gap": 4,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "RtFVZ",
+                      "name": "Heading",
+                      "fill": "$foreground/foreground",
+                      "content": "Extended reports",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 20,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "kUcKw",
+                      "name": "Sub",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Installs that also share the extended tier. Each install counts once per day; shares are weighted by install-days in the range.",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 14,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "YLA8E",
+                  "name": "Coverage",
+                  "layout": "vertical",
+                  "gap": 6,
+                  "alignItems": "end",
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "q0byl",
+                      "name": "Coverage label",
+                      "fill": "$foreground/secondary",
+                      "content": "Coverage: 71% of reports in range include extended data",
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 13,
+                      "fontWeight": "normal"
+                    },
+                    {
+                      "type": "frame",
+                      "id": "gXFmK",
+                      "name": "Coverage meter",
+                      "width": 320,
+                      "height": 8,
+                      "fill": "$chart/track",
+                      "cornerRadius": 4,
+                      "children": [
+                        {
+                          "type": "rectangle",
+                          "cornerRadius": 4,
+                          "id": "lO0v9",
+                          "name": "Fill",
+                          "fill": "$chart/series-1",
+                          "width": 227,
+                          "height": 8
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "GwrDY",
+              "name": "Install KPIs",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "id": "aRoss",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Active installs, latest day",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Active installs, latest day"
+                    },
+                    "tZRdh": {
+                      "content": "912"
+                    },
+                    "oPQEN": {
+                      "content": "2026-10-06 (UTC)"
+                    }
+                  }
+                },
+                {
+                  "id": "R2Bns",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Active, last 7 days",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Active, last 7 days"
+                    },
+                    "tZRdh": {
+                      "content": "1,031"
+                    },
+                    "oPQEN": {
+                      "content": "Unique installs"
+                    }
+                  }
+                },
+                {
+                  "id": "UMt1g",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Active, last 30 days",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Active, last 30 days"
+                    },
+                    "tZRdh": {
+                      "content": "1,106"
+                    },
+                    "oPQEN": {
+                      "content": "Unique installs"
+                    }
+                  }
+                },
+                {
+                  "id": "Ga6OP",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "New installs, last 30 days",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "New installs, last 30 days"
+                    },
+                    "tZRdh": {
+                      "content": "214"
+                    },
+                    "oPQEN": {
+                      "content": "First report in range"
+                    }
+                  }
+                },
+                {
+                  "id": "okh9E",
+                  "type": "ref",
+                  "ref": "sDDfo",
+                  "name": "Lapsed, last 30 days",
+                  "width": "fill_container",
+                  "descendants": {
+                    "yia1E": {
+                      "content": "Lapsed, last 30 days"
+                    },
+                    "tZRdh": {
+                      "content": "87"
+                    },
+                    "oPQEN": {
+                      "content": "No report for 30 days"
+                    }
+                  }
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "IkA62",
+              "name": "New and lapsed",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "kohdp",
+                  "name": "New installs per day",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 16,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "WQjKA",
+                      "name": "Titles",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "L78e6",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "New installs per day",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "nWMZz",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "content": "First accepted report from an install ID",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "o4RFwP",
+                      "name": "Plot row",
+                      "width": "fill_container",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "ym7NT",
+                          "name": "Y axis",
+                          "width": 28,
+                          "height": 148,
+                          "layout": "vertical",
+                          "justifyContent": "space_between",
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "jejpp",
+                              "name": "Tick 15",
+                              "fill": "$foreground/muted",
+                              "content": "15",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "P5aiv",
+                              "name": "Tick 10",
+                              "fill": "$foreground/muted",
+                              "content": "10",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "AwNN9",
+                              "name": "Tick 5",
+                              "fill": "$foreground/muted",
+                              "content": "5",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "Z6mKj",
+                              "name": "Tick 0",
+                              "fill": "$foreground/muted",
+                              "content": "0",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "fQjoT",
+                          "name": "Plot",
+                          "width": 570,
+                          "height": 148,
+                          "layout": "none",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "id": "IytaL",
+                              "x": 0,
+                              "y": 4,
+                              "name": "Grid 0",
+                              "fill": "$chart/grid",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "GWhSK",
+                              "x": 0,
+                              "y": 50.666666666666664,
+                              "name": "Grid 1",
+                              "fill": "$chart/grid",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "dWBkG",
+                              "x": 0,
+                              "y": 97.33333333333333,
+                              "name": "Grid 2",
+                              "fill": "$chart/grid",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "IE11Z",
+                              "x": 0,
+                              "y": 144,
+                              "name": "Baseline",
+                              "fill": "$chart/baseline",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "oRmhw",
+                              "x": 0,
+                              "y": -16,
+                              "name": "Columns",
+                              "width": 570,
+                              "height": 160,
+                              "alignItems": "end",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "c2JI0d",
+                                  "name": "Day 1",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "sRswa",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 56
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "VSj5w",
+                                  "name": "Day 2",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "b4FuhU",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 65
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Y7c3f",
+                                  "name": "Day 3",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "S07Rr7",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 84
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "La65r",
+                                  "name": "Day 4",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "C7kPJ",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 47
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Jl9Z3",
+                                  "name": "Day 5",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "YZeiI",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 75
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "H8qZvr",
+                                  "name": "Day 6",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "pGKYf",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "cmwpi",
+                                  "name": "Day 7",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "P39eWq",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "dy6uF",
+                                  "name": "Day 8",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "B7uoL",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 84
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "sfUUn",
+                                  "name": "Day 9",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "qZzeP",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 103
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "uWAKs",
+                                  "name": "Day 10",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "D6zKZ",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 65
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ua4GB",
+                                  "name": "Day 11",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "pfWt0",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 75
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ca97S",
+                                  "name": "Day 12",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "KVbRG",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 93
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "O0tsH",
+                                  "name": "Day 13",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "jBr0N",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "xVAVP",
+                                  "name": "Day 14",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "EE7O7",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 47
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "PHymd",
+                                  "name": "Day 15",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "s7onNl",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 75
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "aKFiw",
+                                  "name": "Day 16",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "ol8P1",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 84
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "mCkG3",
+                                  "name": "Day 17",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "XZl62",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 112
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "iwRFf",
+                                  "name": "Day 18",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "EiBO2",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 65
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "CrRQ2",
+                                  "name": "Day 19",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "Pwfez",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 93
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "V9ooQE",
+                                  "name": "Day 20",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "PQHxL",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 47
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "l3DFyW",
+                                  "name": "Day 21",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "IrXZH",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "bPs9q",
+                                  "name": "Day 22",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "dnjBt",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 84
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "HuVhZ",
+                                  "name": "Day 23",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "K7nP3",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 75
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "LmVIV",
+                                  "name": "Day 24",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "rIi37",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 103
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "v8atQO",
+                                  "name": "Day 25",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "WlniK",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 121
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "LkHnd",
+                                  "name": "Day 26",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "rdBQ3",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 93
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "k5FhJ",
+                                  "name": "Day 27",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "O2DWD",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 56
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "n932tK",
+                                  "name": "Day 28",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "QvO87",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 47
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "bGgTJ",
+                                  "name": "Day 29",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "G7Wn2T",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 84
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "WhjYb",
+                                  "name": "Day 30",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "GvXpz",
+                                      "name": "Value label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "7",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "T6Y94",
+                                      "name": "Column",
+                                      "fill": "$chart/series-1",
+                                      "width": 12,
+                                      "height": 65
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "gOkG8",
+                      "name": "X axis",
+                      "width": 606,
+                      "padding": [
+                        0,
+                        0,
+                        0,
+                        36
+                      ],
+                      "justifyContent": "space_between",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "ervGE",
+                          "name": "X Sep 7",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 7",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "a2GW8",
+                          "name": "X Sep 21",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 21",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "C6cZG",
+                          "name": "X Oct 6",
+                          "fill": "$foreground/muted",
+                          "content": "Oct 6",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "D8ofHq",
+                  "name": "Lapsed installs per day",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 16,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "Qjo3F",
+                      "name": "Titles",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "lPda7",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Lapsed installs per day",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "NMwMD",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "content": "Installs whose last report was 30 days earlier",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "Z0E8bU",
+                      "name": "Plot row",
+                      "width": "fill_container",
+                      "gap": 8,
+                      "children": [
+                        {
+                          "type": "frame",
+                          "id": "vULf9",
+                          "name": "Y axis",
+                          "width": 28,
+                          "height": 148,
+                          "layout": "vertical",
+                          "justifyContent": "space_between",
+                          "alignItems": "end",
+                          "children": [
+                            {
+                              "type": "text",
+                              "id": "bK7yi",
+                              "name": "Tick 15",
+                              "fill": "$foreground/muted",
+                              "content": "15",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "xKq7c",
+                              "name": "Tick 10",
+                              "fill": "$foreground/muted",
+                              "content": "10",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "FrUJZ",
+                              "name": "Tick 5",
+                              "fill": "$foreground/muted",
+                              "content": "5",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            },
+                            {
+                              "type": "text",
+                              "id": "D7B7t",
+                              "name": "Tick 0",
+                              "fill": "$foreground/muted",
+                              "content": "0",
+                              "fontFamily": "$typography/font-sans",
+                              "fontSize": 11,
+                              "fontWeight": "normal"
+                            }
+                          ]
+                        },
+                        {
+                          "type": "frame",
+                          "id": "Yn1gC",
+                          "name": "Plot",
+                          "width": 570,
+                          "height": 148,
+                          "layout": "none",
+                          "children": [
+                            {
+                              "type": "rectangle",
+                              "id": "VlMsG",
+                              "x": 0,
+                              "y": 4,
+                              "name": "Grid 0",
+                              "fill": "$chart/grid",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "g82r0i",
+                              "x": 0,
+                              "y": 50.666666666666664,
+                              "name": "Grid 1",
+                              "fill": "$chart/grid",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "Zmurq",
+                              "x": 0,
+                              "y": 97.33333333333333,
+                              "name": "Grid 2",
+                              "fill": "$chart/grid",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "rectangle",
+                              "id": "itHgw",
+                              "x": 0,
+                              "y": 144,
+                              "name": "Baseline",
+                              "fill": "$chart/baseline",
+                              "width": 570,
+                              "height": 1
+                            },
+                            {
+                              "type": "frame",
+                              "id": "M8hyoM",
+                              "x": 0,
+                              "y": -16,
+                              "name": "Columns",
+                              "width": 570,
+                              "height": 160,
+                              "alignItems": "end",
+                              "children": [
+                                {
+                                  "type": "frame",
+                                  "id": "JHU6d",
+                                  "name": "Day 1",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "MxfRd",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "yjWt7",
+                                  "name": "Day 2",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "q6JXl",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "jGTXx",
+                                  "name": "Day 3",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "xBSEy",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "TnTV3",
+                                  "name": "Day 4",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "MF5xk",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "sTOVc",
+                                  "name": "Day 5",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "c3FTSh",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "z74CGq",
+                                  "name": "Day 6",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "g08k9",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 9
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "qxQ6s",
+                                  "name": "Day 7",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "TDQv0",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "xfu5D",
+                                  "name": "Day 8",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "xjBRo",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "dZosB",
+                                  "name": "Day 9",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "AMBLC",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "IqsEy",
+                                  "name": "Day 10",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "m4n1Vt",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "oc8bt",
+                                  "name": "Day 11",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "UL6ow",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "x1MdoE",
+                                  "name": "Day 12",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "Hn2hY",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 47
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "JIgLl",
+                                  "name": "Day 13",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "Hxuyb",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "as6Wj",
+                                  "name": "Day 14",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "bhlml",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 9
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "OqXAN",
+                                  "name": "Day 15",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "RoHcb",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "zTQ4X",
+                                  "name": "Day 16",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "CJy4y",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "nna2a",
+                                  "name": "Day 17",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "ShsE0",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "b3tQ8",
+                                  "name": "Day 18",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "dh3X7",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "MVv3S",
+                                  "name": "Day 19",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "adyxe",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "ojOzc",
+                                  "name": "Day 20",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "GICVn",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "nxDoE",
+                                  "name": "Day 21",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "xsDPO",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 9
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "haiYL",
+                                  "name": "Day 22",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "EVORr",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "Ru1Uq",
+                                  "name": "Day 23",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "u6x5kM",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "wNch4",
+                                  "name": "Day 24",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "NuY5y",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "l5umTv",
+                                  "name": "Day 25",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "obrv5",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 47
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "A2JCkx",
+                                  "name": "Day 26",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "zTJkH",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "kyayT",
+                                  "name": "Day 27",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "E2ECy",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 19
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "lPoNF",
+                                  "name": "Day 28",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "J3McA",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 9
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "iA9mD",
+                                  "name": "Day 29",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "DDODx",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 28
+                                    }
+                                  ]
+                                },
+                                {
+                                  "type": "frame",
+                                  "id": "G3EVz",
+                                  "name": "Day 30",
+                                  "width": 19,
+                                  "layout": "vertical",
+                                  "gap": 4,
+                                  "alignItems": "center",
+                                  "children": [
+                                    {
+                                      "type": "text",
+                                      "id": "j9Kxr",
+                                      "name": "Value label",
+                                      "fill": "$foreground/foreground",
+                                      "content": "4",
+                                      "fontFamily": "$typography/font-sans",
+                                      "fontSize": 11,
+                                      "fontWeight": "600"
+                                    },
+                                    {
+                                      "type": "rectangle",
+                                      "cornerRadius": [
+                                        3,
+                                        3,
+                                        0,
+                                        0
+                                      ],
+                                      "id": "MMi9n",
+                                      "name": "Column",
+                                      "fill": "$chart/series-2",
+                                      "width": 12,
+                                      "height": 37
+                                    }
+                                  ]
+                                }
+                              ]
+                            }
+                          ]
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "Qi78V",
+                      "name": "X axis",
+                      "width": 606,
+                      "padding": [
+                        0,
+                        0,
+                        0,
+                        36
+                      ],
+                      "justifyContent": "space_between",
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "ZQpkW",
+                          "name": "X Sep 7",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 7",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "F2fZj",
+                          "name": "X Sep 21",
+                          "fill": "$foreground/muted",
+                          "content": "Sep 21",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        },
+                        {
+                          "type": "text",
+                          "id": "TyxT1",
+                          "name": "X Oct 6",
+                          "fill": "$foreground/muted",
+                          "content": "Oct 6",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 11,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "vyryH",
+              "name": "Environment row 1",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "c6yNe1",
+                  "name": "Kubernetes version",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 14,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "ts7Ae",
+                      "name": "Titles",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "x6UDGY",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Kubernetes version",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "isshR",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": "fill_container",
+                          "content": "Share of install-days by reported minor version.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "xRdeX",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "wjOTK",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "1.31",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "1.31",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 164,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "38%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "mCGa5",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "1.30",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "1.30",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 117,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "27%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "uFp1s",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "1.32",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "1.32",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 78,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "18%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "apyWg",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "1.29",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "1.29",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 39,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "9%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "GkAhZ",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Other",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Other",
+                              "fill": "$foreground/muted"
+                            },
+                            "dMFUm": {
+                              "width": 35,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "8%"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "nABaC",
+                  "name": "Distribution",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 14,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "gvGga",
+                      "name": "Titles",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "WU9QN",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Distribution",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "P3DHlg",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": "fill_container",
+                          "content": "Share of install-days by detected distribution.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "UShQw",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "ysbp4",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "k3s",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "k3s",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 199,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "46%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "ERFfG",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "rke2",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "rke2",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 52,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "12%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "dm7Jd",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "microk8s",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "microk8s",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 39,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "9%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "Cnm2F",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "eks",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "eks",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 30,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "7%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "Ys8ZE",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "talos",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "talos",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 26,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "6%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "hnLEu",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "gke",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "gke",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 22,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "5%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "E1JJDc",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "kind",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "kind",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 13,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "3%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "cyGTq",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Other",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Other",
+                              "fill": "$foreground/muted"
+                            },
+                            "dMFUm": {
+                              "width": 52,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "12%"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "HRCgy",
+              "name": "Environment row 2",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "y7r64",
+                  "name": "Architecture",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 14,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "MMhPC",
+                      "name": "Titles",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "k8ASe",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Architecture",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "qkzeO",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": "fill_container",
+                          "content": "Share of install-days reporting each node architecture. Mixed clusters report several, so shares add up to more than 100%.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "EK8eL",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "f43md",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "amd64",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "amd64",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 350,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "81%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "SyiIg",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "arm64",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "arm64",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 112,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "26%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "p9B19",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "arm",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "arm",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 9,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "2%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "SvWZd",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Other",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Other",
+                              "fill": "$foreground/muted"
+                            },
+                            "dMFUm": {
+                              "width": 4,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "1%"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "b8fCX",
+                  "name": "Cluster nodes",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 14,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "m4Yk7",
+                      "name": "Titles",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "gsYLI",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Cluster nodes",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "mEv68",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": "fill_container",
+                          "content": "Share of install-days by node-count band.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "T2PQjM",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "NSTAz",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "1",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "1",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 251,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "58%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "Oxw93",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "2–3",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "2–3",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 95,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "22%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "wAcAs",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "4–10",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "4–10",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 60,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "14%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "JRkXA",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "11–50",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "11–50",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 22,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "5%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "J2Wm5",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "51+",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "51+",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 4,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "1%"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "X93xNq",
+              "name": "Usage row",
+              "width": "fill_container",
+              "gap": 16,
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "D0Xo8",
+                  "name": "Games",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 14,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "rOjQF",
+                      "name": "Titles",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "FP9Oc",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Games",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "HcHrn",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": "fill_container",
+                          "content": "Share of install-days running at least one server of each official module. Uploaded and third-party modules count as Custom.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "t1UGtz",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "gfdQc",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "minecraft-java",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "minecraft-java",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 264,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "61%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "n7fklX",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "terraria",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "terraria",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 78,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "18%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "exoBx",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "valheim",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "valheim",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 65,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "15%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "U3TWG5",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "palworld",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "palworld",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 48,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "11%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "DKLuV",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "factorio",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "factorio",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 39,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "9%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "t8Lxu",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "rust",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "rust",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 30,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "7%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "Ybgs3",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "satisfactory",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "satisfactory",
+                              "fill": "$foreground/foreground"
+                            },
+                            "dMFUm": {
+                              "width": 26,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "6%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "V36hc1",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Custom",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Custom",
+                              "fill": "$foreground/muted"
+                            },
+                            "dMFUm": {
+                              "width": 95,
+                              "cornerRadius": [
+                                0,
+                                4,
+                                4,
+                                0
+                              ]
+                            },
+                            "uTqdm": {
+                              "content": "22%"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                },
+                {
+                  "type": "frame",
+                  "id": "twyVG",
+                  "name": "Feature adoption",
+                  "width": "fill_container",
+                  "fill": "$surface/surface",
+                  "cornerRadius": "$radius/3xl",
+                  "stroke": "$border",
+                  "strokeWidth": 1,
+                  "strokeAlignment": "inner",
+                  "layout": "vertical",
+                  "gap": 14,
+                  "padding": 20,
+                  "children": [
+                    {
+                      "type": "frame",
+                      "id": "VLjMc",
+                      "name": "Titles",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 4,
+                      "children": [
+                        {
+                          "type": "text",
+                          "id": "LleaT",
+                          "name": "Title",
+                          "fill": "$foreground/foreground",
+                          "content": "Feature adoption",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 15,
+                          "fontWeight": "600"
+                        },
+                        {
+                          "type": "text",
+                          "id": "FiOPQ",
+                          "name": "Sub",
+                          "fill": "$foreground/muted",
+                          "textGrowth": "fixed-width",
+                          "width": "fill_container",
+                          "content": "Share of install-days with each feature in use.",
+                          "fontFamily": "$typography/font-sans",
+                          "fontSize": 13,
+                          "fontWeight": "normal"
+                        }
+                      ]
+                    },
+                    {
+                      "type": "frame",
+                      "id": "bUAgs",
+                      "name": "Bars",
+                      "width": "fill_container",
+                      "layout": "vertical",
+                      "gap": 10,
+                      "children": [
+                        {
+                          "id": "Y1CuHR",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Backups",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Backups",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 225,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "52%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "G1KQk",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Wake on connect",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Wake on connect",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 147,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "34%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "dRRIa",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Tunnels",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Tunnels",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 91,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "21%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "JkAiq",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "SSO",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "SSO",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 82,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "19%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "kbwG7",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "PostgreSQL",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "PostgreSQL",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 48,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "11%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "u5vRJn",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Audit forwarding",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Audit forwarding",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 35,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "8%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "oO1hy",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Multi-cluster",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Multi-cluster",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 26,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "6%"
+                            }
+                          }
+                        },
+                        {
+                          "id": "z6RegB",
+                          "type": "ref",
+                          "ref": "wPbIp",
+                          "name": "Packet capture",
+                          "width": "fill_container",
+                          "descendants": {
+                            "j1J75": {
+                              "content": "Packet capture",
+                              "fill": "$foreground/foreground"
+                            },
+                            "L6Z5jA": {
+                              "fill": "$chart/track",
+                              "cornerRadius": 4
+                            },
+                            "dMFUm": {
+                              "width": 17,
+                              "cornerRadius": 4
+                            },
+                            "uTqdm": {
+                              "content": "4%"
+                            }
+                          }
+                        }
+                      ]
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "DJxkA",
+              "name": "Footnote",
+              "width": "fill_container",
+              "stroke": "$separator/separator",
+              "strokeWidth": {
+                "top": 1
+              },
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 6,
+              "padding": [
+                16,
+                0,
+                0,
+                0
+              ],
+              "children": [
+                {
+                  "type": "text",
+                  "id": "BPXtv",
+                  "name": "Note",
+                  "fill": "$foreground/muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "All figures are approximate and self-reported. Reports are anonymous; extended reports are signed by a key the install derives locally, which stops impersonation but not invented installs.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "text",
+                  "id": "N1Jwcs",
+                  "name": "Note",
+                  "fill": "$foreground/muted",
+                  "textGrowth": "fixed-width",
+                  "width": "fill_container",
+                  "content": "Install IDs are stored only as keyed hashes. Activity records expire 90 days after an install's last report, and daily aggregates are kept for 24 months. No IP address or raw report is stored.",
+                  "lineHeight": 1.5,
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 12,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "Z079vK",
+      "x": 8327.959083557127,
+      "y": 1020.8789062499995,
+      "name": "Receiver / Overview — empty",
+      "theme": {
+        "semantic": "dark"
+      },
+      "clip": true,
+      "width": 1440,
+      "height": 900,
+      "fill": "$background/background",
+      "layout": "vertical",
+      "children": [
+        {
+          "type": "frame",
+          "id": "eJ6OT",
+          "name": "Top bar",
+          "width": "fill_container",
+          "height": 64,
+          "stroke": "$border",
+          "strokeWidth": {
+            "bottom": 1
+          },
+          "strokeAlignment": "inner",
+          "padding": [
+            0,
+            40
+          ],
+          "justifyContent": "space_between",
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "frame",
+              "id": "fLKfk",
+              "name": "Brand",
+              "gap": 10,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "rectangle",
+                  "id": "Oy7L3",
+                  "name": "Logo",
+                  "fill": {
+                    "type": "image",
+                    "enabled": true,
+                    "url": "../website/design-assets/gameplane-icon.png",
+                    "mode": "contain"
+                  },
+                  "width": 24,
+                  "height": 24
+                },
+                {
+                  "type": "text",
+                  "id": "k0J6XW",
+                  "name": "Wordmark",
+                  "fill": "$foreground/foreground",
+                  "content": "gameplane",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 15,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "W2GPI",
+                  "name": "Slash",
+                  "fill": "$foreground/muted",
+                  "content": "/",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 15,
+                  "fontWeight": "normal"
+                },
+                {
+                  "type": "text",
+                  "id": "FgVOn",
+                  "name": "Product",
+                  "fill": "$foreground/foreground",
+                  "content": "Telemetry",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 15,
+                  "fontWeight": "normal"
+                },
+                {
+                  "id": "th45R",
+                  "type": "ref",
+                  "ref": "Q401P",
+                  "name": "Approx chip",
+                  "descendants": {
+                    "wH6ey": {
+                      "content": "Approximate · self-reported"
+                    }
+                  }
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "YA8Cg",
+              "name": "Session",
+              "gap": 16,
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "text",
+                  "id": "L19QW",
+                  "name": "As of",
+                  "fill": "$foreground/muted",
+                  "content": "No data yet",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 13,
+                  "fontWeight": "normal"
+                },
+                {
+                  "id": "R6ROEM",
+                  "type": "ref",
+                  "ref": "bCpKh",
+                  "name": "Sign out",
+                  "descendants": {
+                    "Watg8": {
+                      "icon": "log-out"
+                    },
+                    "U8ICg": {
+                      "content": "Sign out"
+                    }
+                  }
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "type": "frame",
+          "id": "W1xXA",
+          "name": "Content",
+          "width": "fill_container",
+          "layout": "vertical",
+          "gap": 32,
+          "padding": [
+            32,
+            40,
+            48,
+            40
+          ],
+          "children": [
+            {
+              "type": "frame",
+              "id": "Y9ifbZ",
+              "name": "Title row",
+              "width": "fill_container",
+              "justifyContent": "space_between",
+              "alignItems": "end",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "N3wvSC",
+                  "name": "Title block",
+                  "width": 760,
+                  "layout": "vertical",
+                  "gap": 8,
+                  "children": [
+                    {
+                      "type": "text",
+                      "id": "m2ly0",
+                      "name": "Eyebrow",
+                      "fill": "$accent/accent",
+                      "content": "PROVIDER OVERVIEW",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 12,
+                      "fontWeight": "normal",
+                      "letterSpacing": 1.5
+                    },
+                    {
+                      "type": "text",
+                      "id": "uw4PM",
+                      "name": "Title",
+                      "fill": "$foreground/foreground",
+                      "content": "Usage across reporting installs",
+                      "fontFamily": "$typography/font-mono",
+                      "fontSize": 32,
+                      "fontWeight": "600"
+                    },
+                    {
+                      "type": "text",
+                      "id": "ZiECk",
+                      "name": "Subtitle",
+                      "fill": "$foreground/muted",
+                      "textGrowth": "fixed-width",
+                      "width": "fill_container",
+                      "content": "Daily aggregates from self-reported, anonymous reports. Every figure is approximate: installs choose to report, and nothing is verified beyond the report signature.",
+                      "lineHeight": 1.5,
+                      "fontFamily": "$typography/font-sans",
+                      "fontSize": 15,
+                      "fontWeight": "normal"
+                    }
+                  ]
+                },
+                {
+                  "id": "Iz2y7",
+                  "type": "ref",
+                  "ref": "sklNL",
+                  "name": "Range",
+                  "children": [
+                    {
+                      "id": "hnl8m",
+                      "type": "ref",
+                      "ref": "nO0GM",
+                      "name": "7 days",
+                      "descendants": {
+                        "x5KZZd": {
+                          "content": "7 days"
+                        }
+                      }
+                    },
+                    {
+                      "id": "LUA0n",
+                      "type": "ref",
+                      "ref": "iEQse",
+                      "name": "30 days",
+                      "descendants": {
+                        "BtgBT": {
+                          "content": "30 days"
+                        }
+                      }
+                    },
+                    {
+                      "id": "g25lA",
+                      "type": "ref",
+                      "ref": "nO0GM",
+                      "name": "90 days",
