diff --git a/CLAUDE.md b/CLAUDE.md
index 1d5506d..dddb01c 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -5,7 +5,7 @@
 Multi-tenant biometric auth platform | Marmara University CSE4297 | Hexagonal Architecture
 
 **Status**: Production deployed. Phases 0-8 complete. ~1,900+ tests. All services healthy.
-**Last verified**: 2026-05-12 (Carry-forward from 2026-05-11: 11 PRs shipped across 5 repos + Flyway repair on prod, V59/V60 applied, branch protection on 6 branches, master/main reconciled, INVESTIGATION 2026-05-07 P1 residue closed, tenant onboarding playbook + 8 ADRs + docs/ hierarchy consolidated, spoof-detector blink cache + EAR recalibration paper-P0. **Added today**: parent PR #57 (poster suite: A0 default + 4 style variants compliant with CSE4198 §5.1) + parent PR #58 (archived 18 dated 2026-04/2026-05-04 docs into `archive/2026-05/{audits,plans,reviews,roadmaps,sessions}/`, tidied `.gitignore`); bio PR #99 (closed issue #91: 32 stale unit tests + 3 asyncio-fixture leaks fixed, no production code touched, module-scoped TestClient pattern documented for follow-ups); bio Dependabot #97/#98 in flight (rebased post-#99). Submodule pointer for biometric-processor bumped to post-#99 main.)
+**Last verified**: 2026-05-28 (2026-05-28: **Suite launcher unified + security backlog.** Redesigned shared `<fivucsas-launcher>` web component (web-app #103) — hosted at `app.fivucsas.com/launcher.js` (ships in web-app `public/` → Hostinger deploy), it is the ONE cross-site app switcher + global EN/TR toggle. Rolled out to `demo`, `docs` (+3 subpages: biometric/identity/sdk), `amispoof` (web-app #104 removed the amispoof auto-skip), and `landing`; deleted every site's bespoke "FIVUCSAS suite" cross-site bar + per-site EN/TR switch, incl. the dashboard TopBar toggle (Settings-page language `<select>` kept). One toggle drives `html[data-lang]` (static sites localize via `[data-lang]` CSS) and fires a `fivucsas:languagechange` CustomEvent → `i18n.changeLanguage` for the React surfaces (dashboard + verify share `web-app/src/i18n/index.ts`; landing listens in `App.tsx`). `links.fivucsas.com` keeps its own controls — it IS the hub. **api #111 (S13)**: TOTP used-code replay prevention — bounded ~120s Redis `SET key 1 EX NX` marker per `(userId, timeStep)`, max ~3 in-window markers/user, in-memory fallback capped 50k; NOT an infinite blacklist; enrollment keeps plain verify (legit retries). **web #102 (F13/F9)**: surfaced swallowed voice-enrollment errors via `formatApiError` + the `OTP_ATTEMPTS_EXHAUSTED` state. **F12** voice threshold verified CORRECT (verify = cosine *similarity* `>=` 0.65; search = pgvector `<=>` cosine *distance* `< 0.6`) — no change. 2026-05-21: `links.fivucsas.com` hub — API tile → `/swagger-ui.html` with admin-IP "gated" badge (raw API root returned 401), Turkish i18n role-label fixes (English under `lang=tr` was İ-mangling Latin `i` under uppercase), team contact info, Ayşenur LinkedIn URL fix; poster author contact block + **regenerated A0 PDF/PNG** from `landing-website/public/poster/files/fivucsas-poster.html`; attribution — Ayşe Gülsüm Eren GitHub `@aysegulsum` + `marun.edu.tr` academic emails across `spoof-detector` + `practice-and-test` (forensic git-author records left intact); bilingual TR/EN switchers completed on `bys-demo`/`docs-site`/`verify-widget`. Consolidated into PR #69 → `master` (whole `fix/2026-05-12-bake-mini-fasnet-models` branch). NOTE: `api.fivucsas.com/` returns 401 by design (it's an API origin, not a page); Swagger/`/v3/api-docs`/`/actuator` are admin-IP gated (403 public), OIDC discovery is public (200). Carry-forward from 2026-05-12 / 2026-05-11: 11 PRs shipped across 5 repos + Flyway repair on prod, V59/V60 applied, branch protection on 6 branches, master/main reconciled, INVESTIGATION 2026-05-07 P1 residue closed, tenant onboarding playbook + 8 ADRs + docs/ hierarchy consolidated, spoof-detector blink cache + EAR recalibration paper-P0. **Added today**: parent PR #57 (poster suite: A0 default + 4 style variants compliant with CSE4198 §5.1) + parent PR #58 (archived 18 dated 2026-04/2026-05-04 docs into `archive/2026-05/{audits,plans,reviews,roadmaps,sessions}/`, tidied `.gitignore`); bio PR #99 (closed issue #91: 32 stale unit tests + 3 asyncio-fixture leaks fixed, no production code touched, module-scoped TestClient pattern documented for follow-ups); bio Dependabot #97/#98 in flight (rebased post-#99). Submodule pointer for biometric-processor bumped to post-#99 main.)
 
 ## Architecture
 
@@ -26,6 +26,7 @@ Storage: PostgreSQL 17 + pgvector | Redis 7.4
 | Landing Site | https://fivucsas.com |
 | Auth Widget / SDK | https://verify.fivucsas.com |
 | BYS Demo | https://demo.fivucsas.com |
+| amispoof — browser anti-spoof tester | https://amispoof.fivucsas.com/ (old https://fivucsas.com/amispoof/ now 301s to the subdomain) |
 | Uptime Monitor | https://status.fivucsas.com |
 | Swagger | https://api.fivucsas.com/swagger-ui.html (admin-IP-gated since IN-H2 2026-04-19; allowlist in `infra/traefik/config/dynamic.yml`) |
 
@@ -62,6 +63,38 @@ scp -P 65002 -r dist/* u349700627@46.202.158.52:~/domains/app.fivucsas.com/publi
 # BYS demo deploy
 scp -P 65002 -r /opt/projects/fivucsas/bys-demo/* u349700627@46.202.158.52:~/domains/demo.fivucsas.com/public_html/
 
+# amispoof deploy (TypeScript spoof-detector + webcam tester to amispoof.fivucsas.com)
+# Migrated 2026-05-17 from fivucsas.com/amispoof/ → amispoof.fivucsas.com subdomain.
+# Old URL serves a 301 to the new one via ~/domains/fivucsas.com/public_html/amispoof/.htaccess.
+# We deploy to the NEW subdomain root; the lazy chunks under lib/ + models/ need to be sent too.
+cd /opt/projects/fivucsas/spoof-detector/web
+npm run build && npm run amispoof:bundle
+scp -P 65002 amispoof/index.html amispoof/app.js u349700627@46.202.158.52:~/domains/amispoof.fivucsas.com/public_html/
+scp -P 65002 amispoof/lib/spoof-detector.js amispoof/lib/spoof-detector.js.map amispoof/lib/spoof-detector-*.js amispoof/lib/spoof-detector-*.js.map u349700627@46.202.158.52:~/domains/amispoof.fivucsas.com/public_html/lib/
+# Models only need to be sent once after the subdomain is created; subsequent deploys can skip these.
+# scp -P 65002 amispoof/models/minifasnet_v2.onnx amispoof/models/face_landmarker.task u349700627@46.202.158.52:~/domains/amispoof.fivucsas.com/public_html/models/
+
+# Deploy links hub (links.fivucsas.com — single static index.html)
+scp -P 65002 /opt/projects/fivucsas/links-website/index.html u349700627@46.202.158.52:~/domains/links.fivucsas.com/public_html/index.html
+
+# Deploy verify.fivucsas.com (hosted login + auth widget — Docker/nginx via Traefik, NOT Hostinger)
+# CRITICAL: build:verify needs VITE_API_BASE_URL. vite.verify.config.ts sets envDir=project root
+# so .env.production is loaded — without it env.ts throws at boot and /login renders blank
+# (#verify-root never mounts). Preserve the SDK files (fivucsas-auth*.js) at the html root.
+cd /opt/projects/fivucsas/web-app && npm run build:verify
+rsync -a --delete dist-verify/assets/ ../verify-widget/html/assets/   # assets/ = verify build only
+cp dist-verify/index.html ../verify-widget/html/index.html            # keep html/fivucsas-auth*.js
+cd /opt/projects/fivucsas/verify-widget
+docker compose -f docker-compose.prod.yml build && docker compose -f docker-compose.prod.yml up -d
+# Verify: curl -s https://verify.fivucsas.com/ | grep assets/index-  (new hash) — /login must mount React
+
+# Regenerate + deploy the poster PDF/PNG from the canonical HTML (A0 841×1189mm).
+# Canonical poster = landing-website/public/poster/files/fivucsas-poster.html (served at fivucsas.com/poster/files/; the viewer poster/index.html links only to files/*).
+cd /opt/projects/fivucsas/landing-website/public/poster/files
+google-chrome-stable --headless=new --no-sandbox --virtual-time-budget=20000 --no-pdf-header-footer --print-to-pdf=fivucsas-poster.pdf "file://$PWD/fivucsas-poster.html"
+google-chrome-stable --headless=new --no-sandbox --virtual-time-budget=20000 --window-size=3179,4494 --screenshot=fivucsas-poster-preview.png "file://$PWD/fivucsas-poster.html"
+scp -P 65002 fivucsas-poster.pdf fivucsas-poster-preview.png u349700627@46.202.158.52:~/domains/fivucsas.com/public_html/poster/files/
+
 # Check all services
 docker ps --format "table {{.Names}}\t{{.Status}}"
 ```
@@ -80,6 +113,7 @@ FIVUCSAS/                    # Parent repo (submodules)
 ├── docs/                    # Architecture docs + plans
 ├── bys-demo/                # Demo site (static HTML)
 ├── landing-website/         # Landing page → Hostinger
+├── links-website/           # links.fivucsas.com hub (static index.html) → Hostinger
 ├── practice-and-test/       # R&D experiments
 ├── scripts/                 # Deploy scripts, setup-twilio.sh
 └── ROADMAP.md               # Product roadmap
@@ -193,4 +227,5 @@ CX43 CPU-only — GPU ihtiyacı doğmaz (Faz 1-3 roadmap CPU-safe).
 - **Python**: Clean Architecture, Pydantic, async/await
 - No hardcoded secrets — use .env.prod
 - Do NOT dockerize static sites (keep on Hostinger)
-- Recommend first, implement only after explicit approval
+- Autonomy (2026-05-28): commit/push/merge (incl. PR `--admin`) without per-action approval; spawn concurrent agents for independent stacked tasks. Recommend-first is reserved for significant DESIGN/product choices and destructive/irreversible actions.
+- Always keep related docs up to date (CLAUDE.md, READMEs, deploy runbooks) and commit them with the change.
diff --git a/POSTER_BRIEF.md b/POSTER_BRIEF.md
new file mode 100644
index 0000000..47e82e8
--- /dev/null
+++ b/POSTER_BRIEF.md
@@ -0,0 +1,411 @@
+# FIVUCSAS — Poster Content Brief
+
+> Evidence-based extraction from the FIVUCSAS repository + submodules, dated 2026-05-19.
+> Every concrete claim is pinned to `path/to/file:line`. Items not present in the repo are marked `[NOT FOUND IN REPO]`. The downstream poster session must NOT invent numbers — `[NOT FOUND IN REPO]` is a valid value.
+>
+> Repo root: `/opt/projects/fivucsas/` · Submodules: `biometric-processor`, `client-apps`, `docs`, `identity-core-api`, `practice-and-test`, `spoof-detector`, `web-app`.
+
+---
+
+## 1. Elevator Pitch & Problem Framing
+
+### Short
+**FIVUCSAS** — *Face & Identity Verification using Cloud-based SaaS Models* — özel sektörün e-Devlet'idir: her uygulamaya ayrı kayıt olmak yok. FIVUCSAS destekli her site/uygulamaya tek butonla, 10 farklı doğrulama yöntemiyle giriş. Uygulama sahibiysen login & register sayfaları yazmadan, OAuth2/OIDC + PKCE üzerinden tek hosted-login butonu ile kullanıcılarını doğrularsın.
+
+### Long
+**End-user pitch:** Aktif (Biometric Puzzle) + pasif (UniFace MiniFASNet, 19 analyzer) hibrit canlılık + Facenet-512 yüz eşleme + ICAO 9303 NFC kimlik okuma + 10 birleştirilebilir MFA faktörü, tek bir hosted-login akışında. KVKK/GDPR uyumlu, embedding'ler Fernet AES-128 ile şifreli (`biometric-processor/app/infrastructure/security/embedding_cipher.py:39`).
+
+**Integrator pitch:** Müşteri uygulamaları sadece OIDC discovery (`/.well-known/openid-configuration` — `identity-core-api/.../OpenIDConfigController.java:44-80`) + authorization endpoint (`/api/v1/oauth2/authorize` — `identity-core-api/.../OAuth2Controller.java:77-182`) + JWKS (`/.well-known/jwks.json` — `OpenIDConfigController.java:91-100`) konfigüre eder. PKCE S256 zorunlu (`OAuth2Controller.java:328-341`), RS256 JWT default 2026-04-20'den beri (`identity-core-api/.../security/JwtService.java:27-30, 56-68`). SDK snippet'i: `web-app/src/verify-app/sdk/FivucsasAuth.ts`.
+
+**Multi-tenant kontrat:** Tenant entity `identity-core-api/.../entity/Tenant.java:35-100` (id/slug/status/max_users/biometric_enabled). RLS (Row-Level Security) 9 tabloda V25 ile aktif (`identity-core-api/src/main/resources/db/migration/V25__add_row_level_security.sql`). Canlı tenant: **Marmara Üniversitesi** (`V15__seed_realistic_sample_data.sql`, id `11111111-1111-1111-1111-111111111111`, demo `https://demo.fivucsas.com`).
+
+---
+
+## 2. E-Devlet Comparison
+
+### Short
+e-Devlet kamu hizmetlerinin ortak giriş kapısıdır; FIVUCSAS özel sektörün karşılığıdır. Tek bir `<FIVUCSAS ile Giriş Yap>` butonu, OAuth2/OIDC + PKCE üzerinden, KVKK + GDPR + ISO/IEC 30107-3 Level 1 hazırlığı ile, biyometrik (yüz + ses + parmak izi/WebAuthn) ve dokümanlı (NFC ICAO 9303) doğrulamayı çağrı başına saniye altında getirir.
+
+### Long
+| Aspect | e-Devlet | FIVUCSAS |
+|---|---|---|
+| Kapsam | Kamu sektörü | Her web/mobil uygulama |
+| Auth modeli | Devlet SSO | OAuth2 + OIDC + PKCE (RFC 7636) Identity Provider |
+| Erişim | Devlet onayı | Açık OIDC discovery + drop-in buton |
+| Biyometrik | — (şifre + SMS) | Active Puzzle (7 yüz + 9 jest aksiyonu) + Passive PAD (19 analyzer) + Facenet-512 |
+| NFC doküman | — | T.C. kimlik + pasaport (ICAO 9303, BAC implementlü) |
+| MFA faktörleri | 2 (şifre + SMS) | 10 birleştirilebilir faktör |
+| Proctoring | — | Sürekli (WebSocket, 15.9 fps Python ref, 25-30 fps tarayıcı) |
+| Multi-tenant | — | Postgres RLS, V25, 9 tabloda |
+| Yasal | KVKK | KVKK + GDPR + ISO/IEC 30107-3 Level 1 (iBeta submission package v0.2.1) |
+| Açık kaynak | — | MIT (spoof-detector) |
+| Kaynak | gov | `identity-core-api`, `biometric-processor`, `spoof-detector` (submodule) |
+
+**e-Devlet button referansı:** `turkiye.gov.tr/edevlet-ile-giris` lockup'ı — kırmızı arka plan, beyaz "T.C." amblem + "e-Devlet ile Giriş Yap" lockup'ı. FIVUCSAS karşılığı için poster üzerinde önerilen mockup: navy arka plan (#0B2545), camgöbeği (#2BA8B3) lockup, monospace `<FIVUCSAS />` markası — örnek HTML:
+```html
+<a class="fivucsas-btn" href="https://verify.fivucsas.com/oauth2/authorize?
+   client_id=YOUR_CLIENT_ID&response_type=code&scope=openid+profile+email
+   &redirect_uri=https://yourapp.com/cb&code_challenge=...&code_challenge_method=S256">
+  <FIVUCSAS/> ile Giriş Yap
+</a>
+```
+
+**Üç use-case:**
+1. **Banka-grade KYC** (fintech mobil): yüz + NFC kimlik + canlılık → tek session
+2. **Sınav proctoring** (online üniversite): demo.fivucsas.com canlı (Marmara BYS)
+3. **KVKK onboarding** (yerel SaaS): tüm embedding'ler Türkiye'de barındırılan Hetzner CX43'te, Fernet AES-128 şifreli
+
+---
+
+## 3. Face Pipeline — Full Technical Walk
+
+### Short
+9 aşamalı pipeline: YOLO kart tespiti → DeepFace yüz detect (opencv backend, anti-spoof 0.5) → kalite (Laplacian blur ≥ 100, min yüz 80px, occlusion CIE-Lab ΔE) → MediaPipe FaceLandmarker 468 nokta (Tasks API) → DeepFace align → **Facenet-512** embedding → Fernet AES-128 + HMAC-SHA256 şifreleme → pgvector index (biometric-processor HNSW m=16/ef=64, identity-core IVFFlat lists=100) → cosine match (θ=0.45 default, 0.38 aged >2yr).
+
+### Long
+
+**01. Detection.** DeepFace 0.0.98, detector_backend konfigüre edilebilir (default `opencv`, alternatifler: ssd, mtcnn, retinaface, mediapipe, yolov8, yolov11n/s, yolov12n, centerface) — `biometric-processor/app/core/config.py:91-94`. Anti-spoofing DeepFace içi etkin, threshold 0.5 — `config.py:126-136`. Loader: `biometric-processor/app/infrastructure/ml/detectors/deepface_detector.py:1-50`. **Card detection (web tarafı, doküman çekiminde):** YOLO model, confidence floor 0.35, UI gate 0.7 — `web-app/src/lib/biometric-engine/core/constants.ts:206, 220`.
+
+**02. Quality gating.** Laplacian variance ≥ **100.0** (`config.py:292`), min yüz 80 px (`config.py:291`), quality skoru ≥ **70.0** (`config.py:158`), brightness normalize 30-90 (`analyze_quality.py:33-34`). Occlusion detektör (270 LOC, eye=0.6/mouth=0.4 ağırlık, CIE-Lab ΔE) — `biometric-processor/app/application/services/occlusion_detector.py`.
+
+**03. Landmarking.** MediaPipe **FaceLandmarker (Tasks API)** — 468-nokta canonical topology + 478 ile iris (eye/mouth/nose/eyebrow/face_oval region tanımları). `biometric-processor/app/infrastructure/ml/landmarks/mediapipe_landmarks.py:26-45`. Legacy `face_mesh` API kullanılmıyor.
+
+**04. Alignment.** DeepFace `align=True` flag'i — `deepface_detector.py:28, 43`. Çıktı kırpma DeepFace iç boyutlandırması.
+
+**05. Embedding.** **Facenet-512**, default production model (`CLAUDE.md` "Facenet512 server-authoritative"). 512-D L2-normalize embedding — `biometric-processor/app/infrastructure/ml/extractors/deepface_extractor.py:72-75, 132`. **Encryption at rest:** Fernet (AES-128-CBC + HMAC-SHA256), Alembic 20260502_0005 — `biometric-processor/app/infrastructure/security/embedding_cipher.py:39` + `alembic/versions/20260502_0005_embedding_ciphertext.py:1-15`.
+
+**06. Storage / Indexing.** **biometric-processor** (Python servis): HNSW (`m=16`, `ef_construction=64`) — `biometric-processor/scripts/add_hnsw_indexes.sql:19-22` + `alembic/versions/20251212_0001_initial_schema.py:115-120`. **identity-core-api** (Spring servis): IVFFlat (`lists=100`) — `identity-core-api/.../db/migration/V4__create_biometric_tables.sql:8` + V33. Tenant izolasyonu: `tenant_id` kolonu + unique (user_id, tenant_id, biometric_type) WHERE deleted_at IS NULL — Alembic 20251212_0001:96-100. RLS 9 tabloda V25 ile etkin.
+
+**07. Matching.** Cosine distance (1 − cosine similarity) — `biometric-processor/app/infrastructure/ml/similarity/cosine_similarity.py`. **1:1 verification threshold:** 0.45 default (`config.py:156`), aged-embedding (>2yr) için 0.38 (`config.py:171-180`). 1:N top-k pgvector ANN üzerinden.
+
+**08. Operating point.** EER / FAR / FRR — `[NOT FOUND IN REPO]`. Hiçbir test fixture veya benchmark dosyasında ölçülmemiş. **Load-test hedefleri (gerçek ölçüm değil):** Login p95 < 300ms, Verification p95 < 500ms — `load-tests/README.md:137-180`.
+
+---
+
+## 4. NFC Subsystem
+
+### Short
+TurkishEidNfcReader (Android native, IsoDep + Bouncy Castle) T.C. kimlik + pasaport için ICAO 9303 spec'te. **BAC** uygulandı (PACE/AA/CA HENÜZ DEĞİL). DG1 (MRZ) + DG2 (yüz JPEG2000) parser var, EF.COM + EF.SOD %60 doğrulanmış. MRZ OCR fallback: Google ML Kit + CameraX. DG2 fotoğrafı → Facenet-512 → cosine vs canlı selfie.
+
+### Long
+- **Chip location:** T.C. kimlik arka yüzdedir; pasaportlarda kapakta. ICAO ortak AID `A0 00 00 02 47 10 01` — `practice-and-test/PASSPORT_NFC_ROADMAP.md:147`.
+- **ICAO 9303 spec atıfları:** `PASSPORT_NFC_ROADMAP.md:8`, `biometric-processor/app/domain/services/mrz_parser.py:8`, `identity-core-api/.../controller/NfcController.java:237-238`.
+- **Protocols:** BAC implementlü (SHA-1 anahtar türetme MRZ'den, TD3 pasaport için aynı) — `PASSPORT_NFC_ROADMAP.md:670-690`. **PACE** opsiyonel, yeni pasaportlar için (`PASSPORT_NFC_ROADMAP.md:164-170`). **Active Authentication / Chip Authentication:** `[NOT FOUND IN REPO]`.
+- **Data Groups:** DG1 — `practice-and-test/TurkishEidNfcReader/app/.../util/Dg1Parser.kt:1-9`; DG2 — `Dg2Parser.kt:1-50` (JPEG2000/JP2). EF.COM, EF.SOD — `PASSPORT_NFC_ROADMAP.md:158-161, 383-395` (SOD %60 tamam, CSCA tam zincir eksik). DG3/4/11/14/15 — implement edilmedi (roadmap §5.1).
+- **Plugin:** Android native NFC (android.nfc), IsoDep — `practice-and-test/TurkishEidNfcReader/app/build.gradle:91-92`. Bouncy Castle (crypto) — `build.gradle:94-96`. **iOS CoreNFC:** `[NOT FOUND IN REPO]` (client-apps KMP'de expect/actual mümkün, kanıt yok).
+- **MRZ OCR fallback:** Google ML Kit Text Recognition 16.0.0 + CameraX 1.3.4 — `build.gradle:78, 70-75`. ICAO check digit validation: `biometric-processor/tests/unit/test_nfc_mrz_route.py:47-88`.
+- **Cross-check pipeline:** DG2 yüz JPEG2000 → Facenet-512 → cosine — `biometric-processor/app/api/routes/verification_pipeline.py`. Threshold yapılandırılabilir (`config.py:156`, default 0.45, aged 0.38).
+- **Performance:** Chip okuma süresi `[NOT FOUND IN REPO]`. Timeout 30s — `PASSPORT_NFC_ROADMAP.md:31`. Failure modes (timeout, corrupted, invalid checksum, SOD fail) test edilmiş — `test_nfc_mrz_route.py:95-100`.
+
+---
+
+## 5. Spoof Detector — Deep Dive
+
+### Short
+**spoof-detector** submodule (MIT, github.com/Rollingcat-Software/spoof-detector, v0.2.1, ~50+ commits). **19 analyzer**, **15-axis liveness prover**, **session-level peak-sensitive verdict** (α=0.5). Backbone: MiniFASNet ONNX (UniFace, 80×80, 1.7 MB, frozen weights, weight 5.0×). **Paper draft** (BIOSIG 2026 / IJCB 2026 / IEEE FG 2027 hedef): "Beyond Single Frames: Session-Based Hybrid Image-and-Video Face Anti-Spoofing with Calibrated Multi-Class Fusion". **Browser port** canlı: `https://amispoof.fivucsas.com/` (123 kB ESM + 34 kB gzip, ONNX-Web + MediaPipe Tasks Vision, WebGPU/WASM). **iBeta PAD Level 1 submission package** commit `cc73cf08`.
+
+### Long
+
+**Identity.**
+- Remote: `git@github.com:Rollingcat-Software/spoof-detector.git` — `spoof-detector/README.md:10`.
+- License: MIT — `LICENSE:1`.
+- Origin: FIVUCSAS biometric-processor R&D'den standalone extract — `README.md:10`.
+- Authors: Ahmet Abdullah Gültekin (lead, mimari, kalibrasyon, session engine), Ayşe Gülsüm Eren (gesture/liveness araştırması), Ayşenur Arıcı (anti-spoof pipeline, gates, fusion, device-spoof) — `AUTHORS.md:14-16, 21`, `README.md:44, 252`.
+- Affiliation: Marmara Üniversitesi, Bilgisayar Mühendisliği — `README.md:253`.
+- npm: `@rollingcat/spoof-detector v0.2.1` — `pyproject.toml:6`, `ROADMAP.md:12`.
+- Public demo: **https://amispoof.fivucsas.com/** — `SPOOF_DETECTOR_BROWSER_READINESS.md:3`.
+
+**Paper status.** Manuscript skeleton tamam, benchmark sonuçları doldu. 10 bölüm: abstract/intro/related-work/taxonomy/method/calibration/experimental-setup/results/ablations/discussion/conclusion — `paper/sections/*.md`, `paper/README.md:8-23, 34-57`.
+
+**Architecture.**
+- **Backbone:** MiniFASNet ONNX (UniFace v2), frozen weights, 1.7 MB, +94.7 discrimination gap, weight **5.0×** — `README.md:94`, `paper/ARCHITECTURE.md:75-76`, `config.yaml:23-24`.
+- **Input:** 80×80 padded face crop — `paper/sections/04_method.md:11`.
+- **Output:** Per-frame P(REAL) ∈ [0, 100] → 7-category fuser → session-level P(REAL) via peak-sensitive aggregator.
+- **Loss:** Yok (eğitim yok, sadece kalibrasyon). 13 lineer katsayı `MultiClassFuser`'da kalibre ediliyor — `paper/sections/05_calibration.md:66`, `config.yaml:54-76`.
+- **Analyzer stack (19 total, 12 Python + 12 TS shared):**
+
+| Layer | Analyzers | Weight |
+|---|---|---|
+| Image-level | MiniFASNet, Device Boundary, AR-Filter, Texture, Moire | 5.0 + 2.5 + 0.3 + 0.1 + 0.1 |
+| Temporal (FFT) | Blink/EAR, rPPG, Screen-Replay, Micro-Tremor, Landmark Variance, Temporal, Background Grid, Screen Flicker | 0.5 + 0.0 + 0.5 + 2.5 + 2.0 + 0.3 + 1.5 + 3.0 |
+| MediaPipe blendshapes (browser) | Eyebrow motion, Blink symmetry, Gaze, Expression dynamics, 3D Pose, Behavioural | — |
+| Optional (browser) | Hand tracking, Voice-activity, Audio-mouth sync | — |
+
+(`README.md:137-160`, `paper/ARCHITECTURE.md:85-98`, `ROADMAP.md:20-26`)
+
+- **Session engine:** "Guilty until proven innocent" LivenessProver (185-puan tavan, 15 axis) + peak-sensitive session verdict — `P_session(REAL) = α · mean(p_t) + (1−α) · mean(p_t | t ∈ worst-decile), α = 0.5` — `paper/sections/04_method.md:91`. Spoof-burst dilution'a karşı dayanıklı; formel kanıt §4'te (`paper/sections/04_method.md:62-114`).
+- **Browser deployment:** TypeScript port (`web/`), npm `@rollingcat/spoof-detector`, `onnxruntime-web` (WASM + WebGPU fallback), `@mediapipe/tasks-vision` — `SPOOF_DETECTOR_BROWSER_READINESS.md:3-17`.
+
+**Training data.**
+- **Calibration set (gerçek):** 43 KVKK onaylı Marmara 2026-04 capture (27 bona-fide / 16 attack) — `paper/sections/05_calibration.md:5-9`.
+- **Validation set:** 325 sample (25 bona-fide × 300 synthetic attack, 4 sınıf × 3 varyant) — `paper/sections/07_results.md:73-82`.
+- **Zero-shot public:** CASIA-FASD (HF akahana, 2,408 sample), CelebA-Spoof (HF nguyenghoa shard 0, 2,611 sample), in-house replay (100 sample) — `paper/sections/07_results.md:8-71`.
+- MiniFASNet pre-training: UniFace corpus, external ONNX weights (kendi eğitim verisi yok).
+- In-house labels: `spoof-detector/data/in_house/labels.csv` (43 satır).
+
+**Metrics (paperdan).**
+
+| Metric | Dataset | Pipeline | Value | 95% CI | Source |
+|---|---|---|---|---|---|
+| AUC | CASIA-FASD (N=2408) | minifasnet_only | **0.9452** | [0.9366, 0.9560] | `paper/sections/07_results.md:15` |
+| ACER | CASIA-FASD | minifasnet_only | **12.67%** | [11.07, 13.92] | `07_results.md:15` |
+| AUC | CelebA-Spoof (N=2611) | minifasnet_only | **0.7818** | [0.7663, 0.7993] | `07_results.md:36` |
+| ACER | CelebA-Spoof | minifasnet_only | **28.67%** | [27.36, 30.23] | `07_results.md:36` |
+| AUC | In-house replay (N=100) | image_only | **0.9264** | [0.8685, 0.9744] | `07_results.md:68` |
+| Per-frame latency (CPU, CX43) | hybrid | — | **63.0 ms** mean (p99 117.8 ms) | — | `07_results.md:110` |
+| Sustained FPS | hybrid | — | **15.9 fps** | — | `07_results.md:110-112` |
+| MiniFASNet discrimination gap | in-house | minifasnet | **+94.7** | — | `05_calibration.md:25` |
+| ISO 30107-3 Grade | in-house scripted | session | **Grade C** (BPCER 0%, APCER 30%, ACER 15%) | — | `README.md:74-84` |
+
+Bootstrap CI'lar 100 stratified resample üzerinden hesaplandı — `07_results.md:11, 32`.
+
+**Honest competitive positioning.**
+- Paper akademik literatür ile pozisyonlanıyor (commercial PAD competitor head-to-head **YOK**). Modern intra-dataset SOTA (CDCN, FAS-SGTD) AUC >0.99 with **retraining**; FIVUCSAS 0.9452 **zero-shot** — "competitive with mid-tier published methods" (`07_results.md:24`).
+- Strengths: **session-level verdict** (proctoring native, spoof-burst dilution'a dayanıklı), **client-side browser deployment** (KVKK/GDPR locality, frame upload yok), **anti-correlated signal discovery** (texture/moire — paper §5), **reproducible no-training calibration** (sadece 13 float), **MIT open-source + iBeta PAD-1 submission package**.
+- Cost / multi-tenant / on-prem / KVKK-locality ekseninde FaceTec ZoOm, iProov GPA, Onfido Atlas, Jumio, AWS Rekognition Liveness, MS Face API'ye karşı **plausible**. Model maturity / dataset scale ekseninde **geride** (frozen 3rd-party backbone, 43-örnek kalibrasyon seti).
+
+**Proctoring contribution.**
+- Per-frame detection fail eder: attacker 30s spoof tutar, 1 frame gerçek yüz, devam. Gap 1 paperin temel motivasyonu (`paper/sections/01_introduction.md:7`).
+- **Peak-sensitive aggregator** — formel kanıt: 60-frame session, 54 spoof @ 0.20 + 6 real @ 0.95 → verdict SPOOF; all-live + 1 dip → verdict LIVE (`04_method.md:62-114`).
+- LivenessProver 15-axis (blink, motion, rotation, expression, temporal, gaze, pose consistency, behaviour, optional hand, optional audio), 185-puan tavan, doğal decay (`README.md:159`).
+- Incident detection: P(REAL) < 0.4 for ≥3s, no blink ≥15s, face missing ≥5s, identity-change suspicion (MiniFASNet swing ≥0.35 in 1s) — `paper/ARCHITECTURE.md:134`.
+- Background-grid analyzer: 8×6 cell motion variance, proctoring-specific (`config.yaml:39`, `04_method.md:31`).
+
+**iBeta PAD Level 1.** Submission package commit `cc73cf08e0df1f811c08cc92549fae48d6c4a05a`, 2026-05-11, scope ISO/IEC 30107-3 PAD Level 1 (`iBeta_PAD_Level1_Submission_Package.md:7-11, 9`). PAI coverage: bona-fide ✓, print ✓, replay kısmi (open challenge), 3D mask routed-not-validated, morphing out-of-scope.
+
+**Browser readiness.** Live `https://amispoof.fivucsas.com/`, 19 analyzer + 3 gates (Aysenur'un — FaceUsability/Illumination/CriticalRegionVisibility), Fusion (MultiClassFuser + HybridFusionEvaluator), Session engine + LivenessProver, Web Worker offload (4 heavy analyzer), WebGPU + WASM fallback, lazy chunks (Texture 7.9 kB / Moire 10.5 kB / ScreenReplay 18.2 kB), 217 vitest yeşil. Desktop Chrome 25-30 fps (WebGPU), Pixel-class Android Brave 6.7-9.5 fps. MiniFASNet ONNX 1.7 MB + FaceLandmarker task 3.7 MB CDN-cached `Cache-Control: max-age=31536000, immutable` (`SPOOF_DETECTOR_BROWSER_READINESS.md:3-17, 214-218, 290-291`, `ROADMAP.md:134-141`).