+                      "descendants": {
+                        "x5KZZd": {
+                          "content": "90 days"
+                        }
+                      }
+                    },
+                    {
+                      "id": "Y3uyQw",
+                      "type": "ref",
+                      "ref": "nO0GM",
+                      "name": "365 days",
+                      "descendants": {
+                        "x5KZZd": {
+                          "content": "365 days"
+                        }
+                      }
+                    }
+                  ]
+                }
+              ]
+            },
+            {
+              "type": "frame",
+              "id": "A1PwG",
+              "name": "Empty state",
+              "width": "fill_container",
+              "height": 420,
+              "fill": "$surface/surface",
+              "cornerRadius": "$radius/3xl",
+              "stroke": "$border",
+              "strokeWidth": 1,
+              "strokeAlignment": "inner",
+              "layout": "vertical",
+              "gap": 12,
+              "padding": 40,
+              "justifyContent": "center",
+              "alignItems": "center",
+              "children": [
+                {
+                  "type": "frame",
+                  "id": "q5cEEN",
+                  "name": "Icon wrap",
+                  "width": 48,
+                  "height": 48,
+                  "fill": "$accent/soft",
+                  "cornerRadius": 12,
+                  "justifyContent": "center",
+                  "alignItems": "center",
+                  "children": [
+                    {
+                      "type": "icon",
+                      "id": "iSRaQ",
+                      "name": "Icon",
+                      "width": 22,
+                      "height": 22,
+                      "icon": "inbox",
+                      "library": "lucide",
+                      "fill": "$accent/accent"
+                    }
+                  ]
+                },
+                {
+                  "type": "text",
+                  "id": "T5Kr4b",
+                  "name": "Title",
+                  "fill": "$foreground/foreground",
+                  "content": "No reports yet",
+                  "fontFamily": "$typography/font-mono",
+                  "fontSize": 20,
+                  "fontWeight": "600"
+                },
+                {
+                  "type": "text",
+                  "id": "JJM29",
+                  "name": "Body",
+                  "fill": "$foreground/muted",
+                  "textGrowth": "fixed-width",
+                  "width": 520,
+                  "content": "Figures appear once this receiver has accepted reports for a full UTC day. Installs send to POST /ingest on the public port; nothing is shown until there is data, so no chart is drawn from zeros.",
+                  "lineHeight": 1.5,
+                  "textAlign": "center",
+                  "fontFamily": "$typography/font-sans",
+                  "fontSize": 14,
+                  "fontWeight": "normal"
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "type": "frame",
+      "id": "jy9Rn",
+      "x": 8327.959083557127,
+      "y": 2040.8789062499995,
+      "name": "Receiver / Extended — none in range",
+      "theme": {
+        "semantic": "dark"
+      },
+      "width": 1440,
+      "fill": "$background/background",
+      "layout": "vertical",
+      "gap": 16,
+      "padding": [
+        32,
+        40
+      ],
+      "children": [
+        {
+          "type": "text",
+          "id": "Xb6cp",
+          "name": "Heading",
+          "fill": "$foreground/foreground",
+          "content": "Extended reports",
+          "fontFamily": "$typography/font-mono",
+          "fontSize": 20,
+          "fontWeight": "600"
+        },
+        {
+          "type": "frame",
+          "id": "TRz9s",
+          "name": "Message",
+          "width": "fill_container",
+          "fill": "$surface/surface",
+          "cornerRadius": "$radius/3xl",
+          "stroke": "$border",
+          "strokeWidth": 1,
+          "strokeAlignment": "inner",
+          "gap": 12,
+          "padding": 20,
+          "alignItems": "center",
+          "children": [
+            {
+              "type": "icon",
+              "id": "tN7f3",
+              "name": "Icon",
+              "width": 18,
+              "height": 18,
+              "icon": "info",
+              "library": "lucide",
+              "fill": "$foreground/muted"
+            },
+            {
+              "type": "text",
+              "id": "NZUcy",
+              "name": "Text",
+              "fill": "$foreground/secondary",
+              "content": "No reports in this range included extended data. Basic figures above still cover every report.",
+              "fontFamily": "$typography/font-sans",
+              "fontSize": 14,
+              "fontWeight": "normal"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "themes": {
+    "semantic": [
+      "light",
+      "dark"
+    ],
+    "primitives": [
+      "default"
+    ],
+    "typography": [
+      "default"
+    ]
+  },
+  "variables": {
+    "background/background": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFFFFF",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#121114",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "muted": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#6E5262",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#9E98A6",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "spacing/3": {
+      "type": "number",
+      "value": [
+        {
+          "value": 12,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "foreground/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#2A0F1E",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#F5F3F7",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "typography/font-sans": {
+      "type": "string",
+      "value": [
+        {
+          "value": "Geist",
+          "theme": {
+            "typography": "default"
+          }
+        }
+      ]
+    },
+    "separator/separator": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#EFC3D6",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#232227",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "default/default": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#F6DCE7",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#232128",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "foreground/link": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#2563EB",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#7DB4FF",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "accent/accent": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#DB2777",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#FF4FA3",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "overlay": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFF7FB",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#1C1A20",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "radius/xl": {
+      "type": "number",
+      "value": [
+        {
+          "value": 12,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "radius/2xl": {
+      "type": "number",
+      "value": [
+        {
+          "value": 16,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "surface/surface": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFF7FB",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#1C1A20",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "radius/3xl": {
+      "type": "number",
+      "value": [
+        {
+          "value": 24,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "accent/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFFFFF",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#FFFFFF",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "success/success": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#21C45D",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#21C45D",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "border": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#EFC3D6",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#2C2932",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "warning/warning": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#F59F0A",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#F59F0A",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "danger/danger": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#DC2828",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#E0304F",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "danger/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FCFCFC",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#FCFCFC",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "radius/md": {
+      "type": "number",
+      "value": [
+        {
+          "value": 6,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "spacing/2": {
+      "type": "number",
+      "value": [
+        {
+          "value": 8,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "spacing/4": {
+      "type": "number",
+      "value": [
+        {
+          "value": 16,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "spacing/5": {
+      "type": "number",
+      "value": [
+        {
+          "value": 20,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "danger/soft": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FEE2E2",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#2E1317",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "danger/soft-foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#EF4444",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#F87171",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "success/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#18181B",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#18181B",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "warning/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#18181B",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#18181B",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "accent/soft": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFFFFF",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#331525",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "accent/soft-foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#BE185D",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#FF8AC4",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "success/soft": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#E0FAE4",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#0B2211",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "success/soft-foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#006924",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#42BD66",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "warning/soft": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FEF3C7",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#331F05",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "warning/soft-foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#92400E",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#F6AD4C",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "segment": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFFFFF",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#1D1B22",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "foreground/segment": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#2A0F1E",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#F5F3F7",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "spacing/6": {
+      "type": "number",
+      "value": [
+        {
+          "value": 24,
+          "theme": {
+            "primitives": "default"
+          }
+        }
+      ]
+    },
+    "surface/secondary": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#F8DDE9",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#17151A",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "default/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#2A0F1E",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#EDE9F0",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "disabled-opacity": {
+      "type": "number",
+      "value": [
+        {
+          "value": 50,
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": 50,
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "surface/tertiary": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#F8DDE9",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#141317",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "field/placeholder": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#8A6C7B",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#7B7584",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "field/background": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#FFFFFF",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#17151A",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "field/foreground": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#2A0F1E",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#FCFCFC",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "foreground/muted": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#6E5262",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#9E98A6",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "foreground/secondary": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#6E5262",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#9E98A6",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "chart/series-1": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#DB2777",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#EC4899",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "chart/series-2": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#2a78d6",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#3987e5",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "chart/grid": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#F8E6EE",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#232128",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "chart/baseline": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#EFC3D6",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#2C2932",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "chart/track": {
+      "type": "color",
+      "value": [
+        {
+          "value": "#DB27771F",
+          "theme": {
+            "semantic": "light"
+          }
+        },
+        {
+          "value": "#EC48992E",
+          "theme": {
+            "semantic": "dark"
+          }
+        }
+      ]
+    },
+    "typography/font-mono": {
+      "type": "string",
+      "value": [
+        {
+          "value": "JetBrains Mono",
+          "theme": {
+            "typography": "default"
+          }
+        }
+      ]
+    }
+  },
+  "fileToken": "8925e41a-752d-4b7f-ad17-679049aa15a1"
+}
\ No newline at end of file
diff --git a/telemetry-receiver/views.go b/telemetry-receiver/views.go
new file mode 100644
index 000000000..36441eae7
--- /dev/null
+++ b/telemetry-receiver/views.go
@@ -0,0 +1,630 @@
+package main
+
+import (
+	"context"
+	"database/sql"
+	"fmt"
+	"math"
+	"slices"
+	"sort"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// validRanges are the dashboard ranges in days (FR-022); anything else falls
+// back to defaultRange.
+var validRanges = []int{7, 30, 90, 365}
+
+const (
+	defaultRange = 30
+	// topVersions is how many versions are listed before "Other" (FR-024).
+	topVersions = 10
+	// Labels of the two aggregate version rows. Stored rows use the lower-case
+	// forms written by versionLabel.
+	versionOtherLabel   = "Other"
+	versionInvalidLabel = "Invalid"
+	versionOtherStored  = "other"
+	versionInvalidStore = "invalid"
+)
+
+// fleetBandBounds are the inclusive upper bounds of the fleet-size bands
+// (data-model.md); a final "250+" band takes everything above the last bound.
+var fleetBandBounds = []int{0, 1, 2, 5, 10, 25, 50, 100, 250}
+
+// fleetBandOver is the label of the last, open-ended fleet band.
+const fleetBandOver = "250+"
+
+// Views is the dashboard view model, the body of GET /api/v1/views
+// (contracts/receiver-http.md). Extended is nil when the range has no
+// extended reports.
+type Views struct {
+	Range    int            `json:"range"`
+	AsOf     string         `json:"asOf"`
+	Empty    bool           `json:"empty"`
+	Basic    *BasicViews    `json:"basic"`
+	Extended *ExtendedViews `json:"extended"`
+}
+
+// ExtendedViews is the extended block (FR-025, FR-026). Every list is
+// non-nil, so it encodes as [] and never as null.
+type ExtendedViews struct {
+	Coverage          float64           `json:"coverage"`
+	Installs          InstallCounts     `json:"installs"`
+	NewPerDay         []DayCount        `json:"newPerDay"`
+	LapsedPerDay      []DayCount        `json:"lapsedPerDay"`
+	VersionsByInstall VersionsByInstall `json:"versionsByInstall"`
+	Env               EnvViews          `json:"env"`
+	Games             []GameShare       `json:"games"`
+	Features          []FeatureShare    `json:"features"`
+	Tunnels           []ShareRow        `json:"tunnels"`
+	Clusters          []ShareRow        `json:"clusters"`
+	DB                []ShareRow        `json:"db"`
+	Language          []ShareRow        `json:"language"`
+}
+
+// InstallCounts are unique installs by recency: activity records last seen
+// on or after asOf, asOf-6 and asOf-29.
+type InstallCounts struct {
+	Active1d  int64 `json:"active1d"`
+	Active7d  int64 `json:"active7d"`
+	Active30d int64 `json:"active30d"`
+}
+
+// DayCount is one day of a new-installs or lapsed-installs series.
+type DayCount struct {
+	Day   string `json:"day"`
+	Count int64  `json:"count"`
+}
+
+// VersionsByInstall is version adoption by install (activity records). It
+// covers WindowDays = min(range, ACTIVITY_EXPIRY_DAYS) days.
+type VersionsByInstall struct {
+	WindowDays int              `json:"windowDays"`
+	Items      []InstallVersion `json:"items"`
+}
+
+// InstallVersion is one version with the number of installs on it.
+type InstallVersion struct {
+	Label    string `json:"label"`
+	Installs int64  `json:"installs"`
+}
+
+// EnvViews are the environment shares.
+type EnvViews struct {
+	K8s    []ShareRow `json:"k8s"`
+	Distro []ShareRow `json:"distro"`
+	Arch   []ShareRow `json:"arch"`
+	Nodes  []ShareRow `json:"nodes"`
+}
+
+// ShareRow is a category's share of the reporting install-days in the range
+// (research R4): its summed installs over the summed extended reports.
+type ShareRow struct {
+	Label string  `json:"label"`
+	Share float64 `json:"share"`
+}
+
+// GameShare is one module's install share and its average servers per day.
+type GameShare struct {
+	Module        string  `json:"module"`
+	InstallsShare float64 `json:"installsShare"`
+	ServersPerDay float64 `json:"serversPerDay"`
+}
+
+// FeatureShare is one boolean feature's share of the install-days.
+type FeatureShare struct {
+	Feature string  `json:"feature"`
+	Share   float64 `json:"share"`
+}
+
+// BasicViews is the basic block (FR-024).
+type BasicViews struct {
+	ReportsPerDay []DayReports `json:"reportsPerDay"`
+	Versions      []VersionRow `json:"versions"`
+	Fleet         FleetViews   `json:"fleet"`
+	LatestDay     LatestDayRow `json:"latestDay"`
+}
+
+// DayReports is one day of the reports-per-day trend.
+type DayReports struct {
+	Day     string `json:"day"`
+	Reports int64  `json:"reports"`
+}
+
+// VersionRow is one version-adoption bar.
+type VersionRow struct {
+	Label   string `json:"label"`
+	Reports int64  `json:"reports"`
+}
+
+// FleetViews holds the fleet-size distributions.
+type FleetViews struct {
+	Servers   FleetDistribution `json:"servers"`
+	Templates FleetDistribution `json:"templates"`
+}
+
+// FleetDistribution is a banded histogram plus the exact median. A median of
+// 1001 means "more than 1000".
+type FleetDistribution struct {
+	Bands  []FleetBand `json:"bands"`
+	Median float64     `json:"median"`
+}
+
+// FleetBand is one histogram band; Le is the inclusive upper bound ("250+"
+// for the open band).
+type FleetBand struct {
+	Le      string `json:"le"`
+	Reports int64  `json:"reports"`
+}
+
+// LatestDayRow holds the totals for the as-of day.
+type LatestDayRow struct {
+	ServersTotal   int64 `json:"serversTotal"`
+	TemplatesTotal int64 `json:"templatesTotal"`
+}
+
+// normalizeRange returns days when it is a valid range, else defaultRange.
+func normalizeRange(days int) int {
+	for _, r := range validRanges {
+		if days == r {
+			return r
+		}
+	}
+	return defaultRange
+}
+
+// BuildViews computes the basic dashboard views over the rangeDays ending
+// on the latest complete UTC day, which is yesterday relative to now. An
+// invalid rangeDays falls back to 30. When no daily_basic row exists in the
+// range the result is the empty state: Empty is true and Basic is nil.
+func BuildViews(ctx context.Context, st *store, rangeDays int, now time.Time) (Views, error) {
+	rangeDays = normalizeRange(rangeDays)
+	asOf := now.UTC().Truncate(24*time.Hour).AddDate(0, 0, -1)
+	from := asOf.AddDate(0, 0, 1-rangeDays)
+	v := Views{Range: rangeDays, AsOf: dayString(asOf)}
+	fromDay, toDay := dayString(from), dayString(asOf)
+
+	perDay, latest, err := queryDailyBasic(ctx, st.db, fromDay, toDay, v.AsOf)
+	if err != nil {
+		return Views{}, err
+	}
+	if len(perDay) == 0 {
+		v.Empty = true
+		return v, nil
+	}
+	b := &BasicViews{LatestDay: latest}
+	b.ReportsPerDay = denseDays(from, rangeDays, perDay)
+	if b.Versions, err = queryVersions(ctx, st.db, fromDay, toDay); err != nil {
+		return Views{}, err
+	}
+	if b.Fleet.Servers, err = queryFleet(ctx, st.db, fleetMetricServers, fromDay, toDay); err != nil {
+		return Views{}, err
+	}
+	if b.Fleet.Templates, err = queryFleet(ctx, st.db, fleetMetricTemplates, fromDay, toDay); err != nil {
+		return Views{}, err
+	}
+	v.Basic = b
+	var basicReports int64
+	for _, n := range perDay {
+		basicReports += n
+	}
+	if v.Extended, err = buildExtended(ctx, st, rangeDays, fromDay, toDay, basicReports); err != nil {
+		return Views{}, err
+	}
+	return v, nil
+}
+
+// queryDailyBasic returns reports per day that has a row in [from, to], and
+// the totals of the asOf day (zero when it has no row).
+func queryDailyBasic(ctx context.Context, db *sql.DB, from, to, asOf string) (map[string]int64, LatestDayRow, error) {
+	rows, err := db.QueryContext(ctx,
+		`SELECT day, reports, servers_sum, templates_sum FROM daily_basic WHERE day >= ? AND day <= ?`, from, to)
+	if err != nil {
+		return nil, LatestDayRow{}, fmt.Errorf("query daily_basic: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	perDay := make(map[string]int64)
+	var latest LatestDayRow
+	for rows.Next() {
+		var day string
+		var reports, servers, templates int64
+		if err := rows.Scan(&day, &reports, &servers, &templates); err != nil {
+			return nil, LatestDayRow{}, fmt.Errorf("scan daily_basic: %w", err)
+		}
+		perDay[day] = reports
+		if day == asOf {
+			latest = LatestDayRow{ServersTotal: servers, TemplatesTotal: templates}
+		}
+	}
+	if err := rows.Err(); err != nil {
+		return nil, LatestDayRow{}, fmt.Errorf("read daily_basic: %w", err)
+	}
+	return perDay, latest, nil
+}
+
+// denseDays lists every day of the range, oldest first, with 0 for days that
+// have no row.
+func denseDays(from time.Time, n int, perDay map[string]int64) []DayReports {
+	out := make([]DayReports, 0, n)
+	for i := range n {
+		day := dayString(from.AddDate(0, 0, i))
+		out = append(out, DayReports{Day: day, Reports: perDay[day]})
+	}
+	return out
+}
+
+// queryVersions sums daily_version over [from, to] and returns the top
+// topVersions versions by reports (ties by label), then Other, then Invalid.
+// Other and Invalid are left out when they have no reports.
+func queryVersions(ctx context.Context, db *sql.DB, from, to string) ([]VersionRow, error) {
+	rows, err := db.QueryContext(ctx,
+		`SELECT version, SUM(reports) FROM daily_version WHERE day >= ? AND day <= ? GROUP BY version`, from, to)
+	if err != nil {
+		return nil, fmt.Errorf("query daily_version: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	var named []VersionRow
+	var other, invalid int64
+	for rows.Next() {
+		var version string
+		var n int64
+		if err := rows.Scan(&version, &n); err != nil {
+			return nil, fmt.Errorf("scan daily_version: %w", err)
+		}
+		switch version {
+		case versionInvalidStore:
+			invalid += n
+		case versionOtherStored:
+			other += n
+		default:
+			named = append(named, VersionRow{Label: version, Reports: n})
+		}
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("read daily_version: %w", err)
+	}
+	sort.Slice(named, func(i, j int) bool {
+		if named[i].Reports != named[j].Reports {
+			return named[i].Reports > named[j].Reports
+		}
+		return named[i].Label < named[j].Label
+	})
+	if len(named) > topVersions {
+		for _, r := range named[topVersions:] {
+			other += r.Reports
+		}
+		named = named[:topVersions]
+	}
+	out := append([]VersionRow{}, named...)
+	if other > 0 {
+		out = append(out, VersionRow{Label: versionOtherLabel, Reports: other})
+	}
+	if invalid > 0 {
+		out = append(out, VersionRow{Label: versionInvalidLabel, Reports: invalid})
+	}
+	return out, nil
+}
+
+// queryFleet sums the exact-value histogram of one metric over [from, to],
+// then derives the bands and the exact median.
+func queryFleet(ctx context.Context, db *sql.DB, metric, from, to string) (FleetDistribution, error) {
+	rows, err := db.QueryContext(ctx,
+		`SELECT value, SUM(reports) FROM daily_fleet WHERE metric = ? AND day >= ? AND day <= ?
+		 GROUP BY value ORDER BY value`, metric, from, to)
+	if err != nil {
+		return FleetDistribution{}, fmt.Errorf("query daily_fleet %s: %w", metric, err)
+	}
+	defer func() { _ = rows.Close() }()
+	var hist []fleetPoint
+	for rows.Next() {
+		var p fleetPoint
+		if err := rows.Scan(&p.value, &p.reports); err != nil {
+			return FleetDistribution{}, fmt.Errorf("scan daily_fleet: %w", err)
+		}
+		hist = append(hist, p)
+	}
+	if err := rows.Err(); err != nil {
+		return FleetDistribution{}, fmt.Errorf("read daily_fleet: %w", err)
+	}
+	return FleetDistribution{Bands: fleetBands(hist), Median: fleetMedian(hist)}, nil
+}
+
+// fleetPoint is one exact histogram entry; points are sorted by value.
+type fleetPoint struct {
+	value   int
+	reports int64
+}
+
+// fleetBands folds an exact histogram into the fixed bands. Every band is
+// returned, including empty ones, so a histogram has a stable shape.
+func fleetBands(hist []fleetPoint) []FleetBand {
+	bands := make([]FleetBand, 0, len(fleetBandBounds)+1)
+	for _, bound := range fleetBandBounds {
+		bands = append(bands, FleetBand{Le: fmt.Sprint(bound)})
+	}
+	bands = append(bands, FleetBand{Le: fleetBandOver})
+	for _, p := range hist {
+		i := len(fleetBandBounds)
+		for k, bound := range fleetBandBounds {
+			if p.value <= bound {
+				i = k
+				break
+			}
+		}
+		bands[i].Reports += p.reports
+	}
+	return bands
+}
+
+// fleetMedian returns the exact median of the histogram: the middle value,
+// or the mean of the two middle values for an even count. It is 0 for an
+// empty histogram. hist must be sorted by value.
+func fleetMedian(hist []fleetPoint) float64 {
+	var total int64
+	for _, p := range hist {
+		total += p.reports
+	}
+	if total == 0 {
+		return 0
+	}
+	at := func(rank int64) int {
+		var seen int64
+		for _, p := range hist {
+			seen += p.reports
+			if rank < seen {
+				return p.value
+			}
+		}
+		return hist[len(hist)-1].value
+	}
+	lo, hi := at((total-1)/2), at(total/2)
+	return float64(lo+hi) / 2
+}
+
+// buildExtended computes the extended block over [from, to], the rangeDays
+// ending on the latest complete day. basicReports is the sum of daily_basic
+// reports over the same range. It returns nil when the range has no extended
+// reports.
+func buildExtended(ctx context.Context, st *store, rangeDays int, from, to string, basicReports int64) (*ExtendedViews, error) {
+	var extReports, extDays int64
+	if err := st.db.QueryRowContext(ctx,
+		`SELECT COALESCE(SUM(ext_reports), 0), COUNT(CASE WHEN ext_reports > 0 THEN 1 END)
+		 FROM daily_ext WHERE day >= ? AND day <= ?`, from, to).Scan(&extReports, &extDays); err != nil {
+		return nil, fmt.Errorf("query daily_ext totals: %w", err)
+	}
+	if extReports == 0 {
+		return nil, nil
+	}
+	asOf, err := time.Parse(time.DateOnly, to)
+	if err != nil {
+		return nil, fmt.Errorf("parse asOf %q: %w", to, err)
+	}
+	e := &ExtendedViews{}
+	if basicReports > 0 {
+		e.Coverage = float64(extReports) / float64(basicReports)
+	}
+	if e.Installs, err = queryInstallCounts(ctx, st.db, asOf); err != nil {
+		return nil, err
+	}
+	if e.NewPerDay, e.LapsedPerDay, err = queryNewLapsed(ctx, st.db, asOf, rangeDays); err != nil {
+		return nil, err
+	}
+	window := rangeDays
+	if x := st.activityExpiryDays; x > 0 && x < window {
+		window = x
+	}
+	e.VersionsByInstall.WindowDays = window
+	if e.VersionsByInstall.Items, err = queryInstallVersions(ctx, st.db, dayString(asOf.AddDate(0, 0, 1-window))); err != nil {
+		return nil, err
+	}
+	dims, err := queryDims(ctx, st.db, from, to, extReports)
+	if err != nil {
+		return nil, err
+	}
+	e.Env = EnvViews{
+		K8s:    sortedShares(dims[dimK8s], nil),
+		Distro: sortedShares(dims[dimDistro], nil),
+		Arch:   sortedShares(dims[dimArch], nil),
+		Nodes:  sortedShares(dims[dimNodes], telemetryschema.NodeBands),
+	}
+	e.Tunnels = sortedShares(dims[dimTunnel], nil)
+	e.Clusters = sortedShares(dims[dimClusters], telemetryschema.ClusterBands)
+	e.DB = sortedShares(dims[dimDB], nil)
+	e.Language = sortedShares(dims[dimLanguage], nil)
+	featureShares := make(map[string]float64, len(featureNames))
+	for _, r := range dims[dimFeature] {
+		featureShares[r.Label] = r.Share
+	}
+	e.Features = make([]FeatureShare, 0, len(featureNames))
+	for _, f := range featureNames {
+		e.Features = append(e.Features, FeatureShare{Feature: f, Share: featureShares[f]})
+	}
+	if e.Games, err = queryGames(ctx, st.db, from, to, extReports, extDays); err != nil {
+		return nil, err
+	}
+	return e, nil
+}
+
+// queryInstallCounts counts unique installs by recency from the activity
+// records (data-model.md, Unique active installs).
+func queryInstallCounts(ctx context.Context, db *sql.DB, asOf time.Time) (InstallCounts, error) {
+	d1, d7, d30 := dayString(asOf), dayString(asOf.AddDate(0, 0, -6)), dayString(asOf.AddDate(0, 0, -29))
+	var c InstallCounts
+	if err := db.QueryRowContext(ctx,
+		`SELECT COUNT(CASE WHEN last_seen >= ? THEN 1 END), COUNT(CASE WHEN last_seen >= ? THEN 1 END), COUNT(*)
+		 FROM activity WHERE last_seen >= ?`, d1, d7, d30).Scan(&c.Active1d, &c.Active7d, &c.Active30d); err != nil {
+		return InstallCounts{}, fmt.Errorf("query activity counts: %w", err)
+	}
+	return c, nil
+}
+
+// queryNewLapsed returns the dense new and lapsed install series over the
+// rangeDays ending on asOf.
+func queryNewLapsed(ctx context.Context, db *sql.DB, asOf time.Time, rangeDays int) ([]DayCount, []DayCount, error) {
+	from := asOf.AddDate(0, 0, 1-rangeDays)
+	rows, err := db.QueryContext(ctx,
+		`SELECT day, new_installs, lapsed_installs FROM daily_ext WHERE day >= ? AND day <= ?`,
+		dayString(from), dayString(asOf))
+	if err != nil {
+		return nil, nil, fmt.Errorf("query daily_ext series: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	newBy, lapsedBy := make(map[string]int64), make(map[string]int64)
+	for rows.Next() {
+		var day string
+		var n, l int64
+		if err := rows.Scan(&day, &n, &l); err != nil {
+			return nil, nil, fmt.Errorf("scan daily_ext series: %w", err)
+		}
+		newBy[day], lapsedBy[day] = n, l
+	}
+	if err := rows.Err(); err != nil {
+		return nil, nil, fmt.Errorf("read daily_ext series: %w", err)
+	}
+	newPer, lapsedPer := make([]DayCount, 0, rangeDays), make([]DayCount, 0, rangeDays)
+	for i := range rangeDays {
+		day := dayString(from.AddDate(0, 0, i))
+		newPer = append(newPer, DayCount{Day: day, Count: newBy[day]})
+		lapsedPer = append(lapsedPer, DayCount{Day: day, Count: lapsedBy[day]})
+	}
+	return newPer, lapsedPer, nil
+}
+
+// queryInstallVersions counts installs per last reported version among the
+// activity records last seen on or after sinceDay: the top topVersions, then
+// Other and Invalid (left out when empty).
+func queryInstallVersions(ctx context.Context, db *sql.DB, sinceDay string) ([]InstallVersion, error) {
+	rows, err := db.QueryContext(ctx,
+		`SELECT last_version, COUNT(*) FROM activity WHERE last_seen >= ? GROUP BY last_version`, sinceDay)
+	if err != nil {
+		return nil, fmt.Errorf("query activity versions: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	var named []InstallVersion
+	var other, invalid int64
+	for rows.Next() {
+		var version string
+		var n int64
+		if err := rows.Scan(&version, &n); err != nil {
+			return nil, fmt.Errorf("scan activity versions: %w", err)
+		}
+		switch version {
+		case versionInvalidStore:
+			invalid += n
+		case versionOtherStored:
+			other += n
+		default:
+			named = append(named, InstallVersion{Label: version, Installs: n})
+		}
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("read activity versions: %w", err)
+	}
+	sort.Slice(named, func(i, j int) bool {
+		if named[i].Installs != named[j].Installs {
+			return named[i].Installs > named[j].Installs
+		}
+		return named[i].Label < named[j].Label
+	})
+	if len(named) > topVersions {
+		for _, r := range named[topVersions:] {
+			other += r.Installs
+		}
+		named = named[:topVersions]
+	}
+	out := append([]InstallVersion{}, named...)
+	if other > 0 {
+		out = append(out, InstallVersion{Label: versionOtherLabel, Installs: other})
+	}
+	if invalid > 0 {
+		out = append(out, InstallVersion{Label: versionInvalidLabel, Installs: invalid})
+	}
+	return out, nil
+}
+
+// queryDims sums daily_dim over [from, to] and returns each dimension's rows
+// as shares of extReports (install-day weighted, research R4).
+func queryDims(ctx context.Context, db *sql.DB, from, to string, extReports int64) (map[string][]ShareRow, error) {
+	rows, err := db.QueryContext(ctx,
+		`SELECT dim, value, SUM(installs) FROM daily_dim WHERE day >= ? AND day <= ? GROUP BY dim, value`, from, to)
+	if err != nil {
+		return nil, fmt.Errorf("query daily_dim: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	out := make(map[string][]ShareRow)
+	for rows.Next() {
+		var dim, value string
+		var n int64
+		if err := rows.Scan(&dim, &value, &n); err != nil {
+			return nil, fmt.Errorf("scan daily_dim: %w", err)
+		}
+		out[dim] = append(out[dim], ShareRow{Label: value, Share: float64(n) / float64(extReports)})
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("read daily_dim: %w", err)
+	}
+	return out, nil
+}
+
+// sortedShares returns rows ordered by order (members not in order, such as
+// "other", come last) when order is non-nil, else by share descending then
+// label. It never returns nil.
+func sortedShares(rows []ShareRow, order []string) []ShareRow {
+	out := append([]ShareRow{}, rows...)
+	rank := func(label string) int {
+		if i := slices.Index(order, label); i >= 0 {
+			return i
+		}
+		return len(order)
+	}
+	sort.Slice(out, func(i, j int) bool {
+		if order != nil {
+			if ri, rj := rank(out[i].Label), rank(out[j].Label); ri != rj {
+				return ri < rj
+			}
+		} else if out[i].Share != out[j].Share {
+			return out[i].Share > out[j].Share
+		}
+		return out[i].Label < out[j].Label
+	})
+	return out
+}
+
+// queryGames sums daily_game over [from, to]: each module's installs as a
+// share of extReports, and its servers averaged over the days that have
+// extended reports (extDays).
+func queryGames(ctx context.Context, db *sql.DB, from, to string, extReports, extDays int64) ([]GameShare, error) {
+	rows, err := db.QueryContext(ctx,
+		`SELECT module, SUM(installs), SUM(servers) FROM daily_game WHERE day >= ? AND day <= ? GROUP BY module`, from, to)
+	if err != nil {
+		return nil, fmt.Errorf("query daily_game: %w", err)
+	}
+	defer func() { _ = rows.Close() }()
+	out := []GameShare{}
+	for rows.Next() {
+		var module string
+		var installs, servers int64
+		if err := rows.Scan(&module, &installs, &servers); err != nil {
+			return nil, fmt.Errorf("scan daily_game: %w", err)
+		}
+		out = append(out, GameShare{
+			Module:        module,
+			InstallsShare: float64(installs) / float64(extReports),
+			ServersPerDay: round1(float64(servers) / float64(max(extDays, 1))),
+		})
+	}
+	if err := rows.Err(); err != nil {
+		return nil, fmt.Errorf("read daily_game: %w", err)
+	}
+	sort.Slice(out, func(i, j int) bool {
+		if out[i].InstallsShare != out[j].InstallsShare {
+			return out[i].InstallsShare > out[j].InstallsShare
+		}
+		return out[i].Module < out[j].Module
+	})
+	return out, nil
+}
+
+// round1 rounds f to one decimal place.
+func round1(f float64) float64 { return math.Round(f*10) / 10 }
diff --git a/telemetry-receiver/views_perf_test.go b/telemetry-receiver/views_perf_test.go
new file mode 100644
index 000000000..769ecfab6
--- /dev/null
+++ b/telemetry-receiver/views_perf_test.go
@@ -0,0 +1,85 @@
+package main
+
+import (
+	"context"
+	"database/sql"
+	"fmt"
+	"testing"
+	"time"
+)
+
+// TestBuildViewsOverAYearOfAggregatesIsFast seeds 365 days at 10,000 reports
+// per day as aggregates and asserts that the heaviest range builds in under
+// three seconds (SC-010).
+func TestBuildViewsOverAYearOfAggregatesIsFast(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{activityExpiryDays: 90})
+	ctx := context.Background()
+	now := time.Date(2026, 10, 7, 12, 0, 0, 0, time.UTC)
+	const days, perDay = 365, 10000
+	versions := []string{"0.1.0", "0.2.0", "0.3.0", "0.3.1", "dev", "other", "invalid"}
+	err := st.writeTx(ctx, func(tx *sql.Tx) error {
+		exec := func(q string, args ...any) error {
+			if _, err := tx.ExecContext(ctx, q, args...); err != nil {
+				return fmt.Errorf("seed %q: %w", q, err)
+			}
+			return nil
+		}
+		for i := range days {
+			day := dayString(now.AddDate(0, 0, -1-i))
+			if err := exec(`INSERT INTO daily_basic (day, reports, duplicates, servers_sum, templates_sum) VALUES (?, ?, 50, ?, ?)`,
+				day, perDay, perDay*3, perDay*5); err != nil {
+				return err
+			}
+			if err := exec(`INSERT INTO daily_ext (day, ext_reports, active_installs, new_installs, lapsed_installs) VALUES (?, ?, ?, 20, 10)`,
+				day, perDay/2, perDay/2); err != nil {
+				return err
+			}
+			for _, v := range versions {
+				if err := exec(`INSERT INTO daily_version (day, version, reports) VALUES (?, ?, ?)`, day, v, perDay/len(versions)); err != nil {
+					return err
+				}
+			}
+			for _, metric := range []string{"servers", "templates"} {
+				for value := 0; value <= 40; value++ {
+					if err := exec(`INSERT INTO daily_fleet (day, metric, value, reports) VALUES (?, ?, ?, ?)`, day, metric, value, perDay/41); err != nil {
+						return err
+					}
+				}
+			}
+			for k := range 40 {
+				if err := exec(`INSERT INTO daily_dim (day, dim, value, installs) VALUES (?, 'k8s', ?, ?)`,
+					day, fmt.Sprintf("1.%d", k), perDay/80); err != nil {
+					return err
+				}
+			}
+			for k := range 12 {
+				if err := exec(`INSERT INTO daily_game (day, module, installs, servers) VALUES (?, ?, ?, ?)`,
+					day, fmt.Sprintf("game-%d", k), perDay/24, perDay/8); err != nil {
+					return err
+				}
+			}
+		}
+		for i := range 20000 {
+			if err := exec(`INSERT INTO activity (id_hmac, key_fp, first_seen, last_seen, last_sent_at, last_version) VALUES (?, 'k', '2026-01-01', ?, '2026-01-01T00:00:00Z', ?)`,
+				fmt.Sprintf("id-%d", i), dayString(now.AddDate(0, 0, -1-i%60)), versions[i%len(versions)]); err != nil {
+				return err
+			}
+		}
+		return nil
+	})
+	if err != nil {
+		t.Fatalf("seed: %v", err)
+	}
+	start := time.Now()
+	v, err := BuildViews(ctx, st, 365, now)
+	elapsed := time.Since(start)
+	if err != nil {
+		t.Fatalf("BuildViews: %v", err)
+	}
+	if v.Empty || v.Basic == nil || v.Extended == nil {
+		t.Fatalf("BuildViews returned %+v, want populated basic and extended blocks", v)
+	}
+	if elapsed > 3*time.Second {
+		t.Fatalf("BuildViews(365) took %v, want under 3s (SC-010)", elapsed)
+	}
+}
diff --git a/telemetry-receiver/views_test.go b/telemetry-receiver/views_test.go
new file mode 100644
index 000000000..aac24ad3c
--- /dev/null
+++ b/telemetry-receiver/views_test.go
@@ -0,0 +1,327 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+)
+
+// viewsNow is the clock of the views tests: the latest complete day (asOf)
+// is 2026-10-06.
+var viewsNow = time.Date(2026, 10, 7, 12, 0, 0, 0, time.UTC)
+
+// viewsDay returns the day offset days before asOf (2026-10-06).
+func viewsDay(offset int) string {
+	return dayString(viewsNow.AddDate(0, 0, -1-offset))
+}
+
+// seedViews writes a synthetic multi-day dataset. Reports sit at 0, 3, 10,
+// 40, 100 and 400 days before asOf, so each range holds a different subset.
+func seedViews(t *testing.T, st *store) {
+	t.Helper()
+	for _, r := range []struct {
+		offset             int
+		version            string
+		servers, templates int
+	}{
+		{0, "1.0.0", 2, 5},
+		{0, "1.0.0", 0, 0},
+		{0, "2.0.0", 12, 300},
+		{3, "1.0.0", 1, 1},
+		{3, "invalid", 3, 4},
+		{10, "1.1.0", 7, 11},
+		{40, "0.9.0", 100, 2000},
+		{40, "other", 1001, 0},
+		{100, "0.8.0", 0, 0},
+		{400, "0.1.0", 5, 5},
+	} {
+		if err := st.recordBasic(context.Background(), viewsDay(r.offset), r.version, r.servers, r.templates); err != nil {
+			t.Fatalf("seed: %v", err)
+		}
+	}
+}
+
+func vr(label string, n int64) VersionRow { return VersionRow{Label: label, Reports: n} }
+
+func bandReports(d FleetDistribution) []int64 {
+	out := make([]int64, 0, len(d.Bands))
+	for _, b := range d.Bands {
+		out = append(out, b.Reports)
+	}
+	return out
+}
+
+func TestBuildViewsExactFiguresPerRange(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	seedViews(t, st)
+	cases := []struct {
+		rangeDays     int
+		firstDay      string
+		totalReports  int64
+		versions      []VersionRow
+		serverBands   []int64
+		serverMedian  float64
+		templateBands []int64
+		templateMed   float64
+	}{
+		{7, "2026-09-30", 5,
+			[]VersionRow{vr("1.0.0", 3), vr("2.0.0", 1), vr("Invalid", 1)},
+			[]int64{1, 1, 1, 1, 0, 1, 0, 0, 0, 0}, 2,
+			[]int64{1, 1, 0, 2, 0, 0, 0, 0, 0, 1}, 4},
+		{30, "2026-09-07", 6,
+			[]VersionRow{vr("1.0.0", 3), vr("1.1.0", 1), vr("2.0.0", 1), vr("Invalid", 1)},
+			[]int64{1, 1, 1, 1, 1, 1, 0, 0, 0, 0}, 2.5,
+			[]int64{1, 1, 0, 2, 0, 1, 0, 0, 0, 1}, 4.5},
+		{90, "2026-07-09", 8,
+			[]VersionRow{vr("1.0.0", 3), vr("0.9.0", 1), vr("1.1.0", 1), vr("2.0.0", 1), vr("Other", 1), vr("Invalid", 1)},
+			[]int64{1, 1, 1, 1, 1, 1, 0, 1, 0, 1}, 5,
+			[]int64{2, 1, 0, 2, 0, 1, 0, 0, 0, 2}, 4.5},
+		{365, "2025-10-07", 9,
+			[]VersionRow{vr("1.0.0", 3), vr("0.8.0", 1), vr("0.9.0", 1), vr("1.1.0", 1), vr("2.0.0", 1), vr("Other", 1), vr("Invalid", 1)},
+			[]int64{2, 1, 1, 1, 1, 1, 0, 1, 0, 1}, 3,
+			[]int64{3, 1, 0, 2, 0, 1, 0, 0, 0, 2}, 4},
+	}
+	wantLe := []string{"0", "1", "2", "5", "10", "25", "50", "100", "250", "250+"}
+	for _, tc := range cases {
+		t.Run(fmt.Sprintf("range_%d", tc.rangeDays), func(t *testing.T) {
+			v, err := BuildViews(context.Background(), st, tc.rangeDays, viewsNow)
+			if err != nil {
+				t.Fatalf("BuildViews: %v", err)
+			}
+			if v.Range != tc.rangeDays || v.AsOf != "2026-10-06" || v.Empty || v.Basic == nil || v.Extended != nil {
+				t.Fatalf("header = range %d asOf %s empty %v basic nil %v extended %v",
+					v.Range, v.AsOf, v.Empty, v.Basic == nil, v.Extended)
+			}
+			days := v.Basic.ReportsPerDay
+			if len(days) != tc.rangeDays || days[0].Day != tc.firstDay || days[len(days)-1].Day != "2026-10-06" {
+				t.Fatalf("reportsPerDay spans %d days from %s to %s", len(days), days[0].Day, days[len(days)-1].Day)
+			}
+			var total int64
+			for _, d := range days {
+				total += d.Reports
+			}
+			if total != tc.totalReports {
+				t.Errorf("reports in range = %d, want %d", total, tc.totalReports)
+			}
+			if got := days[len(days)-1].Reports; got != 3 {
+				t.Errorf("reports on asOf = %d, want 3", got)
+			}
+			if !reflect.DeepEqual(v.Basic.Versions, tc.versions) {
+				t.Errorf("versions = %+v, want %+v", v.Basic.Versions, tc.versions)
+			}
+			for name, c := range map[string]struct {
+				got    FleetDistribution
+				bands  []int64
+				median float64
+			}{
+				"servers":   {v.Basic.Fleet.Servers, tc.serverBands, tc.serverMedian},
+				"templates": {v.Basic.Fleet.Templates, tc.templateBands, tc.templateMed},
+			} {
+				if got := bandReports(c.got); !reflect.DeepEqual(got, c.bands) {
+					t.Errorf("%s bands = %v, want %v", name, got, c.bands)
+				}
+				if c.got.Median != c.median {
+					t.Errorf("%s median = %v, want %v", name, c.got.Median, c.median)
+				}
+				for i, b := range c.got.Bands {
+					if b.Le != wantLe[i] {
+						t.Errorf("%s band %d le = %q, want %q", name, i, b.Le, wantLe[i])
+					}
+				}
+			}
+			if want := (LatestDayRow{ServersTotal: 14, TemplatesTotal: 305}); v.Basic.LatestDay != want {
+				t.Errorf("latestDay = %+v, want %+v", v.Basic.LatestDay, want)
+			}
+		})
+	}
+}
+
+func TestBuildViewsReportsPerDayIsDense(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	seedViews(t, st)
+	v, err := BuildViews(context.Background(), st, 7, viewsNow)
+	if err != nil {
+		t.Fatalf("BuildViews: %v", err)
+	}
+	want := []DayReports{
+		{"2026-09-30", 0}, {"2026-10-01", 0}, {"2026-10-02", 0}, {"2026-10-03", 2},
+		{"2026-10-04", 0}, {"2026-10-05", 0}, {"2026-10-06", 3},
+	}
+	if !reflect.DeepEqual(v.Basic.ReportsPerDay, want) {
+		t.Fatalf("reportsPerDay = %+v, want %+v", v.Basic.ReportsPerDay, want)
+	}
+}
+
+func TestBuildViewsInvalidRangeFallsBackTo30(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	seedViews(t, st)
+	for _, n := range []int{0, -7, 5, 31, 366, 1000} {
+		v, err := BuildViews(context.Background(), st, n, viewsNow)
+		if err != nil {
+			t.Fatalf("range %d: %v", n, err)
+		}
+		if v.Range != 30 || len(v.Basic.ReportsPerDay) != 30 {
+			t.Errorf("range %d: got range %d with %d days, want 30", n, v.Range, len(v.Basic.ReportsPerDay))
+		}
+	}
+}
+
+func TestBuildViewsEmptyState(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	check := func(label string) {
+		t.Helper()
+		for _, r := range validRanges {
+			v, err := BuildViews(context.Background(), st, r, viewsNow)
+			if err != nil {
+				t.Fatalf("%s range %d: %v", label, r, err)
+			}
+			if !v.Empty || v.Basic != nil || v.Extended != nil || v.AsOf != "2026-10-06" || v.Range != r {
+				t.Fatalf("%s range %d: %+v, want the empty state", label, r, v)
+			}
+		}
+	}
+	check("empty store")
+	// Reports from today (not yet a complete day) and from beyond the
+	// widest range do not leave the empty state.
+	if err := st.recordBasic(context.Background(), "2026-10-07", "1.0.0", 1, 1); err != nil {
+		t.Fatal(err)
+	}
+	if err := st.recordBasic(context.Background(), "2024-01-01", "1.0.0", 1, 1); err != nil {
+		t.Fatal(err)
+	}
+	check("only out-of-range data")
+	body, err := json.Marshal(Views{Range: 30, AsOf: "2026-10-06", Empty: true})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(string(body), `"basic":null`) || !strings.Contains(string(body), `"extended":null`) {
+		t.Fatalf("empty view JSON = %s, want basic and extended null", body)
+	}
+}
+
+func TestBuildViewsTopTenVersionsThenOtherAndInvalid(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	ctx := context.Background()
+	day := viewsDay(1)
+	// Twelve named versions with 12, 11, ... 1 reports, plus other and
+	// invalid rows. The two smallest named versions fold into Other.
+	for i := range 12 {
+		for range 12 - i {
+			if err := st.recordBasic(ctx, day, fmt.Sprintf("3.%d.0", i), 1, 1); err != nil {
+				t.Fatal(err)
+			}
+		}
+	}
+	for range 4 {
+		if err := st.recordBasic(ctx, day, "other", 1, 1); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if err := st.recordBasic(ctx, day, "invalid", 1, 1); err != nil {
+		t.Fatal(err)
+	}
+	v, err := BuildViews(ctx, st, 7, viewsNow)
+	if err != nil {
+		t.Fatal(err)
+	}
+	got := v.Basic.Versions
+	if len(got) != 12 {
+		t.Fatalf("versions = %+v, want 10 named + Other + Invalid", got)
+	}
+	for i := range 10 {
+		if want := vr(fmt.Sprintf("3.%d.0", i), int64(12-i)); got[i] != want {
+			t.Errorf("versions[%d] = %+v, want %+v", i, got[i], want)
+		}
+	}
+	// Other = 4 (stored "other") + 2 + 1 (3.10.0 and 3.11.0).
+	if got[10] != vr("Other", 7) || got[11] != vr("Invalid", 1) {
+		t.Errorf("tail = %+v %+v, want Other 7 and Invalid 1", got[10], got[11])
+	}
+}
+
+func TestBuildViewsOmitsOtherAndInvalidWithoutReports(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	if err := st.recordBasic(context.Background(), viewsDay(0), "1.0.0", 1, 1); err != nil {
+		t.Fatal(err)
+	}
+	v, err := BuildViews(context.Background(), st, 7, viewsNow)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if want := []VersionRow{vr("1.0.0", 1)}; !reflect.DeepEqual(v.Basic.Versions, want) {
+		t.Fatalf("versions = %+v, want %+v", v.Basic.Versions, want)
+	}
+}
+
+func TestBuildViewsLatestDayZeroWhenAsOfHasNoRow(t *testing.T) {
+	st := openTestStore(t.Context(), t, config{})
+	if err := st.recordBasic(context.Background(), viewsDay(3), "1.0.0", 4, 9); err != nil {
+		t.Fatal(err)
+	}
+	v, err := BuildViews(context.Background(), st, 7, viewsNow)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if v.Empty || v.Basic.LatestDay != (LatestDayRow{}) {
+		t.Fatalf("latestDay = %+v (empty %v), want zeros with data in range", v.Basic.LatestDay, v.Empty)
+	}
+}
+
+func TestBuildViewsReadErrors(t *testing.T) {
+	for _, drop := range []string{"daily_basic", "daily_version", "daily_fleet"} {
+		t.Run(drop, func(t *testing.T) {
+			st := openTestStore(t.Context(), t, config{})
+			if err := st.recordBasic(context.Background(), viewsDay(0), "1.0.0", 1, 1); err != nil {
+				t.Fatal(err)
+			}
+			if _, err := st.db.ExecContext(context.Background(), "DROP TABLE "+drop); err != nil {
+				t.Fatal(err)
+			}
+			if _, err := BuildViews(context.Background(), st, 7, viewsNow); err == nil {
+				t.Fatalf("BuildViews with %s dropped: want an error", drop)
+			}
+		})
+	}
+}
+
+func TestFleetMedian(t *testing.T) {
+	cases := []struct {
+		name string
+		hist []fleetPoint
+		want float64
+	}{
+		{"empty", nil, 0},
+		{"single", []fleetPoint{{4, 1}}, 4},
+		{"odd", []fleetPoint{{1, 1}, {2, 1}, {9, 1}}, 2},
+		{"even mean", []fleetPoint{{1, 1}, {2, 1}, {3, 1}, {10, 1}}, 2.5},
+		{"weighted", []fleetPoint{{0, 5}, {10, 1}}, 0},
+		{"cap value", []fleetPoint{{1001, 3}}, 1001},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := fleetMedian(tc.hist); got != tc.want {
+				t.Fatalf("median = %v, want %v", got, tc.want)
+			}
+		})
+	}
+}
+
+func TestFleetBandsBoundaries(t *testing.T) {
+	hist := []fleetPoint{{0, 1}, {1, 2}, {2, 3}, {3, 4}, {5, 5}, {6, 6}, {250, 7}, {251, 8}, {1001, 9}}
+	want := []int64{1, 2, 3, 9, 6, 0, 0, 0, 7, 17}
+	if got := bandReports(FleetDistribution{Bands: fleetBands(hist)}); !reflect.DeepEqual(got, want) {
+		t.Fatalf("bands = %v, want %v", got, want)
+	}
+}
+
+func TestNormalizeRange(t *testing.T) {
+	for in, want := range map[int]int{7: 7, 30: 30, 90: 90, 365: 365, 0: 30, 8: 30, -1: 30} {
+		if got := normalizeRange(in); got != want {
+			t.Errorf("normalizeRange(%d) = %d, want %d", in, got, want)
+		}
+	}
+}
diff --git a/telemetry-receiver/web/charts.html b/telemetry-receiver/web/charts.html
new file mode 100644
index 000000000..0458e1588
--- /dev/null
+++ b/telemetry-receiver/web/charts.html
@@ -0,0 +1,39 @@
+{{define "columns"}}{{if .Table}}
+<table class="data">
+<caption class="sr">{{.Name}}</caption>
+<thead><tr><th scope="col">{{.Head1}}</th><th scope="col" class="num">{{.Head2}}</th></tr></thead>
+<tbody>
+{{range .Rows}}<tr><td>{{.Label}}</td><td class="num">{{.Value}}</td></tr>
+{{end}}</tbody>
+</table>
+{{else}}
+<svg class="chart" viewBox="0 0 {{.W}} {{.H}}" role="img" aria-label="{{.Name}}">
+<title>{{.Name}}</title>
+{{range .Ticks}}<line class="grid" x1="{{$.PlotLeft}}" x2="{{$.PlotRight}}" y1="{{.Y}}" y2="{{.Y}}"/>
+<text class="axis" x="{{$.LabelX}}" y="{{.Y}}" text-anchor="end" dominant-baseline="middle">{{.Label}}</text>
+{{end}}<line class="baseline" x1="{{.PlotLeft}}" x2="{{.PlotRight}}" y1="{{.BaseY}}" y2="{{.BaseY}}"/>
+{{range .Cols}}<rect class="bar {{$.Class}}" x="{{.X}}" y="{{.Y}}" width="{{.W}}" height="{{.H}}" rx="2"><title>{{.Title}}</title></rect>
+{{end}}{{range .XLabels}}<text class="axis" x="{{.X}}" y="{{$.AxisY}}" text-anchor="middle">{{.Label}}</text>
+{{end}}{{if .LastText}}<text class="last" x="{{.LastX}}" y="{{.LastY}}" text-anchor="middle">{{.LastText}}</text>{{end}}
+</svg>
+{{end}}{{end}}
+
+{{define "bars"}}{{if .Table}}
+<table class="data">
+<caption class="sr">{{.Name}}</caption>
+<thead><tr><th scope="col">{{.Head1}}</th><th scope="col" class="num">{{.Head2}}</th></tr></thead>
+<tbody>
+{{range .Rows}}<tr><td>{{.Label}}</td><td class="num">{{.Value}}</td></tr>
+{{end}}</tbody>
+</table>
+{{else}}
+<svg class="chart bars" viewBox="0 0 {{.W}} {{.H}}" role="img" aria-label="{{.Name}}">
+<title>{{.Name}}</title>
+{{range .Bars}}<g>
+<text class="axis label" x="0" y="{{.TextY}}">{{.Label}}</text>
+{{if $.Track}}<rect class="track" x="{{$.BarX}}" y="{{.RectY}}" width="{{$.TrackW}}" height="{{$.BarH}}" rx="2"/>{{end}}
+<rect class="bar {{$.Class}}" x="{{$.BarX}}" y="{{.RectY}}" width="{{.Bar}}" height="{{$.BarH}}" rx="2"><title>{{.Title}}</title></rect>
+<text class="axis value" x="{{$.ValueX}}" y="{{.TextY}}" text-anchor="end">{{.Value}}</text>
+</g>
+{{end}}</svg>
+{{end}}{{end}}
diff --git a/telemetry-receiver/web/layout.html b/telemetry-receiver/web/layout.html
new file mode 100644
index 000000000..3155cfa1f
--- /dev/null
+++ b/telemetry-receiver/web/layout.html
@@ -0,0 +1,31 @@
+{{define "layout"}}<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="color-scheme" content="dark light">
+<title>Gameplane telemetry</title>
+<link rel="icon" type="image/png" href="/static/gameplane-icon.png">
+<link rel="stylesheet" href="/static/style.css">
+</head>
+<body>
+{{template "content" .}}
+</body>
+</html>
+{{end}}
+
+{{define "topbar"}}
+<header class="topbar">
+<div class="brand">
+<img class="logo" src="/static/gameplane-icon.png" width="24" height="24" alt="">
+<span class="wordmark">gameplane</span>
+<span class="crumb-sep" aria-hidden="true">/</span>
+<span class="crumb">Telemetry</span>
+{{if .Empty}}<span class="pill">No data yet</span>{{else}}<span class="pill">Approximate &middot; self-reported</span>{{end}}
+</div>
+<div class="topbar-end">
+{{if not .Empty}}<span class="asof">Data through {{.AsOf}} (UTC)</span>{{end}}
+<form method="post" action="/logout"><button type="submit" class="btn btn-quiet">Sign out</button></form>
+</div>
+</header>
+{{end}}
diff --git a/telemetry-receiver/web/login.html b/telemetry-receiver/web/login.html
new file mode 100644
index 000000000..a71063c41
--- /dev/null
+++ b/telemetry-receiver/web/login.html
@@ -0,0 +1,21 @@
+{{define "content"}}
+<main class="login">
+<section class="card login-card">
+<div class="brand">
+<img class="logo" src="/static/gameplane-icon.png" width="32" height="32" alt="">
+<span class="wordmark">gameplane</span>
+</div>
+<p class="eyebrow">Private dashboard</p>
+<h1 class="title">Gameplane telemetry</h1>
+<p class="lede">Private dashboard. Sign in with the dashboard token.</p>
+{{if .Error}}<p class="alert" role="alert">{{.Error}}</p>{{end}}
+<form method="post" action="/login" class="form">
+<label for="token" class="label">Dashboard token</label>
+<input id="token" name="token" type="password" autocomplete="current-password" required class="field" aria-describedby="token-hint">
+<p id="token-hint" class="hint">The DASHBOARD_TOKEN value from the receiver's Secret.</p>
+<button type="submit" class="btn btn-primary">Sign in</button>
+</form>
+</section>
+<p class="footnote">Sessions last 12 hours. Rotating the token signs everyone out.</p>
+</main>
+{{end}}
diff --git a/telemetry-receiver/web/overview.html b/telemetry-receiver/web/overview.html
new file mode 100644
index 000000000..70024e007
--- /dev/null
+++ b/telemetry-receiver/web/overview.html
@@ -0,0 +1,54 @@
+{{define "content"}}
+{{template "topbar" .}}
+<main class="page">
+<header class="page-head">
+<div>
+<p class="eyebrow">Provider overview</p>
+<h1 class="title">Usage across reporting installs</h1>
+<p class="lede">Daily aggregates from self-reported, anonymous reports. Every figure is approximate: installs choose to report, and nothing is verified beyond the report signature.</p>
+</div>
+<nav class="segment" aria-label="Range">
+{{range .Ranges}}<a class="segment-item{{if .Active}} is-active{{end}}" href="{{.Href}}"{{if .Active}} aria-current="page"{{end}}>{{.Days}} days</a>
+{{end}}</nav>
+</header>
+{{if .Empty}}
+<section class="card empty">
+<h2 class="card-title">No reports yet</h2>