+
+---
+
+## 6. Biometric Puzzle (Active Liveness)
+
+### Short
+Server-issued nonced challenge (puzzle UUID, 5dk TTL). **7 yüz** aksiyon (blink/smile/turn_left/turn_right/open_mouth/raise_eyebrows/light) + **9 jest** aksiyon (finger_count/wave/hand_flip/finger_tap/pinch/peek_a_boo/math/shape_trace/hold_position). Difficulty: easy (2-3, 7s/step) / standard (3-4, 5s/step) / hard (4-5, 4s/step). Per-step max 3 retry, session timeout 120s. Replay-proof.
+
+### Long
+- **Action vocabulary:**
+  - **Face (7):** blink, smile, turn_left, turn_right, open_mouth, raise_eyebrows, light — `biometric-processor/app/api/schemas/active_liveness.py:9-37`
+  - **Gesture (9, server-side landmarks-only):** finger_count (wrist-PIP/TIP ratio), wave (zero-crossing on wrist-x), hand_flip (palm-normal proxy sign change), finger_tap (index↔middle proximity), pinch (thumb↔index distance), peek_a_boo (monotonic hand-covers-face), math (random open-finger count), shape_trace (DTW vs template), hold_position (wrist std-dev) — `app/application/services/active_gesture_liveness_manager.py:16-24`
+- **Sequence:** difficulty enum `easy|standard|hard`, step count random 2-7, per-step timeout 2-30s — `app/domain/entities/puzzle.py:14-19, 24, 37-38`, `app/api/schemas/puzzle.py:11-16`.
+- **TTL:** 5 minutes total — `puzzle.py:87-89`.
+- **Per-action thresholds:**
+  - Server-side EAR baseline 0.21, REOPEN 0.23 (spoof-detector #10 recalibration) — `biometric-processor/.../puzzle.py:52-58`
+  - Client-side EAR open 0.22, closed 0.17 — `web-app/src/lib/biometric-engine/core/constants.ts:16, 19`
+  - Smile corner-raise 0.05, mouth-width 0.60 — `constants.ts:22, 25`
+  - Head yaw ±20°, pitch ±12° — `constants.ts:31, 34`
+  - Continuous hold 0.6s — `constants.ts:49`
+  - Liveness score gate 50.0 (0-100) — `constants.ts:83`
+- **Per-action retry:** Max 3 — `active_liveness.py:59`. Default per-step 5s — `puzzle.py:25, active_liveness.py:57`. Session timeout 120s — `active_liveness.py:69`.
+- **Anti-replay:** Server-issued puzzle UUID v4 (Redis), expires `created_at + 5min`, verification expired ise reject — `puzzle.py:73, 87-89, 91-97`. Client sequence değiştiremez. Optional spot-check base64 frames (`puzzle.py:100-101`) server-side re-validation için.
+- **LIVENESS_MODE flag:** `passive | active | combined`, default `combined` — `app/core/config.py:249-257, 219-224`. ChallengeType enum eşleştirmesi: `web-app/.../puzzleServerAction.ts`.
+- **Endpoints:** `/api/v1/liveness`, `/api/v1/liveness/verify-challenge` — `app/api/routes/liveness.py`, `app/api/routes/puzzle.py`. Identity-core'dan X-API-Key ile çağrılır (internal Docker network only).
+
+---
+
+## 7. Differentiators & Engineering Achievements
+
+- **Production-deployed multi-tenant SaaS** — Marmara Üniversitesi canlı tenant, `demo.fivucsas.com` (Hetzner CX43, 8 vCPU / 16 GB / 150 GB) — `CLAUDE.md:44-49`, V15 seed.
+- **Hexagonal / DDD layout** — ports/adapters: identity-core'da `application/port/input/`, `application/port/output/`, `infrastructure/adapter/` (UserRepository, AuthFlowRepository, NfcCardRepository, BiometricProcessorClient, EmailServiceAdapter, SmsOtpAuthHandler) — `identity-core-api/src/main/java/com/fivucsas/identity/`. Biometric-processor'da `api/routes/ → application/use_cases/ → infrastructure/ml/` — `biometric-processor/app/main.py:1`.
+- **OAuth2/OIDC + PKCE (RFC 7636)** — `/api/v1/oauth2/authorize`, `/.../token`, `/.../userinfo`, `/.well-known/openid-configuration`, `/.well-known/jwks.json` — `OAuth2Controller.java`, `OpenIDConfigController.java:44-100`. PKCE S256 mandatory `OAuth2Controller.java:328-341`.
+- **JWT RS256 default** (2026-04-20 flip), HS512 legacy disabled — `JwtService.java:27-30, 56-68`, `application.yml:43`.
+- **ISO/IEC 30107-3 alignment** — Level 1 submission package commit `cc73cf08`, Grade C in-house — `spoof-detector/iBeta_PAD_Level1_Submission_Package.md:7-11`.
+- **KVKK / GDPR posture** — Fernet AES-128 embedding encryption at rest (`embedding_cipher.py:39`), soft-delete `deleted_at` (`Tenant.java:41-42`, `@SQLRestriction("deleted_at IS NULL")`), tenant RLS 9 tabloda (V25), audit_logs partition by tenant_id (V40, pg_partman V57).
+- **10 Composable Auth Factors:**
+  1. PASSWORD (BCrypt-12) — `SecurityConfig.java:239-240`, `PasswordAuthHandler.java`
+  2. EMAIL_OTP (6-digit, Redis, 5min TTL) — `EmailOtpAuthHandler.java`, `OtpService.java:16`
+  3. SMS_OTP (Twilio) — `SmsOtpAuthHandler.java`, `SMS_ACTIVATION_PLAN.md`
+  4. TOTP (RFC 6238, 30s step, 32-byte secret AES-128) — `TotpAuthHandler.java`, `TotpService.java:15, 32`, V31
+  5. FACE (Facenet-512) — `FaceAuthHandler.java`
+  6. VOICE (Resemblyzer 256-D, pgvector HNSW) — `VoiceAuthHandler.java`, V33
+  7. FINGERPRINT (WebAuthn platform authenticator) — `FingerprintAuthHandler.java`
+  8. HARDWARE_KEY (FIDO2/WebAuthn) — `HardwareKeyAuthHandler.java`
+  9. QR_CODE — `QrCodeAuthHandler.java`
+  10. NFC_DOCUMENT (ICAO 9303, ISO 18013-5) — `NfcDocumentAuthHandler.java`
+- **B2B drop-in identity button** — SDK `@fivucsas/auth-js`, `web-app/src/verify-app/sdk/FivucsasAuth.ts`, hosted-first redirective + iframe step-up MFA fallback, nonce + state, redirect-URI allowlist (HTTPS + loopback RFC 8252).
+- **Real-time proctoring** — WebSocket `/api/v1/proctor/ws?session_id=...&user_id=...&tenant_id=...`, ConnectionManager singleton, frame handler, ProctorMetrics — `biometric-processor/app/api/routes/proctor_ws.py:1-47`, `app/core/metrics/proctoring.py`.
+- **Hybrid liveness** — active Puzzle + passive UniFace MiniFASNet, fusion rule `accept iff min(P_A, P_B) ≥ θ`.
+- **pgvector indexing** — biometric-processor HNSW (m=16, ef_construction=64), identity-core IVFFlat (lists=100).
+- **Self-host stack on Hetzner CX43** — 8 vCPU / 16 GB / 150 GB, ~7 production services in docker-compose.prod.yml (postgres pgvector/pg16, redis 7.4, identity-core-api 2 replicas, biometric-processor 2 replicas, api-gateway Nginx, prometheus, grafana). 60 Flyway migrations (V1-V60).
+- **Spoof-detector browser port** — 19 analyzer + 3 gates + LivenessProver + Web Worker + WebGPU + lazy chunks, 217 vitest yeşil, canlı `amispoof.fivucsas.com`.
+
+---
+
+## 8. Challenges & Effort-Intensive Work
+
+- **Cross-modal synchronization (Puzzle ↔ PAD)** — LIVENESS_MODE `combined` default, fusion rule. Yanlış kalibre edilen hybrid /verify endpoint'inde stil frame → False yerlik dönerdi; PR #83 sonrası FaceVerifyMfaStepHandler cosine fail-open kapatıldı (Session 2026-05-07).
+- **MediaPipe Tasks API porto** — legacy `face_mesh` API'den Tasks API'ye geçiş (468-nokta canonical), branch `fix/2026-05-12-mediapipe-tasks-api-port` (biometric-processor active head).
+- **pgvector index tuning** — IVFFlat vs HNSW seçimi (<1M satır ölçeğinde IVFFlat lists=100; HNSW (m=16, ef=64) biometric-processor için). Hala recall/latency calibration bekliyor.
+- **Multi-tenant Row-Level Security** — V25 9 tablo, V40 audit_logs partition, V57 pg_partman tenant_id backfill. 140 → 0 NULL backfill 2026-05-11.
+- **NFC chip-read reliability** — Android OEM/versiyon farkı. iOS CoreNFC `[NOT FOUND IN REPO]`, KMP expect/actual gerekiyor.
+- **BAC/PACE crypto correctness** — SHA-1 anahtar türetme, MRZ check-digit doğrulama. PACE/AA/CA henüz implement edilmedi (`PASSPORT_NFC_ROADMAP.md:164-170`).
+- **ICAO 9303 spec interpretation** — Türkiye TD3 pasaport eşdeğeri, EF.SOD CSCA tam zinciri eksik (%60 doğrulanmış).
+- **Flutter iOS NFC platform limits** — `[NOT FOUND IN REPO]`, Android-only canlı.
+- **KVKK irreversibility** — Fernet AES-128 (yine de Fernet anahtarına erişen plaintext'i geri alır; "irreversibility" iddiası matematiksel değil operasyonel; bu poster üzerinde dürüst ifade gerekli). Embedding plaintext column hala duruyor (ANN search için), encryption dual-column.
+- **Anti-spoof training-data scarcity (Türk demografi)** — paper 43-örnek in-house Marmara; CelebA-Spoof zero-shot AUC 0.7818, intra-dataset SOTA AUC >0.99. Bu poster üzerinde dürüst ifade gerekli.
+- **Cold-start tenant onboarding flow** — `[NOT FOUND IN REPO — refer to web-app/docs/plans/]` (CLAUDE.md 2026-05-12 carry-forward).
+- **Audit logs partitioning** — V57 silent no-op olarak teşhis edildi (Session 2026-05-12); V59/V60 ile düzeltildi.
+- **JWT RS256 default** — 2026-04-20 flip, ama "JWT aud unshipped" 3 oturum üst üste yanlış işaretlendi memory'de (lesson: grep current HEAD before trusting completion labels).
+- **FK-cascade no-hard-delete** — `users` 13 tabloya cascade siliyor (Session 2026-04-28 incident: ahabgu'nun TOTP/WebAuthn/NFC silindi). Patch: `findByEmail(... AND deletedAt IS NULL)`.
+- **anti-correlated signal discovery** (texture/moire) — paper §5 ana finding'i; 1.0'dan 0.1'e re-weighting 0.017 AUC recovers.
+- **Browser readiness 4 faz** — Phases A-D 2026-05-15/16, 5-agent paralel salvage 2026-04-25 (4 PRs from worktrees with complete drafts).
+
+---
+
+## 9. Short Q&A (Turkish, ≥ 12 pairs)
+
+1. **FIVUCSAS hangi sorunları çözüyor?**
+   Her uygulama için ayrı kayıt yok. FIVUCSAS destekli her site/uygulamaya tek butonla, 10 farklı yöntemle giriş. Uygulama sahibiysen login/register sayfaları yazmadan, OIDC + PKCE üzerinden tek hosted-login butonu ile kullanıcıları auth edersin.
+
+2. **e-Devlet'ten farkı nedir?**
+   e-Devlet kamu sektörü SSO'su; FIVUCSAS özel sektörün karşılığı. Açık OIDC discovery, drop-in `<FIVUCSAS />` butonu, NFC ICAO 9303 + Active Puzzle + Passive PAD + multi-tenant RLS, KVKK + GDPR + ISO/IEC 30107-3 Level 1 hazırlığı.
+
+3. **Neden 10 farklı auth factor?**
+   NIST 800-63B'ye uygun "Know-Have-Are-Show" eksenlerinde her tenant kendi MFA akışını kompoze eder — Java kod yazmadan, sadece JSON tenant config'i ile.
+
+4. **Liveness Puzzle spoof'u nasıl yakalar?**
+   Server her denemede rastgele 3-5 aksiyon dizisi üretir (UUID nonce, 5dk TTL). Pre-recorded video, deepfake injection, screen-replay başarısız olur — istenen aksiyon set unpredictable + timestamped + sunucu üretimli.
+
+5. **Bir geliştirici FIVUCSAS'ı kaç satır kodla entegre eder?**
+   ~15 satır: SDK init + `loginRedirect()` + token exchange. OIDC discovery + JWKS otomatik.
+
+6. **KVKK uyumu nasıl sağlanıyor?**
+   Embedding'ler Fernet AES-128 + HMAC-SHA256 şifreli at-rest, soft-delete `deleted_at` + `@SQLRestriction`, Postgres RLS 9 tabloda (V25), audit_logs tenant_id partition (V40 + pg_partman V57), Hetzner Almanya/Türkiye-erişimli barındırma.
+
+7. **Proctoring'e ne katıyor?**
+   Session-level peak-sensitive verdict (α=0.5, mean + worst-decile) — spoof-burst dilution'a dayanıklı. 15-axis LivenessProver, 63 ms / frame CPU (Python), 25-30 fps tarayıcı (WebGPU). Background-grid analyzer proctoring-specific.
+
+8. **Veri silme talebi geldiğinde ne oluyor?**
+   `deleted_at` damga, RLS tüm sorgularda soft-delete satırı filtreler. Hard-delete YASAK (FK-cascade 13 tabloya). GDPR/KVKK purge job ile periyodik fiziksel silme.
+
+9. **Neden multi-tenant mimari?**
+   Tek deploy ile N tenant. RLS Postgres-native, audit isolation pg_partman ile. Marmara Üniversitesi canlı tenant, demo.fivucsas.com aktif.
+
+10. **NFC olmasa olmaz mı?**
+    Hayır — opsiyonel faktör. Ama "banka-grade KYC" use-case'inde DG2 yüz JPEG2000 ↔ canlı selfie cosine eşleştirmesi ile fiziksel doküman doğrulaması ekler. T.C. kimlik + ICAO 9303 pasaport.
+
+11. **Pasif PAD ile aktif Puzzle'ın farkı?**
+    Pasif (UniFace MiniFASNet, 19 analyzer): kullanıcı işbirliği yok, sessiz. Aktif (Puzzle): server'ın istediği aksiyonu kullanıcı yapar — replay-proof. Hibrit: `accept iff min(P_A, P_B) ≥ θ`.
+
+12. **Küçük bir uygulama bu sistemi karşılayabilir mi (maliyet)?**
+    Evet — Hetzner CX43 (8 vCPU / 16 GB) tek sunucuda 7 servis. GPU yok. Spoof-detector tarayıcıda çalışır (123 kB ESM), frame sunucuya yüklenmez. MIT lisanslı submodule.
+
+13. **Spoof-detector araştırması nerede?**
+    `spoof-detector` submodule (MIT), `paper/sections/*.md` (10 bölüm, BIOSIG 2026 hedefi), public demo `https://amispoof.fivucsas.com/`, npm `@rollingcat/spoof-detector v0.2.1`, iBeta PAD Level 1 submission commit `cc73cf08`.
+
+14. **Hangi açılardan açık kaynak literatürün önünde?**
+    (a) Session-level peak-sensitive verdict, formel kanıtla spoof-burst dilution direnci. (b) Client-side browser deployment (WebGPU + WASM). (c) Anti-correlated signal discovery (texture/moire), per-operator recalibration recipe. (d) Reproducible no-training kalibrasyon (13 float).
+
+15. **Subdomain'ler ne için?**
+    `fivucsas.com` (landing), `verify.fivucsas.com` (hosted-login), `api.fivucsas.com` (OAuth2/OIDC), `app.fivucsas.com` (admin panel), `demo.fivucsas.com` (Marmara BYS), `docs.fivucsas.com` (entegrasyon dökümanı), `amispoof.fivucsas.com` (spoof-detector tarayıcı demosu), `status.fivucsas.com` (uptime), `links.fivucsas.com` (link hub). Grafana container internal-only — DNS yok. Posterde tek QR tüm linkleri taşır.
+
+---
+
+## 10. Numbers Inventory (Appendix)
+
+### Lines of Code (measured 2026-05-19)
+| Submodule | Lines |
+|---|---|
+| spoof-detector | 217,178 |
+| practice-and-test | 222,825 |
+| client-apps | 89,593 |
+| biometric-processor | 77,782 |
+| landing-website | 26,725 |
+| identity-core-api | 28,708 |
+| web-app | 15,141 |
+| verify-widget | 7,800 |
+| bys-demo | 2,288 |
+| docs | 1,007 |
+| docs-site | 1,646 |
+| infra | 553 |
+| **TOTAL** | **~691,446** |
+
+### Tests
+| Suite | Count |
+|---|---|
+| Spring (Java) | 944 |
+| Pytest | 265 |
+| Vitest/Jest | 1,559 |
+| **TOTAL** | **~2,768** |
+
+### Concrete Configuration Values
+| Param | Value | Source |
+|---|---|---|
+| Embedding dim (Facenet-512) | 512 | `biometric-processor/.../deepface_extractor.py:72-75` |
+| Embedding encryption | Fernet AES-128-CBC + HMAC-SHA256 | `embedding_cipher.py:39` |
+| Cosine threshold (default) | 0.45 | `biometric-processor/app/core/config.py:156` |
+| Cosine threshold (aged >2y) | 0.38 | `config.py:171-180` |
+| Cosine threshold (similarity module default) | 0.6 | `infrastructure/ml/similarity/cosine_similarity.py:17` |
+| Face detect confidence | 0.5 | `web-app/.../constants.ts:129` |
+| Card detect confidence | 0.35 (gate 0.7) | `constants.ts:206, 220` |
+| EAR open / closed (client) | 0.22 / 0.17 | `constants.ts:16, 19` |
+| EAR baseline / REOPEN (server) | 0.21 / 0.23 | `biometric-processor/.../puzzle.py:52-58` |
+| Smile corner / width | 0.05 / 0.60 | `constants.ts:22, 25` |
+| Head yaw / pitch | ±20° / ±12° | `constants.ts:31, 34` |
+| Continuous hold | 0.6s | `constants.ts:49` |
+| Liveness score gate | 50.0 | `constants.ts:83` |
+| Quality min | 65 (UI) / 70 (server) | `constants.ts:75`, `config.py:158` |
+| Blur (Laplacian variance) | ≥ 100.0 | `config.py:292` |
+| Min face size | 80 px | `config.py:291` |
+| pgvector (biometric-processor) | HNSW m=16, ef_construction=64 | `scripts/add_hnsw_indexes.sql:19-22` |
+| pgvector (identity-core) | IVFFlat lists=100 | `db/migration/V4__create_biometric_tables.sql:8` |
+| Puzzle TTL | 5 minutes | `puzzle.py:87-89` |
+| Puzzle step timeout default | 5s (range 2-30s) | `puzzle.py:24-25` |
+| Puzzle session timeout | 120s | `active_liveness.py:69` |
+| Puzzle max retry | 3 | `active_liveness.py:59` |
+| Access token TTL | 86,400,000 ms (24h) | `application.yml:88` |
+| Refresh token TTL | 604,800,000 ms (7d) | `application.yml:89` |
+| OTP TTL | 5 min | `OtpService.java:16` |
+| TOTP step | 30s | `TotpService.java:32` |
+| TOTP secret length | 32 bytes | `TotpService.java:15` |
+| JWT signing default | RS256 (2026-04-20 flip) | `JwtService.java:27-30` |
+| Max devices/user | 10 | `application.yml:51` |
+| Migrations (Flyway) | 60 (V1-V60) | `db/migration/` |
+
+### Spoof-detector measured metrics (paper)
+| Metric | Value | Source |
+|---|---|---|
+| CASIA-FASD AUC (minifasnet_only) | 0.9452 [0.9366, 0.9560] | `paper/sections/07_results.md:15` |
+| CASIA-FASD ACER | 12.67% | `07_results.md:15` |
+| CelebA-Spoof AUC | 0.7818 [0.7663, 0.7993] | `07_results.md:36` |
+| CelebA-Spoof ACER | 28.67% | `07_results.md:36` |
+| In-house replay AUC (image_only) | 0.9264 | `07_results.md:68` |
+| MiniFASNet discrimination gap | +94.7 (μ_real 99.9, μ_spoof 5.1) | `05_calibration.md:25` |
+| Per-frame latency (CX43 hybrid) | 63.0 ms mean, p99 117.8 ms | `07_results.md:110` |
+| Sustained FPS (Python ref) | 15.9 fps | `07_results.md:110-112` |
+| Desktop Chrome (WebGPU) | 25-30 fps | `SPOOF_DETECTOR_BROWSER_READINESS.md:4` |
+| Pixel-class Android Brave | 6.7-9.5 fps | `ROADMAP.md:139-141` |
+| Browser tests (vitest) | 217 green | `paper/sections/01_introduction.md:25` |
+| Browser bundle | 123 kB ESM / 34 kB gzip | `ROADMAP.md:134-137` |
+| MiniFASNet ONNX size | 1.7 MB | `paper/ARCHITECTURE.md:75-76` |
+| FaceLandmarker task | 3.7 MB | `web/amispoof/README.md:48-50` |
+
+### Infrastructure
+| Param | Value | Source |
+|---|---|---|
+| Host | Hetzner CX43, 8 vCPU / 16 GB / 150 GB | `CLAUDE.md:44-49` |
+| Production services | 7 (postgres, redis, identity-core x2, biometric x2, gateway, prometheus, grafana) | `docker-compose.prod.yml` |
+| Commits last 6 months (all repos) | ~1,847 | `git log --since='2025-12-01'` |
+| Live tenant | Marmara Üniversitesi (id `11111111-1111-1111-1111-111111111111`) | `V15__seed_realistic_sample_data.sql` |
+| Auth methods | 10/10 | `AuthMethodType.java:1-25` |
+
+### Load test targets (NOT measured, see `[NOT FOUND IN REPO]`)
+| Operation | Target p95 | Target p99 | Source |
+|---|---|---|---|
+| Login | <300ms | <500ms | `load-tests/README.md:137-139` |
+| Token Refresh | <200ms | <400ms | `load-tests/README.md:137-139` |
+| Enrollment | <2000ms | <3000ms | `load-tests/README.md:158-159` |
+| Verification | <500ms | <1000ms | `load-tests/README.md:179-180` |
+
+### Gaps (cannot be put on the poster)
+- Face pipeline EER / FAR / FRR — `[NOT FOUND IN REPO]`
+- NFC chip-read latency (real measurement) — `[NOT FOUND IN REPO]`
+- iOS CoreNFC implementation — `[NOT FOUND IN REPO]`
+- DG3 / DG4 / DG11 / DG14 / DG15 NFC parsers — not implemented
+- PACE / Active Authentication / Chip Authentication — not implemented
+- Production proctoring SLA / incident-rate telemetry — `[NOT FOUND IN REPO]`
+- Voice anti-spoof (ECAPA-TDNN with replay-detection cosine guard) — listed as Future Work in WA0006 conclusion
+- iBeta PAD Level 1 official verdict — submission package only, not awarded yet
+
+---
+
+**End of brief.** Poster design session: pull from this file; mark `[NOT FOUND IN REPO]` items as "Future Work" or omit. Never invent missing numbers.
diff --git a/OPERATOR_ACTIONS_2026-05-12.md b/archive/2026-05/plans/OPERATOR_ACTIONS_2026-05-12.md
similarity index 88%
rename from OPERATOR_ACTIONS_2026-05-12.md
rename to archive/2026-05/plans/OPERATOR_ACTIONS_2026-05-12.md
index 207cd53..d3a5d50 100644
--- a/OPERATOR_ACTIONS_2026-05-12.md
+++ b/archive/2026-05/plans/OPERATOR_ACTIONS_2026-05-12.md
@@ -385,13 +385,14 @@ the prod profile literal.
 | 8 | ANTISPOOF_BLOCK_ENFORCE canary | MEDIUM  | n/a         | Bio-Python PR + item 7 |
 | 9 | EAR liveness model deploy     | LOW      | 5 min       | item 7                 |
 | 10 | identity-core-api puzzle proxy | LOW    | 1 PR cycle  | follow-up agent / dev  |
+| 11 | bio_models volume cleanup     | LOW      | 2 min       | bake-in PR (Team B)    |
 
-Recommended order if attacking all ten in one session:
+Recommended order if attacking all eleven in one session:
 4 (instant) → 3 (post-merge verify) → 5 + 6 + 7 batched (single
 api+bio rebuild flips JWT aud + HS512 kid + SHA pin + ANTISPOOF block
-all at once) → 8 (24-48h soak then decide) → 1 (maintenance window) →
-2 (longer maintenance window, covers RLS smoke-test) → 9 + 10 (low-risk
-follow-ups).
+all at once) → 8 (24-48h soak then decide) → 11 (verify bake-in
+self-heal) → 1 (maintenance window) → 2 (longer maintenance window,
+covers RLS smoke-test) → 9 + 10 (low-risk follow-ups).
 
 ---
 
@@ -571,3 +572,68 @@ with the same API-key middleware contract used by other bio proxies.
 **Acceptance check.** After deploy, web-app browser console should stop
 printing `[biometric-puzzles] /biometric/puzzles/verify-challenge proxy
 not deployed yet` warnings on first puzzle completion.
+
+---
+
+## 11. bio_models volume cleanup — post bake-in PR (LOW)
+
+**Background.** 2026-05-12 Team B PR `fix/2026-05-12-bake-mini-fasnet-models`
+(bio repo PR #104, parent PR also `fix/2026-05-12-bake-mini-fasnet-models`)
+bakes the four DeepFace / Facenet model weights into the bio image layer
+and adds an entrypoint shim that:
+
+1. chowns the externally-mounted cache volume to uid 100 / gid 101 (the
+   `app` user inside the container), and
+2. seeds missing weight files from `/opt/baked-models/` so a wiped named
+   volume is self-healing.
+
+Before this PR a hot-fix from earlier in the day had manually `docker cp`'d
+`2.7_80x80_MiniFASNetV2.pth` and `4_0_0_80x80_MiniFASNetV1SE.pth` into the
+running container's volume. That fix was load-bearing on operator memory:
+the next `docker volume rm` would have re-triggered the false-spoof-verdict
+chain. With the bake-in shipped, that operator memory is no longer
+load-bearing — but two cleanup paths exist depending on how aggressively
+you want to verify the bake-in.
+
+This is the 4th recurrence of the pattern documented in
+`feedback_readonly_rootfs_cache_dirs` (prior: DeepFace, Numba, UniFace).
+After this PR ships the contract is **bake at build-time + self-heal at
+boot-time**, not "remember to docker-cp".
+
+**Blast radius.** Either path causes a brief (~5s) bio-api restart. No data
+loss; `biometric_uploads` and `biometric_uniface` volumes are untouched.
+
+**Maintenance window.** 2 minutes.
+
+**Dependencies.** Rebuild bio image from the merged Team B PR first.
+
+**Option A — Wipe & verify self-heal (recommended).**
+
+```bash
+cd /opt/projects/fivucsas/biometric-processor
+docker compose -f docker-compose.prod.yml --env-file .env.prod down biometric-api
+docker volume rm biometric-processor_biometric_models
+docker compose -f docker-compose.prod.yml --env-file .env.prod up -d biometric-api
+# Confirm the entrypoint shim re-seeded the cache:
+docker exec biometric-api ls -la /tmp/.deepface/.deepface/weights/
+# Expected: all four files owned by 100:101 with the SHAs documented in
+# item 6 (facenet512) and the bio-PR description (centerface, MiniFASNetV2,
+# MiniFASNetV1SE).
+```
+
+**Option B — Keep & re-own the existing volume.**
+
+```bash
+# Fix ownership on the existing volume in-place (one-time, host side).
+chown -R 100:101 /var/lib/docker/volumes/biometric-processor_biometric_models/_data
+# Restart bio-api so it picks up the corrected ownership.
+docker compose -f docker-compose.prod.yml --env-file .env.prod restart biometric-api
+```
+
+**Acceptance check.** Either path: `docker exec biometric-api stat -c '%u:%g'
+/tmp/.deepface/.deepface/weights/facenet512_weights.h5` returns `100:101`.
+
+**Why this is LOW priority.** The container is currently healthy with the
+docker-cp'd files in place. This cleanup item exists to remove an
+undocumented assumption (operator memory of the manual `docker cp`), not
+to fix a live failure.
diff --git a/PHASE_4_PRODUCTIZATION_PLAN_2026-05-11.md b/archive/2026-05/plans/PHASE_4_PRODUCTIZATION_PLAN_2026-05-11.md
similarity index 100%
rename from PHASE_4_PRODUCTIZATION_PLAN_2026-05-11.md
rename to archive/2026-05/plans/PHASE_4_PRODUCTIZATION_PLAN_2026-05-11.md
diff --git a/biometric-processor b/biometric-processor
index 053e73d..726d3c3 160000
--- a/biometric-processor
+++ b/biometric-processor
@@ -1 +1 @@
-Subproject commit 053e73d1ccff2d95f09fe644c66a054bc8e0aa30
+Subproject commit 726d3c327f7eced3b7849913a747889f6fe255dc
diff --git a/bys-demo/callback.html b/bys-demo/callback.html
index 51e1c27..6f033d2 100644
--- a/bys-demo/callback.html
+++ b/bys-demo/callback.html
@@ -23,6 +23,20 @@
     <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><rect width='32' height='32' rx='6' fill='%23003366'/><text x='16' y='22' text-anchor='middle' fill='%23c8a84e' font-size='18' font-weight='900'>M</text></svg>">
 </head>
 <body>
+<!-- FIVUCSAS suite bar — cross-site nav -->
+<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:system-ui,-apple-system,sans-serif;color:#9ca3af;">
+  <a href="https://fivucsas.com/" style="color:#60a5fa;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://app.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">Dashboard</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://demo.fivucsas.com/" style="color:#d1d5db;text-decoration:none;" aria-current="page">Demo</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://verify.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">Widget</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://amispoof.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">amispoof</a>
+  <a href="https://status.fivucsas.com/" style="color:#d1d5db;text-decoration:none;margin-left:auto;">Status &uarr;</a>
+</div>
+
 
 <!-- Navbar -->
 <nav class="navbar">
diff --git a/bys-demo/dashboard.html b/bys-demo/dashboard.html
index edbd2f0..ad54b5a 100644
--- a/bys-demo/dashboard.html
+++ b/bys-demo/dashboard.html
@@ -23,6 +23,19 @@
     <meta name="theme-color" content="#003366">
 </head>
 <body>
+<!-- FIVUCSAS suite bar — cross-site nav -->
+<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:system-ui,-apple-system,sans-serif;color:#9ca3af;">
+  <a href="https://fivucsas.com/" style="color:#60a5fa;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://app.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">Dashboard</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://demo.fivucsas.com/" style="color:#d1d5db;text-decoration:none;" aria-current="page">Demo</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://verify.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">Widget</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://amispoof.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">amispoof</a>
+  <a href="https://status.fivucsas.com/" style="color:#d1d5db;text-decoration:none;margin-left:auto;">Status &uarr;</a>
+</div>
 
 <!-- Navbar -->
 <nav class="navbar">
diff --git a/bys-demo/index.html b/bys-demo/index.html
index b472504..33175b2 100644
--- a/bys-demo/index.html
+++ b/bys-demo/index.html
@@ -1,8 +1,13 @@
 <!DOCTYPE html>
-<html lang="tr">
+<html lang="tr" data-lang="tr">
 <head>
+<style>
+/* Language gating (injected) */
+html[data-lang="tr"] [data-en]{ display:none !important; }
+html[data-lang="en"] [data-tr]{ display:none !important; }
+</style>
     <meta charset="UTF-8">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://verify.fivucsas.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.fivucsas.com https://verify.fivucsas.com; frame-src https://verify.fivucsas.com; base-uri 'self'; form-action 'self' https://verify.fivucsas.com;">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://verify.fivucsas.com https://app.fivucsas.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.fivucsas.com https://verify.fivucsas.com; frame-src https://verify.fivucsas.com; base-uri 'self'; form-action 'self' https://verify.fivucsas.com;">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>FIVUCSAS Biyometrik Kimlik Doğrulama — Üniversite BYS Entegrasyon Demosu</title>
     <meta name="description" content="Canlı entegrasyon demosu: FIVUCSAS biyometrik kimlik doğrulama platformunun bir üniversite öğrenci bilgi sistemine nasıl entegre edildiğini gösterir. Marmara BYS arayüzü, demo veridir.">
@@ -73,9 +78,15 @@
             <span>T.C. Marmara Üniversitesi</span>
         </div>
         <div class="utility-bar-right">
-            <a href="#" onclick="return false;">İletişim</a>
+            <a href="https://fivucsas.com/">← FIVUCSAS</a>
             <span class="util-sep">|</span>
-            <a href="#" onclick="return false;">Site Haritası</a>
+            <a href="https://app.fivucsas.com/">Dashboard</a>
+            <span class="util-sep">|</span>
+            <a href="https://verify.fivucsas.com/">Widget</a>
+            <span class="util-sep">|</span>
+            <a href="https://amispoof.fivucsas.com/">amispoof</a>
+            <span class="util-sep">|</span>
+            <a href="https://status.fivucsas.com/">Status</a>
         </div>
     </div>
 </div>
@@ -100,8 +111,8 @@
                 </svg>
             </div>
             <div class="header-brand-text">
-                <div class="header-brand-title">T.C. Marmara Üniversitesi</div>
-                <div class="header-brand-subtitle">Öğrenci Bilgi Sistemi (BYS)</div>
+                <div class="header-brand-title"><span data-tr>T.C. Marmara Üniversitesi</span><span data-en>Republic of Türkiye · Marmara University</span></div>
+                <div class="header-brand-subtitle"><span data-tr>Öğrenci Bilgi Sistemi (BYS)</span><span data-en>Student Information System (BYS)</span></div>
             </div>
         </a>
         <div class="header-right">
@@ -121,7 +132,7 @@
 <nav class="bys-navbar">
     <div class="bys-navbar-inner">
         <ul class="bys-nav-list">
-            <li class="bys-nav-item active"><a href="index.html">Ana Sayfa</a></li>
+            <li class="bys-nav-item active"><a href="index.html"><span data-tr>Ana Sayfa</span><span data-en>Home</span></a></li>
             <li class="bys-nav-item has-dropdown">
                 <a href="#" onclick="return false;">Öğrenci İşleri <span class="nav-arrow">&#9660;</span></a>
                 <ul class="bys-dropdown">
@@ -188,7 +199,7 @@
                     <text x="60" y="95" text-anchor="middle" fill="#ffffff" font-size="9" font-weight="700" font-family="'Times New Roman',serif" letter-spacing="3">1883</text>
                 </svg>
             </div>
-            <h1 class="bys-title">Öğrenci Bilgi Sistemi</h1>
+            <h1 class="bys-title"><span data-tr>Öğrenci Bilgi Sistemi</span><span data-en>Student Information System</span></h1>
             <p class="bys-subtitle">T.C. Marmara Üniversitesi &mdash; BYS Giriş Portalı</p>
         </div>
 
@@ -274,7 +285,7 @@ <h1 class="bys-title">Öğrenci Bilgi Sistemi</h1>
                     </svg>
                 </span>
                 <div class="fivucsas-btn-text">
-                    <div class="fivucsas-btn-label">FIVUCSAS ile Güvenli Giriş</div>
+                    <div class="fivucsas-btn-label"><span data-tr>FIVUCSAS ile Güvenli Giriş</span><span data-en>Sign in securely with FIVUCSAS</span></div>
                     <div class="fivucsas-btn-sub">Yönlendirmeli Giriş &mdash; Biyometrik Kimlik Doğrulama</div>
                 </div>
                 <svg class="fivucsas-arrow" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M5 12h14m-7-7l7 7-7 7"/></svg>
@@ -285,6 +296,10 @@ <h1 class="bys-title">Öğrenci Bilgi Sistemi</h1>
                 <button type="button" class="fivucsas-advanced-btn" onclick="startFivucsasWidget()">
                     İnline MFA (gelişmiş) &mdash; iframe widget örneği
                 </button>
+                <p class="fivucsas-widget-note" style="margin-top:10px;font-size:12.5px;line-height:1.5;color:#94a3b8;max-width:420px;">
+                    <span data-tr>Bu satır içi (iframe) widget, FIVUCSAS'ın <strong>gömülebilir kimlik doğrulama</strong> yeteneğini göstermek için buradadır (vitrin). Güvenlik gereği (clickjacking koruması) canlı iframe yalnızca FIVUCSAS demo alanlarında etkindir, harici müşteri/kiracılara açılmaz. Birincil ve önerilen entegrasyon yukarıdaki <strong>yönlendirmeli (redirect)</strong> butondur.</span>
+                    <span data-en>This inline (iframe) widget is here to showcase FIVUCSAS's <strong>embeddable authentication</strong> capability. For security (clickjacking protection), the live iframe is enabled only on FIVUCSAS demo origins and is not offered to external customers/tenants. The primary, recommended integration is the <strong>redirect</strong> button above.</span>
+                </p>
             </div>
 
         </div><!-- /.login-card -->
@@ -298,7 +313,7 @@ <h1 class="bys-title">Öğrenci Bilgi Sistemi</h1>
         <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10.29 3.86L1.82 18a2 2 0 001.71 3h16.94a2 2 0 001.71-3L13.71 3.86a2 2 0 00-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg>
     </div>
     <div>
-        <strong>Demonstrasyon Sayfası</strong> &mdash; Bu sayfa, FIVUCSAS biyometrik kimlik doğrulamanın bir üniversite BYS'ye nasıl entegre edildiğini göstermektedir.
+        <strong><span data-tr>Demonstrasyon Sayfası</span><span data-en>Demonstration Page</span></strong> &mdash; <span data-tr>Bu sayfa, FIVUCSAS biyometrik kimlik doğrulamanın bir üniversite BYS'ye nasıl entegre edildiğini göstermektedir.</span><span data-en>This page demonstrates how FIVUCSAS biometric identity verification integrates into a university Student Information System (BYS).</span>
         Geleneksel giriş ve e-Devlet bu demoda devre dışıdır. <strong>&ldquo;FIVUCSAS ile Güvenli Giriş&rdquo;</strong> butonunu kullanarak OAuth widget akışını deneyebilirsiniz.
     </div>
 </div>
@@ -381,5 +396,7 @@ <h1 class="bys-title">Öğrenci Bilgi Sistemi</h1>
 }
 </script>
 
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
 </body>
 </html>
diff --git a/bys-demo/test-elements.html b/bys-demo/test-elements.html
index 48c5a52..5d8cf21 100644
--- a/bys-demo/test-elements.html
+++ b/bys-demo/test-elements.html
@@ -68,6 +68,20 @@
   </style>
 </head>
 <body>
+<!-- FIVUCSAS suite bar — cross-site nav -->
+<div style="background:#0a0d12;border-bottom:1px solid #1f2937;padding:6px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center;font-size:12px;font-family:system-ui,-apple-system,sans-serif;color:#9ca3af;margin:-1rem -1rem 1rem -1rem;">
+  <a href="https://fivucsas.com/" style="color:#60a5fa;text-decoration:none;font-weight:600;">← FIVUCSAS</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://app.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">Dashboard</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://demo.fivucsas.com/" style="color:#d1d5db;text-decoration:none;" aria-current="page">Demo</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://verify.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">Widget</a>
+  <span style="color:#374151;">|</span>
+  <a href="https://amispoof.fivucsas.com/" style="color:#d1d5db;text-decoration:none;">amispoof</a>
+  <a href="https://status.fivucsas.com/" style="color:#d1d5db;text-decoration:none;margin-left:auto;">Status &uarr;</a>
+</div>
+
   <h1>FIVUCSAS Web Components <span class="badge">Phase C</span></h1>
   <p>
     Vanilla test page for <code>&lt;fivucsas-verify&gt;</code> and
diff --git a/docs-site/Dockerfile b/docs-site/Dockerfile
new file mode 100644
index 0000000..040c466
--- /dev/null
+++ b/docs-site/Dockerfile
@@ -0,0 +1,4 @@
+FROM nginx:alpine
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+COPY html/ /usr/share/nginx/html/
+EXPOSE 80
diff --git a/docs-site/docker-compose.prod.yml b/docs-site/docker-compose.prod.yml
new file mode 100644
index 0000000..098168c
--- /dev/null
+++ b/docs-site/docker-compose.prod.yml
@@ -0,0 +1,30 @@
+services:
+  docs:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    container_name: fivucsas-docs
+    restart: unless-stopped
+    networks:
+      - proxy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.fivucsas-docs.rule=Host(`docs.fivucsas.com`)"
+      - "traefik.http.routers.fivucsas-docs.entrypoints=websecure"
+      - "traefik.http.routers.fivucsas-docs.tls.certresolver=letsencrypt"
+      - "traefik.http.services.fivucsas-docs.loadbalancer.server.port=80"
+    healthcheck:
+      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:80/ || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    deploy:
+      resources:
+        limits:
+          memory: 64M
+          pids: 128
+
+networks:
+  proxy:
+    external: true
diff --git a/docs-site/html/biometric/index.html b/docs-site/html/biometric/index.html
new file mode 100644
index 0000000..4233216
--- /dev/null
+++ b/docs-site/html/biometric/index.html
@@ -0,0 +1,170 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Biometric Processor API - FIVUCSAS Docs</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui.css">
+    <style>
+        *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+
+        :root {
+            --primary: #6366f1;
+            --primary-light: #818cf8;
+            --accent: #8b5cf6;
+            --bg: #0f0f23;
+            --bg-card: #1a1a2e;
+            --text: #e2e8f0;
+            --text-muted: #94a3b8;
+            --border: #2d2d4a;
+            --warning: #f59e0b;
+        }
+
+        body {
+            font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
+            background: var(--bg);
+            color: var(--text);
+            min-height: 100vh;
+        }
+
+        .header {
+            background: linear-gradient(135deg, rgba(99, 102, 241, 0.1), rgba(139, 92, 246, 0.05));
+            border-bottom: 1px solid var(--border);
+            padding: 1rem 2rem;
+            position: sticky;
+            top: 0;
+            z-index: 100;
+            backdrop-filter: blur(12px);
+        }
+
+        .header-inner {
+            max-width: 1400px;
+            margin: 0 auto;
+            display: flex;
+            align-items: center;
+            gap: 1.5rem;
+        }
+
+        .back-link {
+            color: var(--text-muted);
+            text-decoration: none;
+            font-size: 0.875rem;
+            display: flex;
+            align-items: center;
+            gap: 0.375rem;
+            transition: color 0.2s;
+        }
+
+        .back-link:hover { color: var(--primary-light); }
+
+        .page-title { font-size: 1.1rem; font-weight: 600; }
+
+        .tag {
+            padding: 0.2rem 0.6rem;
+            border-radius: 6px;
+            font-size: 0.7rem;
+            font-weight: 500;
+            text-transform: uppercase;
+            letter-spacing: 0.05em;
+            background: rgba(245, 158, 11, 0.15);
+            color: var(--warning);
+        }
+
+        .banner {
+            max-width: 1400px;
+            margin: 1.5rem auto 0;
+            padding: 0 2rem;
+        }
+
+        .banner-inner {
+            background: rgba(245, 158, 11, 0.08);
+            border: 1px solid rgba(245, 158, 11, 0.2);
+            border-radius: 8px;
+            padding: 0.875rem 1.25rem;
+            display: flex;
+            align-items: center;
+            gap: 0.75rem;
+            font-size: 0.85rem;
+            color: var(--warning);
+        }
+
+        .banner-inner svg { flex-shrink: 0; }
+
+        .swagger-container {
+            max-width: 1400px;
+            margin: 0 auto;
+            padding: 1.5rem 2rem 2rem;
+        }
+
+        /* Swagger UI dark theme overrides */
+        .swagger-ui .topbar { display: none; }
+        .swagger-ui { background: transparent; }
+        .swagger-ui .info { margin: 20px 0; }
+        .swagger-ui .info .title { color: var(--text); }
+        .swagger-ui .info .description p { color: var(--text-muted); }
+        .swagger-ui .scheme-container { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 1rem; }
+        .swagger-ui .opblock-tag { color: var(--text); border-bottom-color: var(--border); }
+        .swagger-ui .opblock { background: var(--bg-card); border-color: var(--border); }
+        .swagger-ui .opblock .opblock-summary { border-color: var(--border); }
+        .swagger-ui .opblock-description-wrapper p { color: var(--text-muted); }
+        .swagger-ui .btn { color: var(--text); }
+        .swagger-ui .parameter__name { color: var(--text); }
+        .swagger-ui .parameter__type { color: var(--text-muted); }
+        .swagger-ui table thead tr td, .swagger-ui table thead tr th { color: var(--text-muted); border-bottom-color: var(--border); }
+        .swagger-ui .response-col_status { color: var(--text); }
+        .swagger-ui .response-col_description__inner p { color: var(--text-muted); }
+        .swagger-ui .model-title { color: var(--text); }
+        .swagger-ui .model { color: var(--text-muted); }
+        .swagger-ui section.models { border-color: var(--border); }
+        .swagger-ui section.models h4 { color: var(--text); border-bottom-color: var(--border); }
+
+        @media (max-width: 768px) {
+            .header-inner { flex-wrap: wrap; }
+            .swagger-container { padding: 1rem; }
+            .banner { padding: 0 1rem; }
+        }
+    </style>
+</head>
+<body>
+
+    <header class="header">
+        <div class="header-inner">
+            <a href="/" class="back-link">
+                <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M19 12H5"/><polyline points="12 19 5 12 12 5"/></svg>
+                Docs
+            </a>
+            <span class="page-title">Biometric Processor API</span>
+            <span class="tag">Internal</span>
+        </div>
+    </header>
+
+    <div class="banner">
+        <div class="banner-inner">
+            <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg>
+            <span>Internal API &mdash; not publicly accessible. This microservice is used by Identity Core API only and is not exposed to external traffic.</span>
+        </div>
+    </div>
+
+    <div class="swagger-container">
+        <div id="swagger-ui"></div>
+    </div>
+
+    <script src="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui-bundle.js"></script>
+    <script>
+        SwaggerUIBundle({
+            url: '/biometric/openapi.json',
+            dom_id: '#swagger-ui',
+            deepLinking: true,
+            presets: [SwaggerUIBundle.presets.apis],
+            layout: 'BaseLayout',
+            defaultModelsExpandDepth: 1,
+            docExpansion: 'list',
+            filter: true
+        });
+    </script>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
+</body>
+</html>
diff --git a/docs-site/html/biometric/openapi.json b/docs-site/html/biometric/openapi.json
new file mode 100644
index 0000000..b890ba4
--- /dev/null
+++ b/docs-site/html/biometric/openapi.json
@@ -0,0 +1 @@
+{"openapi":"3.1.0","info":{"title":"FIVUCSAS Biometric Processor","description":"AI/ML microservice for face recognition and liveness detection","version":"1.0.0"},"paths":{"/api/v1/health":{"get":{"tags":["Health"],"summary":"Health Check","description":"Basic health check endpoint.\n\nReturns service health status and configuration information.\nThis is the original simple health endpoint for backward compatibility.\n\nReturns:\n    HealthResponse with service status","operationId":"health_check_api_v1_health_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HealthResponse"}}}}}}},"/api/v1/health/detailed":{"get":{"tags":["Health"],"summary":"Detailed Health Check","description":"Comprehensive health check endpoint with system diagnostics.\n\nChecks the health of all critical system components:\n- Application status\n- Database connectivity\n- Cache status (if enabled)\n- ML models (detector and extractor)\n- Configuration\n\nReturns:\n    Detailed health status with diagnostics\n\nStatus codes:\n    200: System is healthy\n    503: System is unhealthy (some checks failed)\n\nUsage:\n    - Kubernetes liveness probe: GET /health/detailed\n    - Monitoring systems: Poll this endpoint periodically\n    - Dashboard: Display real-time health status","operationId":"detailed_health_check_api_v1_health_detailed_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"additionalProperties":true,"type":"object","title":"Response Detailed Health Check Api V1 Health Detailed Get"}}}}}}},"/api/v1/health/live":{"get":{"tags":["Health"],"summary":"Liveness Check","description":"Liveness check endpoint (lightweight).\n\nThis endpoint indicates whether the application is running.\nIt performs minimal checks and responds quickly.\n\nReturns:\n    Simple status indicating the application is alive\n\nUsage:\n    - Kubernetes liveness probe: GET /health/live\n    - Returns 200 if application is running\n    - Should restart container if this fails","operationId":"liveness_check_api_v1_health_live_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"additionalProperties":true,"type":"object","title":"Response Liveness Check Api V1 Health Live Get"}}}}}}},"/api/v1/health/ready":{"get":{"tags":["Health"],"summary":"Readiness Check","description":"Readiness check endpoint.\n\nThis endpoint indicates whether the application is ready to serve traffic.\nChecks that all required dependencies are available.\n\nReturns:\n    Readiness status\n\nStatus codes:\n    200: Application is ready\n    503: Application is not ready\n\nUsage:\n    - Kubernetes readiness probe: GET /health/ready\n    - Load balancer health check","operationId":"readiness_check_api_v1_health_ready_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"additionalProperties":true,"type":"object","title":"Response Readiness Check Api V1 Health Ready Get"}}}}}}},"/api/v1/metrics/cache":{"get":{"tags":["Health"],"summary":"Cache Metrics","description":"Get cache performance metrics.\n\nReturns detailed caching statistics for monitoring and optimization.\n\nReturns:\n    Cache metrics including hit rate, size, and TTL\n\nRaises:\n    HTTPException 404: If caching is not enabled","operationId":"cache_metrics_api_v1_metrics_cache_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"additionalProperties":true,"type":"object","title":"Response Cache Metrics Api V1 Metrics Cache Get"}}}}}}},"/api/v1/enroll":{"post":{"tags":["Enrollment"],"summary":"Enroll Face","description":"Enroll a user's face.\n\nSECURITY: This endpoint is protected by rate limiting (default: 10 requests/minute)\nto prevent enrollment flooding and DoS attacks. See ENROLLMENT_RATE_LIMIT_PER_MINUTE config.\n\nThis endpoint:\n1. Validates the uploaded image\n2. Detects face in the image\n3. Assesses image quality\n4. Extracts face embedding\n5. Stores embedding in repository\n\nArgs:\n    user_id: Unique identifier for the user\n    file: Face image file (JPEG/PNG)\n    tenant_id: Optional tenant identifier for multi-tenancy\n    use_case: Injected enrollment use case\n    storage: Injected file storage\n\nReturns:\n    EnrollmentResponse with enrollment result\n\nRaises:\n    HTTPException 400: Bad request (no face, multiple faces, poor quality)\n    HTTPException 500: Internal server error","operationId":"enroll_face_api_v1_enroll_post","parameters":[{"name":"Idempotency-Key","in":"header","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"description":"Optional idempotency key to prevent duplicate enrollments","title":"Idempotency-Key"},"description":"Optional idempotency key to prevent duplicate enrollments"}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_enroll_face_api_v1_enroll_post"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/EnrollmentResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/enroll/multi":{"post":{"tags":["Enrollment"],"summary":"Enroll Face Multi Image","description":"Enroll a user's face using multiple images (template fusion).\n\nSECURITY: This endpoint is protected by rate limiting (default: 10 requests/minute)\nto prevent enrollment flooding and DoS attacks. See ENROLLMENT_RATE_LIMIT_PER_MINUTE config.\n\nThis endpoint implements multi-image biometric enrollment:\n- Accepts 2-5 face images per user\n- Processes each image independently (detect, assess quality, extract embedding)\n- Fuses embeddings using quality-weighted average\n- Creates a single robust template\n- Improves verification accuracy by 30-40% with poor quality photos\n\nProcess:\n1. Validates uploaded images (2-5 required)\n2. Detects face in each image\n3. Assesses quality of each image\n4. Extracts embedding from each image\n5. Fuses embeddings using weighted average (higher quality = higher weight)\n6. Stores fused template in repository\n\nArgs:\n    user_id: Unique identifier for the user\n    files: 2-5 face image files (JPEG/PNG)\n    tenant_id: Optional tenant identifier for multi-tenancy\n    use_case: Injected multi-image enrollment use case\n    storage: Injected file storage\n\nReturns:\n    MultiImageEnrollmentResponse with enrollment result\n\nRaises:\n    HTTPException 400: Bad request (invalid count, no face, multiple faces, poor quality)\n    HTTPException 500: Internal server error","operationId":"enroll_face_multi_image_api_v1_enroll_multi_post","parameters":[{"name":"Idempotency-Key","in":"header","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"description":"Optional idempotency key to prevent duplicate enrollments","title":"Idempotency-Key"},"description":"Optional idempotency key to prevent duplicate enrollments"}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_enroll_face_multi_image_api_v1_enroll_multi_post"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MultiImageEnrollmentResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/verify":{"post":{"tags":["Verification"],"summary":"Verify Face","description":"Verify a user's face (1:1 matching).\n\nThis endpoint:\n1. Detects face in uploaded image\n2. Extracts face embedding\n3. Retrieves stored embedding for user\n4. Compares embeddings\n5. Returns verification result\n\nArgs:\n    user_id: User identifier to verify against\n    file: Face image file (JPEG/PNG)\n    tenant_id: Optional tenant identifier for multi-tenancy\n    use_case: Injected verification use case\n    storage: Injected file storage\n\nReturns:\n    VerificationResponse with verification result\n\nRaises:\n    HTTPException 400: Bad request (no face, multiple faces)\n    HTTPException 404: User not enrolled\n    HTTPException 500: Internal server error","operationId":"verify_face_api_v1_verify_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_verify_face_api_v1_verify_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerificationResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/liveness":{"post":{"tags":["Liveness"],"summary":"Check Liveness","description":"Check liveness of a face.\n\nThis endpoint:\n1. Detects face in image\n2. Performs liveness check\n3. Returns liveness result\n\nArgs:\n    file: Face image file (JPEG/PNG)\n    use_case: Injected liveness check use case\n    storage: Injected file storage\n\nReturns:\n    LivenessResponse with liveness check result\n\nRaises:\n    HTTPException 400: Bad request (no face, multiple faces)\n    HTTPException 500: Internal server error\n\nNote:\n    Currently uses stub liveness detector.\n    Will be updated in Sprint 3 with real smile/blink detection.","operationId":"check_liveness_api_v1_liveness_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_check_liveness_api_v1_liveness_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/LivenessResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/search":{"post":{"tags":["Search"],"summary":"Search Face","description":"Search for a face across all enrolled users (1:N identification).\n\nThis endpoint:\n1. Validates the uploaded image\n2. Detects face in the image\n3. Extracts face embedding\n4. Searches for similar embeddings\n5. Returns ranked list of matches\n\nArgs:\n    file: Face image file (JPEG/PNG)\n    max_results: Maximum number of matches to return (1-100)\n    threshold: Distance threshold for matching (None = use default 0.6)\n    tenant_id: Optional tenant identifier for multi-tenancy\n    use_case: Injected search use case\n    storage: Injected file storage\n\nReturns:\n    SearchResponse with list of matches\n\nRaises:\n    HTTPException 400: Bad request (no face, multiple faces, invalid image)\n    HTTPException 500: Internal server error","operationId":"search_face_api_v1_search_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_search_face_api_v1_search_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SearchResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/batch/enroll":{"post":{"tags":["batch"],"summary":"Batch Enroll","description":"Batch enroll multiple faces.\n\nUpload multiple image files along with a JSON array mapping each file\nto its user_id and optional tenant_id.\n\nArgs:\n    files: List of image files (must match items array order)\n    items: JSON array of BatchEnrollmentItemRequest objects\n    skip_duplicates: Whether to skip users that already exist\n    use_case: Batch enrollment use case\n    storage: File storage service\n\nReturns:\n    BatchEnrollmentResponse with results for each item\n\nExample items JSON:\n    [\n        {\"user_id\": \"user1\", \"tenant_id\": \"tenant1\"},\n        {\"user_id\": \"user2\", \"tenant_id\": \"tenant1\"},\n        {\"user_id\": \"user3\"}\n    ]","operationId":"batch_enroll_api_v1_batch_enroll_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_batch_enroll_api_v1_batch_enroll_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/BatchEnrollmentResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/batch/verify":{"post":{"tags":["batch"],"summary":"Batch Verify","description":"Batch verify multiple faces.\n\nUpload multiple image files along with a JSON array mapping each file\nto its item_id, user_id, and optional tenant_id.\n\nArgs:\n    files: List of image files (must match items array order)\n    items: JSON array of BatchVerificationItemRequest objects\n    threshold: Similarity threshold for matching\n    use_case: Batch verification use case\n    storage: File storage service\n\nReturns:\n    BatchVerificationResponse with results for each item\n\nExample items JSON:\n    [\n        {\"item_id\": \"verify1\", \"user_id\": \"user1\", \"tenant_id\": \"tenant1\"},\n        {\"item_id\": \"verify2\", \"user_id\": \"user2\", \"tenant_id\": \"tenant1\"},\n        {\"item_id\": \"verify3\", \"user_id\": \"user3\"}\n    ]","operationId":"batch_verify_api_v1_batch_verify_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_batch_verify_api_v1_batch_verify_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/BatchVerificationResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/card-type/detect-live":{"post":{"tags":["Card Type"],"summary":"Detect card type from image","description":"Detects the card type from the provided image.Supported classes: tc_kimlik, ehliyet, pasaport, ogrenci_karti,akademisyen_karti.Designed for real-time mobile camera preview (0.5-1 second intervals).","operationId":"detect_live_api_v1_card_type_detect_live_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_detect_live_api_v1_card_type_detect_live_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CardTypeResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/quality/analyze":{"post":{"tags":["Quality"],"summary":"Analyze image quality","description":"Analyzes image quality and returns detailed feedback including issues detected and actionable suggestions for improvement.","operationId":"analyze_quality_api_v1_quality_analyze_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_analyze_quality_api_v1_quality_analyze_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QualityFeedbackResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/faces/detect-all":{"post":{"tags":["Face Detection"],"summary":"Detect all faces in image","description":"Detects all faces in the image and returns bounding boxes, quality scores, and basic landmarks for each face.","operationId":"detect_all_faces_api_v1_faces_detect_all_post","parameters":[{"name":"max_faces","in":"query","required":false,"schema":{"anyOf":[{"type":"integer","maximum":50,"minimum":1},{"type":"null"}],"description":"Maximum number of faces to return","default":10,"title":"Max Faces"},"description":"Maximum number of faces to return"}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_detect_all_faces_api_v1_faces_detect_all_post"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MultiFaceResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/demographics/analyze":{"post":{"tags":["Demographics"],"summary":"Analyze face demographics","description":"Estimates age, gender, and optionally emotion from a face image. Race estimation can be enabled via configuration.","operationId":"analyze_demographics_api_v1_demographics_analyze_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_analyze_demographics_api_v1_demographics_analyze_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DemographicsResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/landmarks/detect":{"post":{"tags":["Landmarks"],"summary":"Detect facial landmarks","description":"Detects detailed facial landmarks (468 points with MediaPipe). Includes facial regions mapping and head pose estimation.","operationId":"detect_landmarks_api_v1_landmarks_detect_post","parameters":[{"name":"include_3d","in":"query","required":false,"schema":{"type":"boolean","description":"Include 3D coordinates for landmarks","default":false,"title":"Include 3D"},"description":"Include 3D coordinates for landmarks"}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_detect_landmarks_api_v1_landmarks_detect_post"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/LandmarkResultResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/compare":{"post":{"tags":["Comparison"],"summary":"Compare two face images","description":"Compares two face images directly without enrollment. Returns similarity score and match determination.","operationId":"compare_faces_api_v1_compare_post","parameters":[{"name":"threshold","in":"query","required":false,"schema":{"anyOf":[{"type":"number","maximum":1.0,"minimum":0.0},{"type":"null"}],"description":"Similarity threshold for match determination","default":0.6,"title":"Threshold"},"description":"Similarity threshold for match determination"}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_compare_faces_api_v1_compare_post"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/FaceComparisonResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/similarity/matrix":{"post":{"tags":["Similarity"],"summary":"Compute similarity matrix","description":"Computes NxN similarity matrix for multiple face images. Returns pairwise similarities and face clusters.","operationId":"compute_similarity_matrix_api_v1_similarity_matrix_post","parameters":[{"name":"threshold","in":"query","required":false,"schema":{"anyOf":[{"type":"number","maximum":1.0,"minimum":0.0},{"type":"null"}],"description":"Threshold for considering faces as matching","default":0.6,"title":"Threshold"},"description":"Threshold for considering faces as matching"}],"requestBody":{"required":true,"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_compute_similarity_matrix_api_v1_similarity_matrix_post"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SimilarityMatrixResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/embeddings/export":{"get":{"tags":["Embeddings"],"summary":"Export embeddings","description":"Exports all face embeddings for a tenant to JSON format. Useful for backup or migration.","operationId":"export_embeddings_api_v1_embeddings_export_get","parameters":[{"name":"tenant_id","in":"query","required":false,"schema":{"type":"string","description":"Tenant identifier","default":"default","title":"Tenant Id"},"description":"Tenant identifier"},{"name":"format","in":"query","required":false,"schema":{"const":"json","type":"string","description":"Export format","default":"json","title":"Format"},"description":"Export format"},{"name":"include_metadata","in":"query","required":false,"schema":{"type":"boolean","description":"Include user metadata in export","default":true,"title":"Include Metadata"},"description":"Include user metadata in export"}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/embeddings/import":{"post":{"tags":["Embeddings"],"summary":"Import embeddings","description":"Imports face embeddings from JSON format. Supports merge, replace, and skip_existing modes.","operationId":"import_embeddings_api_v1_embeddings_import_post","requestBody":{"content":{"multipart/form-data":{"schema":{"$ref":"#/components/schemas/Body_import_embeddings_api_v1_embeddings_import_post"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"additionalProperties":true,"type":"object","title":"Response Import Embeddings Api V1 Embeddings Import Post"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/webhooks/register":{"post":{"tags":["Webhooks"],"summary":"Register webhook","description":"Register a new webhook endpoint for receiving notifications.","operationId":"register_webhook_api_v1_webhooks_register_post","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookRegisterRequest"}}},"required":true},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookConfigResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/webhooks":{"get":{"tags":["Webhooks"],"summary":"List webhooks","description":"List all registered webhooks.","operationId":"list_webhooks_api_v1_webhooks_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookListResponse"}}}}}}},"/api/v1/webhooks/{webhook_id}":{"delete":{"tags":["Webhooks"],"summary":"Delete webhook","description":"Delete a registered webhook.","operationId":"delete_webhook_api_v1_webhooks__webhook_id__delete","parameters":[{"name":"webhook_id","in":"path","required":true,"schema":{"type":"string","title":"Webhook Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"type":"object","additionalProperties":{"type":"string"},"title":"Response Delete Webhook Api V1 Webhooks  Webhook Id  Delete"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/webhooks/{webhook_id}/test":{"post":{"tags":["Webhooks"],"summary":"Test webhook","description":"Send a test event to the webhook endpoint.","operationId":"test_webhook_api_v1_webhooks__webhook_id__test_post","parameters":[{"name":"webhook_id","in":"path","required":true,"schema":{"type":"string","title":"Webhook Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/WebhookTestResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions":{"post":{"tags":["proctoring"],"summary":"Create Session","description":"Create a new proctoring session.\n\nCreates a new session for monitoring an exam-taker. The session must be\nstarted separately to begin active monitoring.","operationId":"create_session_api_v1_proctoring_sessions_post","parameters":[{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSessionRequest"}}}},"responses":{"201":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateSessionResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}},"get":{"tags":["proctoring"],"summary":"List Sessions","description":"List proctoring sessions with optional filters.","operationId":"list_sessions_api_v1_proctoring_sessions_get","parameters":[{"name":"exam_id","in":"query","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Exam Id"}},{"name":"user_id","in":"query","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"User Id"}},{"name":"status","in":"query","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Status"}},{"name":"limit","in":"query","required":false,"schema":{"type":"integer","maximum":500,"minimum":1,"default":100,"title":"Limit"}},{"name":"offset","in":"query","required":false,"schema":{"type":"integer","minimum":0,"default":0,"title":"Offset"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SessionListResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/start":{"post":{"tags":["proctoring"],"summary":"Start Session","description":"Start a proctoring session.\n\nBegins active monitoring. Requires a baseline image or existing user embedding.","operationId":"start_session_api_v1_proctoring_sessions__session_id__start_post","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/StartSessionRequest"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/StartSessionResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/pause":{"post":{"tags":["proctoring"],"summary":"Pause Session","description":"Pause a proctoring session.","operationId":"pause_session_api_v1_proctoring_sessions__session_id__pause_post","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/resume":{"post":{"tags":["proctoring"],"summary":"Resume Session","description":"Resume a paused proctoring session.","operationId":"resume_session_api_v1_proctoring_sessions__session_id__resume_post","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/end":{"post":{"tags":["proctoring"],"summary":"End Session","description":"End a proctoring session.","operationId":"end_session_api_v1_proctoring_sessions__session_id__end_post","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EndSessionRequest"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/EndSessionResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}":{"get":{"tags":["proctoring"],"summary":"Get Session","description":"Get session details.","operationId":"get_session_api_v1_proctoring_sessions__session_id__get","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SessionResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/frames":{"post":{"tags":["proctoring"],"summary":"Submit Frame","description":"Submit a frame for analysis.\n\nAnalyzes the frame for face verification, gaze tracking, object detection,\nand other proctoring checks. Returns analysis results and any incidents created.","operationId":"submit_frame_api_v1_proctoring_sessions__session_id__frames_post","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SubmitFrameRequest"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SubmitFrameResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/incidents":{"post":{"tags":["proctoring"],"summary":"Create Incident","description":"Manually create an incident for a session.","operationId":"create_incident_api_v1_proctoring_sessions__session_id__incidents_post","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateIncidentRequest"}}}},"responses":{"201":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateIncidentResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}},"get":{"tags":["proctoring"],"summary":"List Incidents","description":"List incidents for a session.","operationId":"list_incidents_api_v1_proctoring_sessions__session_id__incidents_get","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"severity","in":"query","required":false,"schema":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Severity"}},{"name":"reviewed","in":"query","required":false,"schema":{"anyOf":[{"type":"boolean"},{"type":"null"}],"title":"Reviewed"}},{"name":"limit","in":"query","required":false,"schema":{"type":"integer","maximum":500,"minimum":1,"default":100,"title":"Limit"}},{"name":"offset","in":"query","required":false,"schema":{"type":"integer","minimum":0,"default":0,"title":"Offset"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/IncidentListResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/incidents/{incident_id}":{"get":{"tags":["proctoring"],"summary":"Get Incident","description":"Get incident details.","operationId":"get_incident_api_v1_proctoring_incidents__incident_id__get","parameters":[{"name":"incident_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Incident Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/IncidentResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/incidents/{incident_id}/review":{"post":{"tags":["proctoring"],"summary":"Review Incident","description":"Review an incident and take action.","operationId":"review_incident_api_v1_proctoring_incidents__incident_id__review_post","parameters":[{"name":"incident_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Incident Id"}},{"name":"X-Reviewer-ID","in":"header","required":false,"schema":{"type":"string","title":"X-Reviewer-Id"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ReviewIncidentRequest"}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/report":{"get":{"tags":["proctoring"],"summary":"Get Session Report","description":"Get comprehensive session report.","operationId":"get_session_report_api_v1_proctoring_sessions__session_id__report_get","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}},{"name":"X-Tenant-ID","in":"header","required":true,"schema":{"type":"string","title":"X-Tenant-Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SessionReportResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/sessions/{session_id}/rate-limit":{"get":{"tags":["proctoring"],"summary":"Get Rate Limit Status","description":"Get rate limit status for a session.","operationId":"get_rate_limit_status_api_v1_proctoring_sessions__session_id__rate_limit_get","parameters":[{"name":"session_id","in":"path","required":true,"schema":{"type":"string","format":"uuid","title":"Session Id"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RateLimitStatusResponse"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/api/v1/proctoring/ws/stats":{"get":{"tags":["proctoring-websocket"],"summary":"Get Websocket Stats","description":"Get WebSocket connection statistics.","operationId":"get_websocket_stats_api_v1_proctoring_ws_stats_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}}}}}}},"/api/v1/admin/stats":{"get":{"tags":["Admin"],"summary":"Get System Stats","description":"Get system statistics.\n\nReturns real-time statistics about the biometric system including\nenrollment counts, verification metrics, and system health.","operationId":"get_system_stats_api_v1_admin_stats_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SystemStats"}}}}}}},"/api/v1/admin/activity":{"get":{"tags":["Admin"],"summary":"Get Recent Activity","description":"Get recent system activity.\n\nReturns the last 10 operations performed on the system.","operationId":"get_recent_activity_api_v1_admin_activity_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RecentActivity"}}}}}}}},"components":{"schemas":{"Activity":{"properties":{"id":{"type":"string","title":"Id"},"type":{"type":"string","title":"Type"},"user_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"User Id"},"timestamp":{"type":"string","title":"Timestamp"},"details":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Details"}},"type":"object","required":["id","type","timestamp"],"title":"Activity","description":"Activity log entry."},"AgeEstimateResponse":{"properties":{"value":{"type":"integer","title":"Value"},"range":{"items":{},"type":"array","title":"Range"},"confidence":{"type":"number","title":"Confidence"}},"type":"object","required":["value","range","confidence"],"title":"AgeEstimateResponse","description":"API response model for age estimate."},"BasicLandmarksResponse":{"properties":{"left_eye":{"items":{"type":"integer"},"type":"array","title":"Left Eye"},"right_eye":{"items":{"type":"integer"},"type":"array","title":"Right Eye"},"nose":{"items":{"type":"integer"},"type":"array","title":"Nose"},"mouth_left":{"items":{"type":"integer"},"type":"array","title":"Mouth Left"},"mouth_right":{"items":{"type":"integer"},"type":"array","title":"Mouth Right"}},"type":"object","required":["left_eye","right_eye","nose","mouth_left","mouth_right"],"title":"BasicLandmarksResponse","description":"API response model for basic landmarks."},"BatchEnrollmentResponse":{"properties":{"total_items":{"type":"integer","title":"Total Items","description":"Total number of items processed"},"successful":{"type":"integer","title":"Successful","description":"Number of successful enrollments"},"failed":{"type":"integer","title":"Failed","description":"Number of failed enrollments"},"skipped":{"type":"integer","title":"Skipped","description":"Number of skipped enrollments (duplicates)"},"results":{"items":{"$ref":"#/components/schemas/BatchItemResultResponse"},"type":"array","title":"Results","description":"Individual results for each item"},"message":{"type":"string","title":"Message","description":"Summary message"}},"type":"object","required":["total_items","successful","failed","skipped","message"],"title":"BatchEnrollmentResponse","description":"Response model for batch enrollment operation."