+<p class="muted">Figures appear once this receiver has accepted reports for a full UTC day. Installs send to POST /ingest on the public port; nothing is shown until there is data, so no chart is drawn from zeros.</p>
+</section>
+{{else}}
+{{with .Basic}}
+<section class="section" aria-labelledby="basic-h">
+<h2 class="section-title" id="basic-h">Basic reports</h2>
+<p class="muted">Version, server count and template count from every report, basic or extended.</p>
+<div class="kpis kpis-4">
+<div class="card tile"><p class="tile-label">Reports, latest day</p><p class="tile-value">{{num $.LatestReports}}</p><p class="tile-sub">{{$.AsOf}} (UTC)</p></div>
+<div class="card tile"><p class="tile-label">Reports, last {{$.Range}} days</p><p class="tile-value">{{num $.RangeReports}}</p><p class="tile-sub">Accepted reports</p></div>
+<div class="card tile"><p class="tile-label">Reports since collection began</p><p class="tile-value">{{num $.ReportsTotal}}</p><p class="tile-sub">{{if $.Since}}Since {{$.Since}}{{end}}</p></div>
+<div class="card tile"><p class="tile-label">Median servers per install</p><p class="tile-value">{{.Fleet.Servers.Median}}</p><p class="tile-sub">Last {{$.Range}} days</p></div>
+</div>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Reports per day</span><span class="muted block">Accepted reports per UTC day, last {{$.Range}} days</span></span>
+{{if $.Table}}<a class="link" href="{{$.ChartHref}}">View as chart</a>{{else}}<a class="link" href="{{$.TableHref}}">View as table</a>{{end}}</figcaption>
+{{template "columns" $.PerDay}}
+</figure>
+<div class="grid-2">
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Versions</span><span class="muted block">Reports in range by reported version. Top 10, then Other and Invalid.</span></span></figcaption>
+{{template "bars" $.VersionsChart}}
+</figure>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Servers per install</span><span class="muted block">Reports by game-server count. Median {{.Fleet.Servers.Median}}.</span></span></figcaption>
+{{template "columns" $.ServersChart}}
+</figure>
+</div>
+</section>
+{{end}}
+{{template "extended" .}}
+{{end}}
+<footer class="foot muted">
+<p>All figures are approximate and self-reported. Reports are anonymous; extended reports are signed by a key the install derives locally, which stops impersonation but not invented figures.</p>
+<p>Install IDs are stored only as keyed hashes. Activity records expire after the configured inactivity period, and daily aggregates are kept for the configured retention. No IP address or raw report is stored.</p>
+</footer>
+</main>
+{{end}}
diff --git a/telemetry-receiver/web/overview_extended.html b/telemetry-receiver/web/overview_extended.html
new file mode 100644
index 000000000..f592012f3
--- /dev/null
+++ b/telemetry-receiver/web/overview_extended.html
@@ -0,0 +1,74 @@
+{{define "extended"}}
+<section class="section" aria-labelledby="ext-h">
+<div class="section-head">
+<div>
+<h2 class="section-title" id="ext-h">Extended reports</h2>
+<p class="muted">Installs that also share the extended tier. Each install counts once per day; shares are weighted by install-days in the range.</p>
+</div>
+{{with .Extended}}{{with $.Ext}}
+<div class="coverage">
+<span>Coverage: {{pct $.Extended.Coverage}} of reports in range include extended data</span>
+<svg class="coverage-track" viewBox="0 0 100 6" preserveAspectRatio="none" role="img" aria-label="Coverage {{pct $.Extended.Coverage}}">
+<rect class="track" x="0" y="0" width="100" height="6" rx="3"/>
+<rect class="bar s1" x="0" y="0" width="{{.CoverageW}}" height="6" rx="3"/>
+</svg>
+</div>
+{{end}}{{end}}
+</div>
+{{if .Extended}}{{with .Ext}}
+<div class="kpis kpis-5">
+<div class="card tile"><p class="tile-label">Active installs, latest day</p><p class="tile-value">{{num $.Extended.Installs.Active1d}}</p><p class="tile-sub">{{$.AsOf}} (UTC)</p></div>
+<div class="card tile"><p class="tile-label">Active, last 7 days</p><p class="tile-value">{{num $.Extended.Installs.Active7d}}</p><p class="tile-sub">Unique installs</p></div>
+<div class="card tile"><p class="tile-label">Active, last 30 days</p><p class="tile-value">{{num $.Extended.Installs.Active30d}}</p><p class="tile-sub">Unique installs</p></div>
+<div class="card tile"><p class="tile-label">New installs, last {{$.Range}} days</p><p class="tile-value">{{num .NewTotal}}</p><p class="tile-sub">First report in range</p></div>
+<div class="card tile"><p class="tile-label">Lapsed, last {{$.Range}} days</p><p class="tile-value">{{num .LapsedTotal}}</p><p class="tile-sub">No report for 30 days</p></div>
+</div>
+<div class="grid-2">
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">New installs per day</span><span class="muted block">First accepted report from an install ID</span></span></figcaption>
+{{template "columns" .New}}
+</figure>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Lapsed installs per day</span><span class="muted block">Installs whose last report was 30 days earlier</span></span></figcaption>
+{{template "columns" .Lapsed}}
+</figure>
+</div>
+<div class="grid-2">
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Kubernetes version</span><span class="muted block">Share of install-days by reported minor version.</span></span></figcaption>
+{{template "bars" .K8s}}
+</figure>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Distribution</span><span class="muted block">Share of install-days by detected distribution.</span></span></figcaption>
+{{template "bars" .Distro}}
+</figure>
+</div>
+<div class="grid-2">
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Architecture</span><span class="muted block">Share of install-days reporting each node architecture. Mixed clusters report several, so shares add up to more than 100%.</span></span></figcaption>
+{{template "bars" .Arch}}
+</figure>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Cluster nodes</span><span class="muted block">Share of install-days by node-count band.</span></span></figcaption>
+{{template "bars" .Nodes}}
+</figure>
+</div>
+<div class="grid-2">
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Games</span><span class="muted block">Share of install-days running at least one server of each official module. Uploaded and third-party modules count as Custom.</span></span></figcaption>
+{{template "bars" .Games}}
+</figure>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Feature adoption</span><span class="muted block">Share of install-days with each feature in use.</span></span></figcaption>
+{{template "bars" .Features}}
+</figure>
+</div>
+<figure class="card chart-card">
+<figcaption class="card-head"><span><span class="card-title">Versions by install</span><span class="muted block">Installs by their last reported version, over the last {{.WindowDays}} days (the shorter of the range and the activity-record expiry).</span></span></figcaption>
+{{template "bars" .VersionsInstall}}
+</figure>
+{{end}}{{else}}
+<p class="card muted">No reports in this range included extended data. Basic figures above still cover every report.</p>
+{{end}}
+</section>
+{{end}}
diff --git a/telemetry-receiver/web/static/gameplane-icon.png b/telemetry-receiver/web/static/gameplane-icon.png
new file mode 100644
index 000000000..d6ba56d47
Binary files /dev/null and b/telemetry-receiver/web/static/gameplane-icon.png differ
diff --git a/telemetry-receiver/web/static/style.css b/telemetry-receiver/web/static/style.css
new file mode 100644
index 000000000..3f4582214
--- /dev/null
+++ b/telemetry-receiver/web/static/style.css
@@ -0,0 +1,247 @@
+/* Gameplane telemetry dashboard. Tokens come from design-export/variables.json
+   (the pink theme shared with the app and the website). Dark is the default;
+   light follows prefers-color-scheme. No fonts are loaded from a CDN (CSP):
+   Geist and JetBrains Mono are named first and fall back to system fonts. */
+:root {
+  color-scheme: dark light;
+  --font-sans: "Geist", ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
+  --font-mono: "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
+
+  --bg: #121114;
+  --surface: #1c1a20;
+  --surface-secondary: #17151a;
+  --surface-tertiary: #141317;
+  --overlay: #1c1a20;
+  --border: #2c2932;
+  --separator: #232227;
+  --fg: #f5f3f7;
+  --fg-default: #ede9f0;
+  --muted: #9e98a6;
+  --link: #7db4ff;
+  --accent: #ff4fa3;
+  --accent-fg: #ffffff;
+  --accent-soft: #331525;
+  --accent-soft-fg: #ff8ac4;
+  --segment: #1d1b22;
+  --default: #232128;
+  --field-bg: #17151a;
+  --field-fg: #fcfcfc;
+  --placeholder: #7b7584;
+  --danger: #e0304f;
+  --danger-soft: #2e1317;
+  --danger-soft-fg: #f87171;
+  --chart-1: #ec4899;
+  --chart-2: #3987e5;
+  --chart-grid: #232128;
+  --chart-baseline: #2c2932;
+  --chart-track: #ec48992e;
+}
+
+@media (prefers-color-scheme: light) {
+  :root {
+    --bg: #ffffff;
+    --surface: #fff7fb;
+    --surface-secondary: #f8dde9;
+    --surface-tertiary: #f8dde9;
+    --overlay: #fff7fb;
+    --border: #efc3d6;
+    --separator: #efc3d6;
+    --fg: #2a0f1e;
+    --fg-default: #2a0f1e;
+    --muted: #6e5262;
+    --link: #2563eb;
+    --accent: #db2777;
+    --accent-fg: #ffffff;
+    --accent-soft: #ffffff;
+    --accent-soft-fg: #be185d;
+    --segment: #ffffff;
+    --default: #f6dce7;
+    --field-bg: #ffffff;
+    --field-fg: #2a0f1e;
+    --placeholder: #8a6c7b;
+    --danger: #dc2828;
+    --danger-soft: #fee2e2;
+    --danger-soft-fg: #ef4444;
+    --chart-1: #db2777;
+    --chart-2: #2a78d6;
+    --chart-grid: #f8e6ee;
+    --chart-baseline: #efc3d6;
+    --chart-track: #db27771f;
+  }
+}
+
+*, *::before, *::after { box-sizing: border-box; }
+
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--fg);
+  font-family: var(--font-sans);
+  font-size: 14px;
+  line-height: 1.5;
+}
+
+h1, h2, p, figure { margin: 0; }
+
+.sr {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  overflow: hidden;
+  clip-path: inset(50%);
+  white-space: nowrap;
+}
+
+.muted { color: var(--muted); }
+.block { display: block; }
+.link { color: var(--accent-soft-fg); text-decoration: none; font-size: 13px; }
+.link:hover { text-decoration: underline; }
+
+/* Top bar */
+.topbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  min-height: 64px;
+  padding: 8px 40px;
+  border-bottom: 1px solid var(--separator);
+  flex-wrap: wrap;
+}
+.brand { display: flex; align-items: center; gap: 10px; }
+.logo { border-radius: 6px; display: block; }
+.wordmark { font-family: var(--font-mono); font-weight: 600; font-size: 15px; }
+.crumb-sep, .crumb, .asof { color: var(--muted); }
+.crumb { color: var(--fg-default); }
+.asof { font-size: 12px; }
+.topbar-end { display: flex; align-items: center; gap: 16px; }
+.pill {
+  background: var(--accent-soft);
+  color: var(--accent-soft-fg);
+  border-radius: 999px;
+  padding: 1px 10px;
+  font-size: 11px;
+}
+
+/* Buttons and fields */
+.btn {
+  font: inherit;
+  font-weight: 600;
+  border-radius: 999px;
+  border: 1px solid transparent;
+  padding: 8px 16px;
+  cursor: pointer;
+}
+.btn-primary { background: var(--accent); color: var(--accent-fg); width: 100%; padding: 14px 16px; }
+.btn-quiet { background: var(--default); color: var(--fg-default); border-color: var(--border); font-size: 13px; padding: 6px 12px; }
+.btn:focus-visible, .field:focus-visible, .link:focus-visible, .segment-item:focus-visible {
+  outline: 2px solid var(--accent);
+  outline-offset: 2px;
+}
+.field {
+  width: 100%;
+  font: inherit;
+  color: var(--field-fg);
+  background: var(--field-bg);
+  border: 1px solid var(--border);
+  border-radius: 16px;
+  padding: 14px 16px;
+}
+.label { font-weight: 500; font-size: 15px; }
+.hint { color: var(--muted); font-size: 13px; }
+.alert {
+  background: var(--danger-soft);
+  color: var(--danger-soft-fg);
+  border-radius: 12px;
+  padding: 10px 14px;
+  margin-top: 16px;
+}
+
+/* Login */
+.login {
+  min-height: 100vh;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 24px;
+  padding: 24px 16px;
+}
+.login-card { width: 100%; max-width: 384px; padding: 28px; }
+.login-card .brand { margin-bottom: 20px; }
+.login-card .lede { margin: 12px 0 24px; }
+.form { display: flex; flex-direction: column; gap: 10px; }
+.footnote { color: var(--muted); font-size: 13px; text-align: center; }
+
+/* Type */
+.eyebrow {
+  font-family: var(--font-mono);
+  font-size: 12px;
+  letter-spacing: 0.14em;
+  text-transform: uppercase;
+  color: var(--accent);
+}
+.title { font-family: var(--font-mono); font-size: 32px; font-weight: 600; line-height: 1.2; margin-top: 8px; }
+.lede { color: var(--muted); font-size: 15px; max-width: 60ch; margin-top: 8px; }
+.section-title { font-family: var(--font-mono); font-size: 20px; font-weight: 600; }
+.card-title { font-size: 15px; font-weight: 600; }
+
+/* Layout */
+.page { max-width: 1440px; margin: 0 auto; padding: 32px 40px 48px; display: flex; flex-direction: column; gap: 32px; }
+.page-head { display: flex; justify-content: space-between; align-items: flex-start; gap: 16px; flex-wrap: wrap; }
+.section { display: flex; flex-direction: column; gap: 16px; }
+.section + .section { border-top: 1px solid var(--separator); padding-top: 32px; }
+.section-head { display: flex; justify-content: space-between; align-items: flex-end; gap: 16px; flex-wrap: wrap; }
+.grid-2 { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 24px; }
+.kpis { display: grid; gap: 16px; }
+.kpis-4 { grid-template-columns: repeat(4, minmax(0, 1fr)); }
+.kpis-5 { grid-template-columns: repeat(5, minmax(0, 1fr)); }
+.foot { border-top: 1px solid var(--separator); padding-top: 16px; font-size: 12px; display: flex; flex-direction: column; gap: 4px; }
+
+/* Cards and tiles */
+.card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 24px;
+  padding: 20px;
+}
+.empty { display: flex; flex-direction: column; gap: 8px; }
+.tile { padding: 16px 20px; }
+.tile-label { color: var(--muted); font-size: 13px; }
+.tile-value { font-family: var(--font-mono); font-size: 32px; font-weight: 600; line-height: 1.2; margin: 4px 0; }
+.tile-sub { color: var(--muted); font-size: 12px; }
+.chart-card { display: flex; flex-direction: column; gap: 12px; }
+.card-head { display: flex; justify-content: space-between; align-items: flex-start; gap: 12px; }
+.card-head .muted { font-size: 13px; }
+
+/* Range selector */
+.segment { display: inline-flex; background: var(--segment); border: 1px solid var(--border); border-radius: 999px; padding: 4px; }
+.segment-item { color: var(--muted); text-decoration: none; padding: 6px 14px; border-radius: 999px; font-size: 13px; }
+.segment-item.is-active { background: var(--default); color: var(--fg); }
+
+/* Charts */
+.chart { display: block; width: 100%; height: auto; }
+.chart .grid { stroke: var(--chart-grid); stroke-width: 1; }
+.chart .baseline { stroke: var(--chart-baseline); stroke-width: 1; }
+.chart .axis { fill: var(--muted); font-size: 11px; font-family: var(--font-sans); }
+.chart .last { fill: var(--fg); font-size: 11px; font-weight: 600; font-family: var(--font-sans); }
+.chart .label { fill: var(--fg-default); font-size: 13px; }
+.chart .value { fill: var(--fg-default); font-size: 13px; }
+.chart .bar.s1 { fill: var(--chart-1); }
+.chart .bar.s2 { fill: var(--chart-2); }
+.chart .track { fill: var(--chart-track); }
+.coverage { display: flex; flex-direction: column; gap: 6px; min-width: 240px; font-size: 13px; color: var(--muted); }
+.coverage-track { display: block; width: 100%; height: 6px; }
+
+/* Table view */
+.data { width: 100%; border-collapse: collapse; font-size: 13px; }
+.data th, .data td { text-align: left; padding: 6px 8px; border-bottom: 1px solid var(--separator); }
+.data th { color: var(--muted); font-weight: 500; }
+.data .num { text-align: right; font-variant-numeric: tabular-nums; }
+
+@media (max-width: 960px) {
+  .page { padding: 24px 16px 40px; }
+  .topbar { padding: 8px 16px; }
+  .grid-2, .kpis-4, .kpis-5 { grid-template-columns: minmax(0, 1fr); }
+  .title { font-size: 24px; }
+}
diff --git a/telemetryschema/.testcoverage.yml b/telemetryschema/.testcoverage.yml
new file mode 100644
index 000000000..e23a2029e
--- /dev/null
+++ b/telemetryschema/.testcoverage.yml
@@ -0,0 +1,13 @@
+# Coverage threshold gate for the shared telemetryschema module.
+# Enforced by `make cover-go-check` via go-test-coverage/v2.
+#
+# telemetryschema is the stdlib-only report contract shared by api and
+# telemetry-receiver: types, enumerations, strict decoding, the official module
+# catalog and report signing. All of it is unit-testable, so the gate is 90%.
+profile: coverage/unit.out
+github-action-output: false
+
+threshold:
+  file: 0
+  package: 0
+  total: 90
diff --git a/telemetryschema/catalog.go b/telemetryschema/catalog.go
new file mode 100644
index 000000000..e90c22c17
--- /dev/null
+++ b/telemetryschema/catalog.go
@@ -0,0 +1,39 @@
+package telemetryschema
+
+import (
+	_ "embed"
+	"slices"
+	"strings"
+)
+
+// catalogText is catalog.txt, generated from charts/gameplane/values.yaml
+// defaultModuleSource.oci.modules; hack/check-telemetry-catalog.sh fails when
+// the two differ.
+//
+//go:embed catalog.txt
+var catalogText string
+
+// officialModules is catalogText split into names, in file order.
+var officialModules = parseCatalog(catalogText)
+
+// parseCatalog splits catalog text into module names, skipping blank lines.
+func parseCatalog(text string) []string {
+	var names []string
+	for _, line := range strings.Split(text, "\n") {
+		if name := strings.TrimSpace(line); name != "" {
+			names = append(names, name)
+		}
+	}
+	return names
+}
+
+// IsOfficial reports whether name is an official module in the embedded
+// catalog.
+func IsOfficial(name string) bool {
+	return slices.Contains(officialModules, name)
+}
+
+// Catalog returns a copy of the official module names, in catalog order.
+func Catalog() []string {
+	return slices.Clone(officialModules)
+}
diff --git a/telemetryschema/catalog.txt b/telemetryschema/catalog.txt
new file mode 100644
index 000000000..74ad800ae
--- /dev/null
+++ b/telemetryschema/catalog.txt
@@ -0,0 +1,16 @@
+7-days-to-die
+ark-survival-ascended
+cs2
+dayz
+dont-starve-together
+enshrouded
+factorio
+garrys-mod
+minecraft-java
+palworld
+project-zomboid
+rust
+satisfactory
+terraria
+valheim
+v-rising
diff --git a/telemetryschema/catalog_test.go b/telemetryschema/catalog_test.go
new file mode 100644
index 000000000..4daffa20d
--- /dev/null
+++ b/telemetryschema/catalog_test.go
@@ -0,0 +1,78 @@
+package telemetryschema
+
+import (
+	"reflect"
+	"regexp"
+	"testing"
+)
+
+// TestIsOfficial checks catalog membership: exact, case-sensitive names only.
+func TestIsOfficial(t *testing.T) {
+	t.Parallel()
+	for _, name := range []string{"minecraft-java", "terraria", "valheim", "7-days-to-die", "v-rising", "cs2"} {
+		if !IsOfficial(name) {
+			t.Errorf("IsOfficial(%q) = false, want true", name)
+		}
+	}
+	for _, name := range []string{"", "custom", "other", "Minecraft-Java", "minecraft-java ", " terraria", "minecraft", "minecraft-java2", "my-private-game"} {
+		if IsOfficial(name) {
+			t.Errorf("IsOfficial(%q) = true, want false", name)
+		}
+	}
+}
+
+// TestCatalog checks the embedded list is well formed and that Catalog hands
+// out a copy.
+func TestCatalog(t *testing.T) {
+	t.Parallel()
+	got := Catalog()
+	if len(got) == 0 {
+		t.Fatal("catalog is empty")
+	}
+	name := regexp.MustCompile(`^[a-z0-9][a-z0-9-]*$`)
+	seen := map[string]bool{}
+	for _, n := range got {
+		if !name.MatchString(n) {
+			t.Errorf("catalog entry %q is not a module name", n)
+		}
+		if seen[n] {
+			t.Errorf("catalog entry %q is duplicated", n)
+		}
+		seen[n] = true
+		if !IsOfficial(n) {
+			t.Errorf("IsOfficial(%q) = false for a catalog entry", n)
+		}
+	}
+	for _, n := range []string{"minecraft-java", "terraria", "valheim"} {
+		if !seen[n] {
+			t.Errorf("catalog is missing %q", n)
+		}
+	}
+
+	got[0] = "tampered"
+	if IsOfficial("tampered") || Catalog()[0] == "tampered" {
+		t.Fatal("mutating the result of Catalog changed the catalog")
+	}
+}
+
+// TestParseCatalog covers blank lines, surrounding whitespace and CRLF input.
+func TestParseCatalog(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		name string
+		in   string
+		want []string
+	}{
+		{"empty", "", nil},
+		{"only blanks", "\n \n\t\n", nil},
+		{"simple", "a\nb\n", []string{"a", "b"}},
+		{"no trailing newline", "a\nb", []string{"a", "b"}},
+		{"blank lines and spaces", "\n a \n\n\tb\t\n", []string{"a", "b"}},
+		{"crlf", "a\r\nb\r\n", []string{"a", "b"}},
+	}
+	for _, tc := range cases {
+		if got := parseCatalog(tc.in); !reflect.DeepEqual(got, tc.want) {
+			t.Errorf("%s: parseCatalog(%q) = %#v, want %#v", tc.name, tc.in, got, tc.want)
+		}
+	}
+}
diff --git a/telemetryschema/decode.go b/telemetryschema/decode.go
new file mode 100644
index 000000000..bedc9ad0e
--- /dev/null
+++ b/telemetryschema/decode.go
@@ -0,0 +1,417 @@
+package telemetryschema
+
+import (
+	"bytes"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"math"
+	"slices"
+	"sort"
+	"time"
+)
+
+// ErrInvalidPayload is wrapped by every error Decode returns for a body that
+// is not a valid report: not exactly one JSON object, an unknown, duplicate or
+// missing key, a null or wrongly typed value, a structurally invalid extended
+// part, or trailing content.
+var ErrInvalidPayload = errors.New("invalid payload")
+
+// ErrUnsupportedSchema is returned when ext.schema is newer than this package
+// understands. It wraps ErrInvalidPayload, so errors.Is(err, ErrInvalidPayload)
+// is also true and a caller that maps both to 400 needs one check.
+var ErrUnsupportedSchema = fmt.Errorf("%w: unsupported ext schema", ErrInvalidPayload)
+
+// SchemaVersion is the extended-tier schema this package reads and writes.
+const SchemaVersion = 1
+
+// keySize is the length in bytes of an Ed25519 public key.
+const keySize = 32
+
+// DecodeInfo reports non-fatal outcomes of Decode.
+type DecodeInfo struct {
+	// ExtDropped is true when the body carried an ext part that was discarded
+	// because ext.installId is not a lowercase UUIDv4. The returned Report is
+	// then a valid basic report with Ext == nil.
+	ExtDropped bool
+}
+
+// Decode parses a report body that has already been read in full. It accepts
+// exactly one JSON object with version, servers and templates present and an
+// optional ext object; keys are matched case-sensitively, and unknown keys,
+// duplicate keys, null values, wrongly typed values and trailing content are
+// rejected at every nesting level. Every ext field is required.
+//
+// Out-of-set enumeration values are folded to "other", arrays are returned
+// sorted and de-duplicated (never nil), and unknown games.official modules are
+// added to games.custom. Structural errors wrap ErrInvalidPayload; an
+// ext.schema above SchemaVersion returns ErrUnsupportedSchema. Staleness of
+// sentAt is the receiver's check, not Decode's.
+func Decode(body []byte) (Report, DecodeInfo, error) {
+	dec := json.NewDecoder(bytes.NewReader(body))
+	top, err := readObject(dec, "report")
+	if err != nil {
+		return Report{}, DecodeInfo{}, err
+	}
+
+	// Check for trailing content.
+	switch err := dec.Decode(&struct{}{}); {
+	case errors.Is(err, io.EOF):
+		// exactly one value
+	case err != nil:
+		return Report{}, DecodeInfo{}, fmt.Errorf("%w: trailing content after the report: %w", ErrInvalidPayload, err)
+	default:
+		return Report{}, DecodeInfo{}, fmt.Errorf("%w: trailing content after the report", ErrInvalidPayload)
+	}
+
+	if err := top.expect([]string{"version", "servers", "templates"}, []string{"ext"}); err != nil {
+		return Report{}, DecodeInfo{}, err
+	}
+	var r Report
+	if r.Version, err = asString(top.m["version"], "version"); err != nil {
+		return Report{}, DecodeInfo{}, err
+	}
+	if r.Servers, err = asCount(top.m["servers"], "servers", 0); err != nil {
+		return Report{}, DecodeInfo{}, err
+	}
+	if r.Templates, err = asCount(top.m["templates"], "templates", 0); err != nil {
+		return Report{}, DecodeInfo{}, err
+	}
+	extRaw, hasExt := top.m["ext"]
+	if !hasExt {
+		return r, DecodeInfo{}, nil
+	}
+	ext, err := decodeExt(extRaw)
+	if err != nil {
+		return Report{}, DecodeInfo{}, err
+	}
+	if ext == nil {
+		return r, DecodeInfo{ExtDropped: true}, nil
+	}
+	r.Ext = ext
+	return r, DecodeInfo{}, nil
+}
+
+// object is a strictly read JSON object: its raw member values by key.
+type object struct {
+	what string
+	m    map[string]json.RawMessage
+}
+
+// readObject reads one JSON object from dec: an opening brace, string keys
+// without duplicates, non-null values, and a closing brace. what names the
+// object in error messages.
+func readObject(dec *json.Decoder, what string) (object, error) {
+	// Expect opening brace
+	tok, err := dec.Token()
+	if err != nil {
+		return object{}, fmt.Errorf("%w: %w", ErrInvalidPayload, err)
+	}
+	if tok != json.Delim('{') {
+		return object{}, fmt.Errorf("%w: %s: expected JSON object", ErrInvalidPayload, what)
+	}
+
+	o := object{what: what, m: make(map[string]json.RawMessage)}
+	for dec.More() {
+		// Get the key
+		tok, err := dec.Token()
+		if err != nil {
+			return object{}, fmt.Errorf("%w: %w", ErrInvalidPayload, err)
+		}
+		key, ok := tok.(string)
+		if !ok {
+			return object{}, fmt.Errorf("%w: %s: expected string key", ErrInvalidPayload, what)
+		}
+		// Check for duplicate keys
+		if _, dup := o.m[key]; dup {
+			return object{}, fmt.Errorf("%w: %s: duplicate key %q", ErrInvalidPayload, what, key)
+		}
+		// Read the value raw so its type is validated carefully later.
+		var raw json.RawMessage
+		if err := dec.Decode(&raw); err != nil {
+			return object{}, fmt.Errorf("%w: %w", ErrInvalidPayload, err)
+		}
+		// Reject null values
+		if bytes.Equal(raw, []byte("null")) {
+			return object{}, fmt.Errorf("%w: %s: null value for key %q", ErrInvalidPayload, what, key)
+		}
+		o.m[key] = raw
+	}
+
+	// Expect closing brace
+	tok, err = dec.Token()
+	if err != nil {
+		return object{}, fmt.Errorf("%w: %w", ErrInvalidPayload, err)
+	}
+	if tok != json.Delim('}') {
+		return object{}, fmt.Errorf("%w: %s: expected closing brace", ErrInvalidPayload, what)
+	}
+	return o, nil
+}
+
+// readNested reads raw, a value taken from a parent object, as an object.
+func readNested(raw json.RawMessage, what string) (object, error) {
+	return readObject(json.NewDecoder(bytes.NewReader(raw)), what)
+}
+
+// expect rejects the object when a required key is missing or when it holds a
+// key that is neither required nor optional.
+func (o object) expect(required, optional []string) error {
+	for _, k := range required {
+		if _, ok := o.m[k]; !ok {
+			return fmt.Errorf("%w: %s: missing required field %q", ErrInvalidPayload, o.what, k)
+		}
+	}
+	for k := range o.m {
+		if !slices.Contains(required, k) && !slices.Contains(optional, k) {
+			return fmt.Errorf("%w: %s: unknown field %q", ErrInvalidPayload, o.what, k)
+		}
+	}
+	return nil
+}
+
+// asString decodes raw as a JSON string.
+func asString(raw json.RawMessage, what string) (string, error) {
+	var s string
+	if err := json.Unmarshal(raw, &s); err != nil {
+		return "", fmt.Errorf("%w: %s must be string: %w", ErrInvalidPayload, what, err)
+	}
+	return s, nil
+}
+
+// asCount decodes raw as a JSON integer of at least minimum.
+func asCount(raw json.RawMessage, what string, minimum int) (int, error) {
+	var n int
+	if err := json.Unmarshal(raw, &n); err != nil {
+		return 0, fmt.Errorf("%w: %s must be integer: %w", ErrInvalidPayload, what, err)
+	}
+	if n < minimum {
+		return 0, fmt.Errorf("%w: %s must be at least %d", ErrInvalidPayload, what, minimum)
+	}
+	return n, nil
+}
+
+// asBool decodes raw as a JSON boolean.
+func asBool(raw json.RawMessage, what string) (bool, error) {
+	var b bool
+	if err := json.Unmarshal(raw, &b); err != nil {
+		return false, fmt.Errorf("%w: %s must be boolean: %w", ErrInvalidPayload, what, err)
+	}
+	return b, nil
+}
+
+// asEnumSet decodes raw as a JSON array of strings, folds every member that is
+// not in set to "other", and returns the result sorted and de-duplicated. The
+// result is never nil. An element that is null or not a string is invalid.
+func asEnumSet(raw json.RawMessage, what string, set []string) ([]string, error) {
+	var in []*string
+	if err := json.Unmarshal(raw, &in); err != nil {
+		return nil, fmt.Errorf("%w: %s must be an array of strings: %w", ErrInvalidPayload, what, err)
+	}
+	out := make([]string, 0, len(in))
+	for _, p := range in {
+		if p == nil {
+			return nil, fmt.Errorf("%w: %s must not contain null", ErrInvalidPayload, what)
+		}
+		out = append(out, SanitizeEnum(set, *p))
+	}
+	sort.Strings(out)
+	return slices.Compact(out), nil
+}
+
+// asEnum decodes raw as a JSON string and folds it into set.
+func asEnum(raw json.RawMessage, what string, set []string) (string, error) {
+	s, err := asString(raw, what)
+	if err != nil {
+		return "", err
+	}
+	return SanitizeEnum(set, s), nil
+}
+
+// decodePublicKey decodes an unpadded base64url Ed25519 public key.
+func decodePublicKey(s string) ([]byte, error) {
+	b, err := base64.RawURLEncoding.Strict().DecodeString(s)
+	if err != nil {
+		return nil, fmt.Errorf("key is not unpadded base64url: %w", err)
+	}
+	if len(b) != keySize {
+		return nil, fmt.Errorf("key is %d bytes, want %d", len(b), keySize)
+	}
+	if base64.RawURLEncoding.EncodeToString(b) != s {
+		return nil, errors.New("key is not canonical unpadded base64url")
+	}
+	return b, nil
+}
+
+// decodeExt validates and sanitises the ext object. It returns (nil, nil) when
+// the whole part must be dropped because installId is malformed; every other
+// structural problem is an error, and a schema above SchemaVersion wins over
+// all of them.
+func decodeExt(raw json.RawMessage) (*Extended, error) {
+	o, err := readNested(raw, "ext")
+	if err != nil {
+		return nil, err
+	}
+	// The schema is checked first: a newer schema may legitimately carry
+	// fields this package does not know.
+	if sr, ok := o.m["schema"]; ok {
+		n, err := asCount(sr, "ext.schema", 0)
+		if err != nil {
+			return nil, err
+		}
+		if n > SchemaVersion {
+			return nil, fmt.Errorf("%w: %d", ErrUnsupportedSchema, n)
+		}
+	}
+	required := []string{"schema", "installId", "env", "games", "features", "key", "sentAt"}
+	if err := o.expect(required, nil); err != nil {
+		return nil, err
+	}
+	var e Extended
+	if e.Schema, err = asCount(o.m["schema"], "ext.schema", SchemaVersion); err != nil {
+		return nil, err
+	}
+	if e.InstallID, err = asString(o.m["installId"], "ext.installId"); err != nil {
+		return nil, err
+	}
+	if e.Env, err = decodeEnv(o.m["env"]); err != nil {
+		return nil, err
+	}
+	if e.Games, err = decodeGames(o.m["games"]); err != nil {
+		return nil, err
+	}
+	if e.Features, err = decodeFeatures(o.m["features"]); err != nil {
+		return nil, err
+	}
+	if e.Key, err = asString(o.m["key"], "ext.key"); err != nil {
+		return nil, err
+	}
+	if _, err := decodePublicKey(e.Key); err != nil {
+		return nil, fmt.Errorf("%w: ext.%w", ErrInvalidPayload, err)
+	}
+	sentAt, err := asString(o.m["sentAt"], "ext.sentAt")
+	if err != nil {
+		return nil, err
+	}
+	if e.SentAt, err = time.Parse(time.RFC3339, sentAt); err != nil {
+		return nil, fmt.Errorf("%w: ext.sentAt is not RFC 3339: %w", ErrInvalidPayload, err)
+	}
+	e.SentAt = e.SentAt.UTC()
+	// A malformed ID drops the extended part only after the rest has been
+	// validated, so the report still counts as basic.
+	if !installIDRE.MatchString(e.InstallID) {
+		return nil, nil
+	}
+	return &e, nil
+}
+
+// decodeEnv validates ext.env.
+func decodeEnv(raw json.RawMessage) (Env, error) {
+	o, err := readNested(raw, "ext.env")
+	if err != nil {
+		return Env{}, err
+	}
+	if err := o.expect([]string{"k8s", "distro", "arch", "nodes"}, nil); err != nil {
+		return Env{}, err
+	}
+	var e Env
+	k8s, err := asString(o.m["k8s"], "ext.env.k8s")
+	if err != nil {
+		return Env{}, err
+	}
+	e.K8s = other
+	if K8sMinorRE.MatchString(k8s) {
+		e.K8s = k8s
+	}
+	if e.Distro, err = asEnum(o.m["distro"], "ext.env.distro", Distros); err != nil {
+		return Env{}, err
+	}
+	if e.Arch, err = asEnumSet(o.m["arch"], "ext.env.arch", Arches); err != nil {
+		return Env{}, err
+	}
+	if len(e.Arch) == 0 {
+		return Env{}, fmt.Errorf("%w: ext.env.arch must not be empty", ErrInvalidPayload)
+	}
+	if e.Nodes, err = asEnum(o.m["nodes"], "ext.env.nodes", NodeBands); err != nil {
+		return Env{}, err
+	}
+	return e, nil
+}
+
+// decodeGames validates ext.games. Counts of modules outside the catalog are
+// added to Custom.
+func decodeGames(raw json.RawMessage) (Games, error) {
+	o, err := readNested(raw, "ext.games")
+	if err != nil {
+		return Games{}, err
+	}
+	if err := o.expect([]string{"official", "custom"}, nil); err != nil {
+		return Games{}, err
+	}
+	g := Games{Official: map[string]int{}}
+	if g.Custom, err = asCount(o.m["custom"], "ext.games.custom", 0); err != nil {
+		return Games{}, err
+	}
+	official, err := readNested(o.m["official"], "ext.games.official")
+	if err != nil {
+		return Games{}, err
+	}
+	for name, v := range official.m {
+		n, err := asCount(v, "ext.games.official."+name, 1)
+		if err != nil {
+			return Games{}, err
+		}
+		if IsOfficial(name) {
+			g.Official[name] = n
+			continue
+		}
+		if g.Custom > math.MaxInt-n {
+			return Games{}, fmt.Errorf("%w: ext.games.custom overflows", ErrInvalidPayload)
+		}
+		g.Custom += n
+	}
+	return g, nil
+}
+
+// decodeFeatures validates ext.features.
+func decodeFeatures(raw json.RawMessage) (Features, error) {
+	o, err := readNested(raw, "ext.features")
+	if err != nil {
+		return Features{}, err
+	}
+	required := []string{"wakeOnConnect", "tunnels", "capture", "backups", "sso", "auditForwarding", "clusters", "db", "language"}
+	if err := o.expect(required, nil); err != nil {
+		return Features{}, err
+	}
+	var f Features
+	bools := []struct {
+		key string
+		dst *bool
+	}{
+		{"wakeOnConnect", &f.WakeOnConnect},
+		{"capture", &f.Capture},
+		{"backups", &f.Backups},
+		{"sso", &f.SSO},
+		{"auditForwarding", &f.AuditForwarding},
+	}
+	for _, b := range bools {
+		if *b.dst, err = asBool(o.m[b.key], "ext.features."+b.key); err != nil {
+			return Features{}, err
+		}
+	}
+	if f.Tunnels, err = asEnumSet(o.m["tunnels"], "ext.features.tunnels", Tunnels); err != nil {
+		return Features{}, err
+	}
+	if f.Clusters, err = asEnum(o.m["clusters"], "ext.features.clusters", ClusterBands); err != nil {
+		return Features{}, err
+	}
+	if f.DB, err = asEnum(o.m["db"], "ext.features.db", DBs); err != nil {
+		return Features{}, err
+	}
+	if f.Language, err = asEnum(o.m["language"], "ext.features.language", Languages); err != nil {
+		return Features{}, err
+	}
+	return f, nil
+}
diff --git a/telemetryschema/decode_test.go b/telemetryschema/decode_test.go
new file mode 100644
index 000000000..8276f7013
--- /dev/null
+++ b/telemetryschema/decode_test.go
@@ -0,0 +1,673 @@
+package telemetryschema
+
+import (
+	"encoding/json"
+	"errors"
+	"reflect"
+	"strings"
+	"testing"
+	"time"
+)
+
+const (
+	testID  = "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10"
+	testKey = "sVjEWoD28OPh_Gx5V4QWBw8kMurJ9uZS_r1JDe8Dgls"
+
+	basicBody = `{"version":"1.0.0","servers":1,"templates":2}`
+
+	// validExt is a complete, valid ext object. Tests derive variants from it
+	// with mut, setAt and delAt.
+	validExt = `{"schema":1,"installId":"` + testID + `",` +
+		`"env":{"k8s":"1.31","distro":"k3s","arch":["amd64"],"nodes":"1"},` +
+		`"games":{"official":{"minecraft-java":2,"terraria":1},"custom":0},` +
+		`"features":{"wakeOnConnect":true,"tunnels":["playit"],"capture":false,"backups":true,` +
+		`"sso":false,"auditForwarding":false,"clusters":"1","db":"sqlite","language":"en"},` +
+		`"key":"` + testKey + `","sentAt":"2026-10-06T09:12:44Z"}`
+)
+
+// withExt wraps an ext object in a complete report body.
+func withExt(ext string) []byte {
+	return []byte(`{"version":"0.3.0","servers":3,"templates":7,"ext":` + ext + `}`)
+}
+
+// mut replaces old with replacement in validExt and panics when old is absent,
+// so a stale test fixture fails loudly instead of silently testing nothing.
+func mut(old, replacement string) string {
+	if !strings.Contains(validExt, old) {
+		panic("fixture does not contain " + old)
+	}
+	return strings.Replace(validExt, old, replacement, 1)
+}
+
+// edit parses validExt into a generic tree, applies fn to the object at path
+// (every element but the last is a nested object) and re-encodes it.
+func edit(t *testing.T, path []string, fn func(obj map[string]any, key string)) string {
+	t.Helper()
+	var root map[string]any
+	if err := json.Unmarshal([]byte(validExt), &root); err != nil {
+		t.Fatalf("parse fixture: %v", err)
+	}
+	obj := root
+	for _, p := range path[:len(path)-1] {
+		next, ok := obj[p].(map[string]any)
+		if !ok {
+			t.Fatalf("fixture path %v: %q is not an object", path, p)
+		}
+		obj = next
+	}
+	fn(obj, path[len(path)-1])
+	out, err := json.Marshal(root)
+	if err != nil {
+		t.Fatalf("encode variant: %v", err)
+	}
+	return string(out)
+}
+
+// setAt returns validExt with the value at path replaced by val.
+func setAt(t *testing.T, val any, path ...string) string {
+	t.Helper()
+	return edit(t, path, func(obj map[string]any, key string) {
+		if _, ok := obj[key]; !ok {
+			t.Fatalf("fixture has no key %v", path)
+		}
+		obj[key] = val
+	})
+}
+
+// delAt returns validExt with the key at path removed.
+func delAt(t *testing.T, path ...string) string {
+	t.Helper()
+	return edit(t, path, func(obj map[string]any, key string) {
+		if _, ok := obj[key]; !ok {
+			t.Fatalf("fixture has no key %v", path)
+		}
+		delete(obj, key)
+	})
+}
+
+// TestDecodeBasicAccepts covers valid basic reports, including zero counts and
+// trailing whitespace.
+func TestDecodeBasicAccepts(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		name string
+		body string
+		want Report
+	}{
+		{"minimal", basicBody, Report{Version: "1.0.0", Servers: 1, Templates: 2}},
+		{"zero counts", `{"version":"1.0.0","servers":0,"templates":0}`, Report{Version: "1.0.0"}},
+		{"trailing newline", basicBody + "\n", Report{Version: "1.0.0", Servers: 1, Templates: 2}},
+		{"surrounding whitespace", "  " + basicBody + "  \r\n\t", Report{Version: "1.0.0", Servers: 1, Templates: 2}},
+		{"any key order", `{"templates":2,"servers":1,"version":"1.0.0"}`, Report{Version: "1.0.0", Servers: 1, Templates: 2}},
+		{"hostile version is kept for the receiver to bucket", `{"version":"<script>","servers":0,"templates":0}`, Report{Version: "<script>"}},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			got, info, err := Decode([]byte(tc.body))
+			if err != nil {
+				t.Fatalf("Decode: %v", err)
+			}
+			if info.ExtDropped {
+				t.Fatal("ExtDropped = true for a basic report")
+			}
+			if !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("got %+v, want %+v", got, tc.want)
+			}
+		})
+	}
+}
+
+// TestDecodeBasicRejects ports every reject case of the receiver's
+// TestDecodePayloadRequiresExactKeys and TestIngestRequiresCompleteSingleReport
+// and adds negative counts.
+func TestDecodeBasicRejects(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		name string
+		body string
+	}{
+		{"capitalized key Servers", `{"version":"1.0.0","Servers":1,"templates":2}`},
+		{"all-caps VERSION", `{"VERSION":"1.0.0","servers":1,"templates":2}`},
+		{"duplicate servers", `{"version":"1.0.0","servers":1,"servers":2,"templates":3}`},
+		{"duplicate version", `{"version":"1.0.0","version":"2.0.0","servers":1,"templates":2}`},
+		{"null version", `{"version":null,"servers":1,"templates":2}`},
+		{"null servers", `{"version":"1.0.0","servers":null,"templates":2}`},
+		{"null templates", `{"version":"1.0.0","servers":1,"templates":null}`},
+		{"servers as string", `{"version":"1.0.0","servers":"1","templates":2}`},
+		{"templates as string", `{"version":"1.0.0","servers":1,"templates":"2"}`},
+		{"version as integer", `{"version":1,"servers":1,"templates":2}`},
+		{"servers as float", `{"version":"1.0.0","servers":1.5,"templates":2}`},
+		{"missing version", `{"servers":1,"templates":2}`},
+		{"missing servers", `{"version":"1.0.0","templates":2}`},
+		{"missing templates", `{"version":"1.0.0","servers":1}`},
+		{"empty object", `{}`},
+		{"unknown field hostname", `{"version":"1.0.0","servers":1,"templates":2,"hostname":"prod"}`},
+		{"unknown field at start", `{"unknown":"field","version":"1.0.0","servers":1,"templates":2}`},
+		{"negative servers", `{"version":"1.0.0","servers":-1,"templates":0}`},
+		{"negative templates", `{"version":"1.0.0","servers":0,"templates":-2}`},
+		{"null body", `null`},
+		{"array body", `[` + basicBody + `]`},
+		{"number body", `42`},
+		{"string body", `"x"`},
+		{"empty body", ``},
+		{"whitespace body", "  \n"},
+		{"unterminated object", `{"version":"1.0.0","servers":1`},
+		{"missing value", `{"version":"1.0.0","servers":}`},
+		{"not json", `{not json`},
+		{"non-string key", `{1:2}`},
+		{"missing comma", `{"version":"1.0.0" "servers":1,"templates":2}`},
+		{"trailing garbage", basicBody + `xyz`},
+		{"second object", basicBody + basicBody},
+		{"trailing value", basicBody + ` 1`},
+		{"trailing empty object", basicBody + ` {}`},
+		{"ext null", `{"version":"1.0.0","servers":1,"templates":2,"ext":null}`},
+		{"ext empty object", `{"version":"1.0.0","servers":1,"templates":2,"ext":{}}`},
+		{"ext as array", `{"version":"1.0.0","servers":1,"templates":2,"ext":[]}`},
+		{"ext as string", `{"version":"1.0.0","servers":1,"templates":2,"ext":"x"}`},
+		{"ext as number", `{"version":"1.0.0","servers":1,"templates":2,"ext":5}`},
+		{"ext as bool", `{"version":"1.0.0","servers":1,"templates":2,"ext":true}`},
+		{"duplicate ext", `{"version":"1.0.0","servers":1,"templates":2,"ext":` + validExt + `,"ext":` + validExt + `}`},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			got, info, err := Decode([]byte(tc.body))
+			if err == nil {
+				t.Fatalf("expected error, got report %+v", got)
+			}
+			if !errors.Is(err, ErrInvalidPayload) {
+				t.Fatalf("error chain missing ErrInvalidPayload: %v", err)
+			}
+			if errors.Is(err, ErrUnsupportedSchema) {
+				t.Fatalf("error must not be ErrUnsupportedSchema: %v", err)
+			}
+			if !reflect.DeepEqual(got, Report{}) || info != (DecodeInfo{}) {
+				t.Fatalf("an error must return zero values, got %+v, %+v", got, info)
+			}
+		})
+	}
+}
+
+// TestDecodeKeepsTrailingDecodeError verifies that trailing malformed JSON
+// after a valid report is detected and that the root error is preserved.
+func TestDecodeKeepsTrailingDecodeError(t *testing.T) {
+	t.Parallel()
+	_, _, err := Decode([]byte(`{"version":"v","servers":1,"templates":1} x`))
+	if !errors.Is(err, ErrInvalidPayload) {
+		t.Fatalf("error chain missing ErrInvalidPayload: %v", err)
+	}
+	var syntaxErr *json.SyntaxError
+	if !errors.As(err, &syntaxErr) {
+		t.Fatalf("error chain missing json.SyntaxError: %v", err)
+	}
+}
+
+// TestDecodeExtValid decodes the full example from the contract.
+func TestDecodeExtValid(t *testing.T) {
+	t.Parallel()
+	got, info, err := Decode(withExt(validExt))
+	if err != nil {
+		t.Fatalf("Decode: %v", err)
+	}
+	if info.ExtDropped {
+		t.Fatal("ExtDropped = true for a valid ext")
+	}
+	if got.Version != "0.3.0" || got.Servers != 3 || got.Templates != 7 {
+		t.Fatalf("basic part = %+v", got)
+	}
+	want := &Extended{
+		Schema:    1,
+		InstallID: testID,
+		Env:       Env{K8s: "1.31", Distro: "k3s", Arch: []string{"amd64"}, Nodes: "1"},
+		Games:     Games{Official: map[string]int{"minecraft-java": 2, "terraria": 1}, Custom: 0},
+		Features: Features{
+			WakeOnConnect: true, Tunnels: []string{"playit"}, Backups: true,
+			Clusters: "1", DB: "sqlite", Language: "en",
+		},
+		Key:    testKey,
+		SentAt: time.Date(2026, 10, 6, 9, 12, 44, 0, time.UTC),
+	}
+	if got.Ext == nil {
+		t.Fatal("Ext is nil")
+	}
+	if !got.Ext.SentAt.Equal(want.SentAt) {
+		t.Fatalf("SentAt = %v, want %v", got.Ext.SentAt, want.SentAt)
+	}
+	got.Ext.SentAt, want.SentAt = time.Time{}, time.Time{}
+	if !reflect.DeepEqual(got.Ext, want) {
+		t.Fatalf("Ext = %+v, want %+v", got.Ext, want)
+	}
+}
+
+// TestDecodeExtRejects covers every structural ext error: unknown, duplicate,
+// null, missing and wrongly typed members at each nesting level, plus the
+// range, key and time rules.
+func TestDecodeExtRejects(t *testing.T) {
+	t.Parallel()
+	cases := map[string]string{
+		// unknown keys at every level, and case-sensitivity
+		"unknown ext key":      mut(`"schema":1,`, `"schema":1,"extra":1,`),
+		"unknown env key":      mut(`"nodes":"1"}`, `"nodes":"1","x":1}`),
+		"unknown games key":    mut(`"custom":0}`, `"custom":0,"x":1}`),
+		"unknown features key": mut(`"language":"en"}`, `"language":"en","x":1}`),
+		"wrong-case ext key":   mut(`"installId"`, `"installid"`),
+		"wrong-case feature":   mut(`"wakeOnConnect"`, `"wakeonconnect"`),
+		// duplicate keys at every level
+		"duplicate ext key":      mut(`"schema":1,`, `"schema":1,"schema":1,`),
+		"duplicate env key":      mut(`"nodes":"1"}`, `"nodes":"1","nodes":"1"}`),
+		"duplicate games key":    mut(`"custom":0}`, `"custom":0,"custom":0}`),
+		"duplicate official key": mut(`"terraria":1}`, `"terraria":1,"terraria":2}`),
+		"duplicate feature key":  mut(`"language":"en"}`, `"language":"en","language":"en"}`),
+		// nulls at every level
+		"null schema":       setAt(t, nil, "schema"),
+		"null installId":    setAt(t, nil, "installId"),
+		"null env":          setAt(t, nil, "env"),
+		"null env.k8s":      setAt(t, nil, "env", "k8s"),
+		"null env.arch":     setAt(t, nil, "env", "arch"),
+		"null arch member":  mut(`["amd64"]`, `[null]`),
+		"null games":        setAt(t, nil, "games"),
+		"null official":     setAt(t, nil, "games", "official"),
+		"null official val": mut(`"terraria":1`, `"terraria":null`),
+		"null custom":       setAt(t, nil, "games", "custom"),
+		"null features":     setAt(t, nil, "features"),
+		"null feature bool": setAt(t, nil, "features", "sso"),
+		"null tunnels":      setAt(t, nil, "features", "tunnels"),
+		"null tunnel":       mut(`["playit"]`, `[null]`),
+		"null key":          setAt(t, nil, "key"),
+		"null sentAt":       setAt(t, nil, "sentAt"),
+		// missing members: every ext field is required
+		"missing schema":          delAt(t, "schema"),
+		"missing installId":       delAt(t, "installId"),
+		"missing env":             delAt(t, "env"),
+		"missing env.k8s":         delAt(t, "env", "k8s"),
+		"missing env.distro":      delAt(t, "env", "distro"),
+		"missing env.arch":        delAt(t, "env", "arch"),
+		"missing env.nodes":       delAt(t, "env", "nodes"),
+		"missing games":           delAt(t, "games"),
+		"missing games.official":  delAt(t, "games", "official"),
+		"missing games.custom":    delAt(t, "games", "custom"),
+		"missing features":        delAt(t, "features"),
+		"missing wakeOnConnect":   delAt(t, "features", "wakeOnConnect"),
+		"missing tunnels":         delAt(t, "features", "tunnels"),
+		"missing capture":         delAt(t, "features", "capture"),
+		"missing backups":         delAt(t, "features", "backups"),
+		"missing sso":             delAt(t, "features", "sso"),
+		"missing auditForwarding": delAt(t, "features", "auditForwarding"),
+		"missing clusters":        delAt(t, "features", "clusters"),
+		"missing db":              delAt(t, "features", "db"),
+		"missing language":        delAt(t, "features", "language"),
+		"missing key":             delAt(t, "key"),
+		"missing sentAt":          delAt(t, "sentAt"),
+		// wrong types
+		"schema string":         setAt(t, "1", "schema"),
+		"schema float":          setAt(t, 1.5, "schema"),
+		"schema bool":           setAt(t, true, "schema"),
+		"installId number":      setAt(t, 5, "installId"),
+		"env number":            setAt(t, 5, "env"),
+		"env array":             setAt(t, []any{}, "env"),
+		"env string":            setAt(t, "x", "env"),
+		"k8s number":            setAt(t, 1.31, "env", "k8s"),
+		"distro number":         setAt(t, 1, "env", "distro"),
+		"arch string":           setAt(t, "amd64", "env", "arch"),
+		"arch number":           setAt(t, 5, "env", "arch"),
+		"arch member number":    setAt(t, []any{1}, "env", "arch"),
+		"nodes number":          setAt(t, 1, "env", "nodes"),
+		"games number":          setAt(t, 5, "games"),
+		"official array":        setAt(t, []any{}, "games", "official"),
+		"official string":       setAt(t, "x", "games", "official"),
+		"official count string": mut(`"terraria":1`, `"terraria":"1"`),
+		"official count float":  mut(`"terraria":1`, `"terraria":1.5`),
+		"official count bool":   mut(`"terraria":1`, `"terraria":true`),
+		"custom string":         setAt(t, "0", "games", "custom"),
+		"custom float":          setAt(t, 0.5, "games", "custom"),
+		"features array":        setAt(t, []any{}, "features"),
+		"wakeOnConnect string":  setAt(t, "true", "features", "wakeOnConnect"),
+		"capture number":        setAt(t, 1, "features", "capture"),
+		"backups string":        setAt(t, "x", "features", "backups"),
+		"sso number":            setAt(t, 0, "features", "sso"),
+		"auditForwarding str":   setAt(t, "false", "features", "auditForwarding"),
+		"tunnels string":        setAt(t, "frp", "features", "tunnels"),
+		"tunnel member number":  setAt(t, []any{1}, "features", "tunnels"),
+		"clusters number":       setAt(t, 1, "features", "clusters"),
+		"db number":             setAt(t, 1, "features", "db"),
+		"language number":       setAt(t, 1, "features", "language"),
+		"key number":            setAt(t, 5, "key"),
+		"sentAt number":         setAt(t, 5, "sentAt"),
+		// ranges
+		"schema zero":               setAt(t, 0, "schema"),
+		"schema negative":           setAt(t, -1, "schema"),
+		"empty arch":                setAt(t, []any{}, "env", "arch"),
+		"official count zero":       mut(`"terraria":1`, `"terraria":0`),
+		"official count negative":   mut(`"terraria":1`, `"terraria":-3`),
+		"unknown module count 0":    mut(`"terraria":1`, `"nope":0`),
+		"custom negative":           setAt(t, -1, "games", "custom"),
+		"custom total overflows":    mut(`"official":{"minecraft-java":2,"terraria":1},"custom":0`, `"official":{"a":1,"b":9223372036854775807},"custom":0`),
+		"key empty":                 setAt(t, "", "key"),
+		"key too short":             setAt(t, testKey[:42], "key"),
+		"key too long":              setAt(t, testKey+"AA", "key"),
+		"key padded":                setAt(t, testKey+"=", "key"),
+		"key standard base64":       setAt(t, strings.ReplaceAll(testKey, "_", "/"), "key"),
+		"key not base64":            setAt(t, "!!!"+testKey[3:], "key"),
+		"key non-canonical":         setAt(t, testKey[:42]+"t", "key"),
+		"key with newline":          setAt(t, testKey[:20]+"\n"+testKey[20:], "key"),
+		"sentAt empty":              setAt(t, "", "sentAt"),
+		"sentAt words":              setAt(t, "yesterday", "sentAt"),
+		"sentAt date only":          setAt(t, "2026-10-06", "sentAt"),
+		"sentAt space separator":    setAt(t, "2026-10-06 09:12:44Z", "sentAt"),
+		"sentAt no zone":            setAt(t, "2026-10-06T09:12:44", "sentAt"),
+		"sentAt month out of range": setAt(t, "2026-13-06T09:12:44Z", "sentAt"),
+		"sentAt unix time":          setAt(t, "1791277964", "sentAt"),
+	}
+	for name, ext := range cases {
+		t.Run(name, func(t *testing.T) {
+			t.Parallel()
+			got, info, err := Decode(withExt(ext))
+			if err == nil {
+				t.Fatalf("expected error, got %+v (info %+v)", got, info)
+			}
+			if !errors.Is(err, ErrInvalidPayload) {
+				t.Fatalf("error chain missing ErrInvalidPayload: %v", err)
+			}
+			if errors.Is(err, ErrUnsupportedSchema) {
+				t.Fatalf("error must not be ErrUnsupportedSchema: %v", err)
+			}
+		})
+	}
+}
+
+// TestDecodeExtFoldsOutOfSetValues checks that out-of-set enumeration values
+// become "other" and that arrays come back sorted and de-duplicated.
+func TestDecodeExtFoldsOutOfSetValues(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		name string
+		ext  string
+		got  func(*Extended) any
+		want any
+	}{
+		{"known distro kept", mut(`"k3s"`, `"talos"`), func(e *Extended) any { return e.Env.Distro }, "talos"},
+		{"unknown distro", mut(`"k3s"`, `"mystery"`), func(e *Extended) any { return e.Env.Distro }, "other"},
+		{"wrong-case distro", mut(`"k3s"`, `"K3S"`), func(e *Extended) any { return e.Env.Distro }, "other"},
+		{"empty distro", mut(`"k3s"`, `""`), func(e *Extended) any { return e.Env.Distro }, "other"},
+		{"k8s minor kept", mut(`"1.31"`, `"1.123"`), func(e *Extended) any { return e.Env.K8s }, "1.123"},
+		{"k8s with v prefix", mut(`"1.31"`, `"v1.31"`), func(e *Extended) any { return e.Env.K8s }, "other"},
+		{"k8s with patch", mut(`"1.31"`, `"1.31.2"`), func(e *Extended) any { return e.Env.K8s }, "other"},
+		{"k8s major 2", mut(`"1.31"`, `"2.0"`), func(e *Extended) any { return e.Env.K8s }, "other"},
+		{"k8s four digit minor", mut(`"1.31"`, `"1.1234"`), func(e *Extended) any { return e.Env.K8s }, "other"},
+		{"k8s empty", mut(`"1.31"`, `""`), func(e *Extended) any { return e.Env.K8s }, "other"},
+		{"arch sorted and de-duplicated", mut(`["amd64"]`, `["riscv64","arm64","amd64","arm64"]`), func(e *Extended) any { return e.Env.Arch }, []string{"amd64", "arm64", "riscv64"}},
+		{"arch unknown folds and collapses", mut(`["amd64"]`, `["x86","amd64","sparc","other"]`), func(e *Extended) any { return e.Env.Arch }, []string{"amd64", "other"}},
+		{"arch only unknown", mut(`["amd64"]`, `["x86"]`), func(e *Extended) any { return e.Env.Arch }, []string{"other"}},
+		{"nodes band kept", mut(`"nodes":"1"`, `"nodes":"11-50"`), func(e *Extended) any { return e.Env.Nodes }, "11-50"},
+		{"nodes unknown", mut(`"nodes":"1"`, `"nodes":"7"`), func(e *Extended) any { return e.Env.Nodes }, "other"},
+		{"tunnels sorted", mut(`["playit"]`, `["tailscale","frp","playit"]`), func(e *Extended) any { return e.Features.Tunnels }, []string{"frp", "playit", "tailscale"}},
+		{"tunnels unknown folds", mut(`["playit"]`, `["wireguard","frp","frp"]`), func(e *Extended) any { return e.Features.Tunnels }, []string{"frp", "other"}},
+		{"tunnels empty is non-nil", mut(`["playit"]`, `[]`), func(e *Extended) any { return e.Features.Tunnels }, []string{}},
+		{"clusters band kept", mut(`"clusters":"1"`, `"clusters":"11+"`), func(e *Extended) any { return e.Features.Clusters }, "11+"},
+		{"clusters unknown", mut(`"clusters":"1"`, `"clusters":"12"`), func(e *Extended) any { return e.Features.Clusters }, "other"},
+		{"db postgres kept", mut(`"sqlite"`, `"postgres"`), func(e *Extended) any { return e.Features.DB }, "postgres"},
+		{"db unknown", mut(`"sqlite"`, `"mysql"`), func(e *Extended) any { return e.Features.DB }, "other"},
+		{"language unknown", mut(`"language":"en"`, `"language":"fr"`), func(e *Extended) any { return e.Features.Language }, "other"},
+	}
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			r, _, err := Decode(withExt(tc.ext))
+			if err != nil {
+				t.Fatalf("Decode: %v", err)
+			}
+			if got := tc.got(r.Ext); !reflect.DeepEqual(got, tc.want) {
+				t.Fatalf("got %#v, want %#v", got, tc.want)
+			}
+		})
+	}
+}
+
+// TestDecodeExtFoldsUnknownModulesIntoCustom checks that module names outside
+// the catalog add their count to games.custom and never appear in Official.
+func TestDecodeExtFoldsUnknownModulesIntoCustom(t *testing.T) {
+	t.Parallel()
+	ext := mut(`"official":{"minecraft-java":2,"terraria":1},"custom":0`,
+		`"official":{"minecraft-java":2,"my-private-game":3,"Terraria":1,"look-alike":4},"custom":5`)
+	r, _, err := Decode(withExt(ext))
+	if err != nil {
+		t.Fatalf("Decode: %v", err)
+	}
+	want := Games{Official: map[string]int{"minecraft-java": 2}, Custom: 13}
+	if !reflect.DeepEqual(r.Ext.Games, want) {
+		t.Fatalf("Games = %+v, want %+v", r.Ext.Games, want)
+	}
+
+	// An empty official map is valid and non-nil.
+	r, _, err = Decode(withExt(mut(`"official":{"minecraft-java":2,"terraria":1}`, `"official":{}`)))
+	if err != nil {
+		t.Fatalf("Decode: %v", err)
+	}
+	if r.Ext.Games.Official == nil || len(r.Ext.Games.Official) != 0 {
+		t.Fatalf("Official = %#v, want empty non-nil map", r.Ext.Games.Official)
+	}
+}
+
+// TestDecodeExtDropsMalformedInstallID checks that a malformed installId drops
+// the extended part, keeps the basic report valid and reports ExtDropped.
+func TestDecodeExtDropsMalformedInstallID(t *testing.T) {
+	t.Parallel()
+	ids := map[string]string{
+		"empty":            "",
+		"words":            "not-a-uuid",
+		"uppercase":        strings.ToUpper(testID),
+		"mixed case":       "3F1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+		"version 1":        "3f1c2a9e-8b4d-1e57-9a61-0c2d7e5b9f10",
+		"version 5":        "3f1c2a9e-8b4d-5e57-9a61-0c2d7e5b9f10",
+		"variant c":        "3f1c2a9e-8b4d-4e57-ca61-0c2d7e5b9f10",
+		"no hyphens":       strings.ReplaceAll(testID, "-", ""),
+		"too short":        testID[:35],
+		"too long":         testID + "0",
+		"non-hex":          "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9fzz",
+		"leading space":    " " + testID,
+		"trailing newline": testID + "\n",
+		"braces":           "{" + testID + "}",
+		"urn prefix":       "urn:uuid:" + testID,
+		"nil uuid":         "00000000-0000-0000-0000-000000000000",
+	}
+	for name, id := range ids {
+		t.Run(name, func(t *testing.T) {