},"BatchItemResultResponse":{"properties":{"item_id":{"type":"string","title":"Item Id","description":"Item identifier"},"status":{"type":"string","title":"Status","description":"Status: success, failed, or skipped"},"data":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Data","description":"Result data if successful"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error","description":"Error message if failed"},"error_code":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error Code","description":"Error code for programmatic handling"}},"type":"object","required":["item_id","status"],"title":"BatchItemResultResponse","description":"Response model for a single batch item result."},"BatchVerificationResponse":{"properties":{"total_items":{"type":"integer","title":"Total Items","description":"Total number of items processed"},"successful":{"type":"integer","title":"Successful","description":"Number of successful verifications"},"failed":{"type":"integer","title":"Failed","description":"Number of failed verifications"},"results":{"items":{"$ref":"#/components/schemas/BatchItemResultResponse"},"type":"array","title":"Results","description":"Individual results for each item"},"message":{"type":"string","title":"Message","description":"Summary message"}},"type":"object","required":["total_items","successful","failed","message"],"title":"BatchVerificationResponse","description":"Response model for batch verification operation."},"Body_analyze_demographics_api_v1_demographics_analyze_post":{"properties":{"file":{"type":"string","format":"binary","title":"File"}},"type":"object","required":["file"],"title":"Body_analyze_demographics_api_v1_demographics_analyze_post"},"Body_analyze_quality_api_v1_quality_analyze_post":{"properties":{"file":{"type":"string","format":"binary","title":"File"}},"type":"object","required":["file"],"title":"Body_analyze_quality_api_v1_quality_analyze_post"},"Body_batch_enroll_api_v1_batch_enroll_post":{"properties":{"files":{"items":{"type":"string","format":"binary"},"type":"array","title":"Files","description":"Image files for enrollment"},"items":{"type":"string","title":"Items","description":"JSON array of enrollment items"},"skip_duplicates":{"type":"boolean","title":"Skip Duplicates","description":"Skip users that already exist","default":true}},"type":"object","required":["files","items"],"title":"Body_batch_enroll_api_v1_batch_enroll_post"},"Body_batch_verify_api_v1_batch_verify_post":{"properties":{"files":{"items":{"type":"string","format":"binary"},"type":"array","title":"Files","description":"Image files for verification"},"items":{"type":"string","title":"Items","description":"JSON array of verification items"},"threshold":{"type":"number","maximum":2.0,"minimum":0.0,"title":"Threshold","description":"Similarity threshold","default":0.6}},"type":"object","required":["files","items"],"title":"Body_batch_verify_api_v1_batch_verify_post"},"Body_check_liveness_api_v1_liveness_post":{"properties":{"file":{"type":"string","format":"binary","title":"File","description":"Face image file"}},"type":"object","required":["file"],"title":"Body_check_liveness_api_v1_liveness_post"},"Body_compare_faces_api_v1_compare_post":{"properties":{"file1":{"type":"string","format":"binary","title":"File1","description":"First face image"},"file2":{"type":"string","format":"binary","title":"File2","description":"Second face image"}},"type":"object","required":["file1","file2"],"title":"Body_compare_faces_api_v1_compare_post"},"Body_compute_similarity_matrix_api_v1_similarity_matrix_post":{"properties":{"files":{"items":{"type":"string","format":"binary"},"type":"array","title":"Files","description":"Face images to compare"},"labels":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Labels","description":"Comma-separated labels for faces (e.g., 'person_a,person_b,person_c')"}},"type":"object","required":["files"],"title":"Body_compute_similarity_matrix_api_v1_similarity_matrix_post"},"Body_detect_all_faces_api_v1_faces_detect_all_post":{"properties":{"file":{"type":"string","format":"binary","title":"File"}},"type":"object","required":["file"],"title":"Body_detect_all_faces_api_v1_faces_detect_all_post"},"Body_detect_landmarks_api_v1_landmarks_detect_post":{"properties":{"file":{"type":"string","format":"binary","title":"File"}},"type":"object","required":["file"],"title":"Body_detect_landmarks_api_v1_landmarks_detect_post"},"Body_detect_live_api_v1_card_type_detect_live_post":{"properties":{"file":{"type":"string","format":"binary","title":"File"}},"type":"object","required":["file"],"title":"Body_detect_live_api_v1_card_type_detect_live_post"},"Body_enroll_face_api_v1_enroll_post":{"properties":{"user_id":{"type":"string","title":"User Id","description":"User identifier"},"file":{"type":"string","format":"binary","title":"File","description":"Face image file"},"tenant_id":{"type":"string","title":"Tenant Id","description":"Optional tenant identifier"}},"type":"object","required":["user_id","file"],"title":"Body_enroll_face_api_v1_enroll_post"},"Body_enroll_face_multi_image_api_v1_enroll_multi_post":{"properties":{"user_id":{"type":"string","title":"User Id","description":"User identifier"},"files":{"items":{"type":"string","format":"binary"},"type":"array","title":"Files","description":"2-5 face image files"},"tenant_id":{"type":"string","title":"Tenant Id","description":"Optional tenant identifier"}},"type":"object","required":["user_id","files"],"title":"Body_enroll_face_multi_image_api_v1_enroll_multi_post"},"Body_import_embeddings_api_v1_embeddings_import_post":{"properties":{"file":{"type":"string","format":"binary","title":"File","description":"JSON export file"},"mode":{"type":"string","enum":["merge","replace","skip_existing"],"title":"Mode","description":"Import mode: merge (update existing), replace (clear first), skip_existing","default":"merge"},"tenant_id":{"type":"string","title":"Tenant Id","description":"Target tenant","default":"default"}},"type":"object","required":["file"],"title":"Body_import_embeddings_api_v1_embeddings_import_post"},"Body_search_face_api_v1_search_post":{"properties":{"file":{"type":"string","format":"binary","title":"File","description":"Face image file"},"max_results":{"type":"integer","maximum":100.0,"minimum":1.0,"title":"Max Results","description":"Maximum results to return","default":5},"threshold":{"anyOf":[{"type":"number","maximum":2.0,"minimum":0.0},{"type":"null"}],"title":"Threshold","description":"Distance threshold"},"tenant_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Tenant Id","description":"Optional tenant identifier"}},"type":"object","required":["file"],"title":"Body_search_face_api_v1_search_post"},"Body_verify_face_api_v1_verify_post":{"properties":{"user_id":{"type":"string","title":"User Id","description":"User identifier to verify against"},"file":{"type":"string","format":"binary","title":"File","description":"Face image file"},"tenant_id":{"type":"string","title":"Tenant Id","description":"Optional tenant identifier"}},"type":"object","required":["user_id","file"],"title":"Body_verify_face_api_v1_verify_post"},"BoundingBoxResponse":{"properties":{"x":{"type":"integer","title":"X"},"y":{"type":"integer","title":"Y"},"width":{"type":"integer","title":"Width"},"height":{"type":"integer","title":"Height"}},"type":"object","required":["x","y","width","height"],"title":"BoundingBoxResponse","description":"API response model for bounding box."},"CardTypeResponse":{"properties":{"detected":{"type":"boolean","title":"Detected"},"class_id":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Class Id"},"class_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Class Name"},"confidence":{"anyOf":[{"type":"number"},{"type":"null"}],"title":"Confidence"}},"type":"object","required":["detected"],"title":"CardTypeResponse","description":"API response model for card type detection."},"ClusterResponse":{"properties":{"cluster_id":{"type":"integer","title":"Cluster Id"},"members":{"items":{"type":"string"},"type":"array","title":"Members"}},"type":"object","required":["cluster_id","members"],"title":"ClusterResponse","description":"API response model for cluster."},"CreateIncidentRequest":{"properties":{"incident_type":{"type":"string","title":"Incident Type"},"confidence":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Confidence"},"severity":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Severity"},"details":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Details"}},"type":"object","required":["incident_type","confidence"],"title":"CreateIncidentRequest","description":"Request to create an incident."},"CreateIncidentResponse":{"properties":{"incident_id":{"type":"string","title":"Incident Id"},"session_id":{"type":"string","title":"Session Id"},"incident_type":{"type":"string","title":"Incident Type"},"severity":{"type":"string","title":"Severity"},"confidence":{"type":"number","title":"Confidence"},"risk_contribution":{"type":"number","title":"Risk Contribution"}},"type":"object","required":["incident_id","session_id","incident_type","severity","confidence","risk_contribution"],"title":"CreateIncidentResponse","description":"Response from creating an incident."},"CreateSessionRequest":{"properties":{"exam_id":{"type":"string","maxLength":255,"minLength":1,"title":"Exam Id"},"user_id":{"type":"string","maxLength":255,"minLength":1,"title":"User Id"},"config":{"anyOf":[{"$ref":"#/components/schemas/SessionConfigSchema"},{"type":"null"}]},"metadata":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Metadata"}},"type":"object","required":["exam_id","user_id"],"title":"CreateSessionRequest","description":"Request to create a proctoring session."},"CreateSessionResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"exam_id":{"type":"string","title":"Exam Id"},"user_id":{"type":"string","title":"User Id"},"status":{"type":"string","title":"Status"},"config":{"additionalProperties":true,"type":"object","title":"Config"}},"type":"object","required":["session_id","exam_id","user_id","status","config"],"title":"CreateSessionResponse","description":"Response from creating a session."},"DemographicsResponse":{"properties":{"age":{"$ref":"#/components/schemas/AgeEstimateResponse"},"gender":{"$ref":"#/components/schemas/GenderEstimateResponse"},"race":{"anyOf":[{"$ref":"#/components/schemas/RaceEstimateResponse"},{"type":"null"}]},"emotion":{"anyOf":[{"$ref":"#/components/schemas/EmotionEstimateResponse"},{"type":"null"}]}},"type":"object","required":["age","gender"],"title":"DemographicsResponse","description":"API response model for demographics analysis."},"DetectedFaceResponse":{"properties":{"face_id":{"type":"integer","title":"Face Id"},"bounding_box":{"$ref":"#/components/schemas/BoundingBoxResponse"},"confidence":{"type":"number","title":"Confidence"},"quality_score":{"type":"number","title":"Quality Score"},"landmarks":{"anyOf":[{"$ref":"#/components/schemas/BasicLandmarksResponse"},{"type":"null"}]}},"type":"object","required":["face_id","bounding_box","confidence","quality_score"],"title":"DetectedFaceResponse","description":"API response model for detected face."},"EmotionEstimateResponse":{"properties":{"dominant":{"type":"string","title":"Dominant"},"confidence":{"type":"number","title":"Confidence"},"all":{"additionalProperties":{"type":"number"},"type":"object","title":"All"}},"type":"object","required":["dominant","confidence","all"],"title":"EmotionEstimateResponse","description":"API response model for emotion estimate."},"EndSessionRequest":{"properties":{"reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Reason","description":"Termination reason: normal, user, proctor, identity_failure, multiple_persons, critical_violation, deepfake, technical, timeout"}},"type":"object","title":"EndSessionRequest","description":"Request to end a session."},"EndSessionResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"status":{"type":"string","title":"Status"},"ended_at":{"type":"string","title":"Ended At"},"duration_seconds":{"type":"number","title":"Duration Seconds"},"termination_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Termination Reason"},"final_risk_score":{"type":"number","title":"Final Risk Score"},"total_incidents":{"type":"integer","title":"Total Incidents"}},"type":"object","required":["session_id","status","ended_at","duration_seconds","termination_reason","final_risk_score","total_incidents"],"title":"EndSessionResponse","description":"Response from ending a session."},"EnrollmentResponse":{"properties":{"success":{"type":"boolean","title":"Success","description":"Whether enrollment was successful"},"user_id":{"type":"string","title":"User Id","description":"User identifier"},"quality_score":{"type":"number","maximum":100.0,"minimum":0.0,"title":"Quality Score","description":"Image quality score (0-100)"},"message":{"type":"string","title":"Message","description":"Human-readable message"},"embedding_dimension":{"type":"integer","title":"Embedding Dimension","description":"Dimension of face embedding"}},"type":"object","required":["success","user_id","quality_score","message","embedding_dimension"],"title":"EnrollmentResponse","description":"Face enrollment response.","example":{"embedding_dimension":128,"message":"Face enrolled successfully","quality_score":85.5,"success":true,"user_id":"user123"}},"FaceComparisonResponse":{"properties":{"match":{"type":"boolean","title":"Match"},"similarity":{"type":"number","title":"Similarity"},"distance":{"type":"number","title":"Distance"},"threshold":{"type":"number","title":"Threshold"},"confidence":{"type":"string","title":"Confidence"},"face1":{"$ref":"#/components/schemas/FaceInfoResponse"},"face2":{"$ref":"#/components/schemas/FaceInfoResponse"},"message":{"type":"string","title":"Message"}},"type":"object","required":["match","similarity","distance","threshold","confidence","face1","face2","message"],"title":"FaceComparisonResponse","description":"API response model for face comparison."},"FaceInfoResponse":{"properties":{"detected":{"type":"boolean","title":"Detected"},"quality_score":{"type":"number","title":"Quality Score"},"bounding_box":{"anyOf":[{"$ref":"#/components/schemas/BoundingBoxResponse"},{"type":"null"}]}},"type":"object","required":["detected","quality_score"],"title":"FaceInfoResponse","description":"API response model for face info."},"FrameAnalysisResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"frame_number":{"type":"integer","title":"Frame Number"},"timestamp":{"type":"string","format":"date-time","title":"Timestamp"},"face_detected":{"type":"boolean","title":"Face Detected"},"face_matched":{"type":"boolean","title":"Face Matched"},"face_confidence":{"type":"number","title":"Face Confidence"},"face_count":{"type":"integer","title":"Face Count"},"liveness_passed":{"type":"boolean","title":"Liveness Passed"},"liveness_score":{"type":"number","title":"Liveness Score"},"gaze":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Gaze"},"objects":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Objects"},"audio":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Audio"},"deepfake":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Deepfake"},"risk_score":{"type":"number","title":"Risk Score"},"has_critical_issues":{"type":"boolean","title":"Has Critical Issues"},"processing_time_ms":{"type":"number","title":"Processing Time Ms"}},"type":"object","required":["session_id","frame_number","timestamp","face_detected","face_matched","face_confidence","face_count","liveness_passed","liveness_score","gaze","objects","audio","deepfake","risk_score","has_critical_issues","processing_time_ms"],"title":"FrameAnalysisResponse","description":"Frame analysis result."},"GenderEstimateResponse":{"properties":{"value":{"type":"string","title":"Value"},"confidence":{"type":"number","title":"Confidence"}},"type":"object","required":["value","confidence"],"title":"GenderEstimateResponse","description":"API response model for gender estimate."},"HTTPValidationError":{"properties":{"detail":{"items":{"$ref":"#/components/schemas/ValidationError"},"type":"array","title":"Detail"}},"type":"object","title":"HTTPValidationError"},"HeadPoseResponse":{"properties":{"pitch":{"type":"number","title":"Pitch"},"yaw":{"type":"number","title":"Yaw"},"roll":{"type":"number","title":"Roll"}},"type":"object","required":["pitch","yaw","roll"],"title":"HeadPoseResponse","description":"API response model for head pose."},"HealthResponse":{"properties":{"status":{"type":"string","title":"Status","description":"Service status"},"version":{"type":"string","title":"Version","description":"Service version"},"model":{"type":"string","title":"Model","description":"Face recognition model in use"},"detector":{"type":"string","title":"Detector","description":"Face detector in use"}},"type":"object","required":["status","version","model","detector"],"title":"HealthResponse","description":"Health check response.","example":{"detector":"opencv","model":"Facenet","status":"healthy","version":"1.0.0"}},"IncidentInfoSchema":{"properties":{"id":{"type":"string","title":"Id"},"type":{"type":"string","title":"Type"},"severity":{"type":"string","title":"Severity"},"timestamp":{"type":"string","title":"Timestamp"},"message":{"type":"string","title":"Message"}},"type":"object","required":["id","type","severity","timestamp","message"],"title":"IncidentInfoSchema","description":"Basic incident info returned with frame submission."},"IncidentListResponse":{"properties":{"incidents":{"items":{"$ref":"#/components/schemas/IncidentResponse"},"type":"array","title":"Incidents"},"total":{"type":"integer","title":"Total"}},"type":"object","required":["incidents","total"],"title":"IncidentListResponse","description":"List of incidents response."},"IncidentResponse":{"properties":{"id":{"type":"string","title":"Id"},"session_id":{"type":"string","title":"Session Id"},"incident_type":{"type":"string","title":"Incident Type"},"severity":{"type":"string","title":"Severity"},"confidence":{"type":"number","title":"Confidence"},"timestamp":{"type":"string","format":"date-time","title":"Timestamp"},"details":{"additionalProperties":true,"type":"object","title":"Details"},"evidence_count":{"type":"integer","title":"Evidence Count"},"reviewed":{"type":"boolean","title":"Reviewed"},"reviewed_at":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Reviewed At"},"reviewed_by":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Reviewed By"},"review_action":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Review Action"},"review_notes":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Review Notes"},"risk_contribution":{"type":"number","title":"Risk Contribution"}},"type":"object","required":["id","session_id","incident_type","severity","confidence","timestamp","details","evidence_count","reviewed","reviewed_at","reviewed_by","review_action","review_notes","risk_contribution"],"title":"IncidentResponse","description":"Incident details response."},"LandmarkResponse":{"properties":{"id":{"type":"integer","title":"Id"},"x":{"type":"integer","title":"X"},"y":{"type":"integer","title":"Y"},"z":{"anyOf":[{"type":"number"},{"type":"null"}],"title":"Z"}},"type":"object","required":["id","x","y"],"title":"LandmarkResponse","description":"API response model for single landmark."},"LandmarkResultResponse":{"properties":{"model":{"type":"string","title":"Model"},"landmark_count":{"type":"integer","title":"Landmark Count"},"landmarks":{"items":{"$ref":"#/components/schemas/LandmarkResponse"},"type":"array","title":"Landmarks"},"regions":{"additionalProperties":{"items":{"type":"integer"},"type":"array"},"type":"object","title":"Regions"},"head_pose":{"anyOf":[{"$ref":"#/components/schemas/HeadPoseResponse"},{"type":"null"}]}},"type":"object","required":["model","landmark_count","landmarks","regions"],"title":"LandmarkResultResponse","description":"API response model for landmark detection result."},"LivenessResponse":{"properties":{"is_live":{"type":"boolean","title":"Is Live","description":"Whether subject is determined to be live"},"liveness_score":{"type":"number","maximum":100.0,"minimum":0.0,"title":"Liveness Score","description":"Liveness score (0-100)"},"challenge":{"type":"string","title":"Challenge","description":"Challenge type used"},"challenge_completed":{"type":"boolean","title":"Challenge Completed","description":"Whether challenge was completed"},"message":{"type":"string","title":"Message","description":"Human-readable message"}},"type":"object","required":["is_live","liveness_score","challenge","challenge_completed","message"],"title":"LivenessResponse","description":"Liveness check response.","example":{"challenge":"smile","challenge_completed":true,"is_live":true,"liveness_score":92.5,"message":"Liveness check passed"}},"MultiFaceResponse":{"properties":{"face_count":{"type":"integer","title":"Face Count"},"faces":{"items":{"$ref":"#/components/schemas/DetectedFaceResponse"},"type":"array","title":"Faces"},"image_dimensions":{"additionalProperties":true,"type":"object","title":"Image Dimensions"}},"type":"object","required":["face_count","faces","image_dimensions"],"title":"MultiFaceResponse","description":"API response model for multi-face detection."},"MultiImageEnrollmentResponse":{"properties":{"success":{"type":"boolean","title":"Success","description":"Whether enrollment was successful"},"user_id":{"type":"string","title":"User Id","description":"User identifier"},"images_processed":{"type":"integer","maximum":5.0,"minimum":2.0,"title":"Images Processed","description":"Number of images processed"},"fused_quality_score":{"type":"number","maximum":100.0,"minimum":0.0,"title":"Fused Quality Score","description":"Quality score of fused template (0-100)"},"average_quality_score":{"type":"number","maximum":100.0,"minimum":0.0,"title":"Average Quality Score","description":"Average quality of individual images (0-100)"},"individual_quality_scores":{"items":{"type":"number"},"type":"array","title":"Individual Quality Scores","description":"Quality scores of individual images"},"message":{"type":"string","title":"Message","description":"Human-readable message"},"embedding_dimension":{"type":"integer","title":"Embedding Dimension","description":"Dimension of fused embedding"},"fusion_strategy":{"type":"string","title":"Fusion Strategy","description":"Fusion strategy used","default":"weighted_average"}},"type":"object","required":["success","user_id","images_processed","fused_quality_score","average_quality_score","individual_quality_scores","message","embedding_dimension"],"title":"MultiImageEnrollmentResponse","description":"Multi-image face enrollment response.","example":{"average_quality_score":82.3,"embedding_dimension":512,"fused_quality_score":87.5,"fusion_strategy":"weighted_average","images_processed":3,"individual_quality_scores":[78.5,85.0,83.5],"message":"Multi-image enrollment completed successfully","success":true,"user_id":"user123"}},"QualityFeedbackResponse":{"properties":{"overall_score":{"type":"number","title":"Overall Score"},"passed":{"type":"boolean","title":"Passed"},"issues":{"items":{"$ref":"#/components/schemas/QualityIssueResponse"},"type":"array","title":"Issues"},"metrics":{"$ref":"#/components/schemas/QualityMetricsResponse"}},"type":"object","required":["overall_score","passed","issues","metrics"],"title":"QualityFeedbackResponse","description":"API response model for quality feedback."},"QualityIssueResponse":{"properties":{"code":{"type":"string","title":"Code"},"severity":{"type":"string","title":"Severity"},"message":{"type":"string","title":"Message"},"value":{"type":"number","title":"Value"},"threshold":{"type":"number","title":"Threshold"},"suggestion":{"type":"string","title":"Suggestion"}},"type":"object","required":["code","severity","message","value","threshold","suggestion"],"title":"QualityIssueResponse","description":"API response model for quality issue."},"QualityMetricsResponse":{"properties":{"blur_score":{"type":"number","title":"Blur Score"},"brightness":{"type":"number","title":"Brightness"},"face_size":{"type":"number","title":"Face Size"},"face_angle":{"type":"number","title":"Face Angle"},"occlusion":{"type":"number","title":"Occlusion"}},"type":"object","required":["blur_score","brightness","face_size","face_angle","occlusion"],"title":"QualityMetricsResponse","description":"API response model for quality metrics.\n\nAll values are normalized to 0-100 scale."},"RaceEstimateResponse":{"properties":{"dominant":{"type":"string","title":"Dominant"},"confidence":{"type":"number","title":"Confidence"},"all":{"additionalProperties":{"type":"number"},"type":"object","title":"All"}},"type":"object","required":["dominant","confidence","all"],"title":"RaceEstimateResponse","description":"API response model for race estimate."},"RateLimitStatusResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"frames_last_minute":{"type":"integer","title":"Frames Last Minute"},"remaining_this_minute":{"type":"integer","title":"Remaining This Minute"},"violation_count":{"type":"integer","title":"Violation Count"},"is_throttled":{"type":"boolean","title":"Is Throttled"}},"type":"object","required":["session_id","frames_last_minute","remaining_this_minute","violation_count","is_throttled"],"title":"RateLimitStatusResponse","description":"Rate limit status response."},"RecentActivity":{"properties":{"activities":{"items":{"$ref":"#/components/schemas/Activity"},"type":"array","title":"Activities"}},"type":"object","required":["activities"],"title":"RecentActivity","description":"Recent activity response."},"ReviewIncidentRequest":{"properties":{"action":{"type":"string","title":"Action","description":"Review action: dismissed, acknowledged, warning_issued, session_paused, session_terminated, escalated"},"notes":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Notes"}},"type":"object","required":["action"],"title":"ReviewIncidentRequest","description":"Request to review an incident."},"SearchMatchResponse":{"properties":{"user_id":{"type":"string","title":"User Id","description":"Matched user identifier"},"distance":{"type":"number","maximum":2.0,"minimum":0.0,"title":"Distance","description":"Cosine distance (0=identical)"},"confidence":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Confidence","description":"Match confidence (0-1)"}},"type":"object","required":["user_id","distance","confidence"],"title":"SearchMatchResponse","description":"Individual search match response.","example":{"confidence":0.85,"distance":0.15,"user_id":"user_123"}},"SearchResponse":{"properties":{"found":{"type":"boolean","title":"Found","description":"Whether any matches were found"},"matches":{"items":{"$ref":"#/components/schemas/SearchMatchResponse"},"type":"array","title":"Matches","description":"List of matching users"},"total_searched":{"type":"integer","minimum":0.0,"title":"Total Searched","description":"Total users searched"},"threshold":{"type":"number","maximum":2.0,"minimum":0.0,"title":"Threshold","description":"Distance threshold used"},"best_match":{"anyOf":[{"$ref":"#/components/schemas/SearchMatchResponse"},{"type":"null"}],"description":"Best match (lowest distance)"},"message":{"type":"string","title":"Message","description":"Result message"}},"type":"object","required":["found","total_searched","threshold","message"],"title":"SearchResponse","description":"Face search response.","example":{"best_match":{"confidence":0.85,"distance":0.15,"user_id":"user_123"},"found":true,"matches":[{"confidence":0.85,"distance":0.15,"user_id":"user_123"},{"confidence":0.75,"distance":0.25,"user_id":"user_456"}],"message":"Found 2 matches","threshold":0.6,"total_searched":100}},"SessionConfigSchema":{"properties":{"verification_interval_sec":{"type":"integer","maximum":300.0,"minimum":10.0,"title":"Verification Interval Sec","default":60},"verification_threshold":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Verification Threshold","default":0.6},"max_verification_failures":{"type":"integer","maximum":10.0,"minimum":1.0,"title":"Max Verification Failures","default":3},"gaze_away_threshold_sec":{"type":"number","maximum":30.0,"minimum":1.0,"title":"Gaze Away Threshold Sec","default":5.0},"gaze_sensitivity":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Gaze Sensitivity","default":0.7},"enable_object_detection":{"type":"boolean","title":"Enable Object Detection","default":true},"enable_audio_monitoring":{"type":"boolean","title":"Enable Audio Monitoring","default":true},"enable_multi_face_detection":{"type":"boolean","title":"Enable Multi Face Detection","default":true},"enable_deepfake_detection":{"type":"boolean","title":"Enable Deepfake Detection","default":true},"enable_session_rate_limiting":{"type":"boolean","title":"Enable Session Rate Limiting","default":true},"deepfake_confidence_threshold":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Deepfake Confidence Threshold","default":0.7},"max_frames_per_second":{"type":"number","maximum":10.0,"minimum":0.5,"title":"Max Frames Per Second","default":2.0},"max_frames_per_minute":{"type":"integer","maximum":300.0,"minimum":10.0,"title":"Max Frames Per Minute","default":60},"risk_threshold_warning":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Risk Threshold Warning","default":0.5},"risk_threshold_critical":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Risk Threshold Critical","default":0.8},"max_pause_duration_sec":{"type":"integer","maximum":1800.0,"minimum":60.0,"title":"Max Pause Duration Sec","default":300},"session_timeout_sec":{"type":"integer","maximum":28800.0,"minimum":3600.0,"title":"Session Timeout Sec","default":14400}},"type":"object","title":"SessionConfigSchema","description":"Session configuration schema."},"SessionListResponse":{"properties":{"sessions":{"items":{"$ref":"#/components/schemas/SessionResponse"},"type":"array","title":"Sessions"},"total":{"type":"integer","title":"Total"},"limit":{"type":"integer","title":"Limit"},"offset":{"type":"integer","title":"Offset"}},"type":"object","required":["sessions","total","limit","offset"],"title":"SessionListResponse","description":"List of sessions response."},"SessionReportResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"exam_id":{"type":"string","title":"Exam Id"},"user_id":{"type":"string","title":"User Id"},"status":{"type":"string","title":"Status"},"duration_seconds":{"type":"number","title":"Duration Seconds"},"risk_score":{"type":"number","title":"Risk Score"},"verification_count":{"type":"integer","title":"Verification Count"},"verification_failures":{"type":"integer","title":"Verification Failures"},"verification_success_rate":{"type":"number","title":"Verification Success Rate"},"total_incidents":{"type":"integer","title":"Total Incidents"},"incidents_by_severity":{"additionalProperties":{"type":"integer"},"type":"object","title":"Incidents By Severity"},"critical_incidents":{"items":{"additionalProperties":true,"type":"object"},"type":"array","title":"Critical Incidents"},"timeline":{"items":{"additionalProperties":true,"type":"object"},"type":"array","title":"Timeline"},"summary":{"type":"string","title":"Summary"}},"type":"object","required":["session_id","exam_id","user_id","status","duration_seconds","risk_score","verification_count","verification_failures","verification_success_rate","total_incidents","incidents_by_severity","critical_incidents","timeline","summary"],"title":"SessionReportResponse","description":"Session report response."},"SessionResponse":{"properties":{"id":{"type":"string","title":"Id"},"exam_id":{"type":"string","title":"Exam Id"},"user_id":{"type":"string","title":"User Id"},"tenant_id":{"type":"string","title":"Tenant Id"},"status":{"type":"string","title":"Status"},"risk_score":{"type":"number","title":"Risk Score"},"created_at":{"type":"string","format":"date-time","title":"Created At"},"started_at":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Started At"},"ended_at":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Ended At"},"verification_count":{"type":"integer","title":"Verification Count"},"verification_failures":{"type":"integer","title":"Verification Failures"},"incident_count":{"type":"integer","title":"Incident Count"},"total_gaze_away_sec":{"type":"number","title":"Total Gaze Away Sec"},"termination_reason":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Termination Reason"},"duration_seconds":{"type":"number","title":"Duration Seconds"},"verification_success_rate":{"type":"number","title":"Verification Success Rate"},"config":{"additionalProperties":true,"type":"object","title":"Config"},"metadata":{"additionalProperties":true,"type":"object","title":"Metadata"}},"type":"object","required":["id","exam_id","user_id","tenant_id","status","risk_score","created_at","started_at","ended_at","verification_count","verification_failures","incident_count","total_gaze_away_sec","termination_reason","duration_seconds","verification_success_rate","config","metadata"],"title":"SessionResponse","description":"Session details response."},"SimilarityMatrixResponse":{"properties":{"size":{"type":"integer","title":"Size"},"labels":{"items":{"type":"string"},"type":"array","title":"Labels"},"matrix":{"items":{"items":{"type":"number"},"type":"array"},"type":"array","title":"Matrix"},"clusters":{"items":{"$ref":"#/components/schemas/ClusterResponse"},"type":"array","title":"Clusters"},"pairs":{"items":{"$ref":"#/components/schemas/SimilarityPairResponse"},"type":"array","title":"Pairs"},"threshold":{"type":"number","title":"Threshold"},"computation_time_ms":{"type":"integer","title":"Computation Time Ms"}},"type":"object","required":["size","labels","matrix","clusters","pairs","threshold","computation_time_ms"],"title":"SimilarityMatrixResponse","description":"API response model for similarity matrix."},"SimilarityPairResponse":{"properties":{"a":{"type":"string","title":"A"},"b":{"type":"string","title":"B"},"similarity":{"type":"number","title":"Similarity"},"match":{"type":"boolean","title":"Match"}},"type":"object","required":["a","b","similarity","match"],"title":"SimilarityPairResponse","description":"API response model for similarity pair."},"StartSessionRequest":{"properties":{"baseline_image_base64":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Baseline Image Base64"}},"type":"object","title":"StartSessionRequest","description":"Request to start a session."},"StartSessionResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"status":{"type":"string","title":"Status"},"started_at":{"type":"string","title":"Started At"},"has_baseline":{"type":"boolean","title":"Has Baseline"}},"type":"object","required":["session_id","status","started_at","has_baseline"],"title":"StartSessionResponse","description":"Response from starting a session."},"SubmitFrameRequest":{"properties":{"frame_base64":{"type":"string","title":"Frame Base64","description":"Base64 encoded frame image"},"frame_number":{"type":"integer","minimum":0.0,"title":"Frame Number"},"audio_base64":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Audio Base64","description":"Base64 encoded audio data"},"audio_sample_rate":{"type":"integer","maximum":48000.0,"minimum":8000.0,"title":"Audio Sample Rate","default":16000}},"type":"object","required":["frame_base64","frame_number"],"title":"SubmitFrameRequest","description":"Request to submit a frame for analysis."},"SubmitFrameResponse":{"properties":{"session_id":{"type":"string","title":"Session Id"},"frame_number":{"type":"integer","title":"Frame Number"},"risk_score":{"type":"number","title":"Risk Score"},"face_detected":{"type":"boolean","title":"Face Detected"},"face_matched":{"type":"boolean","title":"Face Matched"},"incidents_created":{"type":"integer","title":"Incidents Created"},"processing_time_ms":{"type":"number","title":"Processing Time Ms"},"analysis":{"$ref":"#/components/schemas/FrameAnalysisResponse"},"rate_limit":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"null"}],"title":"Rate Limit"},"incidents":{"anyOf":[{"items":{"$ref":"#/components/schemas/IncidentInfoSchema"},"type":"array"},{"type":"null"}],"title":"Incidents"}},"type":"object","required":["session_id","frame_number","risk_score","face_detected","face_matched","incidents_created","processing_time_ms","analysis","rate_limit"],"title":"SubmitFrameResponse","description":"Response from frame submission."},"SystemStats":{"properties":{"total_enrollments":{"type":"integer","title":"Total Enrollments"},"total_verifications":{"type":"integer","title":"Total Verifications"},"total_searches":{"type":"integer","title":"Total Searches"},"active_sessions":{"type":"integer","title":"Active Sessions"},"api_calls_today":{"type":"integer","title":"Api Calls Today"},"api_calls_this_week":{"type":"integer","title":"Api Calls This Week"},"average_response_time_ms":{"type":"number","title":"Average Response Time Ms"},"storage_used_gb":{"type":"number","title":"Storage Used Gb"},"uptime_hours":{"type":"number","title":"Uptime Hours"},"verification_success_rate":{"type":"number","title":"Verification Success Rate"},"spoof_detection_rate":{"type":"number","title":"Spoof Detection Rate"}},"type":"object","required":["total_enrollments","total_verifications","total_searches","active_sessions","api_calls_today","api_calls_this_week","average_response_time_ms","storage_used_gb","uptime_hours","verification_success_rate","spoof_detection_rate"],"title":"SystemStats","description":"System statistics response."},"ValidationError":{"properties":{"loc":{"items":{"anyOf":[{"type":"string"},{"type":"integer"}]},"type":"array","title":"Location"},"msg":{"type":"string","title":"Message"},"type":{"type":"string","title":"Error Type"}},"type":"object","required":["loc","msg","type"],"title":"ValidationError"},"VerificationResponse":{"properties":{"verified":{"type":"boolean","title":"Verified","description":"Whether faces match"},"confidence":{"type":"number","maximum":1.0,"minimum":0.0,"title":"Confidence","description":"Confidence score (0.0-1.0)"},"distance":{"type":"number","minimum":0.0,"title":"Distance","description":"Similarity distance"},"threshold":{"type":"number","title":"Threshold","description":"Threshold used for verification"},"message":{"type":"string","title":"Message","description":"Human-readable message"}},"type":"object","required":["verified","confidence","distance","threshold","message"],"title":"VerificationResponse","description":"Face verification response.","example":{"confidence":0.87,"distance":0.13,"message":"Face verified successfully","threshold":0.6,"verified":true}},"WebhookConfigResponse":{"properties":{"webhook_id":{"type":"string","title":"Webhook Id"},"url":{"type":"string","title":"Url"},"events":{"items":{"type":"string"},"type":"array","title":"Events"},"enabled":{"type":"boolean","title":"Enabled"},"created_at":{"type":"string","title":"Created At"}},"type":"object","required":["webhook_id","url","events","enabled","created_at"],"title":"WebhookConfigResponse","description":"API response model for webhook config."},"WebhookListResponse":{"properties":{"webhooks":{"items":{"$ref":"#/components/schemas/WebhookConfigResponse"},"type":"array","title":"Webhooks"},"count":{"type":"integer","title":"Count"}},"type":"object","required":["webhooks","count"],"title":"WebhookListResponse","description":"Response model for webhook list."},"WebhookRegisterRequest":{"properties":{"url":{"type":"string","title":"Url"},"secret":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Secret"},"events":{"items":{"type":"string"},"type":"array","title":"Events","default":["enrollment","verification","liveness"]}},"type":"object","required":["url"],"title":"WebhookRegisterRequest","description":"Request model for webhook registration."},"WebhookTestResponse":{"properties":{"success":{"type":"boolean","title":"Success"},"status_code":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Status Code"},"response_time_ms":{"type":"integer","title":"Response Time Ms"},"error":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Error"}},"type":"object","required":["success","response_time_ms"],"title":"WebhookTestResponse","description":"API response model for webhook test."}}}}