+			r, info, err := Decode(withExt(setAt(t, id, "installId")))
+			if err != nil {
+				t.Fatalf("Decode: %v", err)
+			}
+			if !info.ExtDropped {
+				t.Fatal("ExtDropped = false")
+			}
+			if r.Ext != nil {
+				t.Fatalf("Ext = %+v, want nil", r.Ext)
+			}
+			if r.Version != "0.3.0" || r.Servers != 3 || r.Templates != 7 {
+				t.Fatalf("basic part not preserved: %+v", r)
+			}
+		})
+	}
+
+	// Other lowercase UUIDv4 forms are accepted, including variant 8, 9, a, b.
+	for _, id := range []string{
+		"3f1c2a9e-8b4d-4e57-8a61-0c2d7e5b9f10",
+		"3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10",
+		"3f1c2a9e-8b4d-4e57-aa61-0c2d7e5b9f10",
+		"3f1c2a9e-8b4d-4e57-ba61-0c2d7e5b9f10",
+	} {
+		r, info, err := Decode(withExt(setAt(t, id, "installId")))
+		if err != nil || info.ExtDropped || r.Ext == nil {
+			t.Fatalf("id %q: got %+v, %+v, %v; want a kept ext", id, r, info, err)
+		}
+	}
+
+	// The extended part is validated before it is dropped: a structural error
+	// beside a malformed ID is still an error.
+	broken := mut(`"installId":"`+testID+`"`, `"installId":"bad"`)
+	broken = strings.Replace(broken, `"sso":false`, `"sso":"no"`, 1)
+	if _, _, err := Decode(withExt(broken)); !errors.Is(err, ErrInvalidPayload) {
+		t.Fatalf("malformed ID with a structural error: err = %v, want ErrInvalidPayload", err)
+	}
+}
+
+// TestDecodeExtSchema checks the schema gate: 1 is accepted, anything higher
+// is ErrUnsupportedSchema, which is also ErrInvalidPayload, and it wins over
+// other problems because a newer schema may carry fields this package does not
+// know.
+func TestDecodeExtSchema(t *testing.T) {
+	t.Parallel()
+	for name, ext := range map[string]string{
+		"schema 2":              setAt(t, 2, "schema"),
+		"schema 3":              setAt(t, 3, "schema"),
+		"schema 1000":           setAt(t, 1000, "schema"),
+		"schema 2 unknown keys": mut(`"schema":1,`, `"schema":2,"newField":{"x":1},`),
+		"schema 2 missing keys": `{"schema":2}`,
+		"schema 2 bad fields":   strings.Replace(setAt(t, 5, "env"), `"schema":1`, `"schema":2`, 1),
+	} {
+		t.Run(name, func(t *testing.T) {
+			_, _, err := Decode(withExt(ext))
+			if !errors.Is(err, ErrUnsupportedSchema) {
+				t.Fatalf("err = %v, want ErrUnsupportedSchema", err)
+			}
+			if !errors.Is(err, ErrInvalidPayload) {
+				t.Fatalf("ErrUnsupportedSchema must also be ErrInvalidPayload: %v", err)
+			}
+		})
+	}
+	if !errors.Is(ErrUnsupportedSchema, ErrInvalidPayload) {
+		t.Fatal("ErrUnsupportedSchema does not wrap ErrInvalidPayload")
+	}
+	if _, _, err := Decode(withExt(validExt)); err != nil {
+		t.Fatalf("schema 1: %v", err)
+	}
+}
+
+// TestDecodeExtSentAt checks that sentAt is parsed as RFC 3339, normalised to
+// UTC, and that staleness is not Decode's concern.
+func TestDecodeExtSentAt(t *testing.T) {
+	t.Parallel()
+	cases := map[string]time.Time{
+		"2026-10-06T09:12:44Z":      time.Date(2026, 10, 6, 9, 12, 44, 0, time.UTC),
+		"2026-10-06T11:12:44+02:00": time.Date(2026, 10, 6, 9, 12, 44, 0, time.UTC),
+		"2026-10-06T09:12:44.5Z":    time.Date(2026, 10, 6, 9, 12, 44, 500_000_000, time.UTC),
+		"1999-01-01T00:00:00Z":      time.Date(1999, 1, 1, 0, 0, 0, 0, time.UTC),
+		"2999-01-01T00:00:00Z":      time.Date(2999, 1, 1, 0, 0, 0, 0, time.UTC),
+	}
+	for in, want := range cases {
+		r, _, err := Decode(withExt(setAt(t, in, "sentAt")))
+		if err != nil {
+			t.Fatalf("sentAt %q: %v", in, err)
+		}
+		if !r.Ext.SentAt.Equal(want) || r.Ext.SentAt.Location() != time.UTC {
+			t.Fatalf("sentAt %q = %v (%v), want %v UTC", in, r.Ext.SentAt, r.Ext.SentAt.Location(), want)
+		}
+	}
+}
+
+// TestEncodeDeterministicRoundTrip checks that Encode is canonical and that
+// Decode(Encode(r)) returns r for a valid report.
+func TestEncodeDeterministicRoundTrip(t *testing.T) {
+	t.Parallel()
+	r := Report{
+		Version: "0.3.0", Servers: 3, Templates: 7,
+		Ext: &Extended{
+			Schema:    1,
+			InstallID: testID,
+			Env:       Env{K8s: "1.31", Distro: "k3s", Arch: []string{"arm64", "amd64", "arm64"}, Nodes: "1"},
+			Games:     Games{Official: map[string]int{"terraria": 1, "minecraft-java": 2}, Custom: 0},
+			Features: Features{
+				WakeOnConnect: true, Tunnels: []string{"playit", "frp"}, Backups: true,
+				Clusters: "1", DB: "sqlite", Language: "en",
+			},
+			Key:    testKey,
+			SentAt: time.Date(2026, 10, 6, 11, 12, 44, 0, time.FixedZone("CEST", 2*3600)),
+		},
+	}
+	const want = `{"version":"0.3.0","servers":3,"templates":7,"ext":{"schema":1,"installId":"` + testID + `",` +
+		`"env":{"k8s":"1.31","distro":"k3s","arch":["amd64","arm64"],"nodes":"1"},` +
+		`"games":{"official":{"minecraft-java":2,"terraria":1},"custom":0},` +
+		`"features":{"wakeOnConnect":true,"tunnels":["frp","playit"],"capture":false,"backups":true,` +
+		`"sso":false,"auditForwarding":false,"clusters":"1","db":"sqlite","language":"en"},` +
+		`"key":"` + testKey + `","sentAt":"2026-10-06T09:12:44Z"}}`
+
+	for i := 0; i < 20; i++ {
+		got, err := Encode(r)
+		if err != nil {
+			t.Fatalf("Encode: %v", err)
+		}
+		if string(got) != want {
+			t.Fatalf("Encode #%d =\n%s\nwant\n%s", i, got, want)
+		}
+	}
+	// Encode must not reorder the caller's slices.
+	if !reflect.DeepEqual(r.Ext.Env.Arch, []string{"arm64", "amd64", "arm64"}) {
+		t.Fatalf("Encode mutated its input: %v", r.Ext.Env.Arch)
+	}
+
+	back, info, err := Decode([]byte(want))
+	if err != nil || info.ExtDropped {
+		t.Fatalf("Decode(Encode(r)): %v, %+v", err, info)
+	}
+	again, err := Encode(back)
+	if err != nil {
+		t.Fatalf("Encode(Decode(...)): %v", err)
+	}
+	if string(again) != want {
+		t.Fatalf("round trip changed the body:\n%s\nwant\n%s", again, want)
+	}
+	wantTime := time.Date(2026, 10, 6, 9, 12, 44, 0, time.UTC)
+	if !back.Ext.SentAt.Equal(wantTime) {
+		t.Fatalf("SentAt = %v, want %v", back.Ext.SentAt, wantTime)
+	}
+	back.Ext.SentAt = time.Time{}
+	wantExt := &Extended{
+		Schema: 1, InstallID: testID,
+		Env:   Env{K8s: "1.31", Distro: "k3s", Arch: []string{"amd64", "arm64"}, Nodes: "1"},
+		Games: Games{Official: map[string]int{"minecraft-java": 2, "terraria": 1}},
+		Features: Features{
+			WakeOnConnect: true, Tunnels: []string{"frp", "playit"}, Backups: true,
+			Clusters: "1", DB: "sqlite", Language: "en",
+		},
+		Key: testKey,
+	}
+	if !reflect.DeepEqual(back.Ext, wantExt) {
+		t.Fatalf("Ext = %+v, want %+v", back.Ext, wantExt)
+	}
+}
+
+// TestEncodeBasicAndEmpty covers a basic-only report and nil collections.
+func TestEncodeBasicAndEmpty(t *testing.T) {
+	t.Parallel()
+	got, err := Encode(Report{Version: "0.3.0", Servers: 3, Templates: 7})
+	if err != nil {
+		t.Fatalf("Encode: %v", err)
+	}
+	if want := `{"version":"0.3.0","servers":3,"templates":7}`; string(got) != want {
+		t.Fatalf("basic = %s, want %s", got, want)
+	}
+	if _, _, err := Decode(got); err != nil {
+		t.Fatalf("Decode(basic): %v", err)
+	}
+
+	// Nil arrays and maps are written as [] and {}, never null.
+	got, err = Encode(Report{Ext: &Extended{Schema: 1}})
+	if err != nil {
+		t.Fatalf("Encode: %v", err)
+	}
+	for _, frag := range []string{`"arch":[]`, `"tunnels":[]`, `"official":{}`} {
+		if !strings.Contains(string(got), frag) {
+			t.Fatalf("%s missing from %s", frag, got)
+		}
+	}
+	if strings.Contains(string(got), "null") {
+		t.Fatalf("Encode wrote null: %s", got)
+	}
+}
+
+// TestEncodeRejectsNegativeCounts covers the only validation Encode performs.
+func TestEncodeRejectsNegativeCounts(t *testing.T) {
+	t.Parallel()
+	for _, r := range []Report{{Servers: -1}, {Templates: -1}} {
+		if _, err := Encode(r); !errors.Is(err, ErrInvalidPayload) {
+			t.Fatalf("Encode(%+v) err = %v, want ErrInvalidPayload", r, err)
+		}
+	}
+}
diff --git a/telemetryschema/doc.go b/telemetryschema/doc.go
new file mode 100644
index 000000000..1aee4814e
--- /dev/null
+++ b/telemetryschema/doc.go
@@ -0,0 +1,4 @@
+// Package telemetryschema is the shared telemetry report contract used by api
+// and telemetry-receiver; see
+// specs/022-default-telemetry-dashboard/contracts/report-schema.md.
+package telemetryschema
diff --git a/telemetryschema/enums.go b/telemetryschema/enums.go
new file mode 100644
index 000000000..3baf5decd
--- /dev/null
+++ b/telemetryschema/enums.go
@@ -0,0 +1,83 @@
+package telemetryschema
+
+import (
+	"regexp"
+	"slices"
+)
+
+// other is the fold target for every out-of-set enumeration value.
+const other = "other"
+
+// VersionRE limits the syntax of a reported Gameplane version. The receiver
+// buckets a version that does not match as "invalid".
+var VersionRE = regexp.MustCompile(`^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$`)
+
+// K8sMinorRE matches a Kubernetes version reported as 1.<minor>.
+var K8sMinorRE = regexp.MustCompile(`^1\.[0-9]{1,3}$`)
+
+// installIDRE matches a lowercase UUIDv4.
+var installIDRE = regexp.MustCompile(`^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`)
+
+// The enumerations below are the fixed category sets of the report. A value
+// outside its set is folded to "other" by SanitizeEnum. Treat them as
+// read-only.
+var (
+	// Distros lists the recognised Kubernetes distributions.
+	Distros = []string{"k3s", "rke2", "k0s", "eks", "gke", "aks", "openshift", "microk8s", "minikube", "kind", "doks", "talos", "other"}
+	// Arches lists the recognised CPU architectures.
+	Arches = []string{"amd64", "arm64", "arm", "ppc64le", "s390x", "riscv64", "other"}
+	// Tunnels lists the recognised tunnel providers.
+	Tunnels = []string{"frp", "tailscale", "playit", "other"}
+	// DBs lists the recognised API database drivers.
+	DBs = []string{"sqlite", "postgres"}
+	// Languages lists the recognised dashboard languages.
+	Languages = []string{"en"}
+	// NodeBands lists the node-count bands returned by NodeBand.
+	NodeBands = []string{"1", "2-3", "4-10", "11-50", "51+"}
+	// ClusterBands lists the cluster-count bands returned by ClusterBand.
+	ClusterBands = []string{"1", "2-3", "4-10", "11+"}
+	// FleetBands are the histogram bucket upper bounds for server and
+	// template counts; the +Inf bucket is implicit.
+	FleetBands = []float64{0, 1, 2, 5, 10, 25, 50, 100, 250}
+)
+
+// SanitizeEnum returns v when it is a member of set and "other" otherwise.
+func SanitizeEnum(set []string, v string) string {
+	if slices.Contains(set, v) {
+		return v
+	}
+	return other
+}
+
+// NodeBand maps a node count to its band: 1, 2-3, 4-10, 11-50 or 51+. A count
+// below 1 is reported as "1".
+func NodeBand(n int) string {
+	switch {
+	case n <= 1:
+		return "1"
+	case n <= 3:
+		return "2-3"
+	case n <= 10:
+		return "4-10"
+	case n <= 50:
+		return "11-50"
+	default:
+		return "51+"
+	}
+}
+
+// ClusterBand maps a cluster count (the local cluster plus registered
+// clusters) to its band: 1, 2-3, 4-10 or 11+. A count below 1 is reported as
+// "1".
+func ClusterBand(n int) string {
+	switch {
+	case n <= 1:
+		return "1"
+	case n <= 3:
+		return "2-3"
+	case n <= 10:
+		return "4-10"
+	default:
+		return "11+"
+	}
+}
diff --git a/telemetryschema/enums_test.go b/telemetryschema/enums_test.go
new file mode 100644
index 000000000..c63108102
--- /dev/null
+++ b/telemetryschema/enums_test.go
@@ -0,0 +1,151 @@
+package telemetryschema
+
+import (
+	"reflect"
+	"strings"
+	"testing"
+)
+
+// TestNodeBand covers every band boundary and the degenerate counts below 1.
+func TestNodeBand(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		n    int
+		want string
+	}{
+		{-5, "1"}, {0, "1"}, {1, "1"},
+		{2, "2-3"}, {3, "2-3"},
+		{4, "4-10"}, {10, "4-10"},
+		{11, "11-50"}, {50, "11-50"},
+		{51, "51+"}, {52, "51+"}, {1000, "51+"},
+	}
+	for _, tc := range cases {
+		if got := NodeBand(tc.n); got != tc.want {
+			t.Errorf("NodeBand(%d) = %q, want %q", tc.n, got, tc.want)
+		}
+	}
+}
+
+// TestClusterBand covers every band boundary and the degenerate counts below 1.
+func TestClusterBand(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		n    int
+		want string
+	}{
+		{-1, "1"}, {0, "1"}, {1, "1"},
+		{2, "2-3"}, {3, "2-3"},
+		{4, "4-10"}, {10, "4-10"},
+		{11, "11+"}, {12, "11+"}, {500, "11+"},
+	}
+	for _, tc := range cases {
+		if got := ClusterBand(tc.n); got != tc.want {
+			t.Errorf("ClusterBand(%d) = %q, want %q", tc.n, got, tc.want)
+		}
+	}
+}
+
+// TestBandsAreMembersOfTheirSets checks that every band function result is in
+// the matching enumeration, so a folded value can never be a real band.
+func TestBandsAreMembersOfTheirSets(t *testing.T) {
+	t.Parallel()
+	for n := -1; n <= 60; n++ {
+		if got := NodeBand(n); SanitizeEnum(NodeBands, got) != got {
+			t.Errorf("NodeBand(%d) = %q is not in NodeBands", n, got)
+		}
+		if got := ClusterBand(n); SanitizeEnum(ClusterBands, got) != got {
+			t.Errorf("ClusterBand(%d) = %q is not in ClusterBands", n, got)
+		}
+	}
+}
+
+// TestSanitizeEnum checks membership, folding and exact matching.
+func TestSanitizeEnum(t *testing.T) {
+	t.Parallel()
+	cases := []struct {
+		set  []string
+		in   string
+		want string
+	}{
+		{Distros, "k3s", "k3s"},
+		{Distros, "talos", "talos"},
+		{Distros, "other", "other"},
+		{Distros, "K3S", "other"},
+		{Distros, " k3s", "other"},
+		{Distros, "", "other"},
+		{Distros, "vanilla", "other"},
+		{Arches, "riscv64", "riscv64"},
+		{Arches, "x86_64", "other"},
+		{Tunnels, "playit", "playit"},
+		{Tunnels, "wireguard", "other"},
+		{DBs, "postgres", "postgres"},
+		{DBs, "mysql", "other"},
+		{Languages, "en", "en"},
+		{Languages, "fr", "other"},
+		{nil, "anything", "other"},
+		{[]string{}, "", "other"},
+	}
+	for _, tc := range cases {
+		if got := SanitizeEnum(tc.set, tc.in); got != tc.want {
+			t.Errorf("SanitizeEnum(%v, %q) = %q, want %q", tc.set, tc.in, got, tc.want)
+		}
+	}
+}
+
+// TestEnumerationContents pins the published category sets.
+func TestEnumerationContents(t *testing.T) {
+	t.Parallel()
+	checks := []struct {
+		name string
+		got  []string
+		want []string
+	}{
+		{"Distros", Distros, []string{"k3s", "rke2", "k0s", "eks", "gke", "aks", "openshift", "microk8s", "minikube", "kind", "doks", "talos", "other"}},
+		{"Arches", Arches, []string{"amd64", "arm64", "arm", "ppc64le", "s390x", "riscv64", "other"}},
+		{"Tunnels", Tunnels, []string{"frp", "tailscale", "playit", "other"}},
+		{"DBs", DBs, []string{"sqlite", "postgres"}},
+		{"Languages", Languages, []string{"en"}},
+		{"NodeBands", NodeBands, []string{"1", "2-3", "4-10", "11-50", "51+"}},
+		{"ClusterBands", ClusterBands, []string{"1", "2-3", "4-10", "11+"}},
+	}
+	for _, c := range checks {
+		if !reflect.DeepEqual(c.got, c.want) {
+			t.Errorf("%s = %v, want %v", c.name, c.got, c.want)
+		}
+	}
+	if want := []float64{0, 1, 2, 5, 10, 25, 50, 100, 250}; !reflect.DeepEqual(FleetBands, want) {
+		t.Errorf("FleetBands = %v, want %v", FleetBands, want)
+	}
+}
+
+// TestVersionRE checks the syntax of a reported version label.
+func TestVersionRE(t *testing.T) {
+	t.Parallel()
+	valid := []string{"0.3.0", "0.2.0-beta.8", "1", "v1.2.3", "1.0.0+build.5", "dev", "A", strings.Repeat("a", 32)}
+	invalid := []string{"", ".1.0", "-1", "+1", "1 0", "<script>alert(1)</script>", "1/2", "1\n", strings.Repeat("a", 33), "ünï"}
+	for _, v := range valid {
+		if !VersionRE.MatchString(v) {
+			t.Errorf("VersionRE rejects %q", v)
+		}
+	}
+	for _, v := range invalid {
+		if VersionRE.MatchString(v) {
+			t.Errorf("VersionRE accepts %q", v)
+		}
+	}
+}
+
+// TestK8sMinorRE checks the 1.<minor> pattern.
+func TestK8sMinorRE(t *testing.T) {
+	t.Parallel()
+	for _, v := range []string{"1.0", "1.9", "1.31", "1.123"} {
+		if !K8sMinorRE.MatchString(v) {
+			t.Errorf("K8sMinorRE rejects %q", v)
+		}
+	}
+	for _, v := range []string{"", "1", "1.", "1.1234", "2.1", "v1.31", "1.31.2", "1.x", "01.31", "1.31\n"} {
+		if K8sMinorRE.MatchString(v) {
+			t.Errorf("K8sMinorRE accepts %q", v)
+		}
+	}
+}
diff --git a/telemetryschema/go.mod b/telemetryschema/go.mod
new file mode 100644
index 000000000..87bb9e223
--- /dev/null
+++ b/telemetryschema/go.mod
@@ -0,0 +1,3 @@
+module github.com/GameplanePanel/gameplane/telemetryschema
+
+go 1.26.0
diff --git a/telemetryschema/pow.go b/telemetryschema/pow.go
new file mode 100644
index 000000000..09342663c
--- /dev/null
+++ b/telemetryschema/pow.go
@@ -0,0 +1,114 @@
+package telemetryschema
+
+import (
+	"context"
+	"crypto/sha256"
+	"errors"
+	"fmt"
+	"strconv"
+	"strings"
+)
+
+// PoWHeader is the HTTP request header that carries a solved proof-of-work
+// challenge: "<challenge>:<nonce>" (research R21). A receiver that requires
+// proof-of-work refuses a report without it.
+const PoWHeader = "Gameplane-Telemetry-PoW"
+
+// MaxPoWBits is the hardest challenge an install will solve (OD-5). SolvePoW
+// refuses anything above it, so a misconfigured provider cannot burn an
+// install's CPU. Its cost is about 2^26 hashes.
+const MaxPoWBits = 26
+
+// MaxChallengeLen bounds the challenge part of a PoWHeader value. A
+// receiver's challenge is about 60 characters; the bound stops a hostile
+// header from being hashed at any length.
+const MaxChallengeLen = 256
+
+// solveCheckEvery is how many nonces SolvePoW tries between context checks.
+const solveCheckEvery = 1 << 12
+
+var (
+	// ErrBadPoW is wrapped by every ParsePoW failure.
+	ErrBadPoW = errors.New("bad proof-of-work header")
+	// ErrPoWDifficulty is wrapped by the SolvePoW error for a difficulty
+	// below 0 or above MaxPoWBits.
+	ErrPoWDifficulty = errors.New("proof-of-work difficulty out of range")
+)
+
+// PoWOK reports whether SHA-256(challenge + ":" + decimal nonce) starts with
+// at least bits zero bits. A bits value of 0 or less is always satisfied.
+func PoWOK(challenge string, nonce uint64, bits int) bool {
+	if bits <= 0 {
+		return true
+	}
+	buf := append([]byte(challenge), ':')
+	buf = strconv.AppendUint(buf, nonce, 10)
+	return leadingZeroBits(sha256.Sum256(buf)) >= bits
+}
+
+// SolvePoW finds the smallest nonce for which PoWOK(challenge, nonce, bits)
+// holds. It runs on the calling goroutine only and checks ctx every few
+// thousand attempts, returning an error that wraps ctx's error when it is
+// done. It errors, without hashing, when bits is below 0 or above
+// MaxPoWBits.
+func SolvePoW(ctx context.Context, challenge string, bits int) (uint64, error) {
+	if bits < 0 || bits > MaxPoWBits {
+		return 0, fmt.Errorf("telemetryschema: solve proof-of-work: %w: %d, want 0 to %d", ErrPoWDifficulty, bits, MaxPoWBits)
+	}
+	prefix := len(challenge) + 1
+	buf := make([]byte, prefix, prefix+20)
+	copy(buf, challenge)
+	buf[prefix-1] = ':'
+	for nonce := uint64(0); ; nonce++ {
+		if nonce%solveCheckEvery == 0 {
+			if err := ctx.Err(); err != nil {
+				return 0, fmt.Errorf("telemetryschema: solve proof-of-work: %w", err)
+			}
+		}
+		buf = strconv.AppendUint(buf[:prefix], nonce, 10)
+		if leadingZeroBits(sha256.Sum256(buf)) >= bits {
+			return nonce, nil
+		}
+	}
+}
+
+// FormatPoW returns the PoWHeader value for a solved challenge.
+func FormatPoW(challenge string, nonce uint64) string {
+	return challenge + ":" + strconv.FormatUint(nonce, 10)
+}
+
+// ParsePoW splits a PoWHeader value at its last ':' into the challenge and
+// the nonce. The nonce must be plain decimal (digits only, no sign, no
+// leading zeros, within uint64) and the challenge non-empty and at most
+// MaxChallengeLen bytes. Every failure wraps ErrBadPoW.
+func ParsePoW(header string) (string, uint64, error) {
+	i := strings.LastIndexByte(header, ':')
+	if i < 0 {
+		return "", 0, fmt.Errorf("%w: no ':' before the nonce", ErrBadPoW)
+	}
+	challenge, raw := header[:i], header[i+1:]
+	if challenge == "" || len(challenge) > MaxChallengeLen {
+		return "", 0, fmt.Errorf("%w: challenge must be 1 to %d bytes", ErrBadPoW, MaxChallengeLen)
+	}
+	nonce, err := strconv.ParseUint(raw, 10, 64)
+	if err != nil || strconv.FormatUint(nonce, 10) != raw {
+		return "", 0, fmt.Errorf("%w: nonce must be a plain decimal uint64", ErrBadPoW)
+	}
+	return challenge, nonce, nil
+}
+
+// leadingZeroBits counts the zero bits at the start of sum.
+func leadingZeroBits(sum [sha256.Size]byte) int {
+	n := 0
+	for _, b := range sum {
+		if b == 0 {
+			n += 8
+			continue
+		}
+		for mask := byte(0x80); b&mask == 0; mask >>= 1 {
+			n++
+		}
+		return n
+	}
+	return n
+}
diff --git a/telemetryschema/pow_test.go b/telemetryschema/pow_test.go
new file mode 100644
index 000000000..a8ad1aa34
--- /dev/null
+++ b/telemetryschema/pow_test.go
@@ -0,0 +1,175 @@
+package telemetryschema
+
+import (
+	"context"
+	"crypto/sha256"
+	"encoding/hex"
+	"errors"
+	"strconv"
+	"strings"
+	"testing"
+	"time"
+)
+
+// Fixed vectors for the challenge "gameplane-pow-vector". They were computed
+// once with this package and pin the hash input (challenge, ":", decimal
+// nonce), the bit counting and the solver's search order (smallest nonce
+// first). sha256 hex is of "gameplane-pow-vector:<nonce>".
+const powVectorChallenge = "gameplane-pow-vector"
+
+var powVectors = []struct {
+	bits  int
+	nonce uint64
+	hash  string
+}{
+	{0, 0, "dafdb5e8bf7fc00dd10e1c84e59c2b4f864f4864a9a72e9dded6cbce44fd3743"},
+	{8, 450, "00d28d8005d89a9dea62f4f3b973d1fc8bc97d61356061d3abaa54a13b255803"},
+	{12, 21441, "000b290e819f5fe129f9049820f6a016b6ac9f65170c9610b2854a94a9166c9a"},
+	{16, 27322, "0000083735a5d0e3c57edbd152e4d720e7225352d2c0275cc1cab3dab9b61433"},
+}
+
+func TestPoWConstants(t *testing.T) {
+	if PoWHeader != "Gameplane-Telemetry-PoW" {
+		t.Errorf("PoWHeader = %q", PoWHeader)
+	}
+	if MaxPoWBits != 26 {
+		t.Errorf("MaxPoWBits = %d, want 26 (OD-5)", MaxPoWBits)
+	}
+}
+
+func TestPoWOKMatchesTheFixedVectors(t *testing.T) {
+	for _, v := range powVectors {
+		sum := sha256.Sum256([]byte(powVectorChallenge + ":" + strconv.FormatUint(v.nonce, 10)))
+		if got := hex.EncodeToString(sum[:]); got != v.hash {
+			t.Fatalf("vector %d bits: sha256 = %s, want %s", v.bits, got, v.hash)
+		}
+		if !PoWOK(powVectorChallenge, v.nonce, v.bits) {
+			t.Errorf("PoWOK(%d bits, nonce %d) = false, want true", v.bits, v.nonce)
+		}
+	}
+	// 000b... has exactly 12 leading zero bits, 00d2... exactly 8.
+	if PoWOK(powVectorChallenge, 21441, 13) || PoWOK(powVectorChallenge, 450, 9) {
+		t.Error("PoWOK accepted more leading zero bits than the hash has")
+	}
+	if PoWOK(powVectorChallenge, 21440, 12) {
+		t.Error("PoWOK accepted a nonce that is not a solution")
+	}
+}
+
+func TestPoWOKEdges(t *testing.T) {
+	if !PoWOK("x", 1, 0) || !PoWOK("x", 1, -5) {
+		t.Error("0 or fewer bits is always satisfied")
+	}
+	if PoWOK("x", 1, 257) {
+		t.Error("more than 256 bits can never be satisfied")
+	}
+	// The all-zero hash case cannot be built, but the byte loop's whole-byte
+	// and partial-byte branches are both covered by the vectors above.
+}
+
+func TestSolvePoWFindsTheSmallestNonce(t *testing.T) {
+	for _, v := range powVectors {
+		nonce, err := SolvePoW(context.Background(), powVectorChallenge, v.bits)
+		if err != nil || nonce != v.nonce {
+			t.Fatalf("SolvePoW(%d bits) = %d, %v, want %d", v.bits, nonce, err, v.nonce)
+		}
+	}
+}
+
+func TestSolvePoWRefusesOutOfRangeDifficulty(t *testing.T) {
+	for _, bits := range []int{-1, MaxPoWBits + 1, 1000} {
+		if _, err := SolvePoW(context.Background(), "c", bits); !errors.Is(err, ErrPoWDifficulty) {
+			t.Errorf("SolvePoW(%d bits) = %v, want ErrPoWDifficulty", bits, err)
+		}
+	}
+}
+
+func TestSolvePoWStopsWhenTheContextIsDone(t *testing.T) {
+	cancelled, cancel := context.WithCancel(context.Background())
+	cancel()
+	if _, err := SolvePoW(cancelled, "c", MaxPoWBits); !errors.Is(err, context.Canceled) {
+		t.Errorf("cancelled context: err = %v, want context.Canceled", err)
+	}
+	expired, stop := context.WithDeadline(context.Background(), time.Now().Add(-time.Second))
+	defer stop()
+	if _, err := SolvePoW(expired, "c", MaxPoWBits); !errors.Is(err, context.DeadlineExceeded) {
+		t.Errorf("expired context: err = %v, want context.DeadlineExceeded", err)
+	}
+}
+
+func TestSolvePoWChecksTheContextWhileSearching(t *testing.T) {
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+	done := make(chan error, 1)
+	go func() {
+		// A 26-bit solution takes tens of millions of hashes on average, far
+		// longer than this test waits.
+		_, err := SolvePoW(ctx, "a-challenge-nobody-solves-quickly", MaxPoWBits)
+		done <- err
+	}()
+	time.Sleep(20 * time.Millisecond)
+	cancel()
+	select {
+	case err := <-done:
+		// A very lucky solution is not an error; anything else must be the
+		// cancellation.
+		if err != nil && !errors.Is(err, context.Canceled) {
+			t.Fatalf("err = %v, want context.Canceled", err)
+		}
+	case <-time.After(10 * time.Second):
+		t.Fatal("SolvePoW did not stop after its context was cancelled")
+	}
+}
+
+func TestFormatAndParsePoWRoundTrip(t *testing.T) {
+	for _, tc := range []struct {
+		challenge string
+		nonce     uint64
+		header    string
+	}{
+		{"abc.def", 0, "abc.def:0"},
+		{"abc.def", 42, "abc.def:42"},
+		{"has:colons:inside", 7, "has:colons:inside:7"},
+		{"c", 18446744073709551615, "c:18446744073709551615"},
+		{strings.Repeat("a", MaxChallengeLen), 1, strings.Repeat("a", MaxChallengeLen) + ":1"},
+	} {
+		if got := FormatPoW(tc.challenge, tc.nonce); got != tc.header {
+			t.Errorf("FormatPoW(%q, %d) = %q, want %q", tc.challenge, tc.nonce, got, tc.header)
+		}
+		challenge, nonce, err := ParsePoW(tc.header)
+		if err != nil || challenge != tc.challenge || nonce != tc.nonce {
+			t.Errorf("ParsePoW(%q) = %q, %d, %v, want %q, %d", tc.header, challenge, nonce, err, tc.challenge, tc.nonce)
+		}
+	}
+}
+
+func TestParsePoWRejectsMalformedHeaders(t *testing.T) {
+	for name, header := range map[string]string{
+		"empty":                    "",
+		"no separator":             "abc",
+		"empty challenge":          ":5",
+		"empty nonce":              "abc:",
+		"negative nonce":           "abc:-1",
+		"signed nonce":             "abc:+1",
+		"leading zero":             "abc:01",
+		"not digits":               "abc:1x",
+		"hex":                      "abc:0x10",
+		"overflows uint64":         "abc:18446744073709551616",
+		"challenge over the limit": strings.Repeat("a", MaxChallengeLen+1) + ":1",
+	} {
+		if _, _, err := ParsePoW(header); !errors.Is(err, ErrBadPoW) {
+			t.Errorf("%s: ParsePoW(%q) err = %v, want ErrBadPoW", name, header, err)
+		}
+	}
+}
+
+func TestSolvedHeaderParsesAndVerifies(t *testing.T) {
+	nonce, err := SolvePoW(context.Background(), "round.trip", 10)
+	if err != nil {
+		t.Fatalf("solve: %v", err)
+	}
+	challenge, got, err := ParsePoW(FormatPoW("round.trip", nonce))
+	if err != nil || !PoWOK(challenge, got, 10) {
+		t.Fatalf("parsed %q, %d, %v: not a solution", challenge, got, err)
+	}
+}
diff --git a/telemetryschema/report.go b/telemetryschema/report.go
new file mode 100644
index 000000000..735afab45
--- /dev/null
+++ b/telemetryschema/report.go
@@ -0,0 +1,128 @@
+package telemetryschema
+
+import (
+	"encoding/json"
+	"fmt"
+	"slices"
+	"sort"
+	"time"
+)
+
+// Report is one telemetry report: the basic tier (Version, Servers,
+// Templates) plus the optional extended tier (Ext). Ext is non-nil only while
+// the install's extended tier is on.
+type Report struct {
+	Version   string    `json:"version"`
+	Servers   int       `json:"servers"`
+	Templates int       `json:"templates"`
+	Ext       *Extended `json:"ext,omitempty"`
+}
+
+// Extended is the extended tier of a report. Every field is required on the
+// wire. Key is the base64url (unpadded) Ed25519 public key derived for
+// InstallID (see DeriveKey); SentAt is the send time.
+type Extended struct {
+	Schema    int       `json:"schema"`
+	InstallID string    `json:"installId"`
+	Env       Env       `json:"env"`
+	Games     Games     `json:"games"`
+	Features  Features  `json:"features"`
+	Key       string    `json:"key"`
+	SentAt    time.Time `json:"sentAt"`
+}
+
+// Env describes the install's environment, using only enumerated values.
+type Env struct {
+	K8s    string   `json:"k8s"`
+	Distro string   `json:"distro"`
+	Arch   []string `json:"arch"`
+	Nodes  string   `json:"nodes"`
+}
+
+// Games counts local GameServers: Official maps an official catalog module
+// name to its server count, Custom counts every other server.
+type Games struct {
+	Official map[string]int `json:"official"`
+	Custom   int            `json:"custom"`
+}
+
+// Features records which optional features are in use.
+type Features struct {
+	WakeOnConnect   bool     `json:"wakeOnConnect"`
+	Tunnels         []string `json:"tunnels"`
+	Capture         bool     `json:"capture"`
+	Backups         bool     `json:"backups"`
+	SSO             bool     `json:"sso"`
+	AuditForwarding bool     `json:"auditForwarding"`
+	Clusters        string   `json:"clusters"`
+	DB              string   `json:"db"`
+	Language        string   `json:"language"`
+}
+
+// wireExtended is Extended as it appears on the wire: SentAt is a
+// second-precision RFC 3339 UTC string.
+type wireExtended struct {
+	Schema    int      `json:"schema"`
+	InstallID string   `json:"installId"`
+	Env       Env      `json:"env"`
+	Games     Games    `json:"games"`
+	Features  Features `json:"features"`
+	Key       string   `json:"key"`
+	SentAt    string   `json:"sentAt"`
+}
+
+// wireReport is Report as it appears on the wire.
+type wireReport struct {
+	Version   string        `json:"version"`
+	Servers   int           `json:"servers"`
+	Templates int           `json:"templates"`
+	Ext       *wireExtended `json:"ext,omitempty"`
+}
+
+// Encode returns the canonical JSON body for r. The output is deterministic:
+// arrays are sorted and de-duplicated, object keys are sorted (encoding/json
+// sorts map keys), nil arrays and maps are written as [] and {} (never null),
+// and SentAt is written in UTC at second precision. Encode does not fold
+// out-of-set values; Decode does. Negative counts are rejected with
+// ErrInvalidPayload.
+func Encode(r Report) ([]byte, error) {
+	if r.Servers < 0 || r.Templates < 0 {
+		return nil, fmt.Errorf("%w: counts must be non-negative", ErrInvalidPayload)
+	}
+	w := wireReport{Version: r.Version, Servers: r.Servers, Templates: r.Templates}
+	if e := r.Ext; e != nil {
+		official := make(map[string]int, len(e.Games.Official))
+		for k, v := range e.Games.Official {
+			official[k] = v
+		}
+		env := e.Env
+		env.Arch = sortedSet(env.Arch)
+		feat := e.Features
+		feat.Tunnels = sortedSet(feat.Tunnels)
+		w.Ext = &wireExtended{
+			Schema:    e.Schema,
+			InstallID: e.InstallID,
+			Env:       env,
+			Games:     Games{Official: official, Custom: e.Games.Custom},
+			Features:  feat,
+			Key:       e.Key,
+			SentAt:    e.SentAt.UTC().Format(time.RFC3339),
+		}
+	}
+	out, err := json.Marshal(w)
+	if err != nil {
+		return nil, fmt.Errorf("telemetryschema: encode report: %w", err)
+	}
+	return out, nil
+}
+
+// sortedSet returns a sorted, de-duplicated copy of in. It never returns nil,
+// so the JSON form is [] rather than null.
+func sortedSet(in []string) []string {
+	out := slices.Clone(in)
+	if out == nil {
+		out = []string{}
+	}
+	sort.Strings(out)
+	return slices.Compact(out)
+}
diff --git a/telemetryschema/sign.go b/telemetryschema/sign.go
new file mode 100644
index 000000000..7cb748d04
--- /dev/null
+++ b/telemetryschema/sign.go
@@ -0,0 +1,109 @@
+package telemetryschema
+
+import (
+	"crypto/ed25519"
+	"crypto/hkdf"
+	"crypto/rand"
+	"crypto/sha256"
+	"encoding/base64"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"strings"
+)
+
+// SignatureHeader is the HTTP request header that carries the report
+// signature. It is required when the report has an ext part and absent
+// otherwise.
+const SignatureHeader = "Gameplane-Telemetry-Signature"
+
+// signaturePrefix starts the header value: "ed25519=<base64url signature>".
+const signaturePrefix = "ed25519="
+
+// SecretSize is the length in bytes of the install's signing secret.
+const SecretSize = 32
+
+// keyInfo is the HKDF context string for signing-key derivation.
+const keyInfo = "gameplane-telemetry-signing-v1"
+
+// ErrBadSignature is wrapped by every Verify failure: a missing or malformed
+// header, a malformed public key, or a signature that does not match.
+var ErrBadSignature = errors.New("bad signature")
+
+// NewSecret returns a new signing secret: SecretSize random bytes.
+func NewSecret() ([]byte, error) {
+	secret := make([]byte, SecretSize)
+	if _, err := rand.Read(secret); err != nil {
+		return nil, fmt.Errorf("telemetryschema: generate signing secret: %w", err)
+	}
+	return secret, nil
+}
+
+// DeriveKey derives the Ed25519 signing key for installID from the install's
+// signing secret: seed = HKDF-SHA256(secret, salt = installID, info =
+// "gameplane-telemetry-signing-v1", 32 bytes). The key is unique to the ID, so
+// a new ID always yields an unlinkable key. Callers recompute it on every send
+// and never store it.
+func DeriveKey(secret []byte, installID string) (ed25519.PrivateKey, error) {
+	if len(secret) != SecretSize {
+		return nil, fmt.Errorf("telemetryschema: signing secret is %d bytes, want %d", len(secret), SecretSize)
+	}
+	if installID == "" {
+		return nil, errors.New("telemetryschema: install ID is empty")
+	}
+	seed, err := hkdf.Key(sha256.New, secret, []byte(installID), keyInfo, ed25519.SeedSize)
+	if err != nil {
+		return nil, fmt.Errorf("telemetryschema: derive signing key: %w", err)
+	}
+	return ed25519.NewKeyFromSeed(seed), nil
+}
+
+// PublicKeyString returns the public half of priv as unpadded base64url, the
+// form carried in ext.key.
+func PublicKeyString(priv ed25519.PrivateKey) string {
+	// An Ed25519 private key is seed || public key.
+	return base64.RawURLEncoding.EncodeToString(priv[ed25519.SeedSize:])
+}
+
+// Sign signs the exact body bytes and returns the header value
+// "ed25519=<base64url signature>".
+func Sign(priv ed25519.PrivateKey, body []byte) string {
+	return signaturePrefix + base64.RawURLEncoding.EncodeToString(ed25519.Sign(priv, body))
+}
+
+// Verify checks that header, the value of SignatureHeader, is a valid
+// signature of body under publicKey, an unpadded base64url Ed25519 public key.
+// Every failure wraps ErrBadSignature.
+func Verify(header, publicKey string, body []byte) error {
+	encoded, ok := strings.CutPrefix(header, signaturePrefix)
+	if !ok {
+		return fmt.Errorf("%w: header must start with %q", ErrBadSignature, signaturePrefix)
+	}
+	sig, err := base64.RawURLEncoding.Strict().DecodeString(encoded)
+	if err != nil || len(sig) != ed25519.SignatureSize {
+		return fmt.Errorf("%w: malformed signature", ErrBadSignature)
+	}
+	if base64.RawURLEncoding.EncodeToString(sig) != encoded {
+		return fmt.Errorf("%w: malformed signature", ErrBadSignature)
+	}
+	pub, err := decodePublicKey(publicKey)
+	if err != nil {
+		return fmt.Errorf("%w: %w", ErrBadSignature, err)
+	}
+	if !ed25519.Verify(pub, body, sig) {
+		return fmt.Errorf("%w: signature does not match", ErrBadSignature)
+	}
+	return nil
+}
+
+// KeyFingerprint returns the hex SHA-256 of the raw public key bytes, the
+// receiver's stored claim (key_fp). It returns "" when publicKey is not a
+// valid unpadded base64url 32-byte key.
+func KeyFingerprint(publicKey string) string {
+	raw, err := decodePublicKey(publicKey)
+	if err != nil {
+		return ""
+	}
+	sum := sha256.Sum256(raw)
+	return hex.EncodeToString(sum[:])
+}
diff --git a/telemetryschema/sign_test.go b/telemetryschema/sign_test.go
new file mode 100644
index 000000000..d3e6cc54f
--- /dev/null
+++ b/telemetryschema/sign_test.go
@@ -0,0 +1,317 @@
+package telemetryschema
+
+import (
+	"bytes"
+	"crypto/ed25519"
+	"encoding/base64"
+	"encoding/hex"
+	"errors"
+	"strings"
+	"testing"
+	"time"
+)
+
+// Fixed vector: secret = bytes 0x00..0x1f, ID = testID. These values were
+// computed once with this package and pin the derivation (HKDF-SHA256,
+// salt = installID, info = "gameplane-telemetry-signing-v1") so an accidental
+// change to it, which would orphan every install's claim, fails a test.
+const (
+	vectorSeedHex = "ba8437e857f84d8a133ba2bdd61e9487835821b360b0ea80eaae8214510c34e4"
+	vectorPublic  = testKey
+	vectorFP      = "91acb03049b6b19322b826facc44ff4cb52f241170856c5ae17cf97d60525654"
+	vectorBody    = "hello gameplane"
+	vectorHeader  = "ed25519=52awxyQ-StRsfZ1vVDldOkSsGpSqV-UK49-DF3KJN9fJJb0UomHqlaTNeFpL1-EwT-8k4wEoq2MZGoEazHTFCw"
+	otherID       = "9b2e7c14-5d3a-4f68-8e0b-1a4c6d8f2e37"
+)
+
+// vectorSecret returns the fixed secret 0x00..0x1f.
+func vectorSecret() []byte {
+	secret := make([]byte, SecretSize)
+	for i := range secret {
+		secret[i] = byte(i)
+	}
+	return secret
+}
+
+// vectorKey derives the fixed vector's private key.
+func vectorKey(t *testing.T) ed25519.PrivateKey {
+	t.Helper()
+	priv, err := DeriveKey(vectorSecret(), testID)
+	if err != nil {
+		t.Fatalf("DeriveKey: %v", err)
+	}
+	return priv
+}
+
+// TestDeriveKeyVector pins the derivation, the public key string, the
+// fingerprint and a signature to fixed values.
+func TestDeriveKeyVector(t *testing.T) {
+	t.Parallel()
+	priv := vectorKey(t)
+	if got := hex.EncodeToString(priv.Seed()); got != vectorSeedHex {
+		t.Fatalf("seed = %s, want %s", got, vectorSeedHex)
+	}
+	pub := PublicKeyString(priv)
+	if pub != vectorPublic {
+		t.Fatalf("PublicKeyString = %s, want %s", pub, vectorPublic)
+	}
+	if len(pub) != 43 || strings.ContainsAny(pub, "=+/") {
+		t.Fatalf("public key %q is not unpadded base64url of 32 bytes", pub)
+	}
+	if got := KeyFingerprint(pub); got != vectorFP {
+		t.Fatalf("KeyFingerprint = %s, want %s", got, vectorFP)
+	}
+	// Ed25519 signing is deterministic, so the header is a fixed value too.
+	if got := Sign(priv, []byte(vectorBody)); got != vectorHeader {
+		t.Fatalf("Sign = %s, want %s", got, vectorHeader)
+	}
+	if err := Verify(vectorHeader, vectorPublic, []byte(vectorBody)); err != nil {
+		t.Fatalf("Verify(vector): %v", err)
+	}
+}
+
+// TestDeriveKeyIsDeterministicAndPerID checks that the same inputs give the
+// same key and that a different ID or secret gives a different key.
+func TestDeriveKeyIsDeterministicAndPerID(t *testing.T) {
+	t.Parallel()
+	a := vectorKey(t)
+	b := vectorKey(t)
+	if !bytes.Equal(a, b) {
+		t.Fatal("same secret and ID gave different keys")
+	}
+	other, err := DeriveKey(vectorSecret(), otherID)
+	if err != nil {
+		t.Fatalf("DeriveKey: %v", err)
+	}
+	if bytes.Equal(a, other) || PublicKeyString(a) == PublicKeyString(other) {
+		t.Fatal("different IDs derived the same key")
+	}
+	secret2 := vectorSecret()
+	secret2[0] ^= 0xff
+	diff, err := DeriveKey(secret2, testID)
+	if err != nil {
+		t.Fatalf("DeriveKey: %v", err)
+	}
+	if bytes.Equal(a, diff) {
+		t.Fatal("different secrets derived the same key")
+	}
+	if KeyFingerprint(PublicKeyString(a)) == KeyFingerprint(PublicKeyString(other)) {
+		t.Fatal("different keys share a fingerprint")
+	}
+}
+
+// TestDeriveKeyRejectsBadInput covers the input checks.
+func TestDeriveKeyRejectsBadInput(t *testing.T) {
+	t.Parallel()
+	for name, secret := range map[string][]byte{
+		"nil":   nil,
+		"empty": {},
+		"short": make([]byte, SecretSize-1),
+		"long":  make([]byte, SecretSize+1),
+	} {
+		if _, err := DeriveKey(secret, testID); err == nil {
+			t.Errorf("%s secret: expected error", name)
+		}
+	}
+	if _, err := DeriveKey(vectorSecret(), ""); err == nil {
+		t.Error("empty install ID: expected error")
+	}
+}
+
+// TestNewSecret checks the length and that two secrets differ.
+func TestNewSecret(t *testing.T) {
+	t.Parallel()
+	a, err := NewSecret()
+	if err != nil {
+		t.Fatalf("NewSecret: %v", err)
+	}
+	b, err := NewSecret()
+	if err != nil {
+		t.Fatalf("NewSecret: %v", err)
+	}
+	if len(a) != SecretSize || len(b) != SecretSize {
+		t.Fatalf("lengths = %d, %d, want %d", len(a), len(b), SecretSize)
+	}
+	if bytes.Equal(a, b) {
+		t.Fatal("two secrets are identical")
+	}
+	if _, err := DeriveKey(a, testID); err != nil {
+		t.Fatalf("a new secret must be usable: %v", err)
+	}
+}
+
+// TestSignVerifyRoundTrip signs an encoded report with a derived key and
+// verifies it with the ext.key the decoder returns.
+func TestSignVerifyRoundTrip(t *testing.T) {
+	t.Parallel()
+	priv := vectorKey(t)
+	body, err := Encode(Report{
+		Version: "0.3.0", Servers: 1, Templates: 1,
+		Ext: &Extended{
+			Schema: 1, InstallID: testID,
+			Env:      Env{K8s: "1.31", Distro: "k3s", Arch: []string{"amd64"}, Nodes: "1"},
+			Features: Features{Clusters: "1", DB: "sqlite", Language: "en"},
+			Key:      PublicKeyString(priv),
+			SentAt:   time.Date(2026, 10, 6, 9, 12, 44, 0, time.UTC),
+		},
+	})
+	if err != nil {
+		t.Fatalf("Encode: %v", err)
+	}
+	header := Sign(priv, body)
+	if !strings.HasPrefix(header, "ed25519=") {
+		t.Fatalf("header %q lacks the ed25519= prefix", header)
+	}
+	r, _, err := Decode(body)
+	if err != nil {
+		t.Fatalf("Decode: %v", err)
+	}
+	if err := Verify(header, r.Ext.Key, body); err != nil {
+		t.Fatalf("Verify: %v", err)
+	}
+}
+
+// TestVerifyDetectsEverySingleByteTamper flips each bit-0 of the body in turn,
+// then of the signature, and expects a failure every time.
+func TestVerifyDetectsEverySingleByteTamper(t *testing.T) {
+	t.Parallel()
+	priv := vectorKey(t)
+	body := []byte(`{"version":"0.3.0","servers":3,"templates":7}`)
+	header := Sign(priv, body)
+	pub := PublicKeyString(priv)
+	if err := Verify(header, pub, body); err != nil {
+		t.Fatalf("untampered body: %v", err)
+	}
+	for i := range body {
+		tampered := bytes.Clone(body)
+		tampered[i] ^= 0x01
+		err := Verify(header, pub, tampered)
+		if !errors.Is(err, ErrBadSignature) {
+			t.Fatalf("flipping body byte %d: err = %v, want ErrBadSignature", i, err)
+		}
+	}
+	if err := Verify(header, pub, append(bytes.Clone(body), ' ')); !errors.Is(err, ErrBadSignature) {
+		t.Fatalf("appended byte: err = %v, want ErrBadSignature", err)
+	}
+	if err := Verify(header, pub, body[:len(body)-1]); !errors.Is(err, ErrBadSignature) {
+		t.Fatalf("truncated body: err = %v, want ErrBadSignature", err)
+	}
+	if err := Verify(header, pub, nil); !errors.Is(err, ErrBadSignature) {
+		t.Fatalf("empty body: err = %v, want ErrBadSignature", err)
+	}
+
+	sig, err := base64.RawURLEncoding.DecodeString(strings.TrimPrefix(header, "ed25519="))
+	if err != nil {
+		t.Fatalf("decode signature: %v", err)
+	}
+	for i := range sig {
+		tampered := bytes.Clone(sig)
+		tampered[i] ^= 0x01
+		h := "ed25519=" + base64.RawURLEncoding.EncodeToString(tampered)
+		if err := Verify(h, pub, body); !errors.Is(err, ErrBadSignature) {
+			t.Fatalf("flipping signature byte %d: err = %v, want ErrBadSignature", i, err)
+		}
+	}
+}
+
+// TestVerifyRejectsWrongKey checks that another ID's key cannot verify.
+func TestVerifyRejectsWrongKey(t *testing.T) {
+	t.Parallel()
+	body := []byte("body")
+	header := Sign(vectorKey(t), body)
+	other, err := DeriveKey(vectorSecret(), otherID)
+	if err != nil {
+		t.Fatalf("DeriveKey: %v", err)
+	}
+	if err := Verify(header, PublicKeyString(other), body); !errors.Is(err, ErrBadSignature) {
+		t.Fatalf("err = %v, want ErrBadSignature", err)
+	}
+}
+
+// TestVerifyRejectsMalformedHeaders covers every malformed header form.
+func TestVerifyRejectsMalformedHeaders(t *testing.T) {
+	t.Parallel()
+	body := []byte(vectorBody)
+	raw := strings.TrimPrefix(vectorHeader, "ed25519=")
+	sig, err := base64.RawURLEncoding.DecodeString(raw)
+	if err != nil {
+		t.Fatalf("decode vector: %v", err)
+	}
+	cases := map[string]string{
+		"empty":                  "",
+		"prefix only":            "ed25519=",
+		"no separator":           "ed25519",
+		"wrong algorithm":        "rsa=" + raw,
+		"uppercase algorithm":    "ED25519=" + raw,
+		"leading space":          " " + vectorHeader,
+		"space after equals":     "ed25519= " + raw,
+		"trailing space":         vectorHeader + " ",
+		"bare signature":         raw,
+		"not base64":             "ed25519=!!!!",
+		"standard base64":        "ed25519=" + base64.StdEncoding.EncodeToString(sig),
+		"padded":                 vectorHeader + "==",
+		"too short":              "ed25519=" + raw[:len(raw)-4],
+		"too long":               vectorHeader + "AAAA",
+		"one byte":               "ed25519=AA",
+		"non-canonical tail":     "ed25519=" + raw[:len(raw)-1] + "B",
+		"signature with newline": "ed25519=" + raw[:len(raw)/2] + "\n" + raw[len(raw)/2:],
+		"two signatures":         vectorHeader + ",ed25519=" + raw,
+	}
+	for name, header := range cases {
+		t.Run(name, func(t *testing.T) {
+			err := Verify(header, vectorPublic, body)
+			if !errors.Is(err, ErrBadSignature) {
+				t.Fatalf("err = %v, want ErrBadSignature", err)
+			}
+		})
+	}
+}
+
+// TestVerifyRejectsMalformedKeys covers every malformed public key form.
+func TestVerifyRejectsMalformedKeys(t *testing.T) {
+	t.Parallel()
+	body := []byte(vectorBody)
+	cases := map[string]string{
+		"empty":         "",
+		"short":         vectorPublic[:42],
+		"long":          vectorPublic + "AA",
+		"padded":        vectorPublic + "=",
+		"not base64":    "!!!" + vectorPublic[3:],
+		"standard":      strings.ReplaceAll(vectorPublic, "_", "/"),
+		"non-canonical": vectorPublic[:42] + "t",
+		"whitespace":    " " + vectorPublic,
+	}
+	for name, key := range cases {
+		t.Run(name, func(t *testing.T) {
+			err := Verify(vectorHeader, key, body)
+			if !errors.Is(err, ErrBadSignature) {
+				t.Fatalf("err = %v, want ErrBadSignature", err)
+			}
+		})
+	}
+}
+
+// TestKeyFingerprint checks the fingerprint form and its rejection of bad keys.
+func TestKeyFingerprint(t *testing.T) {
+	t.Parallel()
+	fp := KeyFingerprint(vectorPublic)
+	if len(fp) != 64 || fp != strings.ToLower(fp) {
+		t.Fatalf("fingerprint %q is not 64 lowercase hex characters", fp)
+	}
+	if _, err := hex.DecodeString(fp); err != nil {
+		t.Fatalf("fingerprint is not hex: %v", err)
+	}
+	for _, bad := range []string{"", "short", vectorPublic + "=", vectorPublic[:42]} {
+		if got := KeyFingerprint(bad); got != "" {
+			t.Errorf("KeyFingerprint(%q) = %q, want empty", bad, got)
+		}
+	}
+}
+
+// TestSignatureHeaderName pins the header name shared by both sides.
+func TestSignatureHeaderName(t *testing.T) {
+	t.Parallel()
+	if SignatureHeader != "Gameplane-Telemetry-Signature" {
+		t.Fatalf("SignatureHeader = %q", SignatureHeader)
+	}
+}
diff --git a/telemetryschema/specs.md b/telemetryschema/specs.md
new file mode 100644
index 000000000..abdebf81b
--- /dev/null
+++ b/telemetryschema/specs.md
@@ -0,0 +1,146 @@
+# telemetryschema — Specification
+
+**Status:** pre-v1 (spec 022)
+**Module / package:** `github.com/GameplanePanel/gameplane/telemetryschema`
+**Dependencies:** stdlib only (Go 1.26+)
+
+## Purpose
+
+Shared telemetry report contract used by `api` (reporter and preview) and `telemetry-receiver` (ingest). Both sides import this one package, so the categories the API sends and the receiver accepts cannot drift, and the preview an admin sees is built from the same types as the payload.
+
+## Responsibilities
+
+1. Define the report types: the basic tier (`version`, `servers`, `templates`) and the optional extended tier (`ext`).
+2. Hold every enumeration, the band functions and the version and Kubernetes-minor patterns.
+3. Decode and validate report bodies strictly, folding out-of-set values to `other`.
+4. Encode reports deterministically.
+5. Hold the embedded official module catalog.
+6. Derive signing keys, sign report bodies and verify signatures.
+7. Define the proof-of-work header, and check and solve report-ingestion challenges, so the receiver and the reporter share one definition.
+
+## Non-goals / boundaries
+
+- Does **not** talk to the network, the filesystem (beyond the embedded catalog) or Kubernetes. All of it is pure and unit-testable.
+- Does **not** enforce the 16 KiB body limit, the `sentAt` freshness window, install-ID claims, replay protection or rate limits. Those are the receiver's checks.
+- Does **not** store the signing secret or the signing key. The API stores the secret and recomputes the key on every send.
+- Does **not** decide what an install reports. The API collects the values and builds a `Report`.
+- Does **not** issue challenges, hold the receiver's MAC key, remember used challenges or choose a difficulty. Those are the receiver's; this package only checks and solves a challenge it is given.
+
+## Directory & package layout
+
+```
+telemetryschema/
+├── doc.go            # package comment
+├── report.go         # Report, Extended, Env, Games, Features; Encode
+├── enums.go          # enumerations, bands, VersionRE, K8sMinorRE, SanitizeEnum
+├── decode.go         # Decode, DecodeInfo, ErrInvalidPayload, ErrUnsupportedSchema
+├── catalog.go        # IsOfficial, Catalog (embeds catalog.txt)
+├── catalog.txt       # official module names, one per line (generated from the chart)
+├── sign.go           # NewSecret, DeriveKey, PublicKeyString, Sign, Verify, KeyFingerprint
+├── pow.go            # PoWHeader, MaxPoWBits, PoWOK, SolvePoW, FormatPoW, ParsePoW
+├── *_test.go         # unit tests
+├── go.mod            # module, stdlib-only, no requires
+└── .testcoverage.yml # 90% coverage gate
+```
+
+## External interface / contracts
+
+The wire contract is [`specs/022-default-telemetry-dashboard/contracts/report-schema.md`](../specs/022-default-telemetry-dashboard/contracts/report-schema.md); the rules below are what this package enforces.
+
+### Types
+
+| Type | Fields |
+|---|---|
+| `Report` | `Version string`, `Servers int`, `Templates int`, `Ext *Extended` (nil on a basic-only report) |
+| `Extended` | `Schema int`, `InstallID string`, `Env Env`, `Games Games`, `Features Features`, `Key string`, `SentAt time.Time` |
+| `Env` | `K8s string`, `Distro string`, `Arch []string`, `Nodes string` |
+| `Games` | `Official map[string]int`, `Custom int` |
+| `Features` | `WakeOnConnect`, `Capture`, `Backups`, `SSO`, `AuditForwarding bool`; `Tunnels []string`; `Clusters`, `DB`, `Language string` |
+
+JSON tags are the camelCase names in the contract (`installId`, `wakeOnConnect`, `auditForwarding`, `sentAt`, and so on).
+
+### Enumerations
+
+| Name | Members |
+|---|---|
+| `Distros` | `k3s` `rke2` `k0s` `eks` `gke` `aks` `openshift` `microk8s` `minikube` `kind` `doks` `talos` `other` |
+| `Arches` | `amd64` `arm64` `arm` `ppc64le` `s390x` `riscv64` `other` |
+| `Tunnels` | `frp` `tailscale` `playit` `other` |
+| `DBs` | `sqlite` `postgres` |
+| `Languages` | `en` |
+| `NodeBands` | `1` `2-3` `4-10` `11-50` `51+` |
+| `ClusterBands` | `1` `2-3` `4-10` `11+` |
+
+`SanitizeEnum(set, v)` returns `v` when it is in `set` and `other` otherwise. `K8sMinorRE` is `^1\.[0-9]{1,3}$`; any other `env.k8s` value becomes `other`. `VersionRE` is `^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$`.
+
+### Bands
+
+| Function | Input to band |
+|---|---|
+| `NodeBand(n)` | n ≤ 1 → `1`; 2–3 → `2-3`; 4–10 → `4-10`; 11–50 → `11-50`; over 50 → `51+` |
+| `ClusterBand(n)` | n ≤ 1 → `1`; 2–3 → `2-3`; 4–10 → `4-10`; over 10 → `11+` |
+| `FleetBands` | `0,1,2,5,10,25,50,100,250` (the `+Inf` bucket is implicit) |
+
+### Decode
+
+`Decode(body) (Report, DecodeInfo, error)` accepts exactly one JSON object and nothing after it except whitespace.
+
+- **Rejected** (the error wraps `ErrInvalidPayload`), at every nesting level: unknown keys, duplicate keys, `null` values, wrongly typed values, keys with the wrong case, and missing required keys. `version`, `servers` and `templates` are required; `ext` is optional; every `ext` field is required.
+- **Range rules:** `servers`, `templates` and `games.custom` are at least 0; `games.official` counts are at least 1; `env.arch` is non-empty; `ext.schema` is 1; `ext.key` is unpadded base64url of exactly 32 bytes; `ext.sentAt` parses as RFC 3339 and is returned in UTC.
+- **Folded, not rejected:** out-of-set enumeration values become `other`. `env.arch` and `features.tunnels` are returned sorted, de-duplicated after folding, and never nil.
+- **Catalog:** `games.official` keys outside the embedded catalog add their count to `games.custom`; the returned `Official` map holds catalog names only.
+- **Schema gate:** `ext.schema` above 1 returns `ErrUnsupportedSchema`, checked before the other `ext` rules. It wraps `ErrInvalidPayload`, so one `errors.Is` check covers both.
+- **Install ID:** when `ext.installId` is not a lowercase UUIDv4, the rest of `ext` is validated, then `DecodeInfo.ExtDropped` is set and `Ext` is nil. The basic report stays valid.
+
+`Encode(Report)` is deterministic: struct field order is fixed, map keys and arrays are sorted, nil arrays and maps are written as `[]` and `{}`, and `sentAt` is written in UTC at second precision. `Decode(Encode(r))` returns `r` for a valid report.
+
+### Catalog
+
+`catalog.txt` lists the official module names, one per line, in the order of `charts/gameplane/values.yaml` → `defaultModuleSource.oci.modules`. `hack/check-telemetry-catalog.sh` (part of `make lint`) fails when the two differ. `IsOfficial(name)` is an exact, case-sensitive match; `Catalog()` returns a copy.
+
+### Signatures
+
+- `SignatureHeader` is `Gameplane-Telemetry-Signature`. It is required when the report has `ext` and absent otherwise.
+- `NewSecret()` returns 32 random bytes (`SecretSize`). The API keeps it for the install's lifetime.
+- `DeriveKey(secret, installID)` derives `seed = HKDF-SHA256(ikm = secret, salt = installID, info = "gameplane-telemetry-signing-v1", L = 32)` and returns `ed25519.NewKeyFromSeed(seed)`. The key is unique to the ID, so a new ID always means an unlinkable new key.
+- `PublicKeyString(priv)` is the unpadded base64url public key carried in `ext.key`.
+- `Sign(priv, body)` returns `ed25519=<base64url signature over the exact body bytes>`.
+- `Verify(header, publicKey, body)` returns nil, or an error wrapping `ErrBadSignature` for a missing or malformed header, a malformed key, or a signature that does not match.
+- `KeyFingerprint(publicKey)` is the hex SHA-256 of the raw public key (the receiver's claim, `key_fp`), or `""` for a malformed key.
+
+### Proof-of-work
+
+The wire contract is research R21 and [`contracts/receiver-http.md`](../specs/022-default-telemetry-dashboard/contracts/receiver-http.md). When a receiver requires proof-of-work, every report carries `Gameplane-Telemetry-PoW: <challenge>:<nonce>`.
+
+| Name | Behavior |
+|---|---|
+| `PoWHeader` | `Gameplane-Telemetry-PoW`. |
+| `MaxPoWBits` | 26 (OD-5): the hardest challenge an install solves. |
+| `PoWOK(challenge, nonce, bits)` | `SHA-256(challenge + ":" + decimal nonce)` has at least `bits` leading zero bits. 0 or fewer bits is always satisfied. |
+| `SolvePoW(ctx, challenge, bits)` | Smallest nonce for which `PoWOK` holds. One goroutine; checks `ctx` every 4,096 attempts and returns an error wrapping its error. Errors, wrapping `ErrPoWDifficulty`, when `bits` is below 0 or above `MaxPoWBits`. |
+| `FormatPoW(challenge, nonce)` | The header value `<challenge>:<nonce>`. |
+| `ParsePoW(header)` | Splits at the last `:`. The nonce must be plain decimal (digits only, no leading zeros, within `uint64`); the challenge must be 1 to `MaxChallengeLen` (256) bytes. Every failure wraps `ErrBadPoW`. |
+
+### Compatibility
+
+| Install to receiver | Result |
+|---|---|
+| Old install (basic only) to a new receiver | Accepted, counted as basic. |
+| New install with `ext` to a receiver released before this feature | 400. The install re-POSTs basic only and suppresses `ext` for that endpoint for 7 days. |
+| `ext.schema` above what the receiver supports | 400 (`ErrUnsupportedSchema`). Same fallback as the row above. |
+| ID already claimed by another key | 409. The install replaces its ID, re-signs and re-POSTs once. |
+| Bad signature, stale send time or replay | 403. A failed attempt with normal backoff; no fallback and no ID rotation. |
+
+A module added to the chart catalog after a receiver was built counts as `custom` on that receiver until it is updated. A new enumeration member on an older receiver folds into `other`.
+
+## Key invariants
+
+- No field can hold free text: every string is matched against a pattern or an enumeration, or is the install ID, the public key or the send time.
+- Every category is bounded: module names come only from the embedded catalog, and enumeration values only from their sets (or `other`).
+- Player counts, names, namespaces, hostnames, addresses and custom module names cannot be represented.
+- Both sides validate with the same code, so a report the API builds from this package always decodes on a receiver built from the same version.
+- Stdlib only; no network or filesystem access.
+
+## Testing & coverage
+
+Unit tests only (`decode_test.go`, `enums_test.go`, `catalog_test.go`, `sign_test.go`, `pow_test.go`). They cover every reject case of the receiver's original decoder, every `ext` rule, the band boundaries, catalog membership, a fixed key-derivation vector, the sign and verify round trip, single-byte tampering, malformed headers and keys, and different IDs deriving different keys. `pow_test.go` pins fixed hash vectors (the hash input, the bit count and the smallest-nonce search order), the solver's difficulty and context errors, and every malformed-header case of `ParsePoW`. Coverage gate: 90% total, set in `.testcoverage.yml` and enforced by `make cover-go-check`.
diff --git a/test/e2e/buckets.sh b/test/e2e/buckets.sh
index 02ead55d1..4a228ed74 100755
--- a/test/e2e/buckets.sh
+++ b/test/e2e/buckets.sh
@@ -348,13 +348,22 @@ TestUpgrade_FromPreviousRelease
 EOF
 }
 