\ No newline at end of file
diff --git a/docs-site/html/identity/index.html b/docs-site/html/identity/index.html
new file mode 100644
index 0000000..98031ea
--- /dev/null
+++ b/docs-site/html/identity/index.html
@@ -0,0 +1,338 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Identity Core API - FIVUCSAS Docs</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui.css">
+    <style>
+        *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+
+        :root {
+            --primary: #6366f1;
+            --primary-light: #818cf8;
+            --accent: #8b5cf6;
+            --bg: #0f0f23;
+            --bg-card: #1a1a2e;
+            --text: #e2e8f0;
+            --text-muted: #94a3b8;
+            --border: #2d2d4a;
+        }
+
+        body {
+            font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
+            background: var(--bg);
+            color: var(--text);
+            min-height: 100vh;
+        }
+
+        .header {
+            background: linear-gradient(135deg, rgba(99, 102, 241, 0.1), rgba(139, 92, 246, 0.05));
+            border-bottom: 1px solid var(--border);
+            padding: 1rem 2rem;
+            position: sticky;
+            top: 0;
+            z-index: 100;
+            backdrop-filter: blur(12px);
+        }
+
+        .header-inner {
+            max-width: 1400px;
+            margin: 0 auto;
+            display: flex;
+            align-items: center;
+            gap: 1.5rem;
+        }
+
+        .back-link {
+            color: var(--text-muted);
+            text-decoration: none;
+            font-size: 0.875rem;
+            display: flex;
+            align-items: center;
+            gap: 0.375rem;
+            transition: color 0.2s;
+        }
+
+        .back-link:hover { color: var(--primary-light); }
+
+        .page-title {
+            font-size: 1.1rem;
+            font-weight: 600;
+        }
+
+        .tag {
+            padding: 0.2rem 0.6rem;
+            border-radius: 6px;
+            font-size: 0.7rem;
+            font-weight: 500;
+            text-transform: uppercase;
+            letter-spacing: 0.05em;
+            background: rgba(99, 102, 241, 0.15);
+            color: var(--primary-light);
+        }
+
+        .swagger-container {
+            max-width: 1400px;
+            margin: 0 auto;
+            padding: 2rem;
+        }
+
+        .fallback-message {
+            background: var(--bg-card);
+            border: 1px solid var(--border);
+            border-radius: 12px;
+            padding: 3rem 2rem;
+            text-align: center;
+            margin-top: 2rem;
+        }
+
+        .fallback-message h2 {
+            font-size: 1.5rem;
+            margin-bottom: 1rem;
+            color: var(--text);
+        }
+
+        .fallback-message p {
+            color: var(--text-muted);
+            margin-bottom: 1.5rem;
+            line-height: 1.7;
+        }
+
+        .endpoint-list {
+            text-align: left;
+            max-width: 700px;
+            margin: 0 auto;
+        }
+
+        .endpoint-group {
+            margin-bottom: 1.5rem;
+        }
+
+        .endpoint-group h3 {
+            font-size: 0.85rem;
+            font-weight: 600;
+            color: var(--primary-light);
+            text-transform: uppercase;
+            letter-spacing: 0.05em;
+            margin-bottom: 0.75rem;
+            padding-bottom: 0.5rem;
+            border-bottom: 1px solid var(--border);
+        }
+
+        .endpoint {
+            display: flex;
+            align-items: center;
+            gap: 0.75rem;
+            padding: 0.5rem 0;
+            font-size: 0.875rem;
+        }
+
+        .method {
+            display: inline-block;
+            padding: 0.15rem 0.5rem;
+            border-radius: 4px;
+            font-size: 0.7rem;
+            font-weight: 600;
+            font-family: 'Inter', monospace;
+            min-width: 52px;
+            text-align: center;
+        }
+
+        .method.get { background: rgba(34, 197, 94, 0.15); color: #22c55e; }
+        .method.post { background: rgba(59, 130, 246, 0.15); color: #3b82f6; }
+        .method.put { background: rgba(245, 158, 11, 0.15); color: #f59e0b; }
+        .method.delete { background: rgba(239, 68, 68, 0.15); color: #ef4444; }
+        .method.patch { background: rgba(139, 92, 246, 0.15); color: #8b5cf6; }
+
+        .endpoint-path {
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.8rem;
+            color: var(--text);
+        }
+
+        .base-url {
+            background: var(--bg-card);
+            border: 1px solid var(--border);
+            border-radius: 8px;
+            padding: 0.75rem 1.25rem;
+            display: inline-flex;
+            align-items: center;
+            gap: 0.5rem;
+            font-family: monospace;
+            font-size: 0.85rem;
+            color: var(--primary-light);
+            margin-bottom: 2rem;
+        }
+
+        .base-url-label {
+            color: var(--text-muted);
+            font-family: 'Inter', sans-serif;
+            font-size: 0.75rem;
+        }
+
+        /* Swagger UI dark theme overrides */
+        .swagger-ui .topbar { display: none; }
+        .swagger-ui { background: transparent; }
+        .swagger-ui .info { margin: 20px 0; }
+        .swagger-ui .info .title { color: var(--text); }
+        .swagger-ui .info .description p { color: var(--text-muted); }
+        .swagger-ui .scheme-container { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 1rem; }
+        .swagger-ui .opblock-tag { color: var(--text); border-bottom-color: var(--border); }
+        .swagger-ui .opblock { background: var(--bg-card); border-color: var(--border); }
+        .swagger-ui .opblock .opblock-summary { border-color: var(--border); }
+        .swagger-ui .opblock-description-wrapper p { color: var(--text-muted); }
+        .swagger-ui .btn { color: var(--text); }
+        .swagger-ui .parameter__name { color: var(--text); }
+        .swagger-ui .parameter__type { color: var(--text-muted); }
+        .swagger-ui table thead tr td, .swagger-ui table thead tr th { color: var(--text-muted); border-bottom-color: var(--border); }
+        .swagger-ui .response-col_status { color: var(--text); }
+        .swagger-ui .response-col_description__inner p { color: var(--text-muted); }
+        .swagger-ui .model-title { color: var(--text); }
+        .swagger-ui .model { color: var(--text-muted); }
+        .swagger-ui section.models { border-color: var(--border); }
+        .swagger-ui section.models h4 { color: var(--text); border-bottom-color: var(--border); }
+
+        @media (max-width: 768px) {
+            .header-inner { flex-wrap: wrap; }
+            .swagger-container { padding: 1rem; }
+        }
+    </style>
+</head>
+<body>
+
+    <header class="header">
+        <div class="header-inner">
+            <a href="/" class="back-link">
+                <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M19 12H5"/><polyline points="12 19 5 12 12 5"/></svg>
+                Docs
+            </a>
+            <span class="page-title">Identity Core API</span>
+            <span class="tag">REST API</span>
+        </div>
+    </header>
+
+    <div class="swagger-container">
+        <div id="swagger-ui"></div>
+        <div id="fallback" style="display: none;">
+            <div class="fallback-message">
+                <h2>Identity Core API Reference</h2>
+                <p>The OpenAPI specification is available for authenticated users. Below is a summary of all available endpoints.</p>
+
+                <div class="base-url">
+                    <span class="base-url-label">Base URL</span>
+                    https://api.fivucsas.com
+                </div>
+
+                <div class="endpoint-list">
+                    <div class="endpoint-group">
+                        <h3>Authentication</h3>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/auth/login</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/auth/register</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/auth/refresh</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/auth/logout</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/auth/verify-email</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>Users</h3>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/users</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/users/{id}</span></div>
+                        <div class="endpoint"><span class="method put">PUT</span><span class="endpoint-path">/api/v1/users/{id}</span></div>
+                        <div class="endpoint"><span class="method delete">DELETE</span><span class="endpoint-path">/api/v1/users/{id}</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/users/me</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>Enrollment</h3>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/enrollments</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/enrollments</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/enrollments/{id}</span></div>
+                        <div class="endpoint"><span class="method patch">PATCH</span><span class="endpoint-path">/api/v1/enrollments/{id}/complete</span></div>
+                        <div class="endpoint"><span class="method delete">DELETE</span><span class="endpoint-path">/api/v1/enrollments/{id}</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>OAuth 2.0 / OIDC</h3>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/oauth2/authorize</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/oauth2/token</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/oauth2/userinfo</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/oauth2/jwks</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/.well-known/openid-configuration</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>Auth Flows</h3>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/auth-flows</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/auth-flows</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/auth-flows/{id}</span></div>
+                        <div class="endpoint"><span class="method put">PUT</span><span class="endpoint-path">/api/v1/auth-flows/{id}</span></div>
+                        <div class="endpoint"><span class="method delete">DELETE</span><span class="endpoint-path">/api/v1/auth-flows/{id}</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>Sessions</h3>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/sessions</span></div>
+                        <div class="endpoint"><span class="method delete">DELETE</span><span class="endpoint-path">/api/v1/sessions/{id}</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/my/activity</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>WebAuthn (Passkeys)</h3>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/webauthn/register/begin</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/webauthn/register/finish</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/webauthn/authenticate/begin</span></div>
+                        <div class="endpoint"><span class="method post">POST</span><span class="endpoint-path">/api/v1/webauthn/authenticate/finish</span></div>
+                    </div>
+
+                    <div class="endpoint-group">
+                        <h3>System</h3>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/health</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/ping</span></div>
+                        <div class="endpoint"><span class="method get">GET</span><span class="endpoint-path">/api/v1/statistics</span></div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    <script src="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui-bundle.js"></script>
+    <script>
+        try {
+            const ui = SwaggerUIBundle({
+                url: '/identity/openapi.json',
+                dom_id: '#swagger-ui',
+                deepLinking: true,
+                presets: [SwaggerUIBundle.presets.apis],
+                layout: 'BaseLayout',
+                defaultModelsExpandDepth: -1,
+                docExpansion: 'list',
+                filter: true,
+                requestInterceptor: (req) => req,
+                responseInterceptor: (res) => res,
+                onComplete: () => {},
+                onFailure: () => {
+                    document.getElementById('swagger-ui').style.display = 'none';
+                    document.getElementById('fallback').style.display = 'block';
+                }
+            });
+
+            // If spec fails to load after 5 seconds, show fallback
+            setTimeout(() => {
+                const swaggerEl = document.getElementById('swagger-ui');
+                if (swaggerEl && swaggerEl.querySelector('.errors-wrapper')) {
+                    swaggerEl.style.display = 'none';
+                    document.getElementById('fallback').style.display = 'block';
+                }
+            }, 5000);
+        } catch (e) {
+            document.getElementById('swagger-ui').style.display = 'none';
+            document.getElementById('fallback').style.display = 'block';
+        }
+    </script>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
+</body>
+</html>
diff --git a/docs-site/html/identity/openapi.json b/docs-site/html/identity/openapi.json
new file mode 100644
index 0000000..12ecdb0
--- /dev/null
+++ b/docs-site/html/identity/openapi.json
@@ -0,0 +1,2645 @@
+{
+  "openapi": "3.0.3",
+  "info": {
+    "title": "FIVUCSAS Identity Core API",
+    "description": "Face and Identity Verification Using Cloud-based SaaS - Identity Core API. Multi-tenant biometric authentication platform with OAuth 2.0/OIDC, N-step MFA, WebAuthn/FIDO2, and identity verification pipeline.",
+    "version": "1.0.0",
+    "contact": {
+      "name": "FIVUCSAS",
+      "url": "https://fivucsas.com"
+    }
+  },
+  "servers": [
+    {
+      "url": "https://api.fivucsas.com/api/v1",
+      "description": "Production API (all /api/v1/* endpoints)"
+    },
+    {
+      "url": "https://api.fivucsas.com",
+      "description": "Root (OIDC discovery endpoints only)"
+    }
+  ],
+  "tags": [
+    { "name": "Authentication", "description": "Login, register, MFA, 2FA, password reset, email/phone verification" },
+    { "name": "Users", "description": "User CRUD, profile, settings, guest management" },
+    { "name": "Enrollment", "description": "Biometric enrollment management and liveness verification" },
+    { "name": "Auth Flows", "description": "Tenant auth flow configuration (N-step MFA)" },
+    { "name": "Sessions", "description": "Auth session execution and cross-device session management" },
+    { "name": "OAuth 2.0", "description": "OAuth 2.0 authorization code flow, token exchange, OIDC userinfo" },
+    { "name": "OAuth 2.0 Clients", "description": "OAuth 2.0 client application CRUD" },
+    { "name": "OpenID Connect", "description": "OIDC discovery and JWKS endpoints" },
+    { "name": "WebAuthn", "description": "FIDO2/WebAuthn credential registration and authentication" },
+    { "name": "Biometric", "description": "Face, fingerprint, and voice biometric enrollment and verification" },
+    { "name": "Verification", "description": "Identity verification pipeline (KYC, document scan, liveness)" },
+    { "name": "Tenants", "description": "Multi-tenant management" },
+    { "name": "Roles", "description": "Role and permission management, user-role assignment" },
+    { "name": "Audit", "description": "Audit log and system statistics" },
+    { "name": "OTP", "description": "Email/SMS OTP and TOTP setup and verification" },
+    { "name": "QR Authentication", "description": "QR code generation and cross-device login sessions" },
+    { "name": "NFC", "description": "NFC card enrollment and verification" },
+    { "name": "Devices", "description": "Device management and step-up authentication" },
+    { "name": "Auth Methods", "description": "Auth method listing and tenant method configuration" },
+    { "name": "Admin Overview", "description": "Cross-tenant admin overview endpoints" },
+    { "name": "System", "description": "Health check and system statistics" }
+  ],
+  "components": {
+    "securitySchemes": {
+      "bearerAuth": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "JWT"
+      }
+    },
+    "schemas": {
+      "LoginRequest": {
+        "type": "object",
+        "required": ["email", "password"],
+        "properties": {
+          "email": { "type": "string", "format": "email" },
+          "password": { "type": "string" },
+          "clientId": { "type": "string" }
+        }
+      },
+      "RegisterRequest": {
+        "type": "object",
+        "required": ["email", "password", "firstName", "lastName"],
+        "properties": {
+          "email": { "type": "string", "format": "email" },
+          "password": { "type": "string" },
+          "firstName": { "type": "string" },
+          "lastName": { "type": "string" }
+        }
+      },
+      "RefreshTokenRequest": {
+        "type": "object",
+        "required": ["refreshToken"],
+        "properties": {
+          "refreshToken": { "type": "string" }
+        }
+      },
+      "AuthResponse": {
+        "type": "object",
+        "properties": {
+          "accessToken": { "type": "string" },
+          "refreshToken": { "type": "string" },
+          "expiresIn": { "type": "integer", "format": "int64" },
+          "user": { "$ref": "#/components/schemas/UserResponse" },
+          "twoFactorRequired": { "type": "boolean" },
+          "twoFactorMethod": { "type": "string" },
+          "mfaSessionToken": { "type": "string" },
+          "totalSteps": { "type": "integer" },
+          "currentStep": { "type": "integer" },
+          "availableMethods": {
+            "type": "array",
+            "items": { "$ref": "#/components/schemas/AvailableMfaMethod" }
+          }
+        }
+      },
+      "AvailableMfaMethod": {
+        "type": "object",
+        "properties": {
+          "methodType": { "type": "string" },
+          "name": { "type": "string" },
+          "category": { "type": "string" },
+          "enrolled": { "type": "boolean" },
+          "preferred": { "type": "boolean" },
+          "requiresEnrollment": { "type": "boolean" }
+        }
+      },
+      "UserResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "email": { "type": "string" },
+          "firstName": { "type": "string" },
+          "lastName": { "type": "string" },
+          "phoneNumber": { "type": "string" },
+          "address": { "type": "string" },
+          "role": { "type": "string" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "active": { "type": "boolean" },
+          "emailVerified": { "type": "boolean" },
+          "phoneVerified": { "type": "boolean" }
+        }
+      },
+      "CreateUserRequest": {
+        "type": "object",
+        "required": ["email", "password", "firstName", "lastName"],
+        "properties": {
+          "email": { "type": "string", "format": "email" },
+          "password": { "type": "string" },
+          "firstName": { "type": "string" },
+          "lastName": { "type": "string" },
+          "phoneNumber": { "type": "string" },
+          "address": { "type": "string" },
+          "idNumber": { "type": "string" },
+          "role": { "type": "string" },
+          "tenantId": { "type": "string" }
+        }
+      },
+      "UpdateUserRequest": {
+        "type": "object",
+        "properties": {
+          "firstName": { "type": "string" },
+          "lastName": { "type": "string" },
+          "phoneNumber": { "type": "string" },
+          "address": { "type": "string" }
+        }
+      },
+      "ChangePasswordRequest": {
+        "type": "object",
+        "required": ["currentPassword", "newPassword"],
+        "properties": {
+          "currentPassword": { "type": "string" },
+          "newPassword": { "type": "string" }
+        }
+      },
+      "PaginatedResponse": {
+        "type": "object",
+        "properties": {
+          "content": { "type": "array", "items": { "type": "object" } },
+          "totalElements": { "type": "integer", "format": "int64" },
+          "totalPages": { "type": "integer" },
+          "page": { "type": "integer" },
+          "size": { "type": "integer" }
+        }
+      },
+      "EnrollmentDto": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "userId": { "type": "string", "format": "uuid" },
+          "userName": { "type": "string" },
+          "userEmail": { "type": "string" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "authMethodType": { "type": "string" },
+          "status": { "type": "string", "enum": ["NOT_STARTED", "IN_PROGRESS", "ENROLLED", "FAILED"] },
+          "enrolledAt": { "type": "string", "format": "date-time" },
+          "createdAt": { "type": "string", "format": "date-time" },
+          "updatedAt": { "type": "string", "format": "date-time" },
+          "completedAt": { "type": "string", "format": "date-time" }
+        }
+      },
+      "EnrollmentResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "userId": { "type": "string", "format": "uuid" },
+          "methodType": { "type": "string" },
+          "status": { "type": "string" }
+        }
+      },
+      "AuthFlowResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "name": { "type": "string" },
+          "operationType": { "type": "string" },
+          "isDefault": { "type": "boolean" },
+          "isActive": { "type": "boolean" },
+          "stepCount": { "type": "integer" },
+          "steps": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "CreateAuthFlowCommand": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string" },
+          "operationType": { "type": "string" },
+          "isDefault": { "type": "boolean" },
+          "steps": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "UpdateAuthFlowCommand": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string" },
+          "isDefault": { "type": "boolean" },
+          "isActive": { "type": "boolean" },
+          "steps": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "AuthSessionResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "status": { "type": "string" },
+          "currentStep": { "type": "integer" },
+          "totalSteps": { "type": "integer" }
+        }
+      },
+      "StartAuthSessionCommand": {
+        "type": "object",
+        "properties": {
+          "userId": { "type": "string", "format": "uuid" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "flowId": { "type": "string", "format": "uuid" }
+        }
+      },
+      "CompleteAuthStepCommand": {
+        "type": "object",
+        "properties": {
+          "methodType": { "type": "string" },
+          "data": { "type": "object" }
+        }
+      },
+      "StepResultResponse": {
+        "type": "object",
+        "properties": {
+          "success": { "type": "boolean" },
+          "message": { "type": "string" }
+        }
+      },
+      "SessionResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "deviceInfo": { "type": "string" },
+          "ipAddress": { "type": "string" },
+          "lastActive": { "type": "string", "format": "date-time" },
+          "current": { "type": "boolean" }
+        }
+      },
+      "TenantResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "name": { "type": "string" },
+          "slug": { "type": "string" },
+          "description": { "type": "string" },
+          "contactEmail": { "type": "string" },
+          "contactPhone": { "type": "string" },
+          "maxUsers": { "type": "integer" },
+          "biometricEnabled": { "type": "boolean" },
+          "sessionTimeoutMinutes": { "type": "integer" },
+          "refreshTokenValidityDays": { "type": "integer" },
+          "mfaRequired": { "type": "boolean" },
+          "status": { "type": "string" }
+        }
+      },
+      "CreateTenantRequest": {
+        "type": "object",
+        "required": ["name", "slug"],
+        "properties": {
+          "name": { "type": "string", "minLength": 2, "maxLength": 100 },
+          "slug": { "type": "string", "minLength": 2, "maxLength": 50 },
+          "description": { "type": "string", "maxLength": 500 },
+          "contactEmail": { "type": "string", "format": "email" },
+          "contactPhone": { "type": "string" },
+          "maxUsers": { "type": "integer", "minimum": 1 },
+          "biometricEnabled": { "type": "boolean" },
+          "sessionTimeoutMinutes": { "type": "integer", "minimum": 1 },
+          "refreshTokenValidityDays": { "type": "integer", "minimum": 1 },
+          "mfaRequired": { "type": "boolean" }
+        }
+      },
+      "UpdateTenantRequest": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string", "minLength": 2, "maxLength": 100 },
+          "description": { "type": "string", "maxLength": 500 },
+          "contactEmail": { "type": "string", "format": "email" },
+          "contactPhone": { "type": "string" },
+          "maxUsers": { "type": "integer", "minimum": 1 },
+          "biometricEnabled": { "type": "boolean" },
+          "sessionTimeoutMinutes": { "type": "integer", "minimum": 1 },
+          "refreshTokenValidityDays": { "type": "integer", "minimum": 1 },
+          "mfaRequired": { "type": "boolean" }
+        }
+      },
+      "AuditLogDto": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "userId": { "type": "string", "format": "uuid" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "action": { "type": "string" },
+          "entityType": { "type": "string" },
+          "entityId": { "type": "string" },
+          "success": { "type": "boolean" },
+          "errorMessage": { "type": "string" },
+          "ipAddress": { "type": "string" },
+          "userAgent": { "type": "string" },
+          "details": { "type": "object" },
+          "timestamp": { "type": "string", "format": "date-time" }
+        }
+      },
+      "StatisticsDto": {
+        "type": "object",
+        "properties": {
+          "totalUsers": { "type": "integer", "format": "int64" },
+          "activeUsers": { "type": "integer", "format": "int64" },
+          "inactiveUsers": { "type": "integer", "format": "int64" },
+          "suspendedUsers": { "type": "integer", "format": "int64" },
+          "biometricEnrolledUsers": { "type": "integer", "format": "int64" },
+          "totalVerifications": { "type": "integer", "format": "int64" },
+          "averageVerificationsPerUser": { "type": "number", "format": "double" },
+          "totalTenants": { "type": "integer", "format": "int64" },
+          "pendingEnrollments": { "type": "integer", "format": "int64" },
+          "successfulEnrollments": { "type": "integer", "format": "int64" },
+          "failedEnrollments": { "type": "integer", "format": "int64" },
+          "authSuccessRate": { "type": "number", "format": "double" },
+          "verificationSuccessRate": { "type": "number", "format": "double" }
+        }
+      },
+      "BiometricVerificationResponse": {
+        "type": "object",
+        "properties": {
+          "verified": { "type": "boolean" },
+          "confidence": { "type": "number", "format": "double" },
+          "message": { "type": "string" }
+        }
+      },
+      "VerificationSessionResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "userId": { "type": "string", "format": "uuid" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "flowId": { "type": "string", "format": "uuid" },
+          "status": { "type": "string" },
+          "steps": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "CreateVerificationSessionCommand": {
+        "type": "object",
+        "required": ["userId", "tenantId", "flowId"],
+        "properties": {
+          "userId": { "type": "string", "format": "uuid" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "flowId": { "type": "string", "format": "uuid" }
+        }
+      },
+      "SubmitVerificationStepCommand": {
+        "type": "object",
+        "properties": {
+          "data": { "type": "object" }
+        }
+      },
+      "ReviewVerificationStepCommand": {
+        "type": "object",
+        "properties": {
+          "approved": { "type": "boolean" },
+          "notes": { "type": "string" }
+        }
+      },
+      "VerificationStepResultResponse": {
+        "type": "object",
+        "properties": {
+          "stepNumber": { "type": "integer" },
+          "status": { "type": "string" },
+          "data": { "type": "object" }
+        }
+      },
+      "VerificationStatusResponse": {
+        "type": "object",
+        "properties": {
+          "userId": { "type": "string", "format": "uuid" },
+          "status": { "type": "string" },
+          "sessions": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "IndustryTemplateResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "description": { "type": "string" },
+          "steps": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "RoleResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "name": { "type": "string" },
+          "description": { "type": "string" },
+          "tenantId": { "type": "string", "format": "uuid" },
+          "systemRole": { "type": "boolean" },
+          "active": { "type": "boolean" },
+          "permissions": { "type": "array", "items": { "type": "object" } }
+        }
+      },
+      "CreateRoleRequest": {
+        "type": "object",
+        "required": ["name"],
+        "properties": {
+          "name": { "type": "string" },
+          "description": { "type": "string" },
+          "tenantId": { "type": "string" },
+          "permissionIds": { "type": "array", "items": { "type": "string" } }
+        }
+      },
+      "UpdateRoleRequest": {
+        "type": "object",
+        "properties": {
+          "name": { "type": "string" },
+          "description": { "type": "string" },
+          "active": { "type": "boolean" }
+        }
+      },
+      "PermissionResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "name": { "type": "string" },
+          "resource": { "type": "string" },
+          "action": { "type": "string" }
+        }
+      },
+      "RegisterClientRequest": {
+        "type": "object",
+        "required": ["appName", "redirectUris"],
+        "properties": {
+          "appName": { "type": "string", "minLength": 1, "maxLength": 255 },
+          "redirectUris": { "type": "string", "description": "Comma-separated redirect URIs" },
+          "scopes": { "type": "array", "items": { "type": "string" }, "default": ["openid"] }
+        }
+      },
+      "OAuth2ClientResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "appName": { "type": "string" },
+          "clientId": { "type": "string" },
+          "redirectUris": { "type": "array", "items": { "type": "string" } },
+          "scopes": { "type": "array", "items": { "type": "string" } },
+          "status": { "type": "string", "enum": ["ACTIVE", "INACTIVE"] },
+          "createdAt": { "type": "string", "format": "date-time" }
+        }
+      },
+      "OAuth2ClientCreatedResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "appName": { "type": "string" },
+          "clientId": { "type": "string" },
+          "clientSecret": { "type": "string", "description": "Plaintext secret, shown only once" },
+          "redirectUris": { "type": "array", "items": { "type": "string" } },
+          "scopes": { "type": "array", "items": { "type": "string" } },
+          "status": { "type": "string" },
+          "createdAt": { "type": "string", "format": "date-time" }
+        }
+      },
+      "DeviceResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "userId": { "type": "string", "format": "uuid" },
+          "platform": { "type": "string" },
+          "deviceName": { "type": "string" }
+        }
+      },
+      "RegisterDeviceCommand": {
+        "type": "object",
+        "properties": {
+          "keyId": { "type": "string" },
+          "platform": { "type": "string", "enum": ["WEB", "ANDROID", "IOS", "DESKTOP"] },
+          "publicKeyJwk": { "type": "object" }
+        }
+      },
+      "GuestInvitationResponse": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "format": "uuid" },
+          "email": { "type": "string" },
+          "status": { "type": "string" },
+          "accessDurationHours": { "type": "integer" },
+          "createdAt": { "type": "string", "format": "date-time" }
+        }
+      },
+      "InviteGuestRequest": {
+        "type": "object",
+        "required": ["email"],
+        "properties": {
+          "email": { "type": "string", "format": "email" },
+          "accessDurationHours": { "type": "integer" },
+          "message": { "type": "string" }
+        }
+      },
+      "ErrorResponse": {
+        "type": "object",
+        "properties": {
+          "status": { "type": "integer" },
+          "error": { "type": "string" },
+          "message": { "type": "string" },
+          "path": { "type": "string" }
+        }
+      }
+    }
+  },
+  "security": [
+    { "bearerAuth": [] }
+  ],
+  "paths": {
+    "/auth/register": {
+      "post": {
+        "operationId": "register",
+        "summary": "Register a new user",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/RegisterRequest" }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": "User registered successfully",
+            "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthResponse" } } }
+          },
+          "400": { "description": "Validation error", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } } }
+        }
+      }
+    },
+    "/auth/login": {
+      "post": {
+        "operationId": "login",
+        "summary": "Login with email and password",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/LoginRequest" }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Login successful (may return mfaSessionToken if MFA required)",
+            "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthResponse" } } }
+          },
+          "401": { "description": "Invalid credentials" }
+        }
+      }
+    },
+    "/auth/refresh": {
+      "post": {
+        "operationId": "refreshToken",
+        "summary": "Refresh access token using refresh token",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/RefreshTokenRequest" }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Token refreshed",
+            "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthResponse" } } }
+          },
+          "401": { "description": "Invalid or expired refresh token" }
+        }
+      }
+    },
+    "/auth/logout": {
+      "post": {
+        "operationId": "logout",
+        "summary": "Logout and revoke refresh token",
+        "tags": ["Authentication"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/RefreshTokenRequest" }
+            }
+          }
+        },
+        "responses": {
+          "204": { "description": "Logged out successfully" },
+          "401": { "description": "Not authenticated" }
+        }
+      }
+    },
+    "/auth/me": {
+      "get": {
+        "operationId": "getCurrentUser",
+        "summary": "Get current authenticated user",
+        "tags": ["Authentication"],
+        "responses": {
+          "200": {
+            "description": "Current user info",
+            "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UserResponse" } } }
+          },
+          "401": { "description": "Not authenticated" }
+        }
+      }
+    },
+    "/auth/forgot-password": {
+      "post": {
+        "operationId": "forgotPassword",
+        "summary": "Request a password reset code via email",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["email"],
+                "properties": { "email": { "type": "string", "format": "email" } }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "Reset code sent (always returns success to prevent email enumeration)" },
+          "429": { "description": "Rate limit exceeded" }
+        }
+      }
+    },
+    "/auth/reset-password": {
+      "post": {
+        "operationId": "resetPassword",
+        "summary": "Reset password using the code from email",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["email", "code", "newPassword"],
+                "properties": {
+                  "email": { "type": "string", "format": "email" },
+                  "code": { "type": "string" },
+                  "newPassword": { "type": "string" }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "Password reset successfully" },
+          "400": { "description": "Invalid email, code, or password complexity" }
+        }
+      }
+    },
+    "/auth/send-email-verification": {
+      "post": {
+        "operationId": "sendEmailVerification",
+        "summary": "Send email verification code",
+        "tags": ["Authentication"],
+        "responses": {
+          "200": { "description": "Verification code sent" },
+          "401": { "description": "Not authenticated" }
+        }
+      }
+    },
+    "/auth/verify-email": {
+      "post": {
+        "operationId": "verifyEmail",
+        "summary": "Verify email address using OTP code",
+        "tags": ["Authentication"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["code"],
+                "properties": { "code": { "type": "string" } }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "Email verification result", "content": { "application/json": { "schema": { "type": "object", "properties": { "success": { "type": "boolean" }, "message": { "type": "string" } } } } } },
+          "400": { "description": "Code is required" }
+        }
+      }
+    },
+    "/auth/send-phone-verification": {
+      "post": {
+        "operationId": "sendPhoneVerification",
+        "summary": "Send phone verification code via SMS",
+        "tags": ["Authentication"],
+        "responses": {
+          "200": { "description": "Verification code sent" },
+          "400": { "description": "No phone number configured" }
+        }
+      }
+    },
+    "/auth/verify-phone": {
+      "post": {
+        "operationId": "verifyPhone",
+        "summary": "Verify phone number using OTP code",
+        "tags": ["Authentication"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["code"],
+                "properties": { "code": { "type": "string" } }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "Phone verification result" },
+          "400": { "description": "Code is required" }
+        }
+      }
+    },
+    "/auth/2fa/send": {
+      "post": {
+        "operationId": "send2FACode",
+        "summary": "Send 2FA verification code to user's email",
+        "tags": ["Authentication"],
+        "responses": {
+          "200": { "description": "2FA code sent", "content": { "application/json": { "schema": { "type": "object", "properties": { "message": { "type": "string" }, "email": { "type": "string" } } } } } }
+        }
+      }
+    },
+    "/auth/2fa/verify": {
+      "post": {
+        "operationId": "verify2FACode",
+        "summary": "Verify 2FA code to complete login",
+        "tags": ["Authentication"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["code"],
+                "properties": { "code": { "type": "string" } }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "2FA verification result" }
+        }
+      }
+    },
+    "/auth/2fa/verify-method": {
+      "post": {
+        "operationId": "verify2FAMethod",
+        "summary": "Verify 2FA using any supported auth method",
+        "tags": ["Authentication"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["method"],
+                "properties": {
+                  "method": { "type": "string", "enum": ["TOTP", "SMS_OTP", "FACE", "VOICE", "FINGERPRINT", "HARDWARE_KEY", "QR_CODE", "EMAIL_OTP"] },
+                  "data": { "type": "object" }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "2FA method verification result" }
+        }
+      }
+    },
+    "/auth/2fa/send-sms": {
+      "post": {
+        "operationId": "send2FASms",
+        "summary": "Send 2FA verification code via SMS",
+        "tags": ["Authentication"],
+        "responses": {
+          "200": { "description": "SMS code sent" },
+          "400": { "description": "No phone number on file" }
+        }
+      }
+    },
+    "/auth/my/2fa-status": {
+      "get": {
+        "operationId": "get2FAStatus",
+        "summary": "Check if the current user's tenant requires 2FA",
+        "tags": ["Authentication"],
+        "responses": {
+          "200": {
+            "description": "2FA status",
+            "content": { "application/json": { "schema": { "type": "object", "properties": { "twoFactorRequired": { "type": "boolean" }, "flowName": { "type": "string" }, "stepCount": { "type": "integer" } } } } }
+          }
+        }
+      }
+    },
+    "/auth/mfa/step": {
+      "post": {
+        "operationId": "verifyMfaStep",
+        "summary": "Verify an MFA step (public - no JWT required, uses session token)",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["sessionToken", "method"],
+                "properties": {
+                  "sessionToken": { "type": "string" },
+                  "method": { "type": "string", "enum": ["PASSWORD", "EMAIL_OTP", "SMS_OTP", "TOTP", "FACE", "VOICE", "FINGERPRINT", "HARDWARE_KEY", "QR_CODE", "NFC_DOCUMENT"] },
+                  "data": { "type": "object" }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "MFA step result. Status is STEP_COMPLETED (more steps remain) or AUTHENTICATED (all steps done, JWT issued)",
+            "content": { "application/json": { "schema": { "type": "object", "properties": { "status": { "type": "string", "enum": ["STEP_COMPLETED", "AUTHENTICATED", "FAILED", "ERROR"] }, "accessToken": { "type": "string" }, "refreshToken": { "type": "string" }, "mfaSessionToken": { "type": "string" }, "currentStep": { "type": "integer" }, "totalSteps": { "type": "integer" }, "availableMethods": { "type": "array", "items": { "$ref": "#/components/schemas/AvailableMfaMethod" } } } } } }
+          },
+          "401": { "description": "Invalid or expired MFA session" }
+        }
+      }
+    },
+    "/auth/mfa/qr-generate": {
+      "post": {
+        "operationId": "generateMfaQrToken",
+        "summary": "Generate QR token during MFA flow (public, uses session token)",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["sessionToken"],
+                "properties": { "sessionToken": { "type": "string" } }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "QR token generated" },
+          "401": { "description": "Invalid or expired MFA session" }
+        }
+      }
+    },
+    "/auth/mfa/send-otp": {
+      "post": {
+        "operationId": "sendMfaOtp",
+        "summary": "Send OTP during MFA flow (public, uses session token)",
+        "tags": ["Authentication"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["sessionToken"],
+                "properties": {
+                  "sessionToken": { "type": "string" },
+                  "method": { "type": "string", "enum": ["EMAIL_OTP", "SMS_OTP"], "default": "EMAIL_OTP" }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "OTP sent" },
+          "401": { "description": "Invalid or expired MFA session" }
+        }
+      }
+    },
+    "/auth/health": {
+      "get": {
+        "operationId": "authHealth",
+        "summary": "Health check",
+        "tags": ["System"],
+        "security": [],
+        "responses": {
+          "200": { "description": "Auth service is healthy", "content": { "text/plain": { "schema": { "type": "string" } } } }
+        }
+      }
+    },
+    "/users": {
+      "get": {
+        "operationId": "getAllUsers",
+        "summary": "Get all users (paginated)",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "page", "in": "query", "schema": { "type": "integer", "default": 0, "minimum": 0 } },
+          { "name": "size", "in": "query", "schema": { "type": "integer", "default": 20, "minimum": 1, "maximum": 100 } }
+        ],
+        "responses": {
+          "200": { "description": "Paginated user list", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PaginatedResponse" } } } },
+          "403": { "description": "Insufficient permissions" }
+        }
+      },
+      "post": {
+        "operationId": "createUser",
+        "summary": "Create new user",
+        "tags": ["Users"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CreateUserRequest" } } }
+        },
+        "responses": {
+          "201": { "description": "User created", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UserResponse" } } } },
+          "400": { "description": "Validation error" },
+          "403": { "description": "Insufficient permissions" }
+        }
+      }
+    },
+    "/users/{id}": {
+      "get": {
+        "operationId": "getUserById",
+        "summary": "Get user by ID",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "User details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UserResponse" } } } },
+          "404": { "description": "User not found" }
+        }
+      },
+      "put": {
+        "operationId": "updateUser",
+        "summary": "Update user",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UpdateUserRequest" } } }
+        },
+        "responses": {
+          "200": { "description": "User updated", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UserResponse" } } } },
+          "404": { "description": "User not found" }
+        }
+      },
+      "delete": {
+        "operationId": "deleteUser",
+        "summary": "Delete user",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "204": { "description": "User deleted" },
+          "404": { "description": "User not found" }
+        }
+      }
+    },
+    "/users/{id}/change-password": {
+      "post": {
+        "operationId": "changePassword",
+        "summary": "Change user password",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ChangePasswordRequest" } } }
+        },
+        "responses": {
+          "204": { "description": "Password changed" },
+          "400": { "description": "Validation error" }
+        }
+      }
+    },
+    "/users/search": {
+      "get": {
+        "operationId": "searchUsers",
+        "summary": "Search users",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "query", "in": "query", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Search results", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/UserResponse" } } } } }
+        }
+      }
+    },
+    "/users/{userId}/settings": {
+      "get": {
+        "operationId": "getUserSettings",
+        "summary": "Get user settings",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "User settings", "content": { "application/json": { "schema": { "type": "object" } } } }
+        }
+      },
+      "put": {
+        "operationId": "updateUserSettings",
+        "summary": "Update user settings",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object" } } }
+        },
+        "responses": {
+          "200": { "description": "Settings updated", "content": { "application/json": { "schema": { "type": "object" } } } }
+        }
+      }
+    },
+    "/users/{userId}/settings/notifications": {
+      "get": {
+        "operationId": "getNotificationSettings",
+        "summary": "Get notification settings",
+        "tags": ["Users"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Notification settings" } }
+      },
+      "put": {
+        "operationId": "updateNotificationSettings",
+        "summary": "Update notification settings",
+        "tags": ["Users"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object" } } } },
+        "responses": { "200": { "description": "Notification settings updated" } }
+      }
+    },
+    "/users/{userId}/settings/security": {
+      "get": {
+        "operationId": "getSecuritySettings",
+        "summary": "Get security settings",
+        "tags": ["Users"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Security settings" } }
+      },
+      "put": {
+        "operationId": "updateSecuritySettings",
+        "summary": "Update security settings",
+        "tags": ["Users"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object" } } } },
+        "responses": { "200": { "description": "Security settings updated" } }
+      }
+    },
+    "/users/{userId}/settings/appearance": {
+      "get": {
+        "operationId": "getAppearanceSettings",
+        "summary": "Get appearance settings",
+        "tags": ["Users"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Appearance settings" } }
+      },
+      "put": {
+        "operationId": "updateAppearanceSettings",
+        "summary": "Update appearance settings",
+        "tags": ["Users"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object" } } } },
+        "responses": { "200": { "description": "Appearance settings updated" } }
+      }
+    },
+    "/guests/invite": {
+      "post": {
+        "operationId": "inviteGuest",
+        "summary": "Invite a guest user",
+        "tags": ["Users"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/InviteGuestRequest" } } }
+        },
+        "responses": {
+          "201": { "description": "Guest invited", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/GuestInvitationResponse" } } } },
+          "403": { "description": "Insufficient permissions" }
+        }
+      }
+    },
+    "/guests/accept": {
+      "post": {
+        "operationId": "acceptInvitation",
+        "summary": "Accept a guest invitation",
+        "tags": ["Users"],
+        "security": [],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["token", "firstName", "lastName", "password"],
+                "properties": {
+                  "token": { "type": "string" },
+                  "firstName": { "type": "string" },
+                  "lastName": { "type": "string" },
+                  "password": { "type": "string" }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": { "description": "Invitation accepted" },
+          "400": { "description": "Invalid token" }
+        }
+      }
+    },
+    "/guests": {
+      "get": {
+        "operationId": "listInvitations",
+        "summary": "List guest invitations for current tenant",
+        "tags": ["Users"],
+        "parameters": [
+          { "name": "status", "in": "query", "required": false, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Guest invitations list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/GuestInvitationResponse" } } } } }
+        }
+      }
+    },
+    "/guests/count": {
+      "get": {
+        "operationId": "countActiveGuests",
+        "summary": "Count active guests in tenant",
+        "tags": ["Users"],
+        "responses": {
+          "200": { "description": "Active guest count", "content": { "application/json": { "schema": { "type": "integer", "format": "int64" } } } }
+        }
+      }
+    },
+    "/guests/{guestUserId}/revoke": {
+      "post": {
+        "operationId": "revokeGuestAccess",
+        "summary": "Revoke guest access",
+        "tags": ["Users"],
+        "parameters": [{ "name": "guestUserId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "204": { "description": "Guest access revoked" } }
+      }
+    },
+    "/guests/{guestUserId}/extend": {
+      "post": {
+        "operationId": "extendGuestAccess",
+        "summary": "Extend guest access duration",
+        "tags": ["Users"],
+        "parameters": [{ "name": "guestUserId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object", "properties": { "additionalHours": { "type": "integer" } } } } }
+        },
+        "responses": { "204": { "description": "Guest access extended" } }
+      }
+    },
+    "/enrollments": {
+      "get": {
+        "operationId": "getAllEnrollments",
+        "summary": "Get all enrollments",
+        "tags": ["Enrollment"],
+        "responses": {
+          "200": { "description": "All enrollments", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/EnrollmentDto" } } } } }
+        }
+      }
+    },
+    "/enrollments/{id}": {
+      "get": {
+        "operationId": "getEnrollmentById",
+        "summary": "Get enrollment by ID",
+        "tags": ["Enrollment"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": {
+          "200": { "description": "Enrollment details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/EnrollmentDto" } } } },
+          "404": { "description": "Enrollment not found" }
+        }
+      },
+      "delete": {
+        "operationId": "deleteEnrollment",
+        "summary": "Delete an enrollment",
+        "tags": ["Enrollment"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "204": { "description": "Enrollment deleted" } }
+      }
+    },
+    "/enrollments/{id}/retry": {
+      "post": {
+        "operationId": "retryEnrollment",
+        "summary": "Retry a failed enrollment",
+        "tags": ["Enrollment"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Enrollment retried", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/EnrollmentDto" } } } },
+          "400": { "description": "Only failed enrollments can be retried" }
+        }
+      }
+    },
+    "/users/{userId}/enrollments": {
+      "get": {
+        "operationId": "getUserEnrollments",
+        "summary": "Get user enrollments",
+        "tags": ["Enrollment"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "User enrollments", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/EnrollmentResponse" } } } } }
+        }
+      },
+      "post": {
+        "operationId": "startEnrollment",
+        "summary": "Start enrollment for a user",
+        "tags": ["Enrollment"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "tenantId", "in": "query", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "methodType", "in": "query", "required": true, "schema": { "type": "string", "enum": ["PASSWORD", "EMAIL_OTP", "SMS_OTP", "TOTP", "FACE", "VOICE", "FINGERPRINT", "HARDWARE_KEY", "QR_CODE", "NFC_DOCUMENT"] } }
+        ],
+        "responses": {
+          "201": { "description": "Enrollment started", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/EnrollmentResponse" } } } }
+        }
+      }
+    },
+    "/users/{userId}/enrollments/{methodType}/complete": {
+      "put": {
+        "operationId": "completeEnrollment",
+        "summary": "Complete enrollment for a user",
+        "tags": ["Enrollment"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "methodType", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Enrollment completed", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/EnrollmentResponse" } } } }
+        }
+      }
+    },
+    "/users/{userId}/enrollments/{methodType}": {
+      "delete": {
+        "operationId": "revokeEnrollment",
+        "summary": "Revoke enrollment for a user",
+        "tags": ["Enrollment"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "methodType", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": { "204": { "description": "Enrollment revoked" } }
+      }
+    },
+    "/users/{userId}/enrollments/health": {
+      "get": {
+        "operationId": "getEnrollmentHealth",
+        "summary": "Validate enrollment health against actual backing data",
+        "tags": ["Enrollment"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Enrollment health status", "content": { "application/json": { "schema": { "type": "object", "properties": { "userId": { "type": "string" }, "methods": { "type": "object" }, "validCount": { "type": "integer" }, "totalCount": { "type": "integer" } } } } } }
+        }
+      }
+    },
+    "/enrollment/submit": {
+      "post": {
+        "operationId": "submitEnrollment",
+        "summary": "Submit enrollment with face image and identity information",
+        "tags": ["Enrollment"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "required": ["nationalId", "dateOfBirth", "fullName", "livenessToken", "livenessScore", "faceImage"],
+                "properties": {
+                  "nationalId": { "type": "string" },
+                  "dateOfBirth": { "type": "string" },
+                  "fullName": { "type": "string" },
+                  "livenessToken": { "type": "string" },
+                  "livenessScore": { "type": "string" },
+                  "faceImage": { "type": "string", "format": "binary" }
+                }
+              }
+            }
+          }
+        },
+        "responses": { "200": { "description": "Enrollment result" } }
+      }
+    },
+    "/enrollment/status": {
+      "get": {
+        "operationId": "getEnrollmentStatus",
+        "summary": "Get current user's enrollment status",
+        "tags": ["Enrollment"],
+        "responses": { "200": { "description": "Enrollment status" } }
+      }
+    },
+    "/enrollment/liveness/challenge": {
+      "post": {
+        "operationId": "requestLivenessChallenge",
+        "summary": "Request a liveness challenge for enrollment verification",
+        "tags": ["Enrollment"],
+        "requestBody": { "content": { "application/json": { "schema": { "type": "object" } } } },
+        "responses": { "200": { "description": "Liveness challenge created" } }
+      }
+    },
+    "/enrollment/liveness/verify": {
+      "post": {
+        "operationId": "verifyLiveness",
+        "summary": "Verify liveness challenge with captured frames",
+        "tags": ["Enrollment"],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "required": ["challengeId", "frame_0"],
+                "properties": {
+                  "challengeId": { "type": "string" },
+                  "frame_0": { "type": "string", "format": "binary" },
+                  "frame_1": { "type": "string", "format": "binary" },
+                  "frame_2": { "type": "string", "format": "binary" }
+                }
+              }
+            }
+          }
+        },
+        "responses": { "200": { "description": "Liveness verification result" } }
+      }
+    },
+    "/tenants/{tenantId}/auth-flows": {
+      "get": {
+        "operationId": "getFlows",
+        "summary": "List auth flows for a tenant",
+        "tags": ["Auth Flows"],
+        "parameters": [
+          { "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "operationType", "in": "query", "required": false, "schema": { "type": "string", "enum": ["APP_LOGIN", "WIDGET_LOGIN", "STEP_UP", "ENROLLMENT", "VERIFICATION"] } }
+        ],
+        "responses": {
+          "200": { "description": "Auth flows list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/AuthFlowResponse" } } } } }
+        }
+      },
+      "post": {
+        "operationId": "createFlow",
+        "summary": "Create a new auth flow",
+        "tags": ["Auth Flows"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CreateAuthFlowCommand" } } }
+        },
+        "responses": {
+          "201": { "description": "Auth flow created", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthFlowResponse" } } } }
+        }
+      }
+    },
+    "/tenants/{tenantId}/auth-flows/{flowId}": {
+      "get": {
+        "operationId": "getFlow",
+        "summary": "Get auth flow by ID",
+        "tags": ["Auth Flows"],
+        "parameters": [
+          { "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "flowId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }
+        ],
+        "responses": {
+          "200": { "description": "Auth flow details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthFlowResponse" } } } },
+          "404": { "description": "Auth flow not found" }
+        }
+      },
+      "put": {
+        "operationId": "updateFlow",
+        "summary": "Update an auth flow",
+        "tags": ["Auth Flows"],
+        "parameters": [
+          { "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "flowId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UpdateAuthFlowCommand" } } }
+        },
+        "responses": {
+          "200": { "description": "Auth flow updated", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthFlowResponse" } } } }
+        }
+      },
+      "delete": {
+        "operationId": "deleteFlow",
+        "summary": "Delete an auth flow",
+        "tags": ["Auth Flows"],
+        "parameters": [
+          { "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "flowId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }
+        ],
+        "responses": { "204": { "description": "Auth flow deleted" } }
+      }
+    },
+    "/auth/sessions": {
+      "post": {
+        "operationId": "startSession",
+        "summary": "Start a new auth session",
+        "tags": ["Sessions"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/StartAuthSessionCommand" } } }
+        },
+        "responses": {
+          "201": { "description": "Auth session started", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthSessionResponse" } } } }
+        }
+      }
+    },
+    "/auth/sessions/{sessionId}": {
+      "get": {
+        "operationId": "getSession",
+        "summary": "Get auth session status",
+        "tags": ["Sessions"],
+        "parameters": [{ "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Auth session status", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthSessionResponse" } } } }
+        }
+      }
+    },
+    "/auth/sessions/{sessionId}/steps/{stepOrder}": {
+      "post": {
+        "operationId": "completeStep",
+        "summary": "Complete an auth session step",
+        "tags": ["Sessions"],
+        "parameters": [
+          { "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "stepOrder", "in": "path", "required": true, "schema": { "type": "integer" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CompleteAuthStepCommand" } } }
+        },
+        "responses": {
+          "200": { "description": "Step result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/StepResultResponse" } } } }
+        }
+      }
+    },
+    "/auth/sessions/{sessionId}/steps/{stepOrder}/skip": {
+      "post": {
+        "operationId": "skipStep",
+        "summary": "Skip an auth session step",
+        "tags": ["Sessions"],
+        "parameters": [
+          { "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "stepOrder", "in": "path", "required": true, "schema": { "type": "integer" } }
+        ],
+        "responses": {
+          "200": { "description": "Step skipped", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/StepResultResponse" } } } }
+        }
+      }
+    },
+    "/auth/sessions/{sessionId}/cancel": {
+      "post": {
+        "operationId": "cancelSession",
+        "summary": "Cancel an auth session",
+        "tags": ["Sessions"],
+        "parameters": [{ "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "204": { "description": "Session cancelled" } }
+      }
+    },
+    "/auth/sessions/my": {
+      "get": {
+        "operationId": "getActiveSessions",
+        "summary": "Get all active sessions for authenticated user",
+        "tags": ["Sessions"],
+        "parameters": [
+          { "name": "currentTokenId", "in": "query", "required": false, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Active sessions list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/SessionResponse" } } } } }
+        }
+      }
+    },
+    "/auth/sessions/my/{sessionId}": {
+      "delete": {
+        "operationId": "revokeSession",
+        "summary": "Revoke a specific session (logout that device)",
+        "tags": ["Sessions"],
+        "parameters": [{ "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "204": { "description": "Session revoked" } }
+      }
+    },
+    "/auth/sessions/my/all": {
+      "delete": {
+        "operationId": "revokeAllSessions",
+        "summary": "Revoke all other sessions (logout from all other devices)",
+        "tags": ["Sessions"],
+        "parameters": [
+          { "name": "currentTokenId", "in": "query", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": { "204": { "description": "All other sessions revoked" } }
+      }
+    },
+    "/oauth2/authorize": {
+      "get": {
+        "operationId": "authorize",
+        "summary": "Initiate OAuth 2.0 authorization code flow",
+        "tags": ["OAuth 2.0"],
+        "security": [],
+        "parameters": [
+          { "name": "client_id", "in": "query", "required": true, "schema": { "type": "string" } },
+          { "name": "redirect_uri", "in": "query", "required": true, "schema": { "type": "string" } },
+          { "name": "response_type", "in": "query", "schema": { "type": "string", "default": "code" } },
+          { "name": "scope", "in": "query", "schema": { "type": "string", "default": "openid profile email" } },
+          { "name": "state", "in": "query", "schema": { "type": "string" } },
+          { "name": "nonce", "in": "query", "schema": { "type": "string" } },
+          { "name": "code_challenge", "in": "query", "schema": { "type": "string" } },
+          { "name": "code_challenge_method", "in": "query", "schema": { "type": "string", "default": "S256" } }
+        ],
+        "responses": {
+          "200": { "description": "Authorization code or auth session info" },
+          "400": { "description": "Invalid request" }
+        }
+      }
+    },
+    "/oauth2/token": {
+      "post": {
+        "operationId": "token",
+        "summary": "Exchange authorization code for tokens",
+        "tags": ["OAuth 2.0"],
+        "security": [],
+        "parameters": [
+          { "name": "grant_type", "in": "query", "required": true, "schema": { "type": "string" } },
+          { "name": "code", "in": "query", "required": true, "schema": { "type": "string" } },
+          { "name": "redirect_uri", "in": "query", "required": true, "schema": { "type": "string" } },
+          { "name": "client_id", "in": "query", "required": true, "schema": { "type": "string" } },
+          { "name": "client_secret", "in": "query", "required": false, "schema": { "type": "string" } },
+          { "name": "code_verifier", "in": "query", "required": false, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": {
+            "description": "Token response (access_token, id_token, refresh_token)",
+            "content": { "application/json": { "schema": { "type": "object", "properties": { "access_token": { "type": "string" }, "token_type": { "type": "string" }, "expires_in": { "type": "integer" }, "id_token": { "type": "string" }, "refresh_token": { "type": "string" } } } } }
+          },
+          "400": { "description": "Invalid grant or client" }
+        }
+      }
+    },
+    "/oauth2/userinfo": {
+      "get": {
+        "operationId": "userInfo",
+        "summary": "Get authenticated user info (OIDC UserInfo)",
+        "tags": ["OAuth 2.0"],
+        "responses": {
+          "200": { "description": "User claims", "content": { "application/json": { "schema": { "type": "object" } } } },
+          "401": { "description": "Invalid or expired token" }
+        }
+      }
+    },
+    "/oauth2/clients": {
+      "get": {
+        "operationId": "listOAuth2Clients",
+        "summary": "List all OAuth2 clients for the authenticated user's tenant",
+        "tags": ["OAuth 2.0 Clients"],
+        "responses": {
+          "200": { "description": "OAuth2 clients list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/OAuth2ClientResponse" } } } } }
+        }
+      },
+      "post": {
+        "operationId": "registerOAuth2Client",
+        "summary": "Register a new OAuth2 client (returns client_secret in plaintext once)",
+        "tags": ["OAuth 2.0 Clients"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/RegisterClientRequest" } } }
+        },
+        "responses": {
+          "201": { "description": "Client registered", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/OAuth2ClientCreatedResponse" } } } }
+        }
+      }
+    },
+    "/oauth2/clients/{id}": {
+      "get": {
+        "operationId": "getOAuth2Client",
+        "summary": "Get OAuth2 client details (secret is masked)",
+        "tags": ["OAuth 2.0 Clients"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Client details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/OAuth2ClientResponse" } } } },
+          "404": { "description": "Client not found" }
+        }
+      },
+      "delete": {
+        "operationId": "deleteOAuth2Client",
+        "summary": "Delete an OAuth2 client",
+        "tags": ["OAuth 2.0 Clients"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "204": { "description": "Client deleted" } }
+      }
+    },
+    "/oauth2/clients/{id}/status": {
+      "patch": {
+        "operationId": "toggleOAuth2ClientStatus",
+        "summary": "Toggle active/inactive status of an OAuth2 client",
+        "tags": ["OAuth 2.0 Clients"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object", "properties": { "active": { "type": "boolean" } } } } }
+        },
+        "responses": {
+          "200": { "description": "Status updated", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/OAuth2ClientResponse" } } } }
+        }
+      }
+    },
+    "/verification/sessions": {
+      "post": {
+        "operationId": "createVerificationSession",
+        "summary": "Create a new verification session",
+        "tags": ["Verification"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CreateVerificationSessionCommand" } } }
+        },
+        "responses": {
+          "201": { "description": "Verification session created", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VerificationSessionResponse" } } } }
+        }
+      }
+    },
+    "/verification/sessions/{id}": {
+      "get": {
+        "operationId": "getVerificationSession",
+        "summary": "Get verification session status",
+        "tags": ["Verification"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Verification session details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VerificationSessionResponse" } } } }
+        }
+      }
+    },
+    "/verification/sessions/{id}/steps/{stepNumber}": {
+      "post": {
+        "operationId": "submitVerificationStep",
+        "summary": "Submit a verification step result",
+        "tags": ["Verification"],
+        "parameters": [
+          { "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "stepNumber", "in": "path", "required": true, "schema": { "type": "integer" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/SubmitVerificationStepCommand" } } }
+        },
+        "responses": {
+          "200": { "description": "Step result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VerificationStepResultResponse" } } } }
+        }
+      }
+    },
+    "/verification/sessions/{id}/steps/{stepNumber}/review": {
+      "post": {
+        "operationId": "reviewVerificationStep",
+        "summary": "Review a verification step (admin)",
+        "tags": ["Verification"],
+        "parameters": [
+          { "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "stepNumber", "in": "path", "required": true, "schema": { "type": "integer" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/ReviewVerificationStepCommand" } } }
+        },
+        "responses": {
+          "200": { "description": "Review result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VerificationStepResultResponse" } } } },
+          "403": { "description": "Requires SUPER_ADMIN, ADMIN, or TENANT_ADMIN role" }
+        }
+      }
+    },
+    "/verification/sessions/{id}/complete": {
+      "post": {
+        "operationId": "completeVerificationSession",
+        "summary": "Complete a verification session",
+        "tags": ["Verification"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Session completed", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VerificationSessionResponse" } } } }
+        }
+      }
+    },
+    "/verification/templates": {
+      "get": {
+        "operationId": "getVerificationTemplates",
+        "summary": "Get industry verification templates",
+        "tags": ["Verification"],
+        "responses": {
+          "200": { "description": "Industry templates", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/IndustryTemplateResponse" } } } } }
+        }
+      }
+    },
+    "/verification/results/{userId}": {
+      "get": {
+        "operationId": "getUserVerificationStatus",
+        "summary": "Get user verification status",
+        "tags": ["Verification"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "Verification status", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/VerificationStatusResponse" } } } }
+        }
+      }
+    },
+    "/tenants": {
+      "get": {
+        "operationId": "getAllTenants",
+        "summary": "Get all tenants (paginated)",
+        "tags": ["Tenants"],
+        "parameters": [
+          { "name": "page", "in": "query", "schema": { "type": "integer", "default": 0 } },
+          { "name": "size", "in": "query", "schema": { "type": "integer", "default": 20 } }
+        ],
+        "responses": {
+          "200": { "description": "Paginated tenant list", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PaginatedResponse" } } } }
+        }
+      },
+      "post": {
+        "operationId": "createTenant",
+        "summary": "Create a new tenant (root only)",
+        "tags": ["Tenants"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CreateTenantRequest" } } }
+        },
+        "responses": {
+          "201": { "description": "Tenant created", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TenantResponse" } } } },
+          "403": { "description": "Root access required" }
+        }
+      }
+    },
+    "/tenants/{tenantId}": {
+      "get": {
+        "operationId": "getTenantById",
+        "summary": "Get tenant by ID",
+        "tags": ["Tenants"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": {
+          "200": { "description": "Tenant details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TenantResponse" } } } },
+          "404": { "description": "Tenant not found" }
+        }
+      },
+      "put": {
+        "operationId": "updateTenant",
+        "summary": "Update tenant configuration",
+        "tags": ["Tenants"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UpdateTenantRequest" } } }
+        },
+        "responses": {
+          "200": { "description": "Tenant updated", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TenantResponse" } } } }
+        }
+      },
+      "delete": {
+        "operationId": "deleteTenant",
+        "summary": "Delete tenant (root only)",
+        "tags": ["Tenants"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "204": { "description": "Tenant deleted" } }
+      }
+    },
+    "/tenants/slug/{slug}": {
+      "get": {
+        "operationId": "getTenantBySlug",
+        "summary": "Get tenant by slug",
+        "tags": ["Tenants"],
+        "parameters": [{ "name": "slug", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": {
+          "200": { "description": "Tenant details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TenantResponse" } } } }
+        }
+      }
+    },
+    "/tenants/{tenantId}/activate": {
+      "post": {
+        "operationId": "activateTenant",
+        "summary": "Activate a tenant (root only)",
+        "tags": ["Tenants"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Tenant activated", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TenantResponse" } } } } }
+      }
+    },
+    "/tenants/{tenantId}/suspend": {
+      "post": {
+        "operationId": "suspendTenant",
+        "summary": "Suspend a tenant (root only)",
+        "tags": ["Tenants"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Tenant suspended", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/TenantResponse" } } } } }
+      }
+    },
+    "/tenants/{tenantId}/auth-methods": {
+      "get": {
+        "operationId": "getTenantMethods",