+# One sequential lifecycle test that runs `helm upgrade --reuse-values` (1m
+# report interval, dashboard token, public summary, no per-source ingest
+# limit) on its own bucket cluster, so it must not share a cluster with other
+# tests. It makes ONE admin login (budget: 2 or fewer). Spec 022 research R17.
+bucket_telemetry() { cat <<'EOF'
+TestTelemetryLifecycle
+EOF
+}
+
 # Tests that exist in the suite but deliberately run in NO bucket. Every
 # entry needs a reason; `verify` fails on any unlisted stray so additions
 # here are a conscious, reviewed act. Currently empty.
 unbucketed() { :; }
 
 bucket_names() {
-	printf '%s\n' operator api-auth api-roles api-rbac api-agent api-mods ratelimit bot-fast bot-heavy multicluster upgrade
+	printf '%s\n' operator api-auth api-roles api-rbac api-agent api-mods ratelimit bot-fast bot-heavy multicluster upgrade telemetry
 }
 
 list_bucket() {
@@ -370,6 +379,7 @@ list_bucket() {
 	bot-heavy) bucket_bot_heavy ;;
 	multicluster) bucket_multicluster ;;
 	upgrade) bucket_upgrade ;;
+	telemetry) bucket_telemetry ;;
 	*)
 		echo "unknown bucket: $1 (known: $(bucket_names | tr '\n' ' '))" >&2
 		exit 2
diff --git a/test/e2e/go.mod b/test/e2e/go.mod
index fd093480a..5359d40bc 100644
--- a/test/e2e/go.mod
+++ b/test/e2e/go.mod
@@ -6,6 +6,10 @@ require github.com/GameplanePanel/gameplane/gp-module v0.0.0
 