+        "summary": "List auth methods configured for a tenant",
+        "tags": ["Auth Methods"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "Tenant auth methods" } }
+      }
+    },
+    "/tenants/{tenantId}/auth-methods/{authMethodId}": {
+      "put": {
+        "operationId": "configureTenantMethod",
+        "summary": "Configure an auth method for a tenant",
+        "tags": ["Auth Methods"],
+        "parameters": [
+          { "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "authMethodId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "enabled", "in": "query", "schema": { "type": "boolean", "default": true } }
+        ],
+        "requestBody": { "content": { "application/json": { "schema": { "type": "string", "description": "Configuration JSON" } } } },
+        "responses": { "200": { "description": "Method configured" } }
+      }
+    },
+    "/audit-logs": {
+      "get": {
+        "operationId": "getAuditLogs",
+        "summary": "Get audit logs with pagination",
+        "tags": ["Audit"],
+        "parameters": [
+          { "name": "page", "in": "query", "schema": { "type": "integer", "default": 0 } },
+          { "name": "size", "in": "query", "schema": { "type": "integer", "default": 20 } },
+          { "name": "action", "in": "query", "required": false, "schema": { "type": "string" } },
+          { "name": "userId", "in": "query", "required": false, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Paginated audit logs", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PaginatedResponse" } } } },
+          "403": { "description": "Insufficient permissions" }
+        }
+      }
+    },
+    "/audit-logs/{id}": {
+      "get": {
+        "operationId": "getAuditLogById",
+        "summary": "Get audit log by ID",
+        "tags": ["Audit"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": {
+          "200": { "description": "Audit log details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuditLogDto" } } } },
+          "404": { "description": "Audit log not found" }
+        }
+      }
+    },
+    "/audit-logs/action-types": {
+      "get": {
+        "operationId": "getActionTypes",
+        "summary": "Get available audit log action types",
+        "tags": ["Audit"],
+        "responses": {
+          "200": { "description": "Action types list", "content": { "application/json": { "schema": { "type": "array", "items": { "type": "string" } } } } }
+        }
+      }
+    },
+    "/my/activity": {
+      "get": {
+        "operationId": "getMyActivity",
+        "summary": "Get current user's own activity logs",
+        "tags": ["Audit"],
+        "parameters": [
+          { "name": "page", "in": "query", "schema": { "type": "integer", "default": 0 } },
+          { "name": "size", "in": "query", "schema": { "type": "integer", "default": 20 } }
+        ],
+        "responses": {
+          "200": { "description": "User activity logs", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PaginatedResponse" } } } }
+        }
+      }
+    },
+    "/statistics": {
+      "get": {
+        "operationId": "getStatistics",
+        "summary": "Get system statistics",
+        "tags": ["System"],
+        "responses": {
+          "200": { "description": "System statistics", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/StatisticsDto" } } } },
+          "403": { "description": "Requires analytics:view permission" }
+        }
+      }
+    },
+    "/statistics/dashboard": {
+      "get": {
+        "operationId": "getDashboardStatistics",
+        "summary": "Get dashboard statistics (alias for /statistics)",
+        "tags": ["System"],
+        "responses": {
+          "200": { "description": "Dashboard statistics", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/StatisticsDto" } } } }
+        }
+      }
+    },
+    "/biometric/health": {
+      "get": {
+        "operationId": "biometricHealth",
+        "summary": "Check biometric processor health via proxy",
+        "tags": ["Biometric"],
+        "responses": {
+          "200": { "description": "Biometric processor health" },
+          "503": { "description": "Biometric processor unavailable" }
+        }
+      }
+    },
+    "/biometric/enroll/{userId}": {
+      "post": {
+        "operationId": "enrollFace",
+        "summary": "Enroll user's face biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "multipart/form-data": { "schema": { "type": "object", "properties": { "image": { "type": "string", "format": "binary" } } } } }
+        },
+        "responses": {
+          "200": { "description": "Enrollment result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } }
+        }
+      }
+    },
+    "/biometric/enroll/multi/{userId}": {
+      "post": {
+        "operationId": "enrollFaceMulti",
+        "summary": "Multi-image face enrollment (2-5 images for stronger template)",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "multipart/form-data": { "schema": { "type": "object", "properties": { "files": { "type": "array", "items": { "type": "string", "format": "binary" } } } } } }
+        },
+        "responses": { "200": { "description": "Multi-image enrollment result" } }
+      }
+    },
+    "/biometric/verify/{userId}": {
+      "post": {
+        "operationId": "verifyFace",
+        "summary": "Verify user's face against enrolled biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": {
+          "required": true,
+          "content": { "multipart/form-data": { "schema": { "type": "object", "properties": { "image": { "type": "string", "format": "binary" } } } } }
+        },
+        "responses": {
+          "200": { "description": "Verification result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } }
+        }
+      }
+    },
+    "/biometric/fingerprint/enroll/{userId}": {
+      "post": {
+        "operationId": "enrollFingerprint",
+        "summary": "Enroll user's fingerprint biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "fingerprintData": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Enrollment result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } } }
+      }
+    },
+    "/biometric/fingerprint/verify/{userId}": {
+      "post": {
+        "operationId": "verifyFingerprint",
+        "summary": "Verify user's fingerprint against enrolled biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "fingerprintData": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Verification result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } } }
+      }
+    },
+    "/biometric/voice/enroll/{userId}": {
+      "post": {
+        "operationId": "enrollVoice",
+        "summary": "Enroll user's voice biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "voiceData": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Enrollment result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } } }
+      }
+    },
+    "/biometric/voice/verify/{userId}": {
+      "post": {
+        "operationId": "verifyVoice",
+        "summary": "Verify user's voice against enrolled biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "voiceData": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Verification result", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } } }
+      }
+    },
+    "/biometric/face/{userId}": {
+      "delete": {
+        "operationId": "deleteFace",
+        "summary": "Delete user's enrolled face biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "Face data deleted", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/BiometricVerificationResponse" } } } } }
+      }
+    },
+    "/biometric/fingerprint/{userId}": {
+      "delete": {
+        "operationId": "deleteFingerprint",
+        "summary": "Delete user's enrolled fingerprint biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "Fingerprint data deleted" } }
+      }
+    },
+    "/biometric/voice/{userId}": {
+      "delete": {
+        "operationId": "deleteVoice",
+        "summary": "Delete user's enrolled voice biometric data",
+        "tags": ["Biometric"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "Voice data deleted" } }
+      }
+    },
+    "/biometric/search": {
+      "post": {
+        "operationId": "searchFace",
+        "summary": "Search for a face in enrolled database (1:N identification)",
+        "tags": ["Biometric"],
+        "requestBody": {
+          "required": true,
+          "content": { "multipart/form-data": { "schema": { "type": "object", "properties": { "file": { "type": "string", "format": "binary" } } } } }
+        },
+        "responses": { "200": { "description": "Face search results" } }
+      }
+    },
+    "/biometric/voice/search": {
+      "post": {
+        "operationId": "searchVoice",
+        "summary": "Search for a speaker in enrolled database (1:N voice identification)",
+        "tags": ["Biometric"],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "voiceData": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Voice search results" } }
+      }
+    },
+    "/biometric/card-detect": {
+      "post": {
+        "operationId": "detectCardType",
+        "summary": "Detect card type from image (Turkish ID, passport, driver's license, etc.)",
+        "tags": ["Biometric"],
+        "requestBody": {
+          "required": true,
+          "content": { "multipart/form-data": { "schema": { "type": "object", "properties": { "file": { "type": "string", "format": "binary" } } } } }
+        },
+        "responses": { "200": { "description": "Card detection result" } }
+      }
+    },
+    "/auth/biometric/devices": {
+      "post": {
+        "operationId": "registerAuthDevice",
+        "summary": "Register a biometric device for step-up authentication",
+        "tags": ["Biometric"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object", "properties": { "keyId": { "type": "string" }, "platform": { "type": "string", "enum": ["WEB", "ANDROID", "IOS", "DESKTOP"] }, "publicKeyJwk": { "type": "object" } } } } }
+        },
+        "responses": {
+          "201": { "description": "Device registered", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/DeviceResponse" } } } }
+        }
+      }
+    },
+    "/auth/biometric/challenge": {
+      "post": {
+        "operationId": "createAuthChallenge",
+        "summary": "Request a challenge nonce for biometric verification",
+        "tags": ["Biometric"],
+        "responses": { "200": { "description": "Challenge created" } }
+      }
+    },
+    "/auth/biometric/verify": {
+      "post": {
+        "operationId": "verifyAuthSignature",
+        "summary": "Verify a signed biometric challenge",
+        "tags": ["Biometric"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object", "properties": { "keyId": { "type": "string" }, "challengeId": { "type": "string" }, "signatureBase64": { "type": "string" } } } } }
+        },
+        "responses": { "200": { "description": "Verification result" } }
+      }
+    },
+    "/roles": {
+      "get": {
+        "operationId": "getAllRoles",
+        "summary": "Get all roles",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "includeInactive", "in": "query", "schema": { "type": "boolean", "default": false } }],
+        "responses": {
+          "200": { "description": "Roles list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/RoleResponse" } } } } }
+        }
+      },
+      "post": {
+        "operationId": "createRole",
+        "summary": "Create new role",
+        "tags": ["Roles"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/CreateRoleRequest" } } }
+        },
+        "responses": {
+          "201": { "description": "Role created", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/RoleResponse" } } } }
+        }
+      }
+    },
+    "/roles/{id}": {
+      "get": {
+        "operationId": "getRoleById",
+        "summary": "Get role by ID",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": {
+          "200": { "description": "Role details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/RoleResponse" } } } }
+        }
+      },
+      "put": {
+        "operationId": "updateRole",
+        "summary": "Update role",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/UpdateRoleRequest" } } } },
+        "responses": { "200": { "description": "Role updated", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/RoleResponse" } } } } }
+      },
+      "delete": {
+        "operationId": "deleteRole",
+        "summary": "Delete role (soft delete)",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "204": { "description": "Role deleted" } }
+      }
+    },
+    "/roles/tenant/{tenantId}": {
+      "get": {
+        "operationId": "getRolesByTenant",
+        "summary": "Get roles by tenant",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "tenantId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Tenant roles", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/RoleResponse" } } } } } }
+      }
+    },
+    "/roles/{roleId}/permissions/{permissionId}": {
+      "post": {
+        "operationId": "assignPermission",
+        "summary": "Assign permission to role",
+        "tags": ["Roles"],
+        "parameters": [
+          { "name": "roleId", "in": "path", "required": true, "schema": { "type": "string" } },
+          { "name": "permissionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": { "204": { "description": "Permission assigned" } }
+      },
+      "delete": {
+        "operationId": "revokePermission",
+        "summary": "Revoke permission from role",
+        "tags": ["Roles"],
+        "parameters": [
+          { "name": "roleId", "in": "path", "required": true, "schema": { "type": "string" } },
+          { "name": "permissionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": { "204": { "description": "Permission revoked" } }
+      }
+    },
+    "/users/{userId}/roles": {
+      "get": {
+        "operationId": "getUserRoles",
+        "summary": "Get all roles for a user",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "User roles" } }
+      }
+    },
+    "/users/{userId}/roles/{roleId}": {
+      "post": {
+        "operationId": "assignRole",
+        "summary": "Assign a role to a user",
+        "tags": ["Roles"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } },
+          { "name": "roleId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "requestBody": { "content": { "application/json": { "schema": { "type": "object", "properties": { "expiresAt": { "type": "string", "format": "date-time" } } } } } },
+        "responses": { "201": { "description": "Role assigned" } }
+      },
+      "delete": {
+        "operationId": "revokeRole",
+        "summary": "Revoke a role from a user",
+        "tags": ["Roles"],
+        "parameters": [
+          { "name": "userId", "in": "path", "required": true, "schema": { "type": "string" } },
+          { "name": "roleId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": { "204": { "description": "Role revoked" } }
+      }
+    },
+    "/permissions": {
+      "get": {
+        "operationId": "getAllPermissions",
+        "summary": "Get all permissions",
+        "tags": ["Roles"],
+        "responses": { "200": { "description": "Permissions list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/PermissionResponse" } } } } } }
+      }
+    },
+    "/permissions/{id}": {
+      "get": {
+        "operationId": "getPermissionById",
+        "summary": "Get permission by ID",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Permission details", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/PermissionResponse" } } } } }
+      }
+    },
+    "/permissions/resource/{resource}": {
+      "get": {
+        "operationId": "getPermissionsByResource",
+        "summary": "Get permissions by resource",
+        "tags": ["Roles"],
+        "parameters": [{ "name": "resource", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Resource permissions" } }
+      }
+    },
+    "/otp/email/send/{userId}": {
+      "post": {
+        "operationId": "sendEmailOtp",
+        "summary": "Send an OTP code via email to the user",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "OTP sent" } }
+      }
+    },
+    "/otp/email/verify/{userId}": {
+      "post": {
+        "operationId": "verifyEmailOtp",
+        "summary": "Verify an email OTP code",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "code": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "OTP verification result" } }
+      }
+    },
+    "/otp/sms/send/{userId}": {
+      "post": {
+        "operationId": "sendSmsOtp",
+        "summary": "Send an OTP code via SMS to the user",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "OTP sent" }, "400": { "description": "No phone number configured" } }
+      }
+    },
+    "/otp/sms/verify/{userId}": {
+      "post": {
+        "operationId": "verifySmsOtp",
+        "summary": "Verify an SMS OTP code",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "code": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "OTP verification result" } }
+      }
+    },
+    "/totp/setup/{userId}": {
+      "post": {
+        "operationId": "setupTotp",
+        "summary": "Set up TOTP for a user - generates secret and OTP auth URI",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "TOTP setup info", "content": { "application/json": { "schema": { "type": "object", "properties": { "secret": { "type": "string" }, "otpAuthUri": { "type": "string" }, "message": { "type": "string" } } } } } }
+        }
+      }
+    },
+    "/totp/verify-setup/{userId}": {
+      "post": {
+        "operationId": "verifyTotpSetup",
+        "summary": "Verify TOTP setup by providing an initial code from authenticator app",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "code": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "TOTP setup verification result" } }
+      }
+    },
+    "/totp/status/{userId}": {
+      "get": {
+        "operationId": "getTotpStatus",
+        "summary": "Check if TOTP is configured for a user",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": {
+          "200": { "description": "TOTP status", "content": { "application/json": { "schema": { "type": "object", "properties": { "userId": { "type": "string" }, "configured": { "type": "boolean" } } } } } }
+        }
+      }
+    },
+    "/totp/{userId}": {
+      "delete": {
+        "operationId": "revokeTotp",
+        "summary": "Revoke/disable TOTP for a user",
+        "tags": ["OTP"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "TOTP disabled" } }
+      }
+    },
+    "/qr/generate/{userId}": {
+      "post": {
+        "operationId": "generateQrToken",
+        "summary": "Generate a QR authentication token for the user",
+        "tags": ["QR Authentication"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "QR token generated" } }
+      }
+    },
+    "/qr/{token}": {
+      "delete": {
+        "operationId": "invalidateQrToken",
+        "summary": "Invalidate a QR authentication token",
+        "tags": ["QR Authentication"],
+        "parameters": [{ "name": "token", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "204": { "description": "Token invalidated" } }
+      }
+    },
+    "/auth/qr/session": {
+      "post": {
+        "operationId": "createQrSession",
+        "summary": "Create a new QR login session",
+        "tags": ["QR Authentication"],
+        "security": [],
+        "requestBody": { "content": { "application/json": { "schema": { "type": "object", "properties": { "platform": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "QR session created" } }
+      }
+    },
+    "/auth/qr/session/{sessionId}": {
+      "get": {
+        "operationId": "getQrSession",
+        "summary": "Get QR login session status (poll endpoint)",
+        "tags": ["QR Authentication"],
+        "security": [],
+        "parameters": [{ "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Session status" } }
+      }
+    },
+    "/auth/qr/session/{sessionId}/approve": {
+      "post": {
+        "operationId": "approveQrSession",
+        "summary": "Approve a QR login session (from authenticated mobile user)",
+        "tags": ["QR Authentication"],
+        "parameters": [{ "name": "sessionId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Session approved" } }
+      }
+    },
+    "/nfc/enroll": {
+      "post": {
+        "operationId": "enrollNfcCard",
+        "summary": "Enroll an NFC card for a user",
+        "tags": ["NFC"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object", "required": ["cardSerial"], "properties": { "userId": { "type": "string" }, "cardSerial": { "type": "string" }, "cardType": { "type": "string" }, "label": { "type": "string" } } } } }
+        },
+        "responses": {
+          "201": { "description": "Card enrolled" },
+          "409": { "description": "Card already enrolled in tenant" }
+        }
+      }
+    },
+    "/nfc/verify": {
+      "post": {
+        "operationId": "verifyNfcCard",
+        "summary": "Verify an NFC card - returns user info if enrolled",
+        "tags": ["NFC"],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "type": "object", "required": ["cardSerial"], "properties": { "cardSerial": { "type": "string" } } } } }
+        },
+        "responses": { "200": { "description": "Card verification result" } }
+      }
+    },
+    "/nfc/search/{serial}": {
+      "get": {
+        "operationId": "searchNfcCard",
+        "summary": "Look up who owns a specific NFC card serial",
+        "tags": ["NFC"],
+        "parameters": [{ "name": "serial", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "Card search result" } }
+      }
+    },
+    "/nfc/{userId}": {
+      "delete": {
+        "operationId": "removeNfcEnrollment",
+        "summary": "Remove NFC enrollment for a user",
+        "tags": ["NFC"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "NFC enrollment removed" } }
+      }
+    },
+    "/nfc/user/{userId}": {
+      "get": {
+        "operationId": "listNfcUserCards",
+        "summary": "List all NFC cards for a user",
+        "tags": ["NFC"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "User NFC cards" } }
+      }
+    },
+    "/devices": {
+      "get": {
+        "operationId": "getDevices",
+        "summary": "List devices",
+        "tags": ["Devices"],
+        "parameters": [
+          { "name": "userId", "in": "query", "required": false, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "tenantId", "in": "query", "required": false, "schema": { "type": "string", "format": "uuid" } }
+        ],
+        "responses": {
+          "200": { "description": "Devices list", "content": { "application/json": { "schema": { "type": "array", "items": { "$ref": "#/components/schemas/DeviceResponse" } } } } }
+        }
+      },
+      "post": {
+        "operationId": "registerDevice",
+        "summary": "Register a new device",
+        "tags": ["Devices"],
+        "parameters": [
+          { "name": "userId", "in": "query", "required": true, "schema": { "type": "string", "format": "uuid" } },
+          { "name": "tenantId", "in": "query", "required": true, "schema": { "type": "string", "format": "uuid" } }
+        ],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/RegisterDeviceCommand" } } } },
+        "responses": {
+          "201": { "description": "Device registered", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/DeviceResponse" } } } }
+        }
+      }
+    },
+    "/devices/{deviceId}": {
+      "delete": {
+        "operationId": "removeDevice",
+        "summary": "Remove a device",
+        "tags": ["Devices"],
+        "parameters": [{ "name": "deviceId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "204": { "description": "Device removed" } }
+      }
+    },
+    "/webauthn/register/options/{userId}": {
+      "post": {
+        "operationId": "getWebAuthnRegistrationOptions",
+        "summary": "Generate WebAuthn registration options (challenge) for credential creation",
+        "tags": ["WebAuthn"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "Registration options with challenge" } }
+      }
+    },
+    "/webauthn/register/verify": {
+      "post": {
+        "operationId": "verifyWebAuthnRegistration",
+        "summary": "Verify WebAuthn registration (attestation) and store credential",
+        "tags": ["WebAuthn"],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "userId": { "type": "string" }, "sessionId": { "type": "string" }, "credentialId": { "type": "string" }, "publicKey": { "type": "string" }, "publicKeyAlgorithm": { "type": "string" }, "attestationFormat": { "type": "string" }, "transports": { "type": "string" }, "deviceName": { "type": "string" }, "clientDataJSON": { "type": "string" } } } } } },
+        "responses": { "201": { "description": "Credential registered" }, "400": { "description": "Invalid challenge or missing data" }, "409": { "description": "Credential already registered" } }
+      }
+    },
+    "/webauthn/credentials/{userId}": {
+      "get": {
+        "operationId": "listWebAuthnCredentials",
+        "summary": "List all WebAuthn credentials for a user",
+        "tags": ["WebAuthn"],
+        "parameters": [{ "name": "userId", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "200": { "description": "Credentials list" } }
+      }
+    },
+    "/webauthn/credentials/by-id/{id}": {
+      "delete": {
+        "operationId": "deleteWebAuthnCredentialById",
+        "summary": "Delete a WebAuthn credential by database ID",
+        "tags": ["WebAuthn"],
+        "parameters": [{ "name": "id", "in": "path", "required": true, "schema": { "type": "string", "format": "uuid" } }],
+        "responses": { "204": { "description": "Credential deleted" }, "404": { "description": "Credential not found" } }
+      }
+    },
+    "/webauthn/credentials/{credentialId}": {
+      "delete": {
+        "operationId": "deleteWebAuthnCredential",
+        "summary": "Delete a WebAuthn credential by credential ID",
+        "tags": ["WebAuthn"],
+        "parameters": [{ "name": "credentialId", "in": "path", "required": true, "schema": { "type": "string" } }],
+        "responses": { "204": { "description": "Credential deleted" }, "404": { "description": "Credential not found" } }
+      }
+    },
+    "/webauthn/register-options": {
+      "post": {
+        "operationId": "webAuthnRegisterOptions",
+        "summary": "Generate WebAuthn registration options for the currently authenticated user",
+        "tags": ["WebAuthn"],
+        "requestBody": { "content": { "application/json": { "schema": { "type": "object", "properties": { "deviceName": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Registration options" } }
+      }
+    },
+    "/webauthn/register": {
+      "post": {
+        "operationId": "webAuthnRegister",
+        "summary": "Complete WebAuthn registration: validate attestation and store credential",
+        "tags": ["WebAuthn"],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "sessionId": { "type": "string" }, "credentialId": { "type": "string" }, "publicKey": { "type": "string" }, "publicKeyAlgorithm": { "type": "string" }, "attestationFormat": { "type": "string" }, "transports": { "type": "string" }, "deviceName": { "type": "string" }, "clientDataJSON": { "type": "string" } } } } } },
+        "responses": { "201": { "description": "Credential registered" } }
+      }
+    },
+    "/webauthn/authenticate-options": {
+      "post": {
+        "operationId": "webAuthnAuthenticateOptions",
+        "summary": "Generate WebAuthn authentication options (challenge) for navigator.credentials.get()",
+        "tags": ["WebAuthn"],
+        "security": [],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "required": ["email"], "properties": { "email": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Authentication options with challenge and allowed credentials" }, "400": { "description": "No credentials available" } }
+      }
+    },
+    "/webauthn/authenticate": {
+      "post": {
+        "operationId": "webAuthnAuthenticate",
+        "summary": "Verify WebAuthn authentication assertion from navigator.credentials.get()",
+        "tags": ["WebAuthn"],
+        "security": [],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "required": ["sessionId", "credentialId", "authenticatorData", "clientDataJSON", "signature"], "properties": { "sessionId": { "type": "string" }, "credentialId": { "type": "string" }, "authenticatorData": { "type": "string" }, "clientDataJSON": { "type": "string" }, "signature": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Authentication successful" }, "401": { "description": "Authentication failed" } }
+      }
+    },
+    "/step-up/register-device": {
+      "post": {
+        "operationId": "registerStepUpDevice",
+        "summary": "Register device public key for step-up auth",
+        "tags": ["Devices"],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object" } } } },
+        "responses": { "201": { "description": "Device registered", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/DeviceResponse" } } } } }
+      }
+    },
+    "/step-up/challenge": {
+      "post": {
+        "operationId": "requestStepUpChallenge",
+        "summary": "Request a challenge nonce for step-up verification",
+        "tags": ["Devices"],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "keyId": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Challenge created" } }
+      }
+    },
+    "/step-up/verify-challenge": {
+      "post": {
+        "operationId": "verifyStepUpChallenge",
+        "summary": "Verify signed challenge for step-up authentication",
+        "tags": ["Devices"],
+        "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "keyId": { "type": "string" }, "challengeId": { "type": "string" }, "signatureBase64": { "type": "string" } } } } } },
+        "responses": { "200": { "description": "Step-up verification result" } }
+      }
+    },
+    "/auth-methods": {
+      "get": {
+        "operationId": "getAllAuthMethods",
+        "summary": "List all auth methods",
+        "tags": ["Auth Methods"],
+        "security": [],
+        "responses": { "200": { "description": "Auth methods list" } }
+      }
+    },
+    "/auth-methods/{type}": {
+      "get": {
+        "operationId": "getAuthMethodByType",
+        "summary": "Get auth method by type",
+        "tags": ["Auth Methods"],
+        "security": [],
+        "parameters": [{ "name": "type", "in": "path", "required": true, "schema": { "type": "string", "enum": ["PASSWORD", "EMAIL_OTP", "SMS_OTP", "TOTP", "FACE", "VOICE", "FINGERPRINT", "HARDWARE_KEY", "QR_CODE", "NFC_DOCUMENT"] } }],
+        "responses": { "200": { "description": "Auth method details" } }
+      }
+    },
+    "/auth-flows": {
+      "get": {
+        "operationId": "getAllAuthFlowsAdmin",
+        "summary": "List all auth flows across all tenants (admin)",
+        "tags": ["Admin Overview"],
+        "parameters": [{ "name": "operationType", "in": "query", "required": false, "schema": { "type": "string" } }],
+        "responses": { "200": { "description": "All auth flows" } }
+      }
+    },
+    "/auth-sessions": {
+      "get": {
+        "operationId": "getAllAuthSessionsAdmin",
+        "summary": "List all auth sessions across all tenants (admin)",
+        "tags": ["Admin Overview"],
+        "responses": { "200": { "description": "All auth sessions" } }
+      }
+    },
+    "/.well-known/openid-configuration": {
+      "get": {
+        "operationId": "openidConfiguration",
+        "summary": "OpenID Connect discovery document",
+        "description": "Returns OIDC provider metadata (issuer, endpoints, supported scopes, claims, PKCE methods). Note: This endpoint is at the server root, not under /api/v1.",
+        "tags": ["OpenID Connect"],
+        "security": [],
+        "servers": [{ "url": "https://api.fivucsas.com" }],
+        "responses": {
+          "200": { "description": "OIDC discovery document", "content": { "application/json": { "schema": { "type": "object" } } } }
+        }
+      }
+    },
+    "/.well-known/jwks.json": {
+      "get": {
+        "operationId": "jwks",
+        "summary": "JSON Web Key Set for token verification metadata",
+        "description": "Returns JWKS metadata. Since this service uses HMAC-SHA512 (symmetric key), the actual secret is never exposed. Note: This endpoint is at the server root, not under /api/v1.",
+        "tags": ["OpenID Connect"],
+        "security": [],
+        "servers": [{ "url": "https://api.fivucsas.com" }],
+        "responses": {
+          "200": { "description": "JWKS document", "content": { "application/json": { "schema": { "type": "object", "properties": { "keys": { "type": "array", "items": { "type": "object" } } } } } } }
+        }
+      }
+    }
+  }
+}
diff --git a/docs-site/html/index.html b/docs-site/html/index.html
new file mode 100644
index 0000000..b44ebd9
--- /dev/null
+++ b/docs-site/html/index.html
@@ -0,0 +1,530 @@
+<!DOCTYPE html>
+<html lang="en" data-lang="en">
+<head>
+<style>
+html[data-lang="tr"] [data-en]{ display:none !important; }
+html[data-lang="en"] [data-tr]{ display:none !important; }
+</style>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>FIVUCSAS API Documentation</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet">
+    <style>
+        *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+
+        :root {
+            --primary: #6366f1;
+            --primary-light: #818cf8;
+            --accent: #8b5cf6;
+            --bg: #0f0f23;
+            --bg-card: #1a1a2e;
+            --bg-card-hover: #1f1f3a;
+            --text: #e2e8f0;
+            --text-muted: #94a3b8;
+            --border: #2d2d4a;
+            --success: #22c55e;
+            --warning: #f59e0b;
+        }
+
+        body {
+            font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
+            background: var(--bg);
+            color: var(--text);
+            line-height: 1.6;
+            min-height: 100vh;
+        }
+
+        /* Header */
+        .header {
+            background: linear-gradient(135deg, rgba(99, 102, 241, 0.1), rgba(139, 92, 246, 0.05));
+            border-bottom: 1px solid var(--border);
+            padding: 1rem 2rem;
+            position: sticky;
+            top: 0;
+            z-index: 100;
+            backdrop-filter: blur(12px);
+        }
+
+        .header-inner {
+            max-width: 1200px;
+            margin: 0 auto;
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+        }
+
+        .logo {
+            display: flex;
+            align-items: center;
+            gap: 0.75rem;
+            text-decoration: none;
+            color: var(--text);
+        }
+
+        .logo-icon {
+            width: 36px;
+            height: 36px;
+            background: linear-gradient(135deg, var(--primary), var(--accent));
+            border-radius: 8px;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-weight: 700;
+            font-size: 0.9rem;
+            color: white;
+        }
+
+        .logo-text {
+            font-weight: 600;
+            font-size: 1.1rem;
+            letter-spacing: -0.02em;
+        }
+
+        .header-nav { display: flex; gap: 1.5rem; align-items: center; }
+
+        .header-nav a {
+            color: var(--text-muted);
+            text-decoration: none;
+            font-size: 0.875rem;
+            font-weight: 500;
+            transition: color 0.2s;
+        }
+
+        .header-nav a:hover { color: var(--primary-light); }
+
+        .status-badge {
+            display: inline-flex;
+            align-items: center;
+            gap: 0.375rem;
+            padding: 0.25rem 0.75rem;
+            background: rgba(34, 197, 94, 0.1);
+            border: 1px solid rgba(34, 197, 94, 0.2);
+            border-radius: 9999px;
+            font-size: 0.75rem;
+            color: var(--success);
+        }
+
+        .status-dot {
+            width: 6px;
+            height: 6px;
+            background: var(--success);
+            border-radius: 50%;
+            animation: pulse 2s infinite;
+        }
+
+        @keyframes pulse {
+            0%, 100% { opacity: 1; }
+            50% { opacity: 0.5; }
+        }
+
+        /* Hero */
+        .hero {
+            text-align: center;
+            padding: 5rem 2rem 4rem;
+            background: radial-gradient(ellipse at top, rgba(99, 102, 241, 0.08) 0%, transparent 60%);
+        }
+
+        .hero-badge {
+            display: inline-flex;
+            align-items: center;
+            gap: 0.5rem;
+            padding: 0.375rem 1rem;
+            background: rgba(99, 102, 241, 0.1);
+            border: 1px solid rgba(99, 102, 241, 0.2);
+            border-radius: 9999px;
+            font-size: 0.8rem;
+            color: var(--primary-light);
+            margin-bottom: 1.5rem;
+        }
+
+        .hero h1 {
+            font-size: clamp(2rem, 5vw, 3.25rem);
+            font-weight: 700;
+            letter-spacing: -0.03em;
+            line-height: 1.15;
+            margin-bottom: 1rem;
+            background: linear-gradient(135deg, #fff 0%, var(--primary-light) 100%);
+            -webkit-background-clip: text;
+            -webkit-text-fill-color: transparent;
+            background-clip: text;
+        }
+
+        .hero p {
+            font-size: 1.125rem;
+            color: var(--text-muted);
+            max-width: 640px;
+            margin: 0 auto 2.5rem;
+            line-height: 1.7;
+        }
+
+        /* Cards */
+        .cards-section {
+            max-width: 1200px;
+            margin: 0 auto;
+            padding: 0 2rem 4rem;
+        }
+
+        .cards-section h2 {
+            font-size: 1.5rem;
+            font-weight: 600;
+            margin-bottom: 1.5rem;
+            color: var(--text);
+        }
+
+        .cards-grid {
+            display: grid;
+            grid-template-columns: repeat(auto-fit, minmax(320px, 1fr));
+            gap: 1.25rem;
+        }
+
+        .card {
+            background: var(--bg-card);
+            border: 1px solid var(--border);
+            border-radius: 12px;
+            padding: 1.75rem;
+            text-decoration: none;
+            color: var(--text);
+            transition: all 0.25s ease;
+            position: relative;
+            overflow: hidden;
+        }
+
+        .card::before {
+            content: '';
+            position: absolute;
+            top: 0;
+            left: 0;
+            right: 0;
+            height: 3px;
+            background: linear-gradient(90deg, var(--primary), var(--accent));
+            opacity: 0;
+            transition: opacity 0.25s;
+        }
+