 replace github.com/GameplanePanel/gameplane/gp-module => ../../gp-module
 
+require github.com/GameplanePanel/gameplane/telemetryschema v0.0.0
+
+replace github.com/GameplanePanel/gameplane/telemetryschema => ../../telemetryschema
+
 require (
 	github.com/coder/websocket v1.8.15
 	github.com/gopacket/gopacket v1.7.4
diff --git a/test/e2e/telemetry_client_test.go b/test/e2e/telemetry_client_test.go
new file mode 100644
index 000000000..71e3908af
--- /dev/null
+++ b/test/e2e/telemetry_client_test.go
@@ -0,0 +1,177 @@
+//go:build e2e
+
+package e2e
+
+import (
+	"bytes"
+	"context"
+	"crypto/rand"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"strconv"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// telemetryTestClient is a test-only install (spec 022 T088): it builds and
+// signs reports with telemetryschema and a throwaway signing secret, and POSTs
+// them to a receiver's public listener. It lets the lifecycle test play the
+// other side of the US7 forgery cases (another key claiming an ID, unsigned,
+// tampered and replayed reports, a claim on a freshly reset ID).
+type telemetryTestClient struct {
+	ingestURL string
+	secret    []byte
+	http      *http.Client
+}
+
+// newTelemetryTestClient returns a client that POSTs to
+// http://127.0.0.1:<port>/ingest, with a new random signing secret.
+func newTelemetryTestClient(t *testing.T, port int) *telemetryTestClient {
+	t.Helper()
+	secret, err := telemetryschema.NewSecret()
+	if err != nil {
+		t.Fatalf("new test signing secret: %v", err)
+	}
+	return &telemetryTestClient{
+		ingestURL: fmt.Sprintf("http://127.0.0.1:%d/ingest", port),
+		secret:    secret,
+		http:      &http.Client{Timeout: 15 * time.Second},
+	}
+}
+
+// newTestInstallID returns a random lowercase UUIDv4, the form the schema
+// accepts for ext.installId.
+func newTestInstallID(t *testing.T) string {
+	t.Helper()
+	var b [16]byte
+	if _, err := rand.Read(b[:]); err != nil {
+		t.Fatalf("random install id: %v", err)
+	}
+	b[6] = b[6]&0x0f | 0x40
+	b[8] = b[8]&0x3f | 0x80
+	h := hex.EncodeToString(b[:])
+	return h[0:8] + "-" + h[8:12] + "-" + h[12:16] + "-" + h[16:20] + "-" + h[20:]
+}
+
+// report builds a valid extended report for installID: the public key is the
+// one this client derives for that ID, so a receiver binds the ID to this
+// client's key on first use. version is the report's version label, which
+// lets a test tell its own reports apart on the receiver's /metrics.
+func (c *telemetryTestClient) report(t *testing.T, installID, version string, servers int, sentAt time.Time) telemetryschema.Report {
+	t.Helper()
+	priv, err := telemetryschema.DeriveKey(c.secret, installID)
+	if err != nil {
+		t.Fatalf("derive test key: %v", err)
+	}
+	return telemetryschema.Report{
+		Version:   version,
+		Servers:   servers,
+		Templates: 1,
+		Ext: &telemetryschema.Extended{
+			Schema:    telemetryschema.SchemaVersion,
+			InstallID: installID,
+			Env:       telemetryschema.Env{K8s: "1.31", Distro: "other", Arch: []string{"amd64"}, Nodes: "1"},
+			Games:     telemetryschema.Games{Official: map[string]int{}, Custom: servers},
+			Features:  telemetryschema.Features{Tunnels: []string{}, Clusters: "1", DB: "sqlite", Language: "en"},
+			Key:       telemetryschema.PublicKeyString(priv),
+			SentAt:    sentAt.UTC().Truncate(time.Second),
+		},
+	}
+}
+
+// sign encodes rep and signs the exact body bytes with the key derived for
+// rep's install ID.
+func (c *telemetryTestClient) sign(t *testing.T, rep telemetryschema.Report) (body []byte, signature string) {
+	t.Helper()
+	body, err := telemetryschema.Encode(rep)
+	if err != nil {
+		t.Fatalf("encode test report: %v", err)
+	}
+	priv, err := telemetryschema.DeriveKey(c.secret, rep.Ext.InstallID)
+	if err != nil {
+		t.Fatalf("derive test key: %v", err)
+	}
+	return body, telemetryschema.Sign(priv, body)
+}
+
+// post sends body with signature (omitted when empty) and returns the status
+// and the "error" code of the receiver's fixed JSON refusal body ("" for 204).
+func (c *telemetryTestClient) post(ctx context.Context, t *testing.T, body []byte, signature string) (status int, code string) {
+	t.Helper()
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, c.ingestURL, bytes.NewReader(body))
+	if err != nil {
+		t.Fatalf("new ingest request: %v", err)
+	}
+	req.Header.Set("Content-Type", "application/json")
+	if signature != "" {
+		req.Header.Set(telemetryschema.SignatureHeader, signature)
+	}
+	resp, err := c.http.Do(req)
+	if err != nil {
+		t.Fatalf("POST %s: %v", c.ingestURL, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	raw, _ := io.ReadAll(resp.Body)
+	var refusal struct {
+		Error string `json:"error"`
+	}
+	_ = json.Unmarshal(raw, &refusal) // a 204 has no body
+	return resp.StatusCode, refusal.Error
+}
+
+// send signs rep and POSTs it.
+func (c *telemetryTestClient) send(ctx context.Context, t *testing.T, rep telemetryschema.Report) (status int, code string) {
+	t.Helper()
+	body, sig := c.sign(t, rep)
+	return c.post(ctx, t, body, sig)
+}
+
+// receiverMetric sums the samples of one metric family from a receiver's
+// /metrics. Only lines whose name is exactly name (followed by a label set or
+// a space) and that contain labelFilter (a substring such as
+// `reason="id_claimed"`; empty matches all) are counted. token, when set, is
+// sent as a Bearer token (the dashboard listener needs it; an old receiver's
+// public listener does not). A family that has no sample yet sums to 0.
+func receiverMetric(ctx context.Context, t *testing.T, port int, token, name, labelFilter string) float64 {
+	t.Helper()
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet,
+		fmt.Sprintf("http://127.0.0.1:%d/metrics", port), nil)
+	if err != nil {
+		t.Fatalf("new metrics request: %v", err)
+	}
+	if token != "" {
+		req.Header.Set("Authorization", "Bearer "+token)
+	}
+	resp, err := (&http.Client{Timeout: 15 * time.Second}).Do(req)
+	if err != nil {
+		t.Fatalf("GET receiver /metrics on %d: %v", port, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	body, _ := io.ReadAll(resp.Body)
+	if resp.StatusCode != http.StatusOK {
+		t.Fatalf("GET receiver /metrics on %d = %d: %s", port, resp.StatusCode, body)
+	}
+	var total float64
+	for _, line := range strings.Split(string(body), "\n") {
+		rest, ok := strings.CutPrefix(line, name)
+		if !ok || rest == "" || (rest[0] != '{' && rest[0] != ' ') {
+			continue
+		}
+		if labelFilter != "" && !strings.Contains(line, labelFilter) {
+			continue
+		}
+		fields := strings.Fields(line)
+		v, err := strconv.ParseFloat(fields[len(fields)-1], 64)
+		if err != nil {
+			t.Fatalf("parse metric line %q: %v", line, err)
+		}
+		total += v
+	}
+	return total
+}
diff --git a/test/e2e/telemetry_e2e_helpers_test.go b/test/e2e/telemetry_e2e_helpers_test.go
new file mode 100644
index 000000000..cb488897a
--- /dev/null
+++ b/test/e2e/telemetry_e2e_helpers_test.go
@@ -0,0 +1,491 @@
+//go:build e2e
+
+package e2e
+
+import (
+	"bytes"
+	"context"
+	"crypto/rand"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"os/exec"
+	"path/filepath"
+	"strings"
+	"testing"
+	"time"
+)
+
+// Helpers for TestTelemetryLifecycle's subtests (spec 022).
+
+const (
+	metricReports    = "gameplane_telemetry_reports_total"
+	metricExtended   = "gameplane_telemetry_extended_reports_total"
+	metricDuplicates = "gameplane_telemetry_duplicates_total"
+	metricRefused    = "gameplane_telemetry_refused_total"
+	// betaReceiverImage is the receiver released with v0.2.0-beta.8. The
+	// release workflow tags images with the git tag (type=ref,event=tag).
+	betaReceiverImage = "ghcr.io/valgulnecron/gameplane/telemetry-receiver:v0.2.0-beta.8"
+)
+
+// receiverScrape reads the bundled receiver's /metrics on its dashboard port.
+type receiverScrape struct {
+	port  int
+	token string
+}
+
+func (r receiverScrape) get(ctx context.Context, t *testing.T, name, labelFilter string) float64 {
+	t.Helper()
+	return receiverMetric(ctx, t, r.port, r.token, name, labelFilter)
+}
+
+// waitForMore waits until count() is greater than it was at the call.
+func waitForMore(t *testing.T, count func() float64, timeout time.Duration, what string) {
+	t.Helper()
+	before := count()
+	envInstance.Eventually(t, timeout, func() (bool, string) {
+		got := count()
+		return got > before, fmt.Sprintf("%s = %v, want more than %v", what, got, before)
+	})
+}
+
+// telemetryView is the part of GET /admin/telemetry the lifecycle test reads.
+type telemetryView struct {
+	Destination struct {
+		Kind string  `json:"kind"`
+		Host *string `json:"host"`
+	} `json:"destination"`
+	OperatorDisabled bool `json:"operatorDisabled"`
+	Consent          struct {
+		Basic    bool `json:"basic"`
+		Extended bool `json:"extended"`
+	} `json:"consent"`
+	InstallID *string `json:"installId"`
+	Preview   *struct {
+		Version   string `json:"version"`
+		Servers   int    `json:"servers"`
+		Templates int    `json:"templates"`
+		Ext       *struct {
+			InstallID string `json:"installId"`
+		} `json:"ext"`
+	} `json:"preview"`
+	Status struct {
+		LastOutcome      string  `json:"lastOutcome"`
+		LastIDRotationAt *string `json:"lastIdRotationAt"`
+	} `json:"status"`
+}
+
+func getTelemetryView(ctx context.Context, t *testing.T, cli *APIClient) telemetryView {
+	t.Helper()
+	status, body, err := tlDo(ctx, cli, http.MethodGet, "/admin/telemetry", nil)
+	if err != nil || status != http.StatusOK {
+		t.Fatalf("GET /admin/telemetry: %v status %v body %s", err, status, body)
+	}
+	var v telemetryView
+	if err := json.Unmarshal(body, &v); err != nil {
+		t.Fatalf("decode /admin/telemetry %q: %v", body, err)
+	}
+	return v
+}
+
+func putTelemetryConsent(ctx context.Context, t *testing.T, cli *APIClient, basic, extended bool) {
+	t.Helper()
+	status, body, err := tlDo(ctx, cli, http.MethodPut, "/admin/config/telemetry",
+		map[string]bool{"sendMetrics": basic, "extended": extended})
+	if err != nil || status != http.StatusOK {
+		t.Fatalf("PUT telemetry {%v,%v}: %v status %v body %s", basic, extended, err, status, body)
+	}
+}
+
+// resetInstallID calls POST /admin/telemetry/install-id and returns the new ID.
+func resetInstallID(ctx context.Context, t *testing.T, cli *APIClient) string {
+	t.Helper()
+	status, body, err := tlDo(ctx, cli, http.MethodPost, "/admin/telemetry/install-id", nil)
+	if err != nil || status != http.StatusOK {
+		t.Fatalf("POST install-id: %v status %v body %s", err, status, body)
+	}
+	var out struct {
+		InstallID string `json:"installId"`
+	}
+	if err := json.Unmarshal(body, &out); err != nil || out.InstallID == "" {
+		t.Fatalf("decode install-id response %q: %v", body, err)
+	}
+	return out.InstallID
+}
+
+// detachedPortForward opens a port-forward that outlives the calling
+// subtest. PortForward binds kubectl to t.Context(), which is cancelled when
+// the subtest returns, so a client kept by later subtests would lose its
+// tunnel. The caller owns the returned stop func (APIClient.Close).
+func detachedPortForward(ctx context.Context, t *testing.T, ns, target string, remotePort int) (int, func()) {
+	t.Helper()
+	const attempts = 4
+	var lastErr error
+	for attempt := 1; attempt <= attempts; attempt++ {
+		local, stop, err := envInstance.tryPortForward(ctx, ns, target, remotePort)
+		if err == nil {
+			return local, stop
+		}
+		lastErr = err
+		time.Sleep(time.Second)
+	}
+	t.Fatalf("port-forward never became ready (target %s/%s:%d) after %d attempts: %v",
+		ns, target, remotePort, attempts, lastErr)
+	return 0, nil
+}
+
+// reconnectAPIClient gives the admin session a new port-forward after the API
+// pod was replaced (a rollout restart or a helm upgrade that changes its
+// flags). The session lives in the database and the cookie jar and CSRF token
+// are reused, so no login is spent; if the session did not survive, it logs in
+// once more.
+func reconnectAPIClient(ctx context.Context, t *testing.T, old *APIClient) *APIClient {
+	t.Helper()
+	local, stop := detachedPortForward(ctx, t, "gameplane-system", "svc/gameplane-api", 80)
+	old.Close()
+	cli := &APIClient{BaseURL: fmt.Sprintf("http://127.0.0.1:%d", local), CSRF: old.CSRF, HTTP: old.HTTP, stop: stop}
+	var last string
+	for deadline := time.Now().Add(30 * time.Second); time.Now().Before(deadline); time.Sleep(time.Second) {
+		status, body, err := tlDo(ctx, cli, http.MethodGet, "/admin/telemetry", nil)
+		if err == nil && status == http.StatusOK {
+			return cli
+		}
+		last = fmt.Sprintf("%v status %v body %s", err, status, body)
+		if err != nil {
+			continue
+		}
+		if status == http.StatusUnauthorized {
+			break
+		}
+	}
+	t.Logf("session not reusable after the API restart (%s): logging in again", last)
+	cli.Close()
+	// APIClient logs in over a forward bound to this subtest; keep its
+	// session and cookie jar but move it onto a forward that outlives it.
+	return telemetryLogin(ctx, t, telemetryAdminUser, telemetryAdminPass)
+}
+
+// telemetryLogin logs in over a port-forward bound to ctx rather than to a
+// subtest, so the returned client outlives the subtest that made it. It
+// retries on 429 like Env.APIClient. The caller owns Close.
+func telemetryLogin(ctx context.Context, t *testing.T, username, password string) *APIClient {
+	t.Helper()
+	local, stop := detachedPortForward(ctx, t, "gameplane-system", "svc/gameplane-api", 80)
+	base := fmt.Sprintf("http://127.0.0.1:%d", local)
+	hc := &http.Client{Jar: newInsecureCookieJar(), Timeout: 90 * time.Second}
+	payload, err := json.Marshal(map[string]string{"username": username, "password": password})
+	if err != nil {
+		stop()
+		t.Fatalf("marshal login: %v", err)
+	}
+	delay := 2 * time.Second
+	for attempt := 0; attempt < 7; attempt++ {
+		req, rerr := http.NewRequestWithContext(ctx, http.MethodPost, base+"/auth/login", bytes.NewReader(payload))
+		if rerr != nil {
+			stop()
+			t.Fatalf("new login request: %v", rerr)
+		}
+		req.Header.Set("Content-Type", "application/json")
+		resp, derr := hc.Do(req)
+		if derr != nil {
+			stop()
+			t.Fatalf("login: %v", derr)
+		}
+		raw, _ := io.ReadAll(resp.Body)
+		_ = resp.Body.Close()
+		if resp.StatusCode == http.StatusTooManyRequests {
+			time.Sleep(delay)
+			delay = min(delay*2, 30*time.Second)
+			continue
+		}
+		if resp.StatusCode != http.StatusOK {
+			stop()
+			t.Fatalf("login %d: %s", resp.StatusCode, raw)
+		}
+		var lr struct {
+			CSRF string `json:"csrf"`
+		}
+		if jerr := json.Unmarshal(raw, &lr); jerr != nil {
+			stop()
+			t.Fatalf("decode login response: %v\n%s", jerr, raw)
+		}
+		return &APIClient{BaseURL: base, CSRF: lr.CSRF, HTTP: hc, stop: stop}
+	}
+	stop()
+	t.Fatalf("login rate-limited after every attempt")
+	return nil
+}
+
+// tlDo performs an authenticated request like APIClient.Do, bound to ctx. It
+// closes the response body itself and returns the status and body bytes.
+func tlDo(ctx context.Context, c *APIClient, method, path string, body any) (int, []byte, error) {
+	var br io.Reader
+	if body != nil {
+		b, err := json.Marshal(body)
+		if err != nil {
+			return 0, nil, fmt.Errorf("marshal body: %w", err)
+		}
+		br = bytes.NewReader(b)
+	}
+	req, err := http.NewRequestWithContext(ctx, method, c.BaseURL+path, br)
+	if err != nil {
+		return 0, nil, fmt.Errorf("new request: %w", err)
+	}
+	if body != nil {
+		req.Header.Set("Content-Type", "application/json")
+	}
+	if isMutation(method) {
+		req.Header.Set("X-Gameplane-CSRF", c.CSRF)
+	}
+	resp, err := c.HTTP.Do(req)
+	if err != nil {
+		return 0, nil, fmt.Errorf("do %s %s: %w", method, path, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	rb, _ := io.ReadAll(resp.Body)
+	return resp.StatusCode, rb, nil
+}
+
+// helmUpgradeReuse runs `helm upgrade --reuse-values` with the given --set
+// values on the e2e release and waits for the rollout.
+func helmUpgradeReuse(ctx context.Context, t *testing.T, sets ...string) {
+	t.Helper()
+	args := []string{"upgrade", "gameplane", filepath.Join("..", "..", "charts", "gameplane"),
+		"--kube-context", envInstance.Context, "--namespace", "gameplane-system", "--reuse-values"}
+	for _, set := range sets {
+		args = append(args, "--set", set)
+	}
+	args = append(args, "--wait", "--timeout", "6m")
+	if out, err := exec.CommandContext(ctx, "helm", args...).CombinedOutput(); err != nil {
+		t.Fatalf("helm upgrade %v failed: %v\n%s", sets, err, out)
+	}
+}
+
+// bundledReceiverImage is the image the chart's own receiver runs, so a
+// second receiver uses the image this branch built.
+func bundledReceiverImage(ctx context.Context, t *testing.T) string {
+	t.Helper()
+	out, err := envInstance.Kubectl(ctx, "get", "deploy/gameplane-telemetry-receiver",
+		"--namespace", "gameplane-system", "-o", "jsonpath={.spec.template.spec.containers[0].image}")
+	if err != nil || strings.TrimSpace(out) == "" {
+		t.Fatalf("read the bundled receiver image: %v\n%s", err, out)
+	}
+	return strings.TrimSpace(out)
+}
+
+// deployTelemetryReceiver applies a one-replica receiver Deployment and
+// Service with a unique name in the release namespace and waits for it. With
+// dashboard set it is a current receiver with the dashboard token Secret
+// mounted (so /metrics is on port 8081), no per-source limit and an emptyDir
+// store; otherwise it is run as an old image does, on port 8080 alone. Each
+// extraEnv entry is a "NAME=value" pair added to the container's environment
+// (for example INGEST_POW=true).
+func deployTelemetryReceiver(ctx context.Context, t *testing.T, kind, image string, dashboard bool, extraEnv ...string) string {
+	t.Helper()
+	return deployTelemetryReceiverKept(ctx, t, t, kind, image, dashboard, extraEnv...)
+}
+
+// deployTelemetryReceiverKept is deployTelemetryReceiver with the cleanup that
+// deletes the Deployment and Service registered on cleanupOn instead of t, for
+// a receiver a later subtest still needs. Failures are reported on t.
+func deployTelemetryReceiverKept(ctx context.Context, t, cleanupOn *testing.T, kind, image string, dashboard bool, extraEnv ...string) string {
+	t.Helper()
+	var suffix [4]byte
+	if _, err := rand.Read(suffix[:]); err != nil {
+		t.Fatalf("random name: %v", err)
+	}
+	name := "telemetry-e2e-" + kind + "-" + hex.EncodeToString(suffix[:])
+	env := "            - { name: LISTEN_ADDR, value: \":8080\" }\n"
+	volumes, mounts, ports := "", "", "            - { name: http, containerPort: 8080 }\n"
+	svcPorts := "    - { name: http, port: 8080, targetPort: http }\n"
+	if dashboard {
+		env += "            - { name: DATA_DIR, value: /data }\n" +
+			"            - { name: INGEST_SOURCE_DAILY_LIMIT, value: \"0\" }\n" +
+			"            - name: DASHBOARD_TOKEN\n" +
+			"              valueFrom: { secretKeyRef: { name: " + telemetryDashSecret + ", key: token } }\n"
+		volumes = "      volumes:\n        - { name: data, emptyDir: {} }\n"
+		mounts = "          volumeMounts:\n            - { name: data, mountPath: /data }\n"
+		ports += "            - { name: dashboard, containerPort: 8081 }\n"
+		svcPorts += "    - { name: dashboard, port: 8081, targetPort: dashboard }\n"
+	}
+	for _, kv := range extraEnv {
+		name, value, _ := strings.Cut(kv, "=")
+		env += fmt.Sprintf("            - { name: %s, value: %q }\n", name, value)
+	}
+	manifest := fmt.Sprintf(`apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: %[1]s
+  namespace: gameplane-system
+spec:
+  replicas: 1
+  selector:
+    matchLabels: { app.kubernetes.io/name: %[1]s }
+  template:
+    metadata:
+      labels: { app.kubernetes.io/name: %[1]s }
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65532
+        fsGroup: 65532
+        seccompProfile: { type: RuntimeDefault }
+      containers:
+        - name: receiver
+          image: %[2]s
+          imagePullPolicy: IfNotPresent
+          env:
+%[3]s          ports:
+%[4]s          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities: { drop: [ALL] }
+%[5]s%[6]s---
+apiVersion: v1
+kind: Service
+metadata:
+  name: %[1]s
+  namespace: gameplane-system
+spec:
+  selector: { app.kubernetes.io/name: %[1]s }
+  ports:
+%[7]s`, name, image, env, ports, mounts, volumes, svcPorts)
+
+	if out, err := envInstance.KubectlWithStdin(ctx, manifest, "apply", "-f", "-"); err != nil {
+		t.Fatalf("apply receiver %s: %v\n%s", name, err, out)
+	}
+	cleanupOn.Cleanup(func() {
+		_, _ = envInstance.Kubectl(context.WithoutCancel(ctx), "delete", "deploy/"+name, "svc/"+name,
+			"--namespace", "gameplane-system", "--ignore-not-found")
+	})
+	if out, err := envInstance.Kubectl(ctx, "rollout", "status", "deploy/"+name,
+		"--namespace", "gameplane-system", "--timeout=3m"); err != nil {
+		t.Fatalf("wait for receiver %s: %v\n%s", name, err, out)
+	}
+	return name
+}
+
+// dashboardRequest sends one request to 127.0.0.1:<port> without following
+// redirects, so a 303 can be asserted. headers are added as given (the
+// session cookie is Secure and the port-forward is plain HTTP, so a client
+// with a jar would never send it back); form, when non-nil, is the POST body.
+func dashboardRequest(ctx context.Context, t *testing.T, port int, method, path string, headers map[string]string, form url.Values) (dashResponse, []byte) {
+	t.Helper()
+	var body io.Reader
+	if form != nil {
+		body = strings.NewReader(form.Encode())
+	}
+	req, err := http.NewRequestWithContext(ctx, method, fmt.Sprintf("http://127.0.0.1:%d%s", port, path), body)
+	if err != nil {
+		t.Fatalf("new request %s %s: %v", method, path, err)
+	}
+	if form != nil {
+		req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	}
+	for k, v := range headers {
+		req.Header.Set(k, v)
+	}
+	client := &http.Client{
+		Timeout:       15 * time.Second,
+		CheckRedirect: func(*http.Request, []*http.Request) error { return http.ErrUseLastResponse },
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		t.Fatalf("%s %s: %v", method, path, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	raw, _ := io.ReadAll(resp.Body)
+	return dashResponse{StatusCode: resp.StatusCode, Header: resp.Header, cookies: resp.Cookies()}, raw
+}
+
+// dashResponse is the part of a dashboard response the subtests inspect. The
+// body is read and closed by dashboardRequest.
+type dashResponse struct {
+	StatusCode int
+	Header     http.Header
+	cookies    []*http.Cookie
+}
+
+// Cookies returns the cookies the response set.
+func (r dashResponse) Cookies() []*http.Cookie { return r.cookies }
+
+// dashboardLoginPage returns the dashboard's /login page, retrying while the
+// dashboard listener starts.
+func dashboardLoginPage(ctx context.Context, t *testing.T, port int) []byte {
+	t.Helper()
+	var page []byte
+	envInstance.Eventually(t, time.Minute, func() (bool, string) {
+		req, err := http.NewRequestWithContext(ctx, http.MethodGet, fmt.Sprintf("http://127.0.0.1:%d/login", port), nil)
+		if err != nil {
+			return false, err.Error()
+		}
+		resp, err := (&http.Client{Timeout: 10 * time.Second}).Do(req)
+		if err != nil {
+			return false, err.Error()
+		}
+		defer func() { _ = resp.Body.Close() }()
+		page, _ = io.ReadAll(resp.Body)
+		return resp.StatusCode == http.StatusOK, fmt.Sprintf("GET /login = %d", resp.StatusCode)
+	})
+	return page
+}
+
+// dashboardLogin signs in with the dashboard token (the form POST needs a
+// same-origin Origin header) and returns the Cookie header value to send.
+func dashboardLogin(ctx context.Context, t *testing.T, port int, token string) string {
+	t.Helper()
+	resp, body := dashboardRequest(ctx, t, port, http.MethodPost, "/login",
+		map[string]string{"Origin": fmt.Sprintf("http://127.0.0.1:%d", port)}, url.Values{"token": {token}})
+	if resp.StatusCode != http.StatusSeeOther {
+		t.Fatalf("POST /login = %d, want 303; body %s", resp.StatusCode, body)
+	}
+	for _, c := range resp.Cookies() {
+		if c.Name == "gp_telemetry_session" && c.Value != "" {
+			return c.Name + "=" + c.Value
+		}
+	}
+	t.Fatal("POST /login set no gp_telemetry_session cookie")
+	return ""
+}
+
+// dashboardViews returns the views' asOf day and raw JSON, read with the
+// dashboard token.
+func dashboardViews(ctx context.Context, t *testing.T, port int) (asOf string, raw []byte) {
+	t.Helper()
+	resp, body := dashboardRequest(ctx, t, port, http.MethodGet, "/api/v1/views",
+		map[string]string{"Authorization": "Bearer " + telemetryDashToken}, nil)
+	if resp.StatusCode != http.StatusOK {
+		t.Fatalf("GET /api/v1/views = %d: %s", resp.StatusCode, body)
+	}
+	var v struct {
+		AsOf string `json:"asOf"`
+	}
+	if err := json.Unmarshal(body, &v); err != nil {
+		t.Fatalf("decode views %q: %v", body, err)
+	}
+	return v.AsOf, body
+}
+
+// requireViewsUnchanged fails when the views differ from before. If the UTC
+// day rolled over in between, asOf moved and the comparison is skipped.
+func requireViewsUnchanged(ctx context.Context, t *testing.T, port int, asOf string, before []byte) {
+	t.Helper()
+	nowAsOf, after := dashboardViews(ctx, t, port)
+	if nowAsOf == asOf && !bytes.Equal(before, after) {
+		t.Fatalf("a refused report changed the views (SC-014):\nbefore %s\nafter  %s", before, after)
+	}
+}
+
+// keepClearOfUTCMidnight sleeps past the next UTC midnight when it is closer
+// than within, so that two reports meant for one day cannot straddle two.
+func keepClearOfUTCMidnight(t *testing.T, within time.Duration) {
+	t.Helper()
+	now := time.Now().UTC()
+	midnight := now.Truncate(24 * time.Hour).Add(24 * time.Hour)
+	if midnight.Sub(now) < within {
+		time.Sleep(midnight.Sub(now) + 2*time.Second)
+	}
+}
diff --git a/test/e2e/telemetry_e2e_test.go b/test/e2e/telemetry_e2e_test.go
new file mode 100644
index 000000000..a0957d2cf
--- /dev/null
+++ b/test/e2e/telemetry_e2e_test.go
@@ -0,0 +1,725 @@
+//go:build e2e
+
+package e2e
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"os/exec"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"testing"
+	"time"
+)
+
+const (
+	telemetryAdminUser = "telemetryadmin"
+	telemetryAdminPass = "telemetry-admin-pw-1"
+	// telemetryDashSecret holds the receiver's dashboard token; the chart
+	// mounts it as DASHBOARD_TOKEN and serves /metrics on port 8081 behind it
+	// (spec 022 Q8, T067).
+	telemetryDashSecret = "telemetry-dashboard"
+	// telemetryDashToken is at least 32 characters: the receiver refuses to
+	// start with a shorter DASHBOARD_TOKEN (spec 022 FR-041).
+	telemetryDashToken = "e2e-telemetry-dashboard-token-0123456789"
+	// telemetryInterval is api.telemetry.interval for this bucket's cluster.
+	telemetryInterval = time.Minute
+)
+
+// TestTelemetryLifecycle walks the spec 022 US1 path on the bucket's own
+// cluster (research R17): a fresh install has a pending notice, "seen" opens
+// the gate and the first report reaches the bundled receiver, "all-off" stops
+// reports, turning telemetry back on resumes them, and an API restart does
+// not bring a report forward. The later subtests cover the extended tier, the
+// install-ID reset, forged and replayed reports, the private dashboard, the
+// public summary and the operator's redirect and disable switches (US2 to US7).
+// The subtests share state, so they run in order; the US2 ones come last
+// because they point the API away from the bundled receiver, and
+// operator_disabled_sends_nothing is the very last.
+//
+// It is the bucket's only test because it runs `helm upgrade` on the cluster.
+// Admin logins: one. After every API pod replacement the client gets a new
+// port-forward (reconnectAPIClient) and keeps its session.
+func TestTelemetryLifecycle(t *testing.T) {
+	t.Parallel()
+	ctx := context.Background()
+	parent := t // owns cleanups for resources that must outlive a subtest
+
+	// ---- setup: dashboard token, chart values, one admin ------------------
+
+	if out, err := envInstance.Kubectl(ctx, "create", "secret", "generic", telemetryDashSecret,
+		"--namespace", "gameplane-system", "--from-literal=token="+telemetryDashToken); err != nil {
+		t.Fatalf("create dashboard token secret: %v\n%s", err, out)
+	}
+	helmUpgradeTelemetry(ctx, t)
+	envInstance.BootstrapAdmin(t, telemetryAdminUser, telemetryAdminPass)
+
+	// The receiver's dashboard port carries /metrics. It is not restarted
+	// again, so one port-forward serves the whole test.
+	metricsPort, stopMetrics := detachedPortForward(ctx, t, "gameplane-system", "svc/gameplane-telemetry-receiver", 8081)
+	defer stopMetrics()
+	reports := func() float64 { return receiverReportsTotal(ctx, t, metricsPort) }
+	// arrivals counts every report the receiver accepted: new ones (reports_total)
+	// plus same-day duplicates of an already counted extended install ID, which the
+	// receiver acknowledges with 204 but does not add to reports_total.
+	arrivals := func() float64 {
+		return reports() + receiverMetric(ctx, t, metricsPort, telemetryDashToken, metricDuplicates, "")
+	}
+
+	// The bucket's one admin login. Logging in does not show the notice:
+	// only the notice POST (the dashboard rendering it) records that.
+	cli := envInstance.APIClient(t, telemetryAdminUser, telemetryAdminPass)
+	defer func() { cli.Close() }() // cli is replaced after API pod restarts
+
+	// The receiver's public port takes the test client's reports and serves
+	// the public summary; the dashboard port (above) serves /metrics and the
+	// views, so every figure below comes from the receiver itself.
+	ingestPort, stopIngest := detachedPortForward(ctx, t, "gameplane-system", "svc/gameplane-telemetry-receiver", 8080)
+	defer stopIngest()
+	tc := newTelemetryTestClient(t, ingestPort)
+	rx := receiverScrape{port: metricsPort, token: telemetryDashToken}
+	// The login page is captured while the receiver is still empty: a later
+	// unauthenticated response must be identical to it (FR-023, SC-011).
+	loginBaseline := dashboardLoginPage(ctx, t, metricsPort)
+
+	t.Run("notice_pending_on_fresh_install", func(t *testing.T) {
+		status, body, err := tlDo(ctx, cli, http.MethodGet, "/admin/telemetry/notice", nil)
+		if err != nil || status != http.StatusOK {
+			t.Fatalf("GET notice: %v status %v body %s", err, status, body)
+		}
+		var n struct {
+			Pending     bool `json:"pending"`
+			Destination struct {
+				Kind string `json:"kind"`
+			} `json:"destination"`
+		}
+		if err := json.Unmarshal(body, &n); err != nil {
+			t.Fatalf("decode notice: %v\n%s", err, body)
+		}
+		if !n.Pending || n.Destination.Kind != "bundled" {
+			t.Fatalf("notice = %s, want pending with the bundled destination", body)
+		}
+		// Nothing may have been sent before the notice was shown (FR-004).
+		if got := reports(); got != 0 {
+			t.Fatalf("reports before the notice = %v, want 0", got)
+		}
+	})
+
+	t.Run("seen_opens_gate_and_first_report_arrives", func(t *testing.T) {
+		postNoticeAction(ctx, t, cli, "seen", http.StatusNoContent)
+		envInstance.Eventually(t, 3*telemetryInterval, func() (bool, string) {
+			got := reports()
+			return got >= 1, fmt.Sprintf("reports_total = %v, want at least 1", got)
+		})
+	})
+
+	t.Run("all_off_stops_reports", func(t *testing.T) {
+		postNoticeAction(ctx, t, cli, "all-off", http.StatusNoContent)
+		time.Sleep(20 * time.Second) // let a report already in flight land
+		settled := reports()
+		envInstance.Consistently(t, 3*telemetryInterval, 10*time.Second, func() (bool, string) {
+			got := reports()
+			return got == settled, fmt.Sprintf("reports_total = %v, want it to stay at %v after all-off", got, settled)
+		})
+
+		// Turn telemetry back on through the settings route.
+		status, body, err := tlDo(ctx, cli, http.MethodPut, "/admin/config/telemetry",
+			map[string]bool{"sendMetrics": true, "extended": true})
+		if err != nil || status != http.StatusOK {
+			t.Fatalf("PUT telemetry on: %v status %v body %s", err, status, body)
+		}
+		envInstance.Eventually(t, 3*telemetryInterval, func() (bool, string) {
+			got := reports()
+			return got > settled, fmt.Sprintf("reports_total = %v, want more than %v after turning telemetry back on", got, settled)
+		})
+	})
+
+	t.Run("api_restart_does_not_resend_early", func(t *testing.T) {
+		// Wait for a report and note when it was first seen. The install keeps
+		// one ID, so after its first report the receiver counts the rest as
+		// same-day duplicates; arrivals() includes those.
+		seen := arrivals()
+		sawAt := time.Now()
+		envInstance.Eventually(t, 3*telemetryInterval, func() (bool, string) {
+			got := arrivals()
+			if got > seen {
+				seen, sawAt = got, time.Now()
+				return true, ""
+			}
+			return false, fmt.Sprintf("reports + duplicates = %v, waiting for a report", got)
+		})
+
+		if out, err := envInstance.Kubectl(ctx, "rollout", "restart", "deploy/gameplane-api",
+			"--namespace", "gameplane-system"); err != nil {
+			t.Fatalf("restart API: %v\n%s", err, out)
+		}
+		if out, err := envInstance.Kubectl(ctx, "rollout", "status", "deploy/gameplane-api",
+			"--namespace", "gameplane-system", "--timeout=3m"); err != nil {
+			t.Fatalf("wait for API rollout: %v\n%s", err, out)
+		}
+		cli = reconnectAPIClient(ctx, t, cli)
+
+		// The schedule is persisted: the restarted API reports one interval
+		// after the previous report, not at once. Allow 5s for the two
+		// one-second polling observations.
+		envInstance.Eventually(t, 4*telemetryInterval, func() (bool, string) {
+			got := arrivals()
+			return got > seen, fmt.Sprintf("reports + duplicates = %v, waiting for the next report", got)
+		})
+		if gap := time.Since(sawAt); gap < telemetryInterval-5*time.Second {
+			t.Fatalf("next report arrived %v after the previous one, want at least %v (the API restart must not send early)",
+				gap, telemetryInterval)
+		}
+	})
+
+	// reportsMore waits until the bundled receiver has accepted another report,
+	// counted or a same-day duplicate.
+	reportsMore := func(t *testing.T) {
+		t.Helper()
+		waitForMore(t, arrivals, 4*telemetryInterval, "reports + duplicates")
+	}
+
+	// newReportsMore waits for a report the receiver counts in reports_total
+	// and in the fleet histograms, which a same-day duplicate does not touch.
+	newReportsMore := func(t *testing.T) {
+		t.Helper()
+		waitForMore(t, func() float64 { return rx.get(ctx, t, metricReports, "") }, 4*telemetryInterval, metricReports)
+	}
+
+	// ---- US3: tiers, reset, preview ---------------------------------------
+
+	t.Run("extended_off_sends_basic_only", func(t *testing.T) {
+		putTelemetryConsent(ctx, t, cli, true, false)
+		v := getTelemetryView(ctx, t, cli)
+		if v.InstallID != nil || v.Consent.Extended || v.Preview == nil || v.Preview.Ext != nil {
+			t.Fatalf("view after extended off = %+v, want no install id and a basic-only preview", v)
+		}
+		time.Sleep(10 * time.Second) // let a report already in flight land
+		extBase, dupBase := rx.get(ctx, t, metricExtended, ""), rx.get(ctx, t, metricDuplicates, "")
+		reportsMore(t)
+		// An extended report would count as a new install or as a duplicate.
+		if got := rx.get(ctx, t, metricExtended, ""); got != extBase {
+			t.Fatalf("%s = %v, want it to stay at %v while extended is off", metricExtended, got, extBase)
+		}
+		if got := rx.get(ctx, t, metricDuplicates, ""); got != dupBase {
+			t.Fatalf("%s = %v, want it to stay at %v while extended is off", metricDuplicates, got, dupBase)
+		}
+	})
+
+	t.Run("reset_id_counts_as_new_install", func(t *testing.T) {
+		putTelemetryConsent(ctx, t, cli, true, true) // creates install ID A
+		a := getTelemetryView(ctx, t, cli).InstallID
+		if a == nil {
+			t.Fatal("no install id after turning extended on")
+		}
+		// A's first extended report is a new install. Its next ones the same
+		// day would be duplicates, and the counter would not rise.
+		waitForMore(t, func() float64 { return rx.get(ctx, t, metricExtended, "") }, 4*telemetryInterval, metricExtended)
+
+		b := resetInstallID(ctx, t, cli)
+		if b == *a {
+			t.Fatalf("reset returned the same id %q", b)
+		}
+		dupBase := rx.get(ctx, t, metricDuplicates, "")
+		waitForMore(t, func() float64 { return rx.get(ctx, t, metricExtended, "") }, 4*telemetryInterval, metricExtended)
+		if got := rx.get(ctx, t, metricDuplicates, ""); got != dupBase {
+			t.Fatalf("%s rose from %v to %v: the reset ID was treated as the old install", metricDuplicates, dupBase, got)
+		}
+		v := getTelemetryView(ctx, t, cli)
+		if v.InstallID == nil || *v.InstallID != b || v.Preview == nil || v.Preview.Ext == nil || v.Preview.Ext.InstallID != b {
+			t.Fatalf("view after reset = %+v, want the new id %q in installId and in the preview", v, b)
+		}
+	})
+
+	t.Run("preview_matches_received", func(t *testing.T) {
+		// A new install ID makes the next extended report a new install, so the
+		// receiver counts it and records its fleet histograms; the ID from
+		// reset_id_counts_as_new_install was already counted today.
+		resetInstallID(ctx, t, cli)
+		v := getTelemetryView(ctx, t, cli)
+		if v.Preview == nil {
+			t.Fatal("no preview while basic is on")
+		}
+		// Views end at yesterday, so the receiver's same-day record is read
+		// from its fleet histograms and version label: the next report's
+		// servers and templates must equal the preview's.
+		serversCount0 := rx.get(ctx, t, "gameplane_telemetry_servers_count", "")
+		serversSum0 := rx.get(ctx, t, "gameplane_telemetry_servers_sum", "")
+		templatesSum0 := rx.get(ctx, t, "gameplane_telemetry_templates_sum", "")
+		versionLabel := fmt.Sprintf("version=%q", v.Preview.Version)
+		version0 := rx.get(ctx, t, metricReports, versionLabel)
+		newReportsMore(t)
+		n := rx.get(ctx, t, "gameplane_telemetry_servers_count", "") - serversCount0
+		if n < 1 {
+			t.Fatalf("no report recorded: servers histogram count rose by %v", n)
+		}
+		if got := (rx.get(ctx, t, "gameplane_telemetry_servers_sum", "") - serversSum0) / n; got != float64(v.Preview.Servers) {
+			t.Fatalf("receiver recorded %v servers per report, preview says %d", got, v.Preview.Servers)
+		}
+		if got := (rx.get(ctx, t, "gameplane_telemetry_templates_sum", "") - templatesSum0) / n; got != float64(v.Preview.Templates) {
+			t.Fatalf("receiver recorded %v templates per report, preview says %d", got, v.Preview.Templates)
+		}
+		if got := rx.get(ctx, t, metricReports, versionLabel); got <= version0 {
+			t.Fatalf("%s{%s} = %v, want more than %v: the receiver did not record the preview's version", metricReports, versionLabel, got, version0)
+		}
+	})
+
+	// ---- US7: forged, tampered and replayed reports, claimed IDs -----------
+
+	t.Run("forged_other_key_gets_409", func(t *testing.T) {
+		// The install's current ID was claimed by its own key when the
+		// receiver accepted the previous subtests' reports.
+		v := getTelemetryView(ctx, t, cli)
+		if v.InstallID == nil {
+			t.Fatal("no install id: extended must be on")
+		}
+		asOf, viewsBefore := dashboardViews(ctx, t, metricsPort)
+		refusedBase := rx.get(ctx, t, metricRefused, `reason="id_claimed"`)
+
+		status, code := tc.send(ctx, t, tc.report(t, *v.InstallID, "e2e-forged", 7, time.Now()))
+		if status != http.StatusConflict || code != "id_claimed" {
+			t.Fatalf("report under the install's ID with another key = %d %q, want 409 id_claimed", status, code)
+		}
+		if got := rx.get(ctx, t, metricRefused, `reason="id_claimed"`); got != refusedBase+1 {
+			t.Fatalf("%s{id_claimed} = %v, want %v", metricRefused, got, refusedBase+1)
+		}
+		if got := rx.get(ctx, t, metricReports, `version="e2e-forged"`); got != 0 {
+			t.Fatalf("the refused report was counted: %v", got)
+		}
+		requireViewsUnchanged(ctx, t, metricsPort, asOf, viewsBefore)
+	})
+
+	t.Run("unsigned_tampered_replayed_get_403", func(t *testing.T) {
+		id := newTestInstallID(t)
+		sentAt := time.Now()
+		body, sig := tc.sign(t, tc.report(t, id, "e2e-signed", 4, sentAt))
+		if status, code := tc.post(ctx, t, body, sig); status != http.StatusNoContent {
+			t.Fatalf("the test client's own signed report = %d %q, want 204", status, code)
+		}
+		accepted := rx.get(ctx, t, metricReports, `version="e2e-signed"`)
+		if accepted != 1 {
+			t.Fatalf("accepted reports with the test version = %v, want 1", accepted)
+		}
+		asOf, viewsBefore := dashboardViews(ctx, t, metricsPort)
+		badBase := rx.get(ctx, t, metricRefused, `reason="bad_signature"`)
+		replayBase := rx.get(ctx, t, metricRefused, `reason="replay"`)
+
+		// Unsigned: the send time is newer, so only the missing header can fail it.
+		unsigned, _ := tc.sign(t, tc.report(t, id, "e2e-signed", 4, sentAt.Add(2*time.Second)))
+		if status, code := tc.post(ctx, t, unsigned, ""); status != http.StatusForbidden || code != "bad_signature" {
+			t.Fatalf("unsigned extended report = %d %q, want 403 bad_signature", status, code)
+		}
+		// Tampered: a valid signature for 4 servers on a body that says 5.
+		signed, tamperedSig := tc.sign(t, tc.report(t, id, "e2e-signed", 4, sentAt.Add(3*time.Second)))
+		tampered := bytes.Replace(signed, []byte(`"servers":4`), []byte(`"servers":5`), 1)
+		if bytes.Equal(tampered, signed) {
+			t.Fatalf("test bug: the body %s has no servers field to tamper with", signed)
+		}
+		if status, code := tc.post(ctx, t, tampered, tamperedSig); status != http.StatusForbidden || code != "bad_signature" {
+			t.Fatalf("tampered report = %d %q, want 403 bad_signature", status, code)
+		}
+		// Replayed: the accepted report, byte for byte.
+		if status, code := tc.post(ctx, t, body, sig); status != http.StatusForbidden || code != "replay" {
+			t.Fatalf("replayed report = %d %q, want 403 replay", status, code)
+		}
+
+		if got := rx.get(ctx, t, metricRefused, `reason="bad_signature"`); got != badBase+2 {
+			t.Fatalf("%s{bad_signature} = %v, want %v", metricRefused, got, badBase+2)
+		}
+		if got := rx.get(ctx, t, metricRefused, `reason="replay"`); got != replayBase+1 {
+			t.Fatalf("%s{replay} = %v, want %v", metricRefused, got, replayBase+1)
+		}
+		if got := rx.get(ctx, t, metricReports, `version="e2e-signed"`); got != accepted {
+			t.Fatalf("reports with the test version = %v, want %v: a refused report was counted (SC-014)", got, accepted)
+		}
+		requireViewsUnchanged(ctx, t, metricsPort, asOf, viewsBefore)
+	})
+
+	t.Run("claimed_id_rotates_and_recovers", func(t *testing.T) {
+		a := getTelemetryView(ctx, t, cli).InstallID
+		if a == nil {
+			t.Fatal("no install id: extended must be on")
+		}
+		// Sync on a report the install has just sent: its next one is about
+		// one interval away, which leaves time to claim the new ID first.
+		reportsMore(t)
+		b := resetInstallID(ctx, t, cli)
+		if status, code := tc.send(ctx, t, tc.report(t, b, "e2e-claim", 1, time.Now())); status != http.StatusNoContent {
+			t.Fatalf("the test client's claim on the new ID = %d %q, want 204", status, code)
+		}
+		refusedBase := rx.get(ctx, t, metricRefused, `reason="id_claimed"`)
+
+		// The install's next attempt gets 409, replaces the ID and re-sends.
+		envInstance.Eventually(t, 4*telemetryInterval, func() (bool, string) {
+			v := getTelemetryView(ctx, t, cli)
+			ok := v.Status.LastIDRotationAt != nil && v.InstallID != nil && *v.InstallID != b && v.Status.LastOutcome == "ok"
+			return ok, fmt.Sprintf("view = %+v, want a rotation stamp, an id other than %q and outcome ok", v, b)
+		})
+		v := getTelemetryView(ctx, t, cli)
+		if *v.InstallID == *a || v.Preview == nil || v.Preview.Ext == nil || v.Preview.Ext.InstallID != *v.InstallID {
+			t.Fatalf("view = %+v, want a third id shown in installId and the preview", v)
+		}
+		if got := rx.get(ctx, t, metricRefused, `reason="id_claimed"`); got != refusedBase+1 {
+			t.Fatalf("%s{id_claimed} = %v, want %v (one 409 for the claimed ID)", metricRefused, got, refusedBase+1)
+		}
+	})
+
+	// ---- US4: the private dashboard ----------------------------------------
+
+	t.Run("dashboard_refuses_unauthenticated", func(t *testing.T) {
+		resp, body := dashboardRequest(ctx, t, metricsPort, http.MethodGet, "/", nil, nil)
+		if resp.StatusCode != http.StatusSeeOther || resp.Header.Get("Location") != "/login" {
+			t.Fatalf("GET / = %d to %q, want 303 to /login", resp.StatusCode, resp.Header.Get("Location"))
+		}
+		if strings.ContainsAny(string(body), "0123456789") {
+			t.Fatalf("the redirect body contains digits: %q", body)
+		}
+		resp, body = dashboardRequest(ctx, t, metricsPort, http.MethodGet, "/login", nil, nil)
+		if resp.StatusCode != http.StatusOK || !bytes.Equal(body, loginBaseline) {
+			t.Fatalf("GET /login = %d, want 200 and the page captured from the empty receiver (no figures)", resp.StatusCode)
+		}
+		for _, path := range []string{"/api/v1/views", "/metrics"} {
+			resp, body = dashboardRequest(ctx, t, metricsPort, http.MethodGet, path, nil, nil)
+			if resp.StatusCode != http.StatusUnauthorized || strings.TrimSpace(string(body)) != `{"error":"unauthorized"}` {
+				t.Fatalf("GET %s without credentials = %d %q, want 401 and the fixed body", path, resp.StatusCode, body)
+			}
+		}
+	})
+
+	t.Run("dashboard_shows_reports", func(t *testing.T) {
+		cookie := dashboardLogin(ctx, t, metricsPort, telemetryDashToken)
+		before := time.Now().UTC().AddDate(0, 0, -1).Format("2006-01-02")
+		resp, body := dashboardRequest(ctx, t, metricsPort, http.MethodGet, "/api/v1/views", map[string]string{"Cookie": cookie}, nil)
+		after := time.Now().UTC().AddDate(0, 0, -1).Format("2006-01-02")
+		if resp.StatusCode != http.StatusOK {
+			t.Fatalf("GET /api/v1/views with the session = %d: %s", resp.StatusCode, body)
+		}
+		var views map[string]json.RawMessage
+		if err := json.Unmarshal(body, &views); err != nil {
+			t.Fatalf("decode views %q: %v", body, err)
+		}
+		for _, key := range []string{"range", "asOf", "empty", "basic", "extended"} {
+			if _, ok := views[key]; !ok {
+				t.Fatalf("views has no %q key: %s", key, body)
+			}
+		}
+		var asOf string
+		var empty bool
+		if json.Unmarshal(views["asOf"], &asOf) != nil || (asOf != before && asOf != after) {
+			t.Fatalf("asOf = %s, want yesterday (UTC), %s: views end at the last complete day", views["asOf"], after)
+		}
+		if json.Unmarshal(views["empty"], &empty) != nil || (empty != (string(views["basic"]) == "null")) {
+			t.Fatalf("empty = %s with basic = %s, want basic null exactly when empty", views["empty"], views["basic"])
+		}
+		// The page itself renders for a signed-in browser, and the Bearer
+		// token reads the same JSON.
+		if resp, _ := dashboardRequest(ctx, t, metricsPort, http.MethodGet, "/", map[string]string{"Cookie": cookie}, nil); resp.StatusCode != http.StatusOK {
+			t.Fatalf("GET / with the session = %d, want 200", resp.StatusCode)
+		}
+		bearer := map[string]string{"Authorization": "Bearer " + telemetryDashToken}
+		if resp, _ := dashboardRequest(ctx, t, metricsPort, http.MethodGet, "/api/v1/views", bearer, nil); resp.StatusCode != http.StatusOK {
+			t.Fatalf("GET /api/v1/views with the Bearer token = %d, want 200", resp.StatusCode)
+		}
+		// Same-day reports are not in the views, so the earlier reports are
+		// counted through /metrics. The exact figures are views_test.go's.
+		if got := rx.get(ctx, t, metricReports, ""); got < 3 {
+			t.Fatalf("%s = %v, want at least 3 reports from the earlier subtests", metricReports, got)
+		}
+	})
+
+	// ---- US5: one extended report per install per day ----------------------
+
+	t.Run("extended_counted_once_per_day", func(t *testing.T) {
+		// Pause the install's extended reports (its own would count as
+		// duplicates and move the same counters), measure the test client
+		// alone, then turn the tier back on.
+		putTelemetryConsent(ctx, t, cli, true, false)
+		defer putTelemetryConsent(ctx, t, cli, true, true)
+		time.Sleep(10 * time.Second) // let a report already in flight land
+		keepClearOfUTCMidnight(t, 2*time.Minute)
+
+		id := newTestInstallID(t)
+		now := time.Now()
+		extBase, dupBase := rx.get(ctx, t, metricExtended, ""), rx.get(ctx, t, metricDuplicates, "")
+		for i, sentAt := range []time.Time{now.Add(-2 * time.Minute), now.Add(-time.Minute)} {
+			if status, code := tc.send(ctx, t, tc.report(t, id, "e2e-once", 2, sentAt)); status != http.StatusNoContent {
+				t.Fatalf("report %d from one ID = %d %q, want 204 (a same-day duplicate is accepted)", i+1, status, code)
+			}
+		}
+		if got := rx.get(ctx, t, metricExtended, ""); got != extBase+1 {
+			t.Fatalf("%s = %v, want %v: two reports from one ID on one day count once", metricExtended, got, extBase+1)
+		}
+		if got := rx.get(ctx, t, metricDuplicates, ""); got != dupBase+1 {
+			t.Fatalf("%s = %v, want %v", metricDuplicates, got, dupBase+1)
+		}
+	})
+
+	// ---- US6: the public summary -------------------------------------------
+
+	t.Run("public_summary_five_keys", func(t *testing.T) {
+		resp, body := dashboardRequest(ctx, t, ingestPort, http.MethodGet, "/v1/summary", nil, nil)
+		if resp.StatusCode != http.StatusOK {
+			t.Fatalf("GET /v1/summary = %d: %s", resp.StatusCode, body)
+		}
+		var summary map[string]json.RawMessage
+		if err := json.Unmarshal(body, &summary); err != nil {
+			t.Fatalf("decode summary %q: %v", body, err)
+		}
+		if len(summary) != 5 {
+			t.Fatalf("summary = %s, want exactly five keys", body)
+		}
+		for _, key := range []string{"asOf", "reportsLatestDay", "reports30d", "reportsTotal", "activeInstalls30d"} {
+			if _, ok := summary[key]; !ok {
+				t.Fatalf("summary has no %q key: %s", key, body)
+			}
+		}
+		if resp.Header.Get("Content-Type") != "application/json" || resp.Header.Get("Access-Control-Allow-Origin") != "*" ||
+			!strings.Contains(resp.Header.Get("Cache-Control"), "max-age=3600") || resp.Header.Get("ETag") == "" {
+			t.Fatalf("summary headers = %v, want JSON, CORS *, a one-hour cache and an ETag", resp.Header)
+		}
+		// Operational metrics are never on the public listener (FR-030).
+		if resp, _ := dashboardRequest(ctx, t, ingestPort, http.MethodGet, "/metrics", nil, nil); resp.StatusCode != http.StatusNotFound {
+			t.Fatalf("GET /metrics on the public listener = %d, want 404", resp.StatusCode)
+		}
+	})
+
+	// ---- US2: the operator's destination and disable switches --------------
+	// These point the API away from the bundled receiver, so they come last.
+
+	var oldReceiver struct {
+		name string
+	}
+	// receiverImage is the image the bundled receiver ran, read before the
+	// chart stops deploying it; the proof-of-work subtests reuse it.
+	var receiverImage string
+
+	t.Run("custom_destination_receives_only", func(t *testing.T) {
+		image := bundledReceiverImage(ctx, t)
+		receiverImage = image
+		name := deployTelemetryReceiver(ctx, t, "custom", image, true)
+		bundledBefore := rx.get(ctx, t, metricReports, "")
+
+		endpoint := fmt.Sprintf("%s.gameplane-system.svc:8080", name)
+		helmUpgradeReuse(ctx, t, "api.telemetry.endpoint=http://"+endpoint+"/ingest")
+		cli = reconnectAPIClient(ctx, t, cli)
+
+		v := getTelemetryView(ctx, t, cli)
+		if v.Destination.Kind != "custom" || v.Destination.Host == nil || *v.Destination.Host != endpoint {
+			t.Fatalf("destination = %+v, want kind custom at %s", v.Destination, endpoint)
+		}
+		port, stop := detachedPortForward(ctx, t, "gameplane-system", "svc/"+name, 8081)
+		defer stop()
+		envInstance.Eventually(t, 4*telemetryInterval, func() (bool, string) {
+			got := receiverMetric(ctx, t, port, telemetryDashToken, metricReports, "")
+			return got >= 1, fmt.Sprintf("custom receiver %s = %v, want at least 1", metricReports, got)
+		})
+		// With an explicit endpoint the chart no longer deploys the bundled
+		// receiver. If a later chart keeps it, its counter must stay put.
+		if out, err := envInstance.Kubectl(ctx, "get", "deploy/gameplane-telemetry-receiver",
+			"--namespace", "gameplane-system"); err == nil {
+			if got := rx.get(ctx, t, metricReports, ""); got != bundledBefore {
+				t.Fatalf("bundled receiver %s = %v, want it to stay at %v", metricReports, got, bundledBefore)
+			}
+		} else if !strings.Contains(out, "NotFound") {
+			t.Fatalf("kubectl get bundled receiver: %v\n%s", err, out)
+		}
+	})
+
+	t.Run("pow_receiver_accepts_solved_reports", func(t *testing.T) {
+		// MIN_BITS=8 makes the install really solve a challenge before every
+		// report (spec 022 S10). The deploy cleanup runs when this subtest
+		// ends, so the next subtest deploys its own receiver.
+		name := deployTelemetryReceiver(ctx, t, "pow", receiverImage, true,
+			"INGEST_POW=true", "INGEST_POW_MIN_BITS=8", "INGEST_POW_TARGET_PER_MIN=60")
+		helmUpgradeReuse(ctx, t, fmt.Sprintf("api.telemetry.endpoint=http://%s.gameplane-system.svc:8080/ingest", name))
+		cli = reconnectAPIClient(ctx, t, cli)
+
+		port, stop := detachedPortForward(ctx, t, "gameplane-system", "svc/"+name, 8081)
+		defer stop()
+		challenges := func() float64 {
+			return receiverMetric(ctx, t, port, telemetryDashToken, metricPoWChallenges, "")
+		}
+		waitForMore(t, challenges, 4*telemetryInterval, metricPoWChallenges)
+		envInstance.Eventually(t, 4*telemetryInterval, func() (bool, string) {
+			got := receiverMetric(ctx, t, port, telemetryDashToken, metricReports, "")
+			outcome := getTelemetryView(ctx, t, cli).Status.LastOutcome
+			return got >= 1 && outcome == "ok",
+				fmt.Sprintf("%s = %v, lastOutcome = %q, want a solved report accepted and outcome ok", metricReports, got, outcome)
+		})
+	})
+
+	t.Run("pow_refuses_missing_and_invalid", func(t *testing.T) {
+		name := deployTelemetryReceiver(ctx, t, "powrefuse", receiverImage, true,
+			"INGEST_POW=true", "INGEST_POW_MIN_BITS=8", "INGEST_POW_TARGET_PER_MIN=60")
+		ingestPort, stopIngest := detachedPortForward(ctx, t, "gameplane-system", "svc/"+name, 8080)
+		defer stopIngest()
+		metricsPort, stopMetrics := detachedPortForward(ctx, t, "gameplane-system", "svc/"+name, 8081)
+		defer stopMetrics()
+		powRx := receiverScrape{port: metricsPort, token: telemetryDashToken}
+		pc := newTelemetryTestClient(t, ingestPort)
+		const version = "e2e-pow"
+		versionLabel := `version="` + version + `"`
+		id := newTestInstallID(t)
+		body, sig := pc.sign(t, pc.report(t, id, version, 3, time.Now()))
+		requiredBase := powRx.get(ctx, t, metricRefused, `reason="pow_required"`)
+		invalidBase := powRx.get(ctx, t, metricRefused, `reason="pow_invalid"`)
+
+		// No header: 428 pow_required, and nothing is counted.
+		if status, code := pc.postPoW(ctx, t, body, sig, ""); status != http.StatusPreconditionRequired || code != "pow_required" {
+			t.Fatalf("report with no proof of work = %d %q, want 428 pow_required", status, code)
+		}
+		if got := powRx.get(ctx, t, metricRefused, `reason="pow_required"`); got != requiredBase+1 {
+			t.Fatalf("%s{pow_required} = %v, want %v", metricRefused, got, requiredBase+1)
+		}
+
+		// A solved challenge is accepted once.
+		solved := pc.solvedPoW(ctx, t, 8)
+		if status, code := pc.postPoW(ctx, t, body, sig, solved); status != http.StatusNoContent {
+			t.Fatalf("report with a solved challenge = %d %q, want 204", status, code)
+		}
+		if got := powRx.get(ctx, t, metricReports, versionLabel); got != 1 {
+			t.Fatalf("%s{%s} = %v, want 1", metricReports, versionLabel, got)
+		}
+
+		// The same solution again: 428 pow_invalid, and nothing changes.
+		asOf, viewsBefore := dashboardViews(ctx, t, metricsPort)
+		again, againSig := pc.sign(t, pc.report(t, id, version, 3, time.Now().Add(2*time.Second)))
+		if status, code := pc.postPoW(ctx, t, again, againSig, solved); status != http.StatusPreconditionRequired || code != "pow_invalid" {
+			t.Fatalf("report with a used solution = %d %q, want 428 pow_invalid", status, code)
+		}
+		if got := powRx.get(ctx, t, metricRefused, `reason="pow_invalid"`); got != invalidBase+1 {
+			t.Fatalf("%s{pow_invalid} = %v, want %v", metricRefused, got, invalidBase+1)
+		}
+		if got := powRx.get(ctx, t, metricReports, versionLabel); got != 1 {
+			t.Fatalf("%s{%s} = %v after the refusals, want it unchanged at 1", metricReports, versionLabel, got)
+		}
+		requireViewsUnchanged(ctx, t, metricsPort, asOf, viewsBefore)
+	})
+
+	t.Run("old_receiver_gets_basic", func(t *testing.T) {
+		// The beta.8 receiver rejects any field beyond the basic three with 400
+		// and exposes /metrics unauthenticated on its one port (FR-016, SC-013).
+		name := deployTelemetryReceiverKept(ctx, t, parent, "old", betaReceiverImage, false)
+		port, stop := detachedPortForward(ctx, t, "gameplane-system", "svc/"+name, 8080)
+		defer stop()
+		oldReceiver.name = name
+
+		helmUpgradeReuse(ctx, t, fmt.Sprintf("api.telemetry.endpoint=http://%s.gameplane-system.svc:8080/ingest", name))
+		cli = reconnectAPIClient(ctx, t, cli)
+		envInstance.Eventually(t, 4*telemetryInterval, func() (bool, string) {
+			got := receiverMetric(ctx, t, port, "", metricReports, "")
+			return got >= 1, fmt.Sprintf("old receiver %s = %v, want a basic report accepted after the extended one got 400", metricReports, got)
+		})
+		v := getTelemetryView(ctx, t, cli)
+		if v.Status.LastOutcome != "ok" {
+			t.Fatalf("status = %+v, want outcome ok: the basic re-send was accepted", v.Status)
+		}
+		// The fallback marker holds the extended part back for a week, so the
+		// preview (the next report) is basic only although extended is on.
+		if !v.Consent.Extended || v.Preview == nil || v.Preview.Ext != nil {
+			t.Fatalf("view = %+v, want extended on and a basic-only preview for the old receiver", v)
+		}
+	})
+
+	t.Run("operator_disabled_sends_nothing", func(t *testing.T) {
+		helmUpgradeReuse(ctx, t, "api.telemetry.enabled=false")
+		cli = reconnectAPIClient(ctx, t, cli)
+
+		v := getTelemetryView(ctx, t, cli)
+		if !v.OperatorDisabled || v.Destination.Kind != "disabled" || v.Destination.Host != nil || v.Preview != nil {
+			t.Fatalf("view = %+v, want operatorDisabled, kind disabled, no host and no preview", v)
+		}
+		status, body, err := tlDo(ctx, cli, http.MethodPut, "/admin/config/telemetry", map[string]bool{"sendMetrics": true, "extended": true})
+		if err != nil || status != http.StatusConflict {
+			t.Fatalf("PUT telemetry while disabled: %v status %v body %s, want 409", err, status, body)
+		}
+		status, body, err = tlDo(ctx, cli, http.MethodGet, "/admin/telemetry/notice", nil)
+		if err != nil || status != http.StatusOK || !strings.Contains(string(body), `"pending":false`) {
+			t.Fatalf("GET notice while disabled: %v status %v body %s, want pending false", err, status, body)
+		}
+
+		// The old receiver's forward from old_receiver_gets_basic died with
+		// that subtest; open one for this subtest.
+		port, stop := detachedPortForward(ctx, t, "gameplane-system", "svc/"+oldReceiver.name, 8080)
+		defer stop()
+		time.Sleep(10 * time.Second) // let a report from the replaced pod land
+		settled := receiverMetric(ctx, t, port, "", metricReports, "")
+		envInstance.Consistently(t, 3*telemetryInterval, 10*time.Second, func() (bool, string) {
+			got := receiverMetric(ctx, t, port, "", metricReports, "")
+			return got == settled, fmt.Sprintf("%s = %v, want it to stay at %v while the operator disabled telemetry", metricReports, got, settled)
+		})
+	})
+}
+
+// helmUpgradeTelemetry reconfigures the e2e release for this bucket: a 1m
+// report interval, the dashboard token, the public summary, and no per-source
+// ingest limit (every report here comes from one address).
+func helmUpgradeTelemetry(ctx context.Context, t *testing.T) {
+	t.Helper()
+	cmd := exec.CommandContext(ctx, "helm", "upgrade", "gameplane",
+		filepath.Join("..", "..", "charts", "gameplane"),
+		"--kube-context", envInstance.Context,
+		"--namespace", "gameplane-system",
+		"--reuse-values",
+		"--set", "api.telemetry.interval=1m",
+		"--set", "api.telemetry.receiver.dashboard.tokenSecretRef.name="+telemetryDashSecret,
+		"--set", "api.telemetry.receiver.publicSummary.enabled=true",
+		"--set", "api.telemetry.receiver.ingestSourceDailyLimit=0",
+		"--wait", "--timeout", "6m",
+	)
+	if out, err := cmd.CombinedOutput(); err != nil {
+		t.Fatalf("helm upgrade for the telemetry bucket failed: %v\n%s", err, out)
+	}
+}
+
+// postNoticeAction POSTs one notice action and requires the given status.
+func postNoticeAction(ctx context.Context, t *testing.T, cli *APIClient, action string, want int) {
+	t.Helper()
+	status, body, err := tlDo(ctx, cli, http.MethodPost, "/admin/telemetry/notice", map[string]string{"action": action})
+	if err != nil || status != want {
+		t.Fatalf("POST notice %q: %v status %v body %s, want %d", action, err, status, body, want)
+	}
+}
+
+// receiverReportsTotal sums gameplane_telemetry_reports_total over every
+// version label, read from the receiver's dashboard port with the dashboard
+// token. It fails the test when /metrics is unreachable.
+func receiverReportsTotal(ctx context.Context, t *testing.T, port int) float64 {
+	t.Helper()
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet,
+		fmt.Sprintf("http://127.0.0.1:%d/metrics", port), nil)
+	if err != nil {
+		t.Fatalf("new metrics request: %v", err)
+	}
+	req.Header.Set("Authorization", "Bearer "+telemetryDashToken)
+	resp, err := (&http.Client{Timeout: 15 * time.Second}).Do(req)
+	if err != nil {
+		t.Fatalf("GET receiver /metrics: %v", err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	body, _ := io.ReadAll(resp.Body)
+	if resp.StatusCode != http.StatusOK {
+		t.Fatalf("GET receiver /metrics = %d: %s", resp.StatusCode, body)
+	}
+	var total float64
+	for _, line := range strings.Split(string(body), "\n") {
+		if !strings.HasPrefix(line, "gameplane_telemetry_reports_total") {
+			continue
+		}
+		fields := strings.Fields(line)
+		if len(fields) < 2 {
+			continue
+		}
+		v, err := strconv.ParseFloat(fields[len(fields)-1], 64)
+		if err != nil {
+			t.Fatalf("parse metric line %q: %v", line, err)
+		}
+		total += v
+	}
+	return total
+}
diff --git a/test/e2e/telemetry_pow_e2e_test.go b/test/e2e/telemetry_pow_e2e_test.go
new file mode 100644
index 000000000..8f73fa90a
--- /dev/null
+++ b/test/e2e/telemetry_pow_e2e_test.go
@@ -0,0 +1,88 @@
+//go:build e2e
+
+package e2e
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"io"
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/GameplanePanel/gameplane/telemetryschema"
+)
+
+// Helpers for the proof-of-work subtests of TestTelemetryLifecycle (spec 022
+// S10, T108).
+
+// metricPoWChallenges counts the challenges a receiver issued.
+const metricPoWChallenges = "gameplane_telemetry_pow_challenges_total"
+
+// challenge fetches a challenge from the receiver's public port and returns
+// its token and difficulty.
+func (c *telemetryTestClient) challenge(ctx context.Context, t *testing.T) (token string, bits int) {
+	t.Helper()
+	url := strings.TrimSuffix(c.ingestURL, "/ingest") + "/v1/challenge"
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
+	if err != nil {
+		t.Fatalf("new challenge request: %v", err)
+	}
+	resp, err := c.http.Do(req)
+	if err != nil {
+		t.Fatalf("GET %s: %v", url, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	raw, _ := io.ReadAll(resp.Body)
+	var out struct {
+		Challenge string `json:"challenge"`
+		Bits      int    `json:"bits"`
+	}
+	if resp.StatusCode != http.StatusOK || json.Unmarshal(raw, &out) != nil || out.Challenge == "" {
+		t.Fatalf("GET %s = %d %s, want 200 with a challenge", url, resp.StatusCode, raw)
+	}
+	return out.Challenge, out.Bits
+}
+
+// solvedPoW fetches a challenge, requires at least wantBits of difficulty and
+// returns the solved header value.
+func (c *telemetryTestClient) solvedPoW(ctx context.Context, t *testing.T, wantBits int) string {
+	t.Helper()
+	token, bits := c.challenge(ctx, t)
+	if bits < wantBits {
+		t.Fatalf("challenge difficulty = %d bits, want at least %d (INGEST_POW_MIN_BITS)", bits, wantBits)
+	}
+	nonce, err := telemetryschema.SolvePoW(ctx, token, bits)
+	if err != nil {
+		t.Fatalf("solve a %d-bit challenge: %v", bits, err)
+	}
+	return telemetryschema.FormatPoW(token, nonce)
+}
+
+// postPoW is post with the proof-of-work header (omitted when pow is empty).
+func (c *telemetryTestClient) postPoW(ctx context.Context, t *testing.T, body []byte, signature, pow string) (status int, code string) {
+	t.Helper()
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, c.ingestURL, bytes.NewReader(body))
+	if err != nil {
+		t.Fatalf("new ingest request: %v", err)
+	}
+	req.Header.Set("Content-Type", "application/json")
+	if signature != "" {
+		req.Header.Set(telemetryschema.SignatureHeader, signature)
+	}
+	if pow != "" {
+		req.Header.Set(telemetryschema.PoWHeader, pow)
+	}
+	resp, err := c.http.Do(req)
+	if err != nil {
+		t.Fatalf("POST %s: %v", c.ingestURL, err)
+	}
+	defer func() { _ = resp.Body.Close() }()
+	raw, _ := io.ReadAll(resp.Body)
+	var refusal struct {
+		Error string `json:"error"`
+	}
+	_ = json.Unmarshal(raw, &refusal) // a 204 has no body
+	return resp.StatusCode, refusal.Error
+}
diff --git a/test/e2e/upgrade_e2e_test.go b/test/e2e/upgrade_e2e_test.go
index beb121bbd..25a1221c9 100644
--- a/test/e2e/upgrade_e2e_test.go
+++ b/test/e2e/upgrade_e2e_test.go
@@ -4,6 +4,7 @@ package e2e
 
 import (
 	"context"
+	"encoding/json"
 	"os"
 	"os/exec"
 	"path/filepath"
@@ -207,6 +208,44 @@ func TestUpgrade_FromPreviousRelease(t *testing.T) {
 	}
 	resp.Body.Close()
 
+	// ---- 6b. telemetry stays off for an install that never opted in ------
+	//
+	// The previous release had no telemetry choice saved for this install, so
+	// the upgrade must not turn reporting on or show the notice (spec 022 US1
+	// scenario 5): migration 015 seeds consent_source "legacy".
+	resp, body, err = client.Get("/admin/telemetry/notice")
+	if err != nil || resp.StatusCode != 200 {
+		t.Fatalf("GET /admin/telemetry/notice after upgrade: %v status %d body %s", err, resp.StatusCode, body)
+	}
+	resp.Body.Close()
+	var notice struct {
+		Pending bool `json:"pending"`
+	}
+	if err := json.Unmarshal(body, &notice); err != nil {
+		t.Fatalf("decode notice: %v\n%s", err, body)
+	}
+	if notice.Pending {
+		t.Errorf("telemetry notice is pending after an upgrade; want pending:false, body=%s", body)
+	}
+	resp, body, err = client.Get("/admin/config")
+	if err != nil || resp.StatusCode != 200 {
+		t.Fatalf("GET /admin/config after upgrade: %v status %d body %s", err, resp.StatusCode, body)
+	}
+	resp.Body.Close()
+	var cfgAll struct {
+		Telemetry *struct {
+			SendMetrics bool `json:"sendMetrics"`
+		} `json:"telemetry"`
+	}
+	if err := json.Unmarshal(body, &cfgAll); err != nil {
+		t.Fatalf("decode config: %v\n%s", err, body)
+	}
+	// Absent (nothing was ever saved) or sendMetrics false. The upgrade may add
+	// "extended":false next to a saved value, so only sendMetrics is compared.
+	if cfgAll.Telemetry != nil && cfgAll.Telemetry.SendMetrics {
+		t.Errorf("telemetry sendMetrics is true after an upgrade with no saved choice; body=%s", body)
+	}
+
 	// ---- 7. F-218: a fresh `helm install` over leftover, STALE CRDs ------
 	//
 	// Deliberately LAST, after steps 3-6 have proven the pre-upgrade hook
diff --git a/web/e2e/screenshots/slice4.spec.ts b/web/e2e/screenshots/slice4.spec.ts
index 88f0c6c49..f2cd8e82a 100644
--- a/web/e2e/screenshots/slice4.spec.ts
+++ b/web/e2e/screenshots/slice4.spec.ts
@@ -371,7 +371,7 @@ test.describe("Slice 4: Admin, Users, Audit, System logs, Cluster (Desktop — 1
   test("uoxQW: Admin Settings — Telemetry", async ({ page }) => {
     await page.goto("/admin");
     await clickSection(page, "Telemetry");
-    await expect(page.getByText(/send anonymous usage metrics/i)).toBeVisible({
+    await expect(page.getByText(/send basic usage metrics/i)).toBeVisible({
       timeout: 10_000,
     });
     await page.waitForTimeout(200);
diff --git a/web/e2e/specs/adminSettings.spec.ts b/web/e2e/specs/adminSettings.spec.ts
index 867099570..ade0fbda6 100644
--- a/web/e2e/specs/adminSettings.spec.ts
+++ b/web/e2e/specs/adminSettings.spec.ts
@@ -67,7 +67,7 @@ test.describe("admin settings page", () => {
 
     // Click Telemetry — its toggle row appears.
     await page.getByRole("button", { name: /^telemetry$/i }).click();
-    await expect(page.getByText(/send anonymous usage metrics/i)).toBeVisible();
+    await expect(page.getByText(/send basic usage metrics/i)).toBeVisible();
 
     // Click About — version metadata appears.
     await page.getByRole("button", { name: /^about$/i }).click();
diff --git a/web/e2e/specs/live/liveAgentScreens.spec.ts b/web/e2e/specs/live/liveAgentScreens.spec.ts
index 55cafee68..21e0d5338 100644
--- a/web/e2e/specs/live/liveAgentScreens.spec.ts
+++ b/web/e2e/specs/live/liveAgentScreens.spec.ts
@@ -78,7 +78,7 @@ test.describe("live: agent-backed screens render real pod data", () => {
     await tablist.getByRole("tab", { name: /^Overview$/i }).click();
     await expect(page.getByText("Recent events")).toBeVisible({ timeout: 15_000 });
     await expect(page.getByText("Connection")).toBeVisible();
-    await expect(page.getByText("CPU")).toBeVisible();
+    await expect(page.getByText("CPU", { exact: true })).toBeVisible();
 
     // Walk the remaining agent-backed tabs; real data must render without a
     // client crash. (busybox has no RCON, so Players shows the genuine
diff --git a/web/specs.md b/web/specs.md
index 2515e9c8c..96383c983 100644
--- a/web/specs.md
+++ b/web/specs.md
@@ -811,9 +811,11 @@ package.json                # @gameplane/web v0.3.0; dev: vite, npm scripts for
    - Manage role bindings per namespace
 
 9. **AdminSettings** (`/admin`) → `AdminSettingsPage` (gated by `config:manage` permission)
-   - Sections: General (version, telemetry), Authentication (OIDC providers), Mod registries (API keys),
+   - Sections: General (version), Telemetry (destination, tiers, install ID, preview, status), Authentication (OIDC providers), Mod registries (API keys),
      Notification sinks (Discord/Slack/SMTP/webhook), Backup destinations
    - **General:** Instance name is optional. It names this install on the Cluster page and in notifications, which fall back to "Gameplane" when it is blank
+   - **Telemetry (spec 022):** the section reads `GET /admin/telemetry` (`Telemetry.get()`, query key `["telemetry"]`, refetched after a save and after an install-ID reset) and the stored consent via `GET /admin/config`. It shows the destination in effect (`default`, `custom`, `bundled`, `disabled` by the operator, `none`) with a link to the data-handling statement (`TELEMETRY_STATEMENT_URL` in `src/lib/links.ts`), two switches ("Enable/Disable telemetry" for basic, "Enable/Disable extended telemetry" for extended), the install ID with a confirmed "Reset ID" (`POST /admin/telemetry/install-id`), a read-only next-report preview identical to the payload, and a fixed-phrase delivery status (never, ok, failed, plus "Install ID replaced on <date>" when `lastIdRotationAt` is set; no failure detail is ever shown). Extended is disabled and shown off while basic is off, and turning basic off clears extended in the draft (the server also normalises it). When the operator disabled telemetry both switches are disabled and shown off and Save is disabled. Saves still go through `useSectionForm` and `PUT /admin/config/telemetry`.
+   - **Telemetry notice (spec 022):** `src/components/ui/TelemetryNotice.tsx` renders the first-login banner at the top of the dashboard body for users with `config:manage` while `GET /admin/telemetry/notice` reports `pending`. It posts `seen` once on first render, offers "Keep sharing", "Turn off extended" and "Turn off all" (each posts the matching ack and hides the banner), and links to Admin Settings → Telemetry and to `TELEMETRY_STATEMENT_URL`. It has no dismiss button.
    - **Section save semantics:** each config section edits a local draft (`useSectionForm`). Nothing is stored until
      that section's Save; leaving the section discards the draft.
    - **Managed Secrets:** the API-managed Secrets behind identity providers (`gameplane-auth-<name>`), keyed mod
diff --git a/web/src/components/AppLayout.test.tsx b/web/src/components/AppLayout.test.tsx
index 4a2e0eba1..8d41d24c5 100644
--- a/web/src/components/AppLayout.test.tsx
+++ b/web/src/components/AppLayout.test.tsx
@@ -610,4 +610,39 @@ describe("AppLayout", () => {
       window.sessionStorage.removeItem(SAFE_MODE_SESSION_KEY);
     }
   });
+
+  describe("telemetry notice", () => {
+    function pendingNotice() {
+      const posts: { action: string }[] = [];
+      server.use(
+        http.get("/admin/telemetry/notice", () =>
+          HttpResponse.json({ pending: true, destination: { kind: "default", host: "telemetry.example.org" } }),
+        ),
+        http.post("/admin/telemetry/notice", async ({ request }) => {
+          posts.push((await request.json()) as { action: string });
+          return new HttpResponse(null, { status: 204 });
+        }),
+      );
+      return posts;
+    }
+
+    it("shows the notice to users with config:manage and opens Telemetry settings", async () => {
+      const posts = pendingNotice();
+      server.use(http.get("/users/me", () => HttpResponse.json(makeUser())));
+      renderWithQuery(<AppLayout />);
+      expect(await screen.findByText("Anonymous usage metrics are on for this install.")).toBeInTheDocument();
+      await waitFor(() => expect(posts).toEqual([{ action: "seen" }]));
+      await userEvent.click(screen.getByRole("button", { name: "Open Telemetry settings" }));
+      expect(navigateMock).toHaveBeenCalledWith({ to: "/admin", search: { section: "telemetry" } });
+    });
+
+    it("does not mount the notice for users without config:manage", async () => {
+      const posts = pendingNotice();
+      server.use(http.get("/users/me", () => HttpResponse.json(makeUser({ role: "viewer" }))));
+      renderWithQuery(<AppLayout />);
+      await screen.findByRole("link", { name: /Dashboard/i });
+      expect(screen.queryByText("Anonymous usage metrics are on for this install.")).not.toBeInTheDocument();
+      expect(posts).toEqual([]);
+    });
+  });
 });
diff --git a/web/src/components/AppLayout.tsx b/web/src/components/AppLayout.tsx
index d177d7f6b..622ec406c 100644
--- a/web/src/components/AppLayout.tsx
+++ b/web/src/components/AppLayout.tsx
@@ -34,6 +34,7 @@ import {
   useThemePreferences,
 } from "@/lib/useThemePreferences";
 import { SafeModeBanner } from "@/components/ui/SafeModeBanner";
+import { TelemetryNotice } from "@/components/ui/TelemetryNotice";
 
 // The localStorage key the theme boot script in index.html reads before
 // React mounts — must stay in sync (see index.html and theme-tokens.md).
@@ -158,6 +159,10 @@ export function AppLayout() {
     void navigate({ to: "/settings/theme" });
   };
 
+  const openTelemetrySettings = () => {
+    void navigate({ to: "/admin", search: { section: "telemetry" } });
+  };
+
   const navItems: SidebarNavGroup[] = [
     {
       label: "General",
@@ -244,6 +249,9 @@ export function AppLayout() {
           />
         }
       >
+        {/* First-login telemetry notice (spec 022 FR-004): admins only; the
+            API also answers {pending:false} to callers without config:manage. */}
+        {can(me, "config:manage") && <TelemetryNotice onOpenSettings={openTelemetrySettings} />}
         {centralManagement && (
           <div role="note" className="border-b border-border bg-surface px-4 py-3 text-sm text-muted sm:px-6">
             <strong className="font-medium text-foreground">Central management.</strong>{" "}
diff --git a/web/src/components/ui/TelemetryNotice.test.tsx b/web/src/components/ui/TelemetryNotice.test.tsx
new file mode 100644
index 000000000..99dddde06
--- /dev/null
+++ b/web/src/components/ui/TelemetryNotice.test.tsx
@@ -0,0 +1,136 @@
+import { describe, it, expect, vi } from "vitest";
+import { http, HttpResponse } from "msw";
+import { QueryClientProvider } from "@tanstack/react-query";
+import { screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { server } from "@/test/server";
+import { renderWithQuery } from "@/test/render";
+import { TELEMETRY_STATEMENT_URL } from "@/lib/links";
+import { TelemetryNotice } from "./TelemetryNotice";
+
+type Dest = { kind: string; host: string | null };
+
+// Serves a pending notice until any non-"seen" ack lands, recording bodies.
+function setup(dest: Dest | null = { kind: "default", host: "telemetry.example.org" }, ackStatus = 204) {
+  const bodies: { action: string }[] = [];
+  let pending = true;
+  server.use(
+    http.get("/admin/telemetry/notice", () =>
+      HttpResponse.json(pending ? { pending: true, destination: dest ?? undefined } : { pending: false }),
+    ),
+    http.post("/admin/telemetry/notice", async ({ request }) => {
+      const body = (await request.json()) as { action: string };
+      bodies.push(body);
+      if (body.action !== "seen") {
+        if (ackStatus !== 204) return new HttpResponse(null, { status: ackStatus });
+        pending = false;
+      }
+      return new HttpResponse(null, { status: 204 });
+    }),
+  );
+  return bodies;
+}
+
+describe("TelemetryNotice", () => {
+  it("renders nothing while the notice is not pending (default handler)", async () => {
+    const { container } = renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    await waitFor(() => expect(container).toBeEmptyDOMElement());
+    expect(screen.queryByText(/Anonymous usage metrics/)).not.toBeInTheDocument();
+  });
+
+  it("renders the pending notice and posts seen exactly once", async () => {
+    const bodies = setup();
+    const { client, rerender } = renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    expect(await screen.findByText("Anonymous usage metrics are on for this install.")).toBeInTheDocument();
+    expect(screen.getByText("telemetry.example.org")).toBeInTheDocument();
+    expect(screen.getByText(/the Gameplane project's telemetry service/)).toBeInTheDocument();
+    await waitFor(() => expect(bodies).toEqual([{ action: "seen" }]));
+    rerender(
+      <QueryClientProvider client={client}>
+        <TelemetryNotice onOpenSettings={() => {}} />
+      </QueryClientProvider>,
+    );
+    await new Promise((r) => setTimeout(r, 50));
+    expect(bodies).toEqual([{ action: "seen" }]);
+  });
+
+  it.each([
+    ["Keep sharing", "keep"],
+    ["Turn off extended", "extended-off"],
+    ["Turn off all", "all-off"],
+  ])("%s posts %s and hides the banner", async (name, action) => {
+    const bodies = setup();
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    await userEvent.click(await screen.findByRole("button", { name }));
+    await waitFor(() =>
+      expect(screen.queryByText("Anonymous usage metrics are on for this install.")).not.toBeInTheDocument(),
+    );
+    expect(bodies).toContainEqual({ action });
+  });
+
+  it("invalidates the telemetry and admin-config queries after an action", async () => {
+    setup();
+    const { client } = renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    const spy = vi.spyOn(client, "invalidateQueries");
+    await userEvent.click(await screen.findByRole("button", { name: "Keep sharing" }));
+    await waitFor(() => {
+      expect(spy).toHaveBeenCalledWith({ queryKey: ["telemetry"] });
+      expect(spy).toHaveBeenCalledWith({ queryKey: ["admin-config"] });
+    });
+  });
+
+  it("shows an error and keeps the banner when the ack fails", async () => {
+    setup(undefined, 409);
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    await userEvent.click(await screen.findByRole("button", { name: "Turn off all" }));
+    expect(await screen.findByRole("alert")).toHaveTextContent("Could not save your choice. Try again.");
+    expect(screen.getByText("Anonymous usage metrics are on for this install.")).toBeInTheDocument();
+  });
+
+  it("names the bundled receiver", async () => {
+    setup({ kind: "bundled", host: "gameplane-telemetry-receiver.gameplane.svc" });
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    expect(await screen.findByText("gameplane-telemetry-receiver.gameplane.svc")).toBeInTheDocument();
+    expect(screen.getByText(/Reports stay inside your cluster/)).toBeInTheDocument();
+  });
+
+  it("names a custom destination", async () => {
+    setup({ kind: "custom", host: "metrics.corp.example" });
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    expect(await screen.findByText("metrics.corp.example")).toBeInTheDocument();
+    expect(screen.getByText(/destination your operator configured/)).toBeInTheDocument();
+  });
+
+  it("omits the destination line when the response has no host", async () => {
+    setup({ kind: "default", host: null });
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    await screen.findByText("Anonymous usage metrics are on for this install.");
+    expect(screen.queryByText(/Reports are sent to/)).not.toBeInTheDocument();
+  });
+
+  it("links to Telemetry settings and the data-handling statement", async () => {
+    setup();
+    const onOpenSettings = vi.fn();
+    renderWithQuery(<TelemetryNotice onOpenSettings={onOpenSettings} />);
+    await userEvent.click(await screen.findByRole("button", { name: "Open Telemetry settings" }));
+    expect(onOpenSettings).toHaveBeenCalledOnce();
+    const link = screen.getByRole("link", { name: "Data-handling statement" });
+    expect(link).toHaveAttribute("href", TELEMETRY_STATEMENT_URL);
+    expect(link).toHaveAttribute("target", "_blank");
+    expect(link).toHaveAttribute("rel", expect.stringContaining("noopener"));
+  });
+
+  it("tolerates a failed seen post", async () => {
+    setup();
+    server.use(http.post("/admin/telemetry/notice", () => new HttpResponse(null, { status: 500 })));
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    expect(await screen.findByText("Anonymous usage metrics are on for this install.")).toBeInTheDocument();
+  });
+
+  it("renders the banner when destination is absent", async () => {
+    setup(null);
+    renderWithQuery(<TelemetryNotice onOpenSettings={() => {}} />);
+    expect(await screen.findByText("Anonymous usage metrics are on for this install.")).toBeInTheDocument();
+    expect(screen.queryByText(/Reports are sent to/)).not.toBeInTheDocument();
+  });
+});
diff --git a/web/src/components/ui/TelemetryNotice.tsx b/web/src/components/ui/TelemetryNotice.tsx
new file mode 100644
index 000000000..84021ce8b
--- /dev/null
+++ b/web/src/components/ui/TelemetryNotice.tsx
@@ -0,0 +1,125 @@
+import { useEffect, useRef, useState } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Button } from "@heroui/react";
+import { Info } from "lucide-react";
+import { Telemetry, type TelemetryNotice as TelemetryNoticeData, type TelemetryNoticeAction } from "@/lib/api";
+import { TELEMETRY_STATEMENT_URL } from "@/lib/links";
+
+export interface TelemetryNoticeProps {
+  /** Navigates to /admin?section=telemetry. */
+  onOpenSettings: () => void;
+}
+
+function destinationSuffix(kind: string): string {
+  if (kind === "default") return ", the Gameplane project's telemetry service.";
+  if (kind === "bundled") {
+    return ", the receiver bundled with this install. Reports stay inside your cluster.";
+  }
+  return ", the destination your operator configured.";
+}
+
+const linkClass =
+  "text-xs font-semibold text-accent-soft-foreground underline-offset-2 hover:underline";
+
+/**
+ * First-login telemetry notice (spec 022 FR-004, design frame lh8p8). Mount
+ * only for users holding config:manage. Renders while the notice is pending;
+ * posts "seen" once on mount; every action acks, then hides the banner.
+ */
+export function TelemetryNotice({ onOpenSettings }: TelemetryNoticeProps) {
+  const queryClient = useQueryClient();
+  const [failed, setFailed] = useState(false);
+  const seenPosted = useRef(false);
+  const { data } = useQuery({
+    queryKey: ["telemetry", "notice"],
+    queryFn: () => Telemetry.notice(),
+  });
+  const pending = data?.pending === true;
+
+  useEffect(() => {
+    if (!pending || seenPosted.current) return;
+    seenPosted.current = true;
+    // Best effort: a failed "seen" only delays the schedule opening.
+    void Telemetry.ack("seen").catch(() => {});
+  }, [pending]);
+
+  const ack = useMutation({
+    mutationFn: (action: TelemetryNoticeAction) => Telemetry.ack(action),
+    onMutate: () => setFailed(false),
+    onSuccess: async () => {
+      queryClient.setQueryData<TelemetryNoticeData>(["telemetry", "notice"], { pending: false });
+      await Promise.all([
+        queryClient.invalidateQueries({ queryKey: ["telemetry"] }),
+        queryClient.invalidateQueries({ queryKey: ["admin-config"] }),
+      ]);
+    },
+    onError: () => setFailed(true),
+  });
+
+  if (!pending) return null;
+  const dest = data?.destination;
+
+  return (
+    <div className="px-4 pt-4 sm:px-6">
+      <section
+        aria-label="Telemetry notice"
+        className="flex w-full gap-3 rounded-lg border border-accent-soft-foreground bg-accent-soft p-4"
+      >
+        <Info aria-hidden="true" className="h-5 w-5 shrink-0 text-accent-soft-foreground" />
+        <div className="flex min-w-0 flex-1 flex-col gap-3">
+          <p className="text-sm font-semibold text-accent-soft-foreground">
+            Anonymous usage metrics are on for this install.
+          </p>
+          {dest?.host ? (
+            <p className="text-[13px] text-foreground">
+              Reports are sent to{" "}
+              <span className="font-semibold text-accent-soft-foreground">{dest.host}</span>
+              {destinationSuffix(dest.kind)}
+            </p>
+          ) : null}
+          <div className="flex flex-col gap-4 sm:flex-row sm:gap-6">
+            <div className="flex min-w-0 flex-1 flex-col gap-1">
+              <p className="text-[13px] font-semibold text-foreground">Basic metrics</p>
+              <p className="text-xs text-muted">
+                Gameplane version, number of servers, number of templates.
+              </p>
+            </div>
+            <div className="flex min-w-0 flex-1 flex-col gap-1">
+              <p className="text-[13px] font-semibold text-foreground">Extended metrics</p>
+              <p className="text-xs text-muted">
+                Kubernetes version, distribution, CPU architecture and node-count band; servers
+                per official game module (others counted as custom); which optional features are
+                in use; and a random install ID.
+              </p>
+            </div>
+          </div>
+          {failed && (
+            <p role="alert" className="text-xs text-danger">
+              Could not save your choice. Try again.
+            </p>
+          )}
+          <div className="flex flex-wrap items-center gap-2">
+            <Button variant="primary" size="sm" isDisabled={ack.isPending} onPress={() => ack.mutate("keep")}>
+              Keep sharing
+            </Button>
+            <Button variant="outline" size="sm" isDisabled={ack.isPending} onPress={() => ack.mutate("extended-off")}>
+              Turn off extended
+            </Button>
+            <Button variant="outline" size="sm" isDisabled={ack.isPending} onPress={() => ack.mutate("all-off")}>
+              Turn off all
+            </Button>
+            <div className="ml-auto flex items-center gap-2.5">
+              <button type="button" onClick={onOpenSettings} className={linkClass}>
+                Open Telemetry settings
+              </button>
+              <span aria-hidden="true" className="select-none text-muted">·</span>
+              <a href={TELEMETRY_STATEMENT_URL} target="_blank" rel="noopener noreferrer" className={linkClass}>
+                Data-handling statement
+              </a>
+            </div>
+          </div>
+        </div>
+      </section>
+    </div>
+  );
+}
diff --git a/web/src/lib/api.test.ts b/web/src/lib/api.test.ts
index 3eac1fdee..19ee0f112 100644
--- a/web/src/lib/api.test.ts
+++ b/web/src/lib/api.test.ts
@@ -1,5 +1,13 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { api, APIError, Captures, Shares, createRequestClient, type CaptureStartBody } from "./api";
+import {
+  api,
+  APIError,
+  Captures,
+  Shares,
+  Telemetry,
+  createRequestClient,
+  type CaptureStartBody,
+} from "./api";
 import { HttpResponse } from "msw";
 
 // Mock the cluster module to control getCurrentCluster
@@ -868,3 +876,43 @@ describe("Shares.start()", () => {
     await expect(Shares.start("tok_error")).rejects.toBeInstanceOf(APIError);
   });
 });
+
+describe("Telemetry notice client", () => {
+  it("GETs /admin/telemetry/notice and returns the pending notice", async () => {
+    fetchMock.mockResolvedValueOnce(
+      jsonRes(200, {
+        pending: true,
+        destination: { kind: "bundled", host: "receiver.test" },
+        fields: { basic: ["version"], extended: ["installId"] },
+      })
+    );
+    const notice = await Telemetry.notice();
+    const [url, init] = fetchMock.mock.calls[0];
+    expect(url).toBe("/admin/telemetry/notice");
+    expect(init.method).toBe("GET");
+    expect(notice.pending).toBe(true);
+    expect(notice.destination?.host).toBe("receiver.test");
+  });
+
+  it("returns only pending:false when the notice is not pending", async () => {
+    fetchMock.mockResolvedValueOnce(jsonRes(200, { pending: false }));
+    expect(await Telemetry.notice()).toEqual({ pending: false });
+  });
+
+  it.each(["seen", "keep", "extended-off", "all-off"] as const)(
+    "POSTs the %s action as a JSON body",
+    async (action) => {
+      fetchMock.mockResolvedValueOnce(new Response(null, { status: 204 }));
+      await expect(Telemetry.ack(action)).resolves.toBeUndefined();
+      const [url, init] = fetchMock.mock.calls[0];
+      expect(url).toBe("/admin/telemetry/notice");
+      expect(init.method).toBe("POST");
+      expect(JSON.parse(init.body as string)).toEqual({ action });
+    }
+  );
+
+  it("surfaces a 409 (notice not pending) as an APIError", async () => {
+    fetchMock.mockResolvedValueOnce(new Response("telemetry notice is not pending", { status: 409 }));
+    await expect(Telemetry.ack("keep")).rejects.toMatchObject({ status: 409 });
+  });
+});
diff --git a/web/src/lib/api.ts b/web/src/lib/api.ts
index c3571bdd4..bea5f4dfc 100644
--- a/web/src/lib/api.ts
+++ b/web/src/lib/api.ts
@@ -225,6 +225,93 @@ export const Config = {
     ),
 };
 
+// Telemetry notice types mirror contracts/api-telemetry-http.md (spec 022).
+export type TelemetryNoticeAction = "seen" | "keep" | "extended-off" | "all-off";
+
+export interface TelemetryDestination {
+  kind: "default" | "custom" | "bundled" | "disabled" | "none";
+  // The URL host only; null for the disabled and none kinds.
+  host: string | null;
+}
+
+// GET /admin/telemetry/notice. When pending is false the other keys are
+// omitted, so a caller without config:manage gets exactly {"pending":false}.
+export interface TelemetryNotice {
+  pending: boolean;
+  destination?: TelemetryDestination;
+  fields?: { basic: string[]; extended: string[] };
+}
+
+// GET /admin/telemetry (contracts/api-telemetry-http.md; api/internal/handlers/telemetry.go).
+export interface TelemetryConsent {
+  basic: boolean;
+  extended: boolean;
+  source: "default" | "legacy" | "admin";
+}
+
+export interface TelemetryStatus {
+  lastAttemptAt: string | null;
+  lastSuccessAt: string | null;
+  lastOutcome: "never" | "ok" | "failed";
+  lastIdRotationAt: string | null;
+}
+
+export interface TelemetryPreviewExt {
+  schema: number;
+  installId: string;
+  env: { k8s: string; distro: string; arch: string[]; nodes: string };
+  games: { official: Record<string, number>; custom: number };
+  features: {
+    wakeOnConnect: boolean;
+    tunnels: string[];
+    capture: boolean;
+    backups: boolean;
+    sso: boolean;
+    auditForwarding: boolean;
+    clusters: string;
+    db: string;
+    language: string;
+  };
+  key: string;
+  sentAt: string;
+}
+
+// The exact report the reporter would send now (telemetryschema.Report).
+export interface TelemetryPreview {
+  version: string;
+  servers: number;
+  templates: number;
+  ext?: TelemetryPreviewExt;
+}
+
+export interface TelemetryInfo {
+  destination: TelemetryDestination;
+  // When true the stored consent is reported but has no effect.
+  operatorDisabled: boolean;
+  consent: TelemetryConsent;
+  // null whenever extended is off.
+  installId: string | null;
+  // null when basic is off or the destination is disabled/none.
+  preview: TelemetryPreview | null;
+  status: TelemetryStatus;
+}
+
+export const Telemetry = {
+  // GET /admin/telemetry (config:read).
+  get: () => api<TelemetryInfo>("/admin/telemetry"),
+  // POST /admin/telemetry/install-id (config:manage) — rotates the install ID.
+  // 409 when extended is off or the operator disabled telemetry.
+  resetInstallId: () =>
+    api<{ installId: string }>("/admin/telemetry/install-id", { method: "POST" }),
+  // GET /admin/telemetry/notice — the first-login notice for the caller.
+  notice: () => api<TelemetryNotice>("/admin/telemetry/notice"),
+  // POST /admin/telemetry/notice — "seen" records that the notice was rendered
+  // (no ack, idempotent); the other actions dismiss it. Every action answers
+  // 204, and a 409 means the notice was not pending.
+  ack: (action: TelemetryNoticeAction) =>
+    api<void>("/admin/telemetry/notice", { method: "POST", body: { action } }),
+};
+
 // ShareLinkCreateBody is the discriminated create-request shape callers
 // build: exactly one of an absolute `expiresAt` instant or `neverExpires:
 // true` (OD-1/OD-5), or the deprecated-for-one-release relative `expiresIn`
diff --git a/web/src/lib/config.ts b/web/src/lib/config.ts
index d56ca82f3..5868c7184 100644
--- a/web/src/lib/config.ts
+++ b/web/src/lib/config.ts
@@ -85,6 +85,9 @@ export interface NotificationsCfg {
 
 export interface TelemetryCfg {
   sendMetrics: boolean;
+  // Extended tier (spec 022). The server saves it as false whenever
+  // sendMetrics is false.
+  extended: boolean;
 }
 
 // Mod-registry providers that take an admin-configured API key (mirrors
diff --git a/web/src/lib/links.ts b/web/src/lib/links.ts
new file mode 100644
index 000000000..66f9020dc
--- /dev/null
+++ b/web/src/lib/links.ts
@@ -0,0 +1,9 @@
+/**
+ * Single source for external documentation links.
+ *
+ * TELEMETRY_STATEMENT_URL is the data-handling statement page (spec 022,
+ * OPEN-DECISIONS OD-2). It lives on the project website at gameplane.net
+ * (OD-1); it must match the copies in docs/install.md, docs/security.md,
+ * docs/telemetry-provider.md and CHANGELOG.md.
+ */
+export const TELEMETRY_STATEMENT_URL = "https://gameplane.net/telemetry/";
diff --git a/web/src/routes/AdminSettings.test.tsx b/web/src/routes/AdminSettings.test.tsx
index 89595fd23..1e02b730c 100644
--- a/web/src/routes/AdminSettings.test.tsx
+++ b/web/src/routes/AdminSettings.test.tsx
@@ -320,25 +320,32 @@ describe("AdminSettingsPage", () => {
   });
 
   it("shows telemetry toggle and saves setting", async () => {
+    let body: unknown;
     server.use(
       http.get("/admin/config", () =>
         HttpResponse.json({
           general: { instanceName: "", externalURL: "", defaultNamespace: "" },
-          telemetry: { sendMetrics: false },
+          telemetry: { sendMetrics: false, extended: false },
         }),
       ),
-      http.put("/admin/config/telemetry", () => new HttpResponse(null, { status: 204 })),
+      http.put("/admin/config/telemetry", async ({ request }) => {
+        body = await request.json();
+        return new HttpResponse(null, { status: 204 });
+      }),
     );
     renderWithQuery(<AdminSettingsPage />);
     await userEvent.click(screen.getByRole("button", { name: /Telemetry/i }));
     // The Switch component renders role="switch" (a <button>), not a
     // native checkbox input; assert via aria-checked, matching
-    // switch.test.tsx's own convention for this component.
-    const toggle = await screen.findByRole("switch");
+    // switch.test.tsx's own convention for this component. There are two
+    // switches now (basic and extended), so select by accessible name.
+    expect(await screen.findAllByRole("switch")).toHaveLength(2);
+    const toggle = screen.getByRole("switch", { name: "Enable telemetry" });
     expect(toggle).toHaveAttribute("aria-checked", "false");
     await userEvent.click(toggle);
     await userEvent.click(screen.getByRole("button", { name: /Save changes/i }));
     await waitFor(() => expect(screen.getByText("Saved")).toBeInTheDocument());
+    expect(body).toEqual({ sendMetrics: true, extended: false });
   });
 
   it("navigates to Updates section and shows update channel", async () => {
diff --git a/web/src/routes/AdminSettings.tsx b/web/src/routes/AdminSettings.tsx
index a8fd15354..75f8f8445 100644
--- a/web/src/routes/AdminSettings.tsx
+++ b/web/src/routes/AdminSettings.tsx
@@ -5,10 +5,13 @@ import {
   Archive,
   Bell,
   BellRing,
+  CircleHelp,
   CircleSlash2,
   Cog,
   Flame,
   Gamepad2,
+  Globe,
+  House,
   Key,
   Lock,
   Mail,
@@ -42,6 +45,8 @@ import { SlackIcon } from "@/components/ui/SlackIcon";
 import { SettingsNav, type SettingsSectionKey } from "@/components/ui/SettingsNav";
 import { cn, formatRelative } from "@/lib/utils";
 import { errorText } from "@/lib/errors";
+import { Telemetry, type TelemetryInfo } from "@/lib/api";
+import { TELEMETRY_STATEMENT_URL } from "@/lib/links";
 import { Auth, AuthProviders, BackupDestinations, Cluster, ModRegistries, Notifications, type SinkSecretBody } from "@/lib/endpoints";
 import { can, useMe } from "@/lib/auth";
 import type { ClusterInfo } from "@/types";
@@ -1445,7 +1450,7 @@ function TestButton({ dirty, disabled, onPress, children }: { dirty: boolean; di
   );
 }
 
-function TelemetrySwitch({ isSelected, onChange, ariaLabel }: { isSelected: boolean; onChange: (value: boolean) => void; ariaLabel: string }) {
+function TelemetrySwitch({ isSelected, onChange, ariaLabel, isDisabled }: { isSelected: boolean; onChange: (value: boolean) => void; ariaLabel: string; isDisabled?: boolean }) {
   const containerRef = useRef<HTMLDivElement>(null);
   useEffect(() => {
     if (containerRef.current) {
@@ -1461,6 +1466,7 @@ function TelemetrySwitch({ isSelected, onChange, ariaLabel }: { isSelected: bool
       <Switch
         aria-label={ariaLabel}
         isSelected={isSelected}
+        isDisabled={isDisabled}
         onChange={onChange}
       >
         <Switch.Content>
@@ -1612,34 +1618,254 @@ function NotificationsSection({ initial }: { initial?: NotificationsCfg }) {
   );
 }
 
-const defaultTelemetry: TelemetryCfg = { sendMetrics: false };
+const defaultTelemetry: TelemetryCfg = { sendMetrics: false, extended: false };
+
+const TELEMETRY_KEY = ["telemetry"] as const;
+
+// Intl output is "Oct 6, 2026, 09:12" for these options; the section always
+// renders UTC so the text matches what the receiver stores.
+function formatUtc(iso: string, withTime: boolean): string {
+  const d = new Date(iso);
+  if (Number.isNaN(d.getTime())) return iso;
+  const text = new Intl.DateTimeFormat("en-US", {
+    month: "short",
+    day: "numeric",
+    year: "numeric",
+    ...(withTime ? { hour: "2-digit", minute: "2-digit", hourCycle: "h23" as const } : {}),
+    timeZone: "UTC",
+  }).format(d);
+  return withTime ? `${text} UTC` : text;
+}
+
+const destinationCopy: Record<
+  Exclude<TelemetryInfo["destination"]["kind"], "disabled" | "none">,
+  { detail: string; badge: string }
+> = {
+  default: { detail: "The Gameplane project's telemetry service.", badge: "Project default" },
+  custom: {
+    detail: "Custom destination set by your operator. Nothing is sent to the Gameplane project.",
+    badge: "Custom",
+  },
+  bundled: {
+    detail: "The receiver bundled with this install. Reports stay inside your cluster.",
+    badge: "Bundled",
+  },
+};
+
+function TelemetryDestinationBlock({ info }: { info: TelemetryInfo }) {
+  const kind = info.destination.kind;
+  if (info.operatorDisabled || kind === "disabled") {
+    return (
+      <div className="flex items-start gap-3 rounded-md border border-warning/40 bg-warning/10 p-3">
+        <CircleHelp className="mt-0.5 h-4 w-4 shrink-0 text-warning-soft-foreground" />
+        <div className="flex-1">
+          <div className="text-sm font-medium">Telemetry is disabled by the operator.</div>
+          <div className="pt-0.5 text-xs text-muted">
+            No data of either kind is sent and no telemetry destination is contacted, whatever the
+            switches below say. Only an operator can change this, at install time.
+          </div>
+        </div>
+        <span className="rounded bg-warning/20 px-2 py-0.5 text-xs text-warning-soft-foreground">Disabled</span>
+      </div>
+    );
+  }
+  if (kind === "none") {
+    return (
+      <div className="flex items-start gap-3 rounded-md bg-surface p-3">
+        <CircleHelp className="mt-0.5 h-4 w-4 shrink-0 text-accent" />
+        <div className="flex-1">
+          <div className="text-sm font-medium">No telemetry destination configured.</div>
+          <div className="pt-0.5 text-xs text-muted">
+            Nothing is sent. An operator can set a custom or bundled destination at install time.
+          </div>
+        </div>
+        <span className="rounded bg-background px-2 py-0.5 text-xs">No destination</span>
+      </div>
+    );
+  }
+  const copy = destinationCopy[kind];
+  const Icon = kind === "bundled" ? House : kind === "custom" ? CircleHelp : Globe;
+  return (
+    <div className="flex items-start gap-3 rounded-md bg-surface p-3">
+      <Icon className="mt-0.5 h-4 w-4 shrink-0 text-accent" />
+      <div className="flex-1">
+        <div className="text-sm font-medium">Sending to {info.destination.host}</div>
+        <div className="pt-0.5 text-xs text-muted">{copy.detail}</div>
+      </div>
+      <span className="rounded bg-background px-2 py-0.5 text-xs">{copy.badge}</span>
+      <a
+        href={TELEMETRY_STATEMENT_URL}
+        target="_blank"
+        rel="noreferrer"
+        className="text-xs text-accent hover:underline"
+      >
+        Data-handling statement
+      </a>
+    </div>
+  );
+}
+
+function TelemetryPreviewBlock({ info }: { info: TelemetryInfo }) {
+  let empty: string | null = null;
+  if (info.operatorDisabled || info.destination.kind === "disabled") {
+    empty = "Nothing to preview: telemetry is disabled by the operator.";
+  } else if (info.destination.kind === "none") {
+    empty = "Nothing to preview: no destination is configured.";
+  } else if (!info.preview) {
+    empty = "Nothing to preview: basic usage metrics are off.";
+  }
+  return (
+    <div className="space-y-1.5">
+      <div className="text-sm font-medium">Next report preview</div>
+      <div className="text-xs text-muted">Exactly what the next report contains. Read-only.</div>
+      {empty || !info.preview ? (
+        <div className="rounded-md border border-border p-3 text-xs text-muted">{empty}</div>
+      ) : (
+        <pre
+          role="region"
+          aria-label="Next report JSON"
+          tabIndex={0}
+          className="overflow-x-auto rounded-md border border-border bg-background p-3 font-mono text-xs"
+        >
+          {JSON.stringify(info.preview, null, 2)}
+        </pre>
+      )}
+    </div>
+  );
+}
+
+function TelemetryStatusLines({ info }: { info: TelemetryInfo }) {
+  const { status } = info;
+  let text: string;
+  if (status.lastOutcome === "ok") {
+    text = `Last report sent successfully on ${status.lastSuccessAt ? formatUtc(status.lastSuccessAt, true) : "an earlier attempt"}.`;
+  } else if (status.lastOutcome === "failed") {
+    text = status.lastSuccessAt
+      ? `Last attempt failed, will retry. Last successful report: ${formatUtc(status.lastSuccessAt, true)}.`
+      : "Last attempt failed, will retry. No report has been delivered yet.";
+  } else {
+    text = "No report sent yet.";
+  }
+  return (
+    <div className="space-y-1 text-xs text-muted">
+      <div>{text}</div>
+      {status.lastIdRotationAt && (
+        <div>
+          Install ID replaced on {formatUtc(status.lastIdRotationAt, false)}: the destination
+          reported it was in use by another key.
+        </div>
+      )}
+    </div>
+  );
+}
 
 function TelemetrySection({ initial }: { initial?: TelemetryCfg }) {
   const f = useSectionForm<TelemetryCfg>(initial ?? defaultTelemetry, "telemetry");
+  const qc = useQueryClient();
+  const infoQ = useQuery({ queryKey: TELEMETRY_KEY, queryFn: () => Telemetry.get() });
+  const info = infoQ.data;
+  const [confirmingReset, setConfirmingReset] = useState(false);
+  const reset = useMutation({
+    mutationFn: () => Telemetry.resetInstallId(),
+    onSuccess: () => {
+      setConfirmingReset(false);
+      return qc.invalidateQueries({ queryKey: TELEMETRY_KEY });
+    },
+    onError: () => setConfirmingReset(false),
+  });
+  // A saved change alters the preview, the install ID and the status.
+  useEffect(() => {
+    if (f.saved) void qc.invalidateQueries({ queryKey: TELEMETRY_KEY });
+  }, [f.saved, qc]);
+
+  const operatorDisabled = info?.operatorDisabled === true || info?.destination.kind === "disabled";
+  // The operator switch overrides stored consent: show both off and inert.
+  const basicOn = !operatorDisabled && f.draft.sendMetrics;
+  const extendedOn = basicOn && f.draft.extended;
+  const installId = info?.installId ?? null;
+
   return (
     <SectionCard
       title="Telemetry"
-      subtitle="Anonymous usage metrics help us prioritize work."
+      subtitle="Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."
       footer={
         <>
           <SaveStatus pending={f.pending} error={f.error} saved={f.saved} />
-          <Button onPress={f.save} isDisabled={f.pending}>Save changes</Button>
+          <Button onPress={f.save} isDisabled={f.pending || operatorDisabled}>Save changes</Button>
         </>
       }
     >
+      {info && <TelemetryDestinationBlock info={info} />}
       <div className="flex items-center justify-between">
         <div>
-          <div className="text-sm">Send anonymous usage metrics</div>
+          <div className="text-sm">Send basic usage metrics</div>
+          <div className="pt-0.5 text-xs text-muted">
+            Gameplane version, number of servers and number of templates.
+          </div>
+        </div>
+        <TelemetrySwitch
+          ariaLabel={basicOn ? "Disable telemetry" : "Enable telemetry"}
+          isSelected={basicOn}
+          isDisabled={operatorDisabled}
+          // Turning basic off turns extended off with it (spec Q7).
+          onChange={(v) => f.update(v ? { sendMetrics: true } : { sendMetrics: false, extended: false })}
+        />
+      </div>
+      <div className="flex items-center justify-between pl-8">
+        <div>
+          <div className="text-sm">Send extended usage metrics</div>
           <div className="pt-0.5 text-xs text-muted">
-            No server names, player counts, or identifying data.
+            {!operatorDisabled && !basicOn
+              ? "Turn on basic usage metrics to enable extended usage metrics."
+              : "Adds Kubernetes version, distribution, CPU architecture, node-count band, servers per official game module, which optional features are in use, and a random install ID."}
           </div>
         </div>
         <TelemetrySwitch
-          ariaLabel={f.draft.sendMetrics ? "Disable telemetry" : "Enable telemetry"}
-          isSelected={f.draft.sendMetrics}
-          onChange={(v) => f.update({ sendMetrics: v })}
+          ariaLabel={extendedOn ? "Disable extended telemetry" : "Enable extended telemetry"}
+          isSelected={extendedOn}
+          isDisabled={operatorDisabled || !basicOn}
+          onChange={(v) => f.update({ extended: v })}
         />
       </div>
+      <div className="flex items-center justify-between pl-8">
+        <div>
+          <div className="text-sm">Install ID</div>
+          {installId ? (
+            <>
+              <div className="font-mono text-xs">{installId}</div>
+              <div className="pt-0.5 text-xs text-muted">
+                Random and anonymous. Reset it to start reporting under a new ID; the old ID is never
+                sent again.
+              </div>
+            </>
+          ) : (
+            <div className="pt-0.5 text-xs text-muted">No install ID while extended metrics are off.</div>
+          )}
+        </div>
+        <Button
+          variant="outline"
+          size="sm"
+          isDisabled={!installId || operatorDisabled || reset.isPending}
+          onPress={() => setConfirmingReset(true)}
+        >
+          Reset ID
+        </Button>
+      </div>
+      {reset.error && (
+        <div className="pl-8 text-xs text-danger">{errorText(reset.error, "Could not reset the install ID")}</div>
+      )}
+      {info && <TelemetryPreviewBlock info={info} />}
+      {info && !operatorDisabled && info.destination.kind !== "none" && <TelemetryStatusLines info={info} />}
+      <ConfirmDialog
+        open={confirmingReset}
+        onOpenChange={setConfirmingReset}
+        title="Reset install ID?"
+        confirmLabel="Reset ID"
+        destructive
+        busy={reset.isPending}
+        onConfirm={() => reset.mutate()}
+        description={`This replaces your random install ID ${installId ?? ""} with a new one. The old ID is never sent again, and the destination cannot link the old and new IDs. The next report is sent under the new ID.`}
+      />
     </SectionCard>
   );
 }
diff --git a/web/src/routes/AdminSettings_sections.test.tsx b/web/src/routes/AdminSettings_sections.test.tsx
index 86da36aa6..107f46068 100644
--- a/web/src/routes/AdminSettings_sections.test.tsx
+++ b/web/src/routes/AdminSettings_sections.test.tsx
@@ -308,12 +308,21 @@ describe("AdminSettings sections", () => {
   });
 
   it("toggles telemetry and saves", async () => {
+    let body: unknown;
+    server.use(
+      http.put("/admin/config/telemetry", async ({ request }) => {
+        body = await request.json();
+        return new HttpResponse(null, { status: 204 });
+      }),
+    );
     renderWithQuery(<AdminSettingsPage />);
     await gotoSection(/Telemetry/i);
-    const sw = await screen.findByRole("switch", { name: /Enable telemetry/i });
+    const sw = await screen.findByRole("switch", { name: "Enable telemetry" });
     await userEvent.click(sw);
+    expect(screen.getByRole("switch", { name: "Disable telemetry" })).toHaveAttribute("aria-checked", "true");
     await userEvent.click(screen.getByRole("button", { name: /Save changes/i }));
     expect(await screen.findByText("Saved")).toBeInTheDocument();
+    expect(body).toEqual({ sendMetrics: true, extended: false });
   });
 
   it("shows the read-only update channel from /cluster/info", async () => {
diff --git a/web/src/routes/AdminSettings_telemetry.test.tsx b/web/src/routes/AdminSettings_telemetry.test.tsx
new file mode 100644
index 000000000..c27efef6e
--- /dev/null
+++ b/web/src/routes/AdminSettings_telemetry.test.tsx
@@ -0,0 +1,423 @@
+import { describe, it, expect, vi } from "vitest";
+import type { ReactNode } from "react";
+import { http, HttpResponse } from "msw";
+import { screen, waitFor, within } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { server } from "@/test/server";
+import { renderWithQuery } from "@/test/render";
+import { makeConfig } from "@/test/factories";
+import type { TelemetryCfg } from "@/lib/config";
+import type { TelemetryInfo } from "@/lib/api";
+import { TELEMETRY_STATEMENT_URL } from "@/lib/links";
+
+vi.mock("@tanstack/react-router", () => ({
+  Link: ({ children, to, ...rest }: { children: ReactNode; to: string } & Record<string, unknown>) => (
+    <a href={to} {...rest}>{children}</a>
+  ),
+}));
+
+import { AdminSettingsPage } from "./AdminSettings";
+
+const ID = "3f1c2a9e-8b4d-4e57-9a61-0c2d7e5b9f10";
+
+const PREVIEW: NonNullable<TelemetryInfo["preview"]> = {
+  version: "0.3.0",
+  servers: 3,
+  templates: 7,
+  ext: {
+    schema: 1,
+    installId: ID,
+    env: { k8s: "1.31", distro: "k3s", arch: ["amd64"], nodes: "1" },
+    games: { official: { "minecraft-java": 2, terraria: 1 }, custom: 0 },
+    features: {
+      wakeOnConnect: true, tunnels: ["playit"], capture: false, backups: true,
+      sso: false, auditForwarding: false, clusters: "1", db: "sqlite", language: "en",
+    },
+    key: "pV0mY3Qn8wK2b7cXlR4sTt9uJ1eHaZ6dFgQmNoP5rSk",
+    sentAt: "2026-10-06T09:12:44Z",
+  },
+};
+
+function makeInfo(over: Partial<TelemetryInfo> = {}): TelemetryInfo {
+  return {
+    destination: { kind: "default", host: "telemetry.example.org" },
+    operatorDisabled: false,
+    consent: { basic: true, extended: true, source: "default" },
+    installId: ID,
+    preview: PREVIEW,
+    status: {
+      lastAttemptAt: "2026-10-06T09:12:44Z",
+      lastSuccessAt: "2026-10-06T09:12:44Z",
+      lastOutcome: "ok",
+      lastIdRotationAt: null,
+    },
+    ...over,
+  };
+}
+
+// Serves the config and telemetry info; returns request counters/bodies.
+function setup(cfg: TelemetryCfg, info: TelemetryInfo | "error") {
+  const seen = { infoGets: 0, puts: [] as unknown[], resets: 0 };
+  server.use(
+    http.get("/admin/config", () => HttpResponse.json(makeConfig({ telemetry: cfg }))),
+    http.get("/admin/telemetry", () => {
+      seen.infoGets += 1;
+      return info === "error"
+        ? HttpResponse.text("boom", { status: 500 })
+        : HttpResponse.json(info);
+    }),
+    http.put("/admin/config/telemetry", async ({ request }) => {
+      seen.puts.push(await request.json());
+      return new HttpResponse(null, { status: 204 });
+    }),
+  );
+  return seen;
+}
+
+async function open() {
+  await screen.findByRole("heading", { name: /Admin settings/i });
+  await userEvent.click(await screen.findByRole("button", { name: /Telemetry/i }));
+}
+
+// A disabled HeroUI switch may expose `disabled`, `aria-disabled` or
+// `data-disabled` depending on the element carrying role="switch".
+function switchDisabled(el: HTMLElement): boolean {
+  return (
+    el.hasAttribute("disabled") ||
+    el.getAttribute("aria-disabled") === "true" ||
+    el.getAttribute("data-disabled") === "true"
+  );
+}
+
+const ON: TelemetryCfg = { sendMetrics: true, extended: true };
+const BASIC: TelemetryCfg = { sendMetrics: true, extended: false };
+const OFF: TelemetryCfg = { sendMetrics: false, extended: false };
+
+describe("AdminSettings telemetry: destination", () => {
+  it("shows the project default with a statement link", async () => {
+    setup(ON, makeInfo());
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Sending to telemetry.example.org")).toBeInTheDocument();
+    expect(screen.getByText("Project default")).toBeInTheDocument();
+    expect(screen.getByText("The Gameplane project's telemetry service.")).toBeInTheDocument();
+    expect(screen.getByRole("link", { name: "Data-handling statement" })).toHaveAttribute(
+      "href",
+      TELEMETRY_STATEMENT_URL,
+    );
+  });
+
+  it("shows a custom destination", async () => {
+    setup(ON, makeInfo({ destination: { kind: "custom", host: "telemetry.corp.example.net" } }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Sending to telemetry.corp.example.net")).toBeInTheDocument();
+    expect(screen.getByText("Custom")).toBeInTheDocument();
+    expect(
+      screen.getByText("Custom destination set by your operator. Nothing is sent to the Gameplane project."),
+    ).toBeInTheDocument();
+    expect(screen.getByRole("link", { name: "Data-handling statement" })).toBeInTheDocument();
+  });
+
+  it("shows the bundled receiver", async () => {
+    setup(BASIC, makeInfo({
+      destination: { kind: "bundled", host: "gameplane-telemetry-receiver.gameplane.svc" },
+      installId: null,
+      preview: { version: "0.3.0", servers: 5, templates: 7 },
+    }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Sending to gameplane-telemetry-receiver.gameplane.svc")).toBeInTheDocument();
+    expect(screen.getByText("Bundled")).toBeInTheDocument();
+    expect(screen.getByText("The receiver bundled with this install. Reports stay inside your cluster.")).toBeInTheDocument();
+  });
+
+  it("shows no destination", async () => {
+    setup(OFF, makeInfo({
+      destination: { kind: "none", host: null },
+      installId: null,
+      preview: null,
+    }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("No telemetry destination configured.")).toBeInTheDocument();
+    expect(screen.getByText("No destination")).toBeInTheDocument();
+    expect(screen.getByText("Nothing to preview: no destination is configured.")).toBeInTheDocument();
+    expect(screen.queryByRole("link", { name: "Data-handling statement" })).not.toBeInTheDocument();
+    expect(screen.queryByText(/No report sent yet|Last report sent|Last attempt failed/)).not.toBeInTheDocument();
+    // Basic stays operable when there is no destination.
+    expect(switchDisabled(screen.getByRole("switch", { name: "Enable telemetry" }))).toBe(false);
+  });
+
+  it("blocks both switches and saving when the operator disabled telemetry", async () => {
+    const seen = setup(ON, makeInfo({
+      destination: { kind: "disabled", host: null },
+      operatorDisabled: true,
+      installId: null,
+      preview: null,
+    }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Telemetry is disabled by the operator.")).toBeInTheDocument();
+    expect(screen.getByText("Disabled")).toBeInTheDocument();
+    expect(screen.getByText("Nothing to preview: telemetry is disabled by the operator.")).toBeInTheDocument();
+    // Stored consent is on, but the UI shows both off and inert.
+    const basic = screen.getByRole("switch", { name: "Enable telemetry" });
+    const ext = screen.getByRole("switch", { name: "Enable extended telemetry" });
+    expect(basic).toHaveAttribute("aria-checked", "false");
+    expect(ext).toHaveAttribute("aria-checked", "false");
+    expect(switchDisabled(basic)).toBe(true);
+    expect(switchDisabled(ext)).toBe(true);
+    expect(screen.getByRole("button", { name: "Save changes" })).toBeDisabled();
+    expect(screen.getByRole("button", { name: "Reset ID" })).toBeDisabled();
+    await userEvent.click(screen.getByRole("button", { name: "Save changes" }));
+    expect(seen.puts).toHaveLength(0);
+  });
+
+  it("also treats operatorDisabled without kind disabled as disabled", async () => {
+    setup(ON, makeInfo({ operatorDisabled: true }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Telemetry is disabled by the operator.")).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Save changes" })).toBeDisabled();
+  });
+
+  it("still renders and saves when GET /admin/telemetry fails", async () => {
+    const seen = setup(OFF, "error");
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("switch", { name: "Enable telemetry" }));
+    await userEvent.click(screen.getByRole("button", { name: "Save changes" }));
+    expect(await screen.findByText("Saved")).toBeInTheDocument();
+    expect(seen.puts).toEqual([{ sendMetrics: true, extended: false }]);
+    expect(screen.queryByText(/^Sending to/)).not.toBeInTheDocument();
+    expect(screen.getByText("No install ID while extended metrics are off.")).toBeInTheDocument();
+  });
+});
+
+describe("AdminSettings telemetry: switches", () => {
+  it("names the install ID in the subtitle", async () => {
+    setup(ON, makeInfo());
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(
+      await screen.findByText("Anonymous usage metrics help us prioritize work. Extended metrics include a random install ID."),
+    ).toBeInTheDocument();
+  });
+
+  it("disables and shows extended off while basic is off", async () => {
+    setup(OFF, makeInfo({ installId: null, preview: null }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    const ext = await screen.findByRole("switch", { name: "Enable extended telemetry" });
+    expect(ext).toHaveAttribute("aria-checked", "false");
+    expect(switchDisabled(ext)).toBe(true);
+    expect(screen.getByText("Turn on basic usage metrics to enable extended usage metrics.")).toBeInTheDocument();
+    expect(screen.getByText("Nothing to preview: basic usage metrics are off.")).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Reset ID" })).toBeDisabled();
+  });
+
+  it("enables extended once basic is turned on and saves both", async () => {
+    const seen = setup(OFF, makeInfo({ installId: null, preview: null }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("switch", { name: "Enable telemetry" }));
+    const ext = screen.getByRole("switch", { name: "Enable extended telemetry" });
+    expect(switchDisabled(ext)).toBe(false);
+    expect(screen.getByText(/Adds Kubernetes version, distribution/)).toBeInTheDocument();
+    await userEvent.click(ext);
+    expect(screen.getByRole("switch", { name: "Disable extended telemetry" })).toHaveAttribute("aria-checked", "true");
+    await userEvent.click(screen.getByRole("button", { name: "Save changes" }));
+    expect(await screen.findByText("Saved")).toBeInTheDocument();
+    expect(seen.puts).toEqual([{ sendMetrics: true, extended: true }]);
+  });
+
+  it("turning basic off clears extended in the saved body", async () => {
+    const seen = setup(ON, makeInfo());
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("switch", { name: "Disable telemetry" }));
+    const ext = screen.getByRole("switch", { name: "Enable extended telemetry" });
+    expect(ext).toHaveAttribute("aria-checked", "false");
+    expect(switchDisabled(ext)).toBe(true);
+    await userEvent.click(screen.getByRole("button", { name: "Save changes" }));
+    expect(await screen.findByText("Saved")).toBeInTheDocument();
+    expect(seen.puts).toEqual([{ sendMetrics: false, extended: false }]);
+  });
+
+  it("refetches the telemetry info after a save", async () => {
+    const seen = setup(OFF, makeInfo({ installId: null, preview: null }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("switch", { name: "Enable telemetry" }));
+    const before = seen.infoGets;
+    await userEvent.click(screen.getByRole("button", { name: "Save changes" }));
+    await screen.findByText("Saved");
+    await waitFor(() => expect(seen.infoGets).toBeGreaterThan(before));
+  });
+});
+
+describe("AdminSettings telemetry: install ID", () => {
+  it("shows the ID and help text when extended is on", async () => {
+    setup(ON, makeInfo());
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText(ID)).toBeInTheDocument();
+    expect(screen.getByText(/Random and anonymous\. Reset it to start reporting under a new ID/)).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Reset ID" })).toBeEnabled();
+  });
+
+  it("shows the empty text and a disabled reset when there is no ID", async () => {
+    setup(BASIC, makeInfo({ installId: null, preview: { version: "0.3.0", servers: 5, templates: 7 } }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("No install ID while extended metrics are off.")).toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Reset ID" })).toBeDisabled();
+  });
+
+  it("resets the ID after confirmation and shows the new one", async () => {
+    const NEW_ID = "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee";
+    let current = ID;
+    const seen = setup(ON, makeInfo());
+    server.use(
+      http.get("/admin/telemetry", () => HttpResponse.json(makeInfo({ installId: current }))),
+      http.post("/admin/telemetry/install-id", () => {
+        seen.resets += 1;
+        current = NEW_ID;
+        return HttpResponse.json({ installId: NEW_ID });
+      }),
+    );
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("button", { name: "Reset ID" }));
+    const dialog = await screen.findByRole("alertdialog");
+    expect(within(dialog).getByText("Reset install ID?")).toBeInTheDocument();
+    expect(within(dialog).getByText(new RegExp(`replaces your random install ID ${ID} with a new one`))).toBeInTheDocument();
+    await userEvent.click(within(dialog).getByRole("button", { name: "Reset ID" }));
+    expect(await screen.findByText(NEW_ID)).toBeInTheDocument();
+    expect(seen.resets).toBe(1);
+    await waitFor(() => expect(screen.queryByRole("alertdialog")).not.toBeInTheDocument());
+  });
+
+  it("cancels the reset without calling the API", async () => {
+    const seen = setup(ON, makeInfo());
+    server.use(
+      http.post("/admin/telemetry/install-id", () => {
+        seen.resets += 1;
+        return HttpResponse.json({ installId: "x" });
+      }),
+    );
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("button", { name: "Reset ID" }));
+    const dialog = await screen.findByRole("alertdialog");
+    await userEvent.click(within(dialog).getByRole("button", { name: "Cancel" }));
+    await waitFor(() => expect(screen.queryByRole("alertdialog")).not.toBeInTheDocument());
+    expect(seen.resets).toBe(0);
+    expect(screen.getByText(ID)).toBeInTheDocument();
+  });
+
+  it("surfaces a reset failure", async () => {
+    setup(ON, makeInfo());
+    server.use(
+      http.post("/admin/telemetry/install-id", () => HttpResponse.text("extended telemetry is off", { status: 409 })),
+    );
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    await userEvent.click(await screen.findByRole("button", { name: "Reset ID" }));
+    const dialog = await screen.findByRole("alertdialog");
+    await userEvent.click(within(dialog).getByRole("button", { name: "Reset ID" }));
+    expect(await screen.findByText(/extended telemetry is off/i)).toBeInTheDocument();
+    expect(screen.getByText(ID)).toBeInTheDocument();
+  });
+});
+
+describe("AdminSettings telemetry: preview", () => {
+  it("renders the preview JSON read-only", async () => {
+    setup(ON, makeInfo());
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    const block = await screen.findByRole("region", { name: "Next report JSON" });
+    expect(block.textContent).toBe(JSON.stringify(PREVIEW, null, 2));
+    expect(screen.getByText("Next report preview")).toBeInTheDocument();
+    expect(screen.getByText("Exactly what the next report contains. Read-only.")).toBeInTheDocument();
+  });
+
+  it("renders a basic-only preview without ext", async () => {
+    setup(BASIC, makeInfo({ installId: null, preview: { version: "0.3.0", servers: 5, templates: 7 } }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    const block = await screen.findByRole("region", { name: "Next report JSON" });
+    expect(block.textContent).toBe(JSON.stringify({ version: "0.3.0", servers: 5, templates: 7 }, null, 2));
+  });
+});
+
+describe("AdminSettings telemetry: status", () => {
+  const status = (over: Partial<TelemetryInfo["status"]>): TelemetryInfo["status"] => ({
+    lastAttemptAt: null, lastSuccessAt: null, lastOutcome: "never", lastIdRotationAt: null, ...over,
+  });
+
+  it("never", async () => {
+    setup(BASIC, makeInfo({ status: status({}) }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("No report sent yet.")).toBeInTheDocument();
+    expect(screen.queryByText(/Install ID replaced on/)).not.toBeInTheDocument();
+  });
+
+  it("ok", async () => {
+    setup(ON, makeInfo());
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Last report sent successfully on Oct 6, 2026, 09:12 UTC.")).toBeInTheDocument();
+  });
+
+  it("ok without a success timestamp falls back to a neutral phrase", async () => {
+    setup(ON, makeInfo({ status: status({ lastOutcome: "ok" }) }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Last report sent successfully on an earlier attempt.")).toBeInTheDocument();
+  });
+
+  it("failed with a previous success", async () => {
+    setup(ON, makeInfo({ status: status({ lastOutcome: "failed", lastSuccessAt: "2026-10-05T09:10:00Z" }) }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(
+      await screen.findByText("Last attempt failed, will retry. Last successful report: Oct 5, 2026, 09:10 UTC."),
+    ).toBeInTheDocument();
+  });
+
+  it("failed with no success yet", async () => {
+    setup(ON, makeInfo({ status: status({ lastOutcome: "failed" }) }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(
+      await screen.findByText("Last attempt failed, will retry. No report has been delivered yet."),
+    ).toBeInTheDocument();
+  });
+
+  it("shows the ID rotation line (T085/T087)", async () => {
+    setup(ON, makeInfo({
+      destination: { kind: "custom", host: "telemetry.corp.example.net" },
+      status: status({
+        lastOutcome: "failed",
+        lastSuccessAt: "2026-10-05T09:10:00Z",
+        lastIdRotationAt: "2026-10-04T08:00:00Z",
+      }),
+    }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(
+      await screen.findByText("Install ID replaced on Oct 4, 2026: the destination reported it was in use by another key."),
+    ).toBeInTheDocument();
+    expect(screen.getByText(/Last attempt failed, will retry/)).toBeInTheDocument();
+  });
+
+  it("prints an unparseable timestamp as received instead of crashing", async () => {
+    setup(ON, makeInfo({ status: status({ lastOutcome: "ok", lastSuccessAt: "not-a-date" }) }));
+    renderWithQuery(<AdminSettingsPage />);
+    await open();
+    expect(await screen.findByText("Last report sent successfully on not-a-date.")).toBeInTheDocument();
+  });
+});
diff --git a/web/src/test/browser-msw.ts b/web/src/test/browser-msw.ts
index 76425edaf..4072c2e43 100644
--- a/web/src/test/browser-msw.ts
+++ b/web/src/test/browser-msw.ts
@@ -11,8 +11,14 @@
 // When it is "sso-only", overrides /auth/providers to report no local-login
 // provider, so Login.tsx renders its SSO-only branch.
 
+import { http, HttpResponse } from "msw";
 import { setupWorker } from "msw/browser";
 import { handlers, buildScreenshotHandlers, buildSsoOnlyHandlers } from "./handlers";
+import { makeConfig } from "./factories";
+import type { TelemetryInfo, TelemetryPreview } from "@/lib/api";
+
+let noticePending = true;
+let telemetryInstallId = "3f2b8c1e-5d4a-4e7b-9c21-8a6f0d3e9b12";
 
 function getHandlerSet(): Parameters<typeof setupWorker>[0][] {
   // Wrap in try/catch in case localStorage is unavailable (e.g., sandboxed iframe)
@@ -25,6 +31,102 @@ function getHandlerSet(): Parameters<typeof setupWorker>[0][] {
       if (dataset === "sso-only") {
         return buildSsoOnlyHandlers();
       }
+      if (dataset === "telemetry-notice") {
+        return [
+          http.get("/admin/telemetry/notice", () =>
+            HttpResponse.json(
+              noticePending
+                ? { pending: true, destination: { kind: "default", host: "telemetry.example.org" } }
+                : { pending: false },
+            ),
+          ),
+          http.post("/admin/telemetry/notice", () => {
+            noticePending = false;
+            return new HttpResponse(null, { status: 204 });
+          }),
+          ...handlers,
+        ];
+      }
+      if (dataset === "telemetry-notice-bundled") {
+        return [
+          http.get("/admin/telemetry/notice", () =>
+            HttpResponse.json(
+              noticePending
+                ? { pending: true, destination: { kind: "bundled", host: "gameplane-telemetry-receiver.gameplane.svc" } }
+                : { pending: false },
+            ),
+          ),
+          http.post("/admin/telemetry/notice", () => {
+            noticePending = false;
+            return new HttpResponse(null, { status: 204 });
+          }),
+          ...handlers,
+        ];
+      }
+      if (dataset === "telemetry-on") {
+        const preview: TelemetryPreview = {
+          version: "v0.3.0",
+          servers: 3,
+          templates: 8,
+          ext: {
+            schema: 1,
+            installId: telemetryInstallId,
+            env: {
+              k8s: "v1.28.0",
+              distro: "ubuntu",
+              arch: ["amd64"],
+              nodes: "1",
+            },
+            games: {
+              official: { minecraft: 2, terraria: 1 },
+              custom: 0,
+            },
+            features: {
+              wakeOnConnect: true,
+              tunnels: ["frp"],
+              capture: true,
+              backups: true,
+              sso: false,
+              auditForwarding: true,
+              clusters: "1",
+              db: "sqlite",
+              language: "en",
+            },
+            key: "telemetry-key-preview",
+            sentAt: "2026-10-07T09:14:00Z",
+          },
+        };
+
+        const telemetryInfo: TelemetryInfo = {
+          destination: { kind: "default", host: "telemetry.gameplane.net" },
+          operatorDisabled: false,
+          consent: { basic: true, extended: true, source: "admin" },
+          installId: telemetryInstallId,
+          preview,
+          status: {
+            lastAttemptAt: "2026-10-07T09:14:00Z",
+            lastSuccessAt: "2026-10-07T09:14:00Z",
+            lastOutcome: "ok",
+            lastIdRotationAt: null,
+          },
+        };
+
+        return [
+          http.get("/admin/config", () =>
+            HttpResponse.json(makeConfig({ telemetry: { sendMetrics: true, extended: true } }))
+          ),
+          http.get("/admin/telemetry", () => HttpResponse.json(telemetryInfo)),
+          http.post("/admin/telemetry/install-id", () => {
+            telemetryInstallId = "9c1d7a42-2e6b-4f3a-b8d5-1e0f7c6a4b39";
+            telemetryInfo.installId = telemetryInstallId;
+            if (telemetryInfo.preview?.ext) {
+              telemetryInfo.preview.ext.installId = telemetryInstallId;
+            }
+            return HttpResponse.json({ installId: telemetryInstallId });
+          }),
+          ...handlers,
+        ];
+      }
     }
   } catch {
     // localStorage unavailable; fall through to default
diff --git a/web/src/test/factories.ts b/web/src/test/factories.ts
index 760f9e4a9..1e26f9fcd 100644
--- a/web/src/test/factories.ts
+++ b/web/src/test/factories.ts
@@ -302,7 +302,7 @@ export function makeConfig(over: Partial<AllConfig> = {}): AllConfig {
     },
     auth: { providers: [{ name: "local", kind: "local", enabled: true }] },
     notifications: { sinks: [] },
-    telemetry: { sendMetrics: false },
+    telemetry: { sendMetrics: false, extended: false },
     ...over,
   };
 }
diff --git a/web/src/test/handlers.ts b/web/src/test/handlers.ts
index c660388ba..3106b34a3 100644
--- a/web/src/test/handlers.ts
+++ b/web/src/test/handlers.ts
@@ -767,6 +767,22 @@ export const handlers = [
   ),
   http.get("/admin/config", () => HttpResponse.json(makeConfig())),
   http.put("/admin/config/:section", () => new HttpResponse(null, { status: 204 })),
+  // First-login telemetry notice (spec 022): not pending by default, so
+  // tests that render the app shell as an admin see no banner.
+  http.get("/admin/telemetry/notice", () => HttpResponse.json({ pending: false })),
+  http.post("/admin/telemetry/notice", () => new HttpResponse(null, { status: 204 })),
+  // Admin Settings -> Telemetry (spec 022): matches the default config
+  // (basic off, extended off), so the section renders the default destination.
+  http.get("/admin/telemetry", () =>
+    HttpResponse.json({
+      destination: { kind: "default", host: "telemetry.example.org" },
+      operatorDisabled: false,
+      consent: { basic: false, extended: false, source: "default" },
+      installId: null,
+      preview: null,
+      status: { lastAttemptAt: null, lastSuccessAt: null, lastOutcome: "never", lastIdRotationAt: null },
+    }),
+  ),
   http.post("/admin/notifications/sinks/:name/test", () =>
     HttpResponse.json({ delivered: true }),
   ),