+        .card:hover {
+            background: var(--bg-card-hover);
+            border-color: rgba(99, 102, 241, 0.3);
+            transform: translateY(-2px);
+        }
+
+        .card:hover::before { opacity: 1; }
+
+        .card-icon {
+            width: 44px;
+            height: 44px;
+            border-radius: 10px;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 1.25rem;
+            margin-bottom: 1rem;
+        }
+
+        .card-icon.identity {
+            background: rgba(99, 102, 241, 0.15);
+            color: var(--primary-light);
+        }
+
+        .card-icon.biometric {
+            background: rgba(139, 92, 246, 0.15);
+            color: var(--accent);
+        }
+
+        .card-icon.sdk {
+            background: rgba(34, 197, 94, 0.15);
+            color: var(--success);
+        }
+
+        .card h3 {
+            font-size: 1.1rem;
+            font-weight: 600;
+            margin-bottom: 0.5rem;
+        }
+
+        .card p {
+            font-size: 0.875rem;
+            color: var(--text-muted);
+            line-height: 1.6;
+            margin-bottom: 1rem;
+        }
+
+        .card-tag {
+            display: inline-block;
+            padding: 0.2rem 0.6rem;
+            border-radius: 6px;
+            font-size: 0.7rem;
+            font-weight: 500;
+            text-transform: uppercase;
+            letter-spacing: 0.05em;
+        }
+
+        .card-tag.rest { background: rgba(99, 102, 241, 0.15); color: var(--primary-light); }
+        .card-tag.internal { background: rgba(245, 158, 11, 0.15); color: var(--warning); }
+        .card-tag.js { background: rgba(34, 197, 94, 0.15); color: var(--success); }
+
+        /* Code Example */
+        .code-section {
+            max-width: 1200px;
+            margin: 0 auto;
+            padding: 0 2rem 4rem;
+        }
+
+        .code-section h2 {
+            font-size: 1.5rem;
+            font-weight: 600;
+            margin-bottom: 1.5rem;
+        }
+
+        .code-block {
+            background: #0d1117;
+            border: 1px solid var(--border);
+            border-radius: 12px;
+            overflow: hidden;
+        }
+
+        .code-header {
+            display: flex;
+            align-items: center;
+            gap: 0.5rem;
+            padding: 0.75rem 1.25rem;
+            background: rgba(255, 255, 255, 0.03);
+            border-bottom: 1px solid var(--border);
+            font-size: 0.8rem;
+            color: var(--text-muted);
+        }
+
+        .code-header .dot {
+            width: 10px; height: 10px; border-radius: 50%;
+        }
+
+        .code-header .dot.red { background: #ff5f57; }
+        .code-header .dot.yellow { background: #febc2e; }
+        .code-header .dot.green { background: #28c840; }
+
+        .code-header span { margin-left: 0.5rem; }
+
+        pre {
+            padding: 1.25rem;
+            overflow-x: auto;
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.825rem;
+            line-height: 1.7;
+            color: #c9d1d9;
+        }
+
+        .kw { color: #ff7b72; }
+        .str { color: #a5d6ff; }
+        .fn { color: #d2a8ff; }
+        .cm { color: #8b949e; }
+        .op { color: #79c0ff; }
+
+        /* Architecture */
+        .arch-section {
+            max-width: 1200px;
+            margin: 0 auto;
+            padding: 0 2rem 4rem;
+        }
+
+        .arch-section h2 {
+            font-size: 1.5rem;
+            font-weight: 600;
+            margin-bottom: 1.5rem;
+        }
+
+        .arch-diagram {
+            background: var(--bg-card);
+            border: 1px solid var(--border);
+            border-radius: 12px;
+            padding: 2rem;
+            text-align: center;
+        }
+
+        .arch-flow {
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            flex-wrap: wrap;
+            gap: 1rem;
+        }
+
+        .arch-box {
+            padding: 0.75rem 1.25rem;
+            border-radius: 8px;
+            font-size: 0.85rem;
+            font-weight: 500;
+            white-space: nowrap;
+        }
+
+        .arch-box.client { background: rgba(34, 197, 94, 0.15); border: 1px solid rgba(34, 197, 94, 0.3); color: var(--success); }
+        .arch-box.gateway { background: rgba(99, 102, 241, 0.15); border: 1px solid rgba(99, 102, 241, 0.3); color: var(--primary-light); }
+        .arch-box.identity { background: rgba(139, 92, 246, 0.15); border: 1px solid rgba(139, 92, 246, 0.3); color: var(--accent); }
+        .arch-box.biometric { background: rgba(245, 158, 11, 0.15); border: 1px solid rgba(245, 158, 11, 0.3); color: var(--warning); }
+
+        .arch-arrow {
+            color: var(--text-muted);
+            font-size: 1.25rem;
+        }
+
+        /* Footer */
+        .footer {
+            border-top: 1px solid var(--border);
+            padding: 2rem;
+            text-align: center;
+        }
+
+        .footer-inner {
+            max-width: 1200px;
+            margin: 0 auto;
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            flex-wrap: wrap;
+            gap: 1rem;
+        }
+
+        .footer-links { display: flex; gap: 1.5rem; }
+
+        .footer-links a {
+            color: var(--text-muted);
+            text-decoration: none;
+            font-size: 0.8rem;
+            transition: color 0.2s;
+        }
+
+        .footer-links a:hover { color: var(--primary-light); }
+
+        .footer-copy {
+            font-size: 0.8rem;
+            color: var(--text-muted);
+        }
+
+        @media (max-width: 768px) {
+            .header-inner { flex-direction: column; gap: 1rem; }
+            .hero { padding: 3rem 1.5rem 2.5rem; }
+            .cards-grid { grid-template-columns: 1fr; }
+            .arch-flow { flex-direction: column; }
+            .arch-arrow { transform: rotate(90deg); }
+            .footer-inner { flex-direction: column; }
+        }
+    </style>
+</head>
+<body>
+    <header class="header">
+        <div class="header-inner">
+            <a href="/" class="logo">
+                <div class="logo-icon">F</div>
+                <span class="logo-text">FIVUCSAS</span>
+            </a>
+            <nav class="header-nav">
+                <a href="/identity/">Identity API</a>
+                <a href="/biometric/">Biometric API</a>
+                <a href="/sdk/">Widget SDK</a>
+                <span class="status-badge">
+                    <span class="status-dot"></span>
+                    All Systems Operational
+                </span>
+            </nav>
+        </div>
+    </header>
+
+    <section class="hero">
+        <div class="hero-badge">
+            <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 2L2 7l10 5 10-5-10-5z"/><path d="M2 17l10 5 10-5"/><path d="M2 12l10 5 10-5"/></svg>
+            Developer Documentation
+        </div>
+        <h1><span data-en>FIVUCSAS API Documentation</span><span data-tr>FIVUCSAS API Dokümantasyonu</span></h1>
+        <p>Integrate identity verification, biometric authentication, and multi-factor security into your applications with our comprehensive API platform.</p>
+    </section>
+
+    <section class="cards-section">
+        <h2><span data-en>API Reference</span><span data-tr>API Referansı</span></h2>
+        <div class="cards-grid">
+            <a href="/identity/" class="card">
+                <div class="card-icon identity">
+                    <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 21v-2a4 4 0 0 0-4-4H8a4 4 0 0 0-4 4v2"/><circle cx="12" cy="7" r="4"/></svg>
+                </div>
+                <h3><span data-en>Identity Core API</span><span data-tr>Kimlik Çekirdek API</span></h3>
+                <p>User management, authentication flows, OAuth 2.0/OIDC, enrollment management, session handling, and role-based access control.</p>
+                <span class="card-tag rest">REST API</span>
+            </a>
+            <a href="/biometric/" class="card">
+                <div class="card-icon biometric">
+                    <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 11c0 3.517-1.009 6.799-2.753 9.571"/><path d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7"/><circle cx="12" cy="11" r="3"/></svg>
+                </div>
+                <h3><span data-en>Biometric Processor API</span><span data-tr>Biyometrik İşlemci API</span></h3>
+                <p>Face recognition, liveness detection, embedding extraction, and face search powered by AI/ML models. Internal microservice.</p>
+                <span class="card-tag internal">Internal</span>
+            </a>
+            <a href="/sdk/" class="card">
+                <div class="card-icon sdk">
+                    <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>
+                </div>
+                <h3><span data-en>Widget SDK</span><span data-tr>Widget SDK</span></h3>
+                <p>Embeddable authentication widget for third-party integration. Drop-in JavaScript component with full customization support.</p>
+                <span class="card-tag js">JavaScript</span>
+            </a>
+        </div>
+    </section>
+
+    <section class="code-section">
+        <h2><span data-en>Quick Start</span><span data-tr>Hızlı Başlangıç</span></h2>
+        <div class="code-block">
+            <div class="code-header">
+                <span class="dot red"></span>
+                <span class="dot yellow"></span>
+                <span class="dot green"></span>
+                <span>index.html</span>
+            </div>
+            <pre><span class="cm">&lt;!-- 1. Include the FIVUCSAS Auth Widget --&gt;</span>
+<span class="kw">&lt;script</span> <span class="op">src</span>=<span class="str">"https://verify.fivucsas.com/fivucsas-auth.js"</span><span class="kw">&gt;&lt;/script&gt;</span>
+
+<span class="cm">&lt;!-- 2. Add a container element --&gt;</span>
+<span class="kw">&lt;div</span> <span class="op">id</span>=<span class="str">"fivucsas-auth"</span><span class="kw">&gt;&lt;/div&gt;</span>
+
+<span class="kw">&lt;script&gt;</span>
+  <span class="cm">// 3. Initialize the widget</span>
+  <span class="kw">const</span> auth = <span class="kw">new</span> <span class="fn">FivucsasAuth</span>({
+    <span class="op">clientId</span>: <span class="str">'your-client-id'</span>,
+    <span class="op">container</span>: <span class="str">'#fivucsas-auth'</span>,
+    <span class="op">onSuccess</span>: (<span class="op">result</span>) =&gt; {
+      console.<span class="fn">log</span>(<span class="str">'Verified!'</span>, result.token);
+    }
+  });
+
+  <span class="cm">// 4. Start verification</span>
+  auth.<span class="fn">verify</span>();
+<span class="kw">&lt;/script&gt;</span></pre>
+        </div>
+    </section>
+
+    <section class="arch-section">
+        <h2><span data-en>Architecture Overview</span><span data-tr>Mimari Genel Bakış</span></h2>
+        <div class="arch-diagram">
+            <div class="arch-flow">
+                <div class="arch-box client">Your Application</div>
+                <span class="arch-arrow">&rarr;</span>
+                <div class="arch-box gateway">API Gateway</div>
+                <span class="arch-arrow">&rarr;</span>
+                <div class="arch-box identity">Identity Core API</div>
+                <span class="arch-arrow">&rarr;</span>
+                <div class="arch-box biometric">Biometric Processor</div>
+            </div>
+        </div>
+    </section>
+
+    <footer class="footer">
+        <div class="footer-inner">
+            <span class="footer-copy">FIVUCSAS Identity Verification Platform</span>
+            <div class="footer-links">
+                <a href="https://fivucsas.com">Website</a>
+                <a href="https://github.com/AhmetAbdullahGultekin" target="_blank">GitHub</a>
+                <a href="https://verify.fivucsas.com">Verify Widget</a>
+                <a href="https://status.fivucsas.com">Status</a>
+            </div>
+        </div>
+    </footer>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
+</body>
+</html>
diff --git a/docs-site/html/robots.txt b/docs-site/html/robots.txt
new file mode 100644
index 0000000..692649e
--- /dev/null
+++ b/docs-site/html/robots.txt
@@ -0,0 +1,5 @@
+User-agent: *
+Allow: /
+Disallow: /biometric/openapi.json
+
+Sitemap: https://docs.fivucsas.com/sitemap.xml
diff --git a/docs-site/html/sdk/index.html b/docs-site/html/sdk/index.html
new file mode 100644
index 0000000..72fa6d0
--- /dev/null
+++ b/docs-site/html/sdk/index.html
@@ -0,0 +1,525 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Widget SDK - FIVUCSAS Docs</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet">
+    <style>
+        *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+
+        :root {
+            --primary: #6366f1;
+            --primary-light: #818cf8;
+            --accent: #8b5cf6;
+            --bg: #0f0f23;
+            --bg-card: #1a1a2e;
+            --bg-card-hover: #1f1f3a;
+            --text: #e2e8f0;
+            --text-muted: #94a3b8;
+            --border: #2d2d4a;
+            --success: #22c55e;
+        }
+
+        body {
+            font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif;
+            background: var(--bg);
+            color: var(--text);
+            line-height: 1.6;
+            min-height: 100vh;
+        }
+
+        .header {
+            background: linear-gradient(135deg, rgba(99, 102, 241, 0.1), rgba(139, 92, 246, 0.05));
+            border-bottom: 1px solid var(--border);
+            padding: 1rem 2rem;
+            position: sticky;
+            top: 0;
+            z-index: 100;
+            backdrop-filter: blur(12px);
+        }
+
+        .header-inner {
+            max-width: 900px;
+            margin: 0 auto;
+            display: flex;
+            align-items: center;
+            gap: 1.5rem;
+        }
+
+        .back-link {
+            color: var(--text-muted);
+            text-decoration: none;
+            font-size: 0.875rem;
+            display: flex;
+            align-items: center;
+            gap: 0.375rem;
+            transition: color 0.2s;
+        }
+
+        .back-link:hover { color: var(--primary-light); }
+
+        .page-title { font-size: 1.1rem; font-weight: 600; }
+
+        .tag {
+            padding: 0.2rem 0.6rem;
+            border-radius: 6px;
+            font-size: 0.7rem;
+            font-weight: 500;
+            text-transform: uppercase;
+            letter-spacing: 0.05em;
+            background: rgba(34, 197, 94, 0.15);
+            color: var(--success);
+        }
+
+        .content {
+            max-width: 900px;
+            margin: 0 auto;
+            padding: 2rem;
+        }
+
+        h1 { font-size: 2rem; font-weight: 700; margin-bottom: 0.75rem; letter-spacing: -0.02em; }
+        h2 { font-size: 1.375rem; font-weight: 600; margin: 2.5rem 0 1rem; padding-top: 1.5rem; border-top: 1px solid var(--border); letter-spacing: -0.01em; }
+        h2:first-of-type { border-top: none; padding-top: 0; }
+        h3 { font-size: 1.05rem; font-weight: 600; margin: 1.5rem 0 0.75rem; color: var(--primary-light); }
+
+        p { color: var(--text-muted); margin-bottom: 1rem; line-height: 1.7; }
+
+        .intro { font-size: 1.05rem; margin-bottom: 2rem; }
+
+        code {
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.825em;
+            background: rgba(99, 102, 241, 0.1);
+            padding: 0.15em 0.4em;
+            border-radius: 4px;
+            color: var(--primary-light);
+        }
+
+        .code-block {
+            background: #0d1117;
+            border: 1px solid var(--border);
+            border-radius: 10px;
+            margin-bottom: 1.5rem;
+            overflow: hidden;
+        }
+
+        .code-header {
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            padding: 0.625rem 1rem;
+            background: rgba(255, 255, 255, 0.03);
+            border-bottom: 1px solid var(--border);
+            font-size: 0.775rem;
+            color: var(--text-muted);
+        }
+
+        .code-dots { display: flex; gap: 6px; }
+        .code-dots span { width: 10px; height: 10px; border-radius: 50%; }
+        .code-dots .r { background: #ff5f57; }
+        .code-dots .y { background: #febc2e; }
+        .code-dots .g { background: #28c840; }
+
+        pre {
+            padding: 1.25rem;
+            overflow-x: auto;
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.8rem;
+            line-height: 1.75;
+            color: #c9d1d9;
+        }
+
+        .kw { color: #ff7b72; }
+        .str { color: #a5d6ff; }
+        .fn { color: #d2a8ff; }
+        .cm { color: #8b949e; }
+        .op { color: #79c0ff; }
+        .typ { color: #ffa657; }
+
+        .options-table {
+            width: 100%;
+            border-collapse: collapse;
+            margin-bottom: 1.5rem;
+            font-size: 0.85rem;
+        }
+
+        .options-table th {
+            text-align: left;
+            padding: 0.75rem 1rem;
+            background: var(--bg-card);
+            border: 1px solid var(--border);
+            color: var(--text-muted);
+            font-weight: 600;
+            font-size: 0.75rem;
+            text-transform: uppercase;
+            letter-spacing: 0.05em;
+        }
+
+        .options-table td {
+            padding: 0.75rem 1rem;
+            border: 1px solid var(--border);
+            vertical-align: top;
+        }
+
+        .options-table td:first-child {
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.8rem;
+            color: var(--primary-light);
+            white-space: nowrap;
+        }
+
+        .options-table td:nth-child(2) {
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.75rem;
+            color: var(--accent);
+        }
+
+        .options-table td:last-child { color: var(--text-muted); }
+
+        .required { color: #ef4444; font-size: 0.7rem; margin-left: 0.25rem; }
+
+        .event-card {
+            background: var(--bg-card);
+            border: 1px solid var(--border);
+            border-radius: 8px;
+            padding: 1rem 1.25rem;
+            margin-bottom: 0.75rem;
+        }
+
+        .event-name {
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 0.85rem;
+            color: var(--success);
+            font-weight: 500;
+            margin-bottom: 0.375rem;
+        }
+
+        .event-desc { color: var(--text-muted); font-size: 0.85rem; margin: 0; }
+
+        @media (max-width: 768px) {
+            .content { padding: 1.5rem 1rem; }
+            .options-table { font-size: 0.8rem; }
+            .options-table td, .options-table th { padding: 0.5rem 0.75rem; }
+            h1 { font-size: 1.5rem; }
+        }
+    </style>
+</head>
+<body>
+
+    <header class="header">
+        <div class="header-inner">
+            <a href="/" class="back-link">
+                <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M19 12H5"/><polyline points="12 19 5 12 12 5"/></svg>
+                Docs
+            </a>
+            <span class="page-title">Widget SDK</span>
+            <span class="tag">JavaScript</span>
+        </div>
+    </header>
+
+    <div class="content">
+        <h1>FIVUCSAS Auth Widget SDK</h1>
+        <p class="intro">Embed identity verification and authentication into any web application with a single script tag. The widget handles the complete verification flow including face recognition, liveness detection, and multi-factor authentication.</p>
+
+        <h2>Installation</h2>
+
+        <h3>Script Tag (Recommended)</h3>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>HTML</span>
+            </div>
+            <pre><span class="kw">&lt;script</span> <span class="op">src</span>=<span class="str">"https://verify.fivucsas.com/fivucsas-auth.js"</span><span class="kw">&gt;&lt;/script&gt;</span></pre>
+        </div>
+
+        <h3>Web Component</h3>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>HTML</span>
+            </div>
+            <pre><span class="kw">&lt;fivucsas-auth</span>
+    <span class="op">client-id</span>=<span class="str">"your-client-id"</span>
+    <span class="op">theme</span>=<span class="str">"dark"</span>
+    <span class="op">lang</span>=<span class="str">"en"</span>
+<span class="kw">&gt;&lt;/fivucsas-auth&gt;</span></pre>
+        </div>
+
+        <h2>Quick Start</h2>
+
+        <h3>Basic Usage</h3>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>JavaScript</span>
+            </div>
+            <pre><span class="cm">// Initialize the auth widget</span>
+<span class="kw">const</span> auth = <span class="kw">new</span> <span class="fn">FivucsasAuth</span>({
+  <span class="op">clientId</span>: <span class="str">'your-oauth-client-id'</span>,
+  <span class="op">container</span>: <span class="str">'#auth-container'</span>,
+  <span class="op">onSuccess</span>: (<span class="op">result</span>) =&gt; {
+    console.<span class="fn">log</span>(<span class="str">'Authentication successful'</span>, result.token);
+    console.<span class="fn">log</span>(<span class="str">'User:'</span>, result.user);
+  },
+  <span class="op">onError</span>: (<span class="op">error</span>) =&gt; {
+    console.<span class="fn">error</span>(<span class="str">'Authentication failed'</span>, error.message);
+  }
+});
+
+<span class="cm">// Start the verification flow</span>
+auth.<span class="fn">verify</span>();</pre>
+        </div>
+
+        <h3>React Integration</h3>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>React (JSX)</span>
+            </div>
+            <pre><span class="kw">import</span> { useEffect, useRef } <span class="kw">from</span> <span class="str">'react'</span>;
+
+<span class="kw">function</span> <span class="fn">AuthWidget</span>() {
+  <span class="kw">const</span> containerRef = <span class="fn">useRef</span>(<span class="kw">null</span>);
+
+  <span class="fn">useEffect</span>(() =&gt; {
+    <span class="cm">// Load the SDK script</span>
+    <span class="kw">const</span> script = document.<span class="fn">createElement</span>(<span class="str">'script'</span>);
+    script.src = <span class="str">'https://verify.fivucsas.com/fivucsas-auth.js'</span>;
+    script.onload = () =&gt; {
+      <span class="kw">const</span> auth = <span class="kw">new</span> window.<span class="fn">FivucsasAuth</span>({
+        <span class="op">clientId</span>: <span class="str">'your-client-id'</span>,
+        <span class="op">container</span>: containerRef.current,
+        <span class="op">theme</span>: <span class="str">'dark'</span>,
+        <span class="op">onSuccess</span>: (<span class="op">result</span>) =&gt; {
+          <span class="cm">// Handle successful verification</span>
+          console.<span class="fn">log</span>(<span class="str">'Verified:'</span>, result);
+        }
+      });
+      auth.<span class="fn">verify</span>();
+    };
+    document.body.<span class="fn">appendChild</span>(script);
+
+    <span class="kw">return</span> () =&gt; document.body.<span class="fn">removeChild</span>(script);
+  }, []);
+
+  <span class="kw">return</span> <span class="kw">&lt;div</span> <span class="op">ref</span>={containerRef} <span class="kw">/&gt;</span>;
+}</pre>
+        </div>
+
+        <h2>Constructor Options</h2>
+        <p>Pass these options when creating a new <code>FivucsasAuth</code> instance.</p>
+
+        <table class="options-table">
+            <thead>
+                <tr>
+                    <th>Option</th>
+                    <th>Type</th>
+                    <th>Description</th>
+                </tr>
+            </thead>
+            <tbody>
+                <tr>
+                    <td>clientId<span class="required">*</span></td>
+                    <td>string</td>
+                    <td>Your OAuth 2.0 client ID, obtained from the FIVUCSAS developer portal.</td>
+                </tr>
+                <tr>
+                    <td>container<span class="required">*</span></td>
+                    <td>string | Element</td>
+                    <td>CSS selector or DOM element where the widget will be rendered.</td>
+                </tr>
+                <tr>
+                    <td>onSuccess</td>
+                    <td>function</td>
+                    <td>Callback invoked on successful authentication. Receives <code>{ token, user, expiresAt }</code>.</td>
+                </tr>
+                <tr>
+                    <td>onError</td>
+                    <td>function</td>
+                    <td>Callback invoked on authentication failure. Receives <code>{ code, message }</code>.</td>
+                </tr>
+                <tr>
+                    <td>onCancel</td>
+                    <td>function</td>
+                    <td>Callback invoked when the user cancels the verification flow.</td>
+                </tr>
+                <tr>
+                    <td>theme</td>
+                    <td>string</td>
+                    <td>Widget theme: <code>"light"</code> or <code>"dark"</code>. Defaults to <code>"light"</code>.</td>
+                </tr>
+                <tr>
+                    <td>lang</td>
+                    <td>string</td>
+                    <td>Language code: <code>"en"</code> or <code>"tr"</code>. Defaults to browser locale.</td>
+                </tr>
+                <tr>
+                    <td>redirectUri</td>
+                    <td>string</td>
+                    <td>OAuth 2.0 redirect URI. Must match a registered URI for the client.</td>
+                </tr>
+                <tr>
+                    <td>scope</td>
+                    <td>string</td>
+                    <td>OAuth 2.0 scopes, space-separated. Defaults to <code>"openid profile"</code>.</td>
+                </tr>
+                <tr>
+                    <td>methods</td>
+                    <td>string[]</td>
+                    <td>Allowed auth methods: <code>"face"</code>, <code>"voice"</code>, <code>"fingerprint"</code>, <code>"webauthn"</code>, <code>"nfc"</code>.</td>
+                </tr>
+            </tbody>
+        </table>
+
+        <h2>Methods</h2>
+
+        <h3><code>verify()</code></h3>
+        <p>Starts the verification flow. Opens the widget UI and guides the user through the configured authentication steps.</p>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>JavaScript</span>
+            </div>
+            <pre>auth.<span class="fn">verify</span>();
+<span class="cm">// Returns a Promise&lt;AuthResult&gt;</span>
+<span class="cm">// Can also be used with async/await:</span>
+<span class="kw">const</span> result = <span class="kw">await</span> auth.<span class="fn">verify</span>();</pre>
+        </div>
+
+        <h3><code>destroy()</code></h3>
+        <p>Removes the widget from the DOM and cleans up event listeners. Call this when unmounting the component.</p>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>JavaScript</span>
+            </div>
+            <pre>auth.<span class="fn">destroy</span>();</pre>
+        </div>
+
+        <h3><code>setTheme(theme)</code></h3>
+        <p>Dynamically switch the widget theme between <code>"light"</code> and <code>"dark"</code>.</p>
+
+        <h3><code>setLang(lang)</code></h3>
+        <p>Change the widget language at runtime. Supported: <code>"en"</code>, <code>"tr"</code>.</p>
+
+        <h2>Events</h2>
+        <p>The widget emits custom DOM events on the container element. You can listen for these in addition to (or instead of) the callback options.</p>
+
+        <div class="event-card">
+            <div class="event-name">fivucsas:ready</div>
+            <p class="event-desc">Fired when the widget is fully loaded and ready to start verification.</p>
+        </div>
+
+        <div class="event-card">
+            <div class="event-name">fivucsas:step</div>
+            <p class="event-desc">Fired when the user advances to a new verification step. Detail: <code>{ step, total, method }</code>.</p>
+        </div>
+
+        <div class="event-card">
+            <div class="event-name">fivucsas:success</div>
+            <p class="event-desc">Fired on successful authentication. Detail: <code>{ token, user, expiresAt }</code>.</p>
+        </div>
+
+        <div class="event-card">
+            <div class="event-name">fivucsas:error</div>
+            <p class="event-desc">Fired on authentication failure. Detail: <code>{ code, message }</code>.</p>
+        </div>
+
+        <div class="event-card">
+            <div class="event-name">fivucsas:cancel</div>
+            <p class="event-desc">Fired when the user cancels the verification flow.</p>
+        </div>
+
+        <h3>Event Listener Example</h3>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>JavaScript</span>
+            </div>
+            <pre><span class="kw">const</span> container = document.<span class="fn">getElementById</span>(<span class="str">'auth-container'</span>);
+
+container.<span class="fn">addEventListener</span>(<span class="str">'fivucsas:success'</span>, (e) =&gt; {
+  <span class="kw">const</span> { token, user } = e.detail;
+  <span class="cm">// Send token to your backend for validation</span>
+  <span class="fn">fetch</span>(<span class="str">'/api/login'</span>, {
+    <span class="op">method</span>: <span class="str">'POST'</span>,
+    <span class="op">headers</span>: { <span class="str">'Authorization'</span>: <span class="str">`Bearer ${token}`</span> }
+  });
+});
+
+container.<span class="fn">addEventListener</span>(<span class="str">'fivucsas:step'</span>, (e) =&gt; {
+  console.<span class="fn">log</span>(<span class="str">`Step ${e.detail.step}/${e.detail.total}: ${e.detail.method}`</span>);
+});</pre>
+        </div>
+
+        <h2>Error Codes</h2>
+        <table class="options-table">
+            <thead>
+                <tr>
+                    <th>Code</th>
+                    <th>Meaning</th>
+                    <th>Resolution</th>
+                </tr>
+            </thead>
+            <tbody>
+                <tr>
+                    <td>INVALID_CLIENT</td>
+                    <td>Client ID not found</td>
+                    <td>Check your clientId matches the registered OAuth app.</td>
+                </tr>
+                <tr>
+                    <td>CAMERA_DENIED</td>
+                    <td>Camera permission denied</td>
+                    <td>Prompt user to allow camera access for face verification.</td>
+                </tr>
+                <tr>
+                    <td>LIVENESS_FAILED</td>
+                    <td>Liveness check failed</td>
+                    <td>User may retry. Ensure good lighting and a clear face.</td>
+                </tr>
+                <tr>
+                    <td>SESSION_EXPIRED</td>
+                    <td>Verification session timed out</td>
+                    <td>Call <code>verify()</code> again to start a new session.</td>
+                </tr>
+                <tr>
+                    <td>NETWORK_ERROR</td>
+                    <td>Network connectivity issue</td>
+                    <td>Check internet connection and retry.</td>
+                </tr>
+                <tr>
+                    <td>SERVER_ERROR</td>
+                    <td>Server-side error</td>
+                    <td>Retry later or contact support.</td>
+                </tr>
+            </tbody>
+        </table>
+
+        <h2>Security Best Practices</h2>
+        <p>Always validate the returned token on your backend by calling the FIVUCSAS token introspection or userinfo endpoint. Never trust client-side verification alone.</p>
+        <div class="code-block">
+            <div class="code-header">
+                <div class="code-dots"><span class="r"></span><span class="y"></span><span class="g"></span></div>
+                <span>Server-side validation (Node.js)</span>
+            </div>
+            <pre><span class="cm">// Validate the token server-side</span>
+<span class="kw">const</span> response = <span class="kw">await</span> <span class="fn">fetch</span>(<span class="str">'https://api.fivucsas.com/oauth2/userinfo'</span>, {
+  <span class="op">headers</span>: { <span class="str">'Authorization'</span>: <span class="str">`Bearer ${token}`</span> }
+});
+
+<span class="kw">if</span> (!response.ok) {
+  <span class="kw">throw new</span> <span class="typ">Error</span>(<span class="str">'Invalid token'</span>);
+}
+
+<span class="kw">const</span> user = <span class="kw">await</span> response.<span class="fn">json</span>();
+<span class="cm">// user.sub = user ID</span>
+<span class="cm">// user.email = verified email</span>
+<span class="cm">// user.name = display name</span></pre>
+        </div>
+    </div>
+<!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle; drives html[data-lang]) -->
+<script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
+</body>
+</html>
diff --git a/docs-site/html/sitemap.xml b/docs-site/html/sitemap.xml
new file mode 100644
index 0000000..b641ada
--- /dev/null
+++ b/docs-site/html/sitemap.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+  <url><loc>https://docs.fivucsas.com/</loc><changefreq>weekly</changefreq><priority>1.0</priority></url>
+  <url><loc>https://docs.fivucsas.com/identity/</loc><changefreq>weekly</changefreq><priority>0.8</priority></url>
+  <url><loc>https://docs.fivucsas.com/biometric/</loc><changefreq>weekly</changefreq><priority>0.7</priority></url>
+  <url><loc>https://docs.fivucsas.com/sdk/</loc><changefreq>weekly</changefreq><priority>0.8</priority></url>
+</urlset>
diff --git a/docs-site/nginx.conf b/docs-site/nginx.conf
new file mode 100644
index 0000000..fb155c8
--- /dev/null
+++ b/docs-site/nginx.conf
@@ -0,0 +1,17 @@
+server {
+    listen 80;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location /health {
+        return 200 'OK';
+        add_header Content-Type text/plain;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    gzip on;
+    gzip_types text/css application/javascript application/json;
+}
diff --git a/landing-website/index.html b/landing-website/index.html
index daa12e4..a01b3c8 100644
--- a/landing-website/index.html
+++ b/landing-website/index.html
@@ -167,5 +167,7 @@
     <h1 style="position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0;">FIVUCSAS — Face and Identity Verification Using Cloud-based SaaS</h1>
     <div id="root"></div>
     <script type="module" src="/src/main.tsx"></script>
+    <!-- FIVUCSAS suite launcher (shared cross-site nav + global EN/TR toggle) -->
+    <script src="https://app.fivucsas.com/launcher.js?v=2026-05-28" defer></script>
   </body>
 </html>
diff --git a/landing-website/public/download.html b/landing-website/public/download.html
index 2ad3d15..b4694dc 100644
--- a/landing-website/public/download.html
+++ b/landing-website/public/download.html
@@ -226,6 +226,9 @@
       <a href="/#architecture">Architecture</a>
       <a href="/download">Download</a>
       <a href="https://demo.fivucsas.com" target="_blank" rel="noopener">Demo</a>
+      <a href="https://verify.fivucsas.com" target="_blank" rel="noopener">Widget</a>
+      <a href="https://amispoof.fivucsas.com/" target="_blank" rel="noopener">amispoof</a>
+      <a href="https://status.fivucsas.com" target="_blank" rel="noopener">Status</a>
       <a href="https://app.fivucsas.com" class="btn-primary">Admin Dashboard</a>
     </div>
   </div>
diff --git a/landing-website/public/poster/files/assets/marmara-university.png b/landing-website/public/poster/files/assets/marmara-university.png
new file mode 100644
index 0000000..cb8e967
Binary files /dev/null and b/landing-website/public/poster/files/assets/marmara-university.png differ
diff --git a/landing-website/public/poster/files/assets/muhendislik-fakultesi.jpg b/landing-website/public/poster/files/assets/muhendislik-fakultesi.jpg
new file mode 100644
index 0000000..ac51eae
Binary files /dev/null and b/landing-website/public/poster/files/assets/muhendislik-fakultesi.jpg differ
diff --git a/landing-website/public/poster/files/fivucsas-poster-brief.md b/landing-website/public/poster/files/fivucsas-poster-brief.md
new file mode 100644
index 0000000..47e82e8
--- /dev/null
+++ b/landing-website/public/poster/files/fivucsas-poster-brief.md
@@ -0,0 +1,411 @@
+# FIVUCSAS — Poster Content Brief
+
+> Evidence-based extraction from the FIVUCSAS repository + submodules, dated 2026-05-19.
+> Every concrete claim is pinned to `path/to/file:line`. Items not present in the repo are marked `[NOT FOUND IN REPO]`. The downstream poster session must NOT invent numbers — `[NOT FOUND IN REPO]` is a valid value.
+>
+> Repo root: `/opt/projects/fivucsas/` · Submodules: `biometric-processor`, `client-apps`, `docs`, `identity-core-api`, `practice-and-test`, `spoof-detector`, `web-app`.
+
+---
+
+## 1. Elevator Pitch & Problem Framing
+
+### Short
+**FIVUCSAS** — *Face & Identity Verification using Cloud-based SaaS Models* — özel sektörün e-Devlet'idir: her uygulamaya ayrı kayıt olmak yok. FIVUCSAS destekli her site/uygulamaya tek butonla, 10 farklı doğrulama yöntemiyle giriş. Uygulama sahibiysen login & register sayfaları yazmadan, OAuth2/OIDC + PKCE üzerinden tek hosted-login butonu ile kullanıcılarını doğrularsın.
+
+### Long
+**End-user pitch:** Aktif (Biometric Puzzle) + pasif (UniFace MiniFASNet, 19 analyzer) hibrit canlılık + Facenet-512 yüz eşleme + ICAO 9303 NFC kimlik okuma + 10 birleştirilebilir MFA faktörü, tek bir hosted-login akışında. KVKK/GDPR uyumlu, embedding'ler Fernet AES-128 ile şifreli (`biometric-processor/app/infrastructure/security/embedding_cipher.py:39`).
+
+**Integrator pitch:** Müşteri uygulamaları sadece OIDC discovery (`/.well-known/openid-configuration` — `identity-core-api/.../OpenIDConfigController.java:44-80`) + authorization endpoint (`/api/v1/oauth2/authorize` — `identity-core-api/.../OAuth2Controller.java:77-182`) + JWKS (`/.well-known/jwks.json` — `OpenIDConfigController.java:91-100`) konfigüre eder. PKCE S256 zorunlu (`OAuth2Controller.java:328-341`), RS256 JWT default 2026-04-20'den beri (`identity-core-api/.../security/JwtService.java:27-30, 56-68`). SDK snippet'i: `web-app/src/verify-app/sdk/FivucsasAuth.ts`.
+
+**Multi-tenant kontrat:** Tenant entity `identity-core-api/.../entity/Tenant.java:35-100` (id/slug/status/max_users/biometric_enabled). RLS (Row-Level Security) 9 tabloda V25 ile aktif (`identity-core-api/src/main/resources/db/migration/V25__add_row_level_security.sql`). Canlı tenant: **Marmara Üniversitesi** (`V15__seed_realistic_sample_data.sql`, id `11111111-1111-1111-1111-111111111111`, demo `https://demo.fivucsas.com`).
+
+---
+
+## 2. E-Devlet Comparison
+
+### Short
+e-Devlet kamu hizmetlerinin ortak giriş kapısıdır; FIVUCSAS özel sektörün karşılığıdır. Tek bir `<FIVUCSAS ile Giriş Yap>` butonu, OAuth2/OIDC + PKCE üzerinden, KVKK + GDPR + ISO/IEC 30107-3 Level 1 hazırlığı ile, biyometrik (yüz + ses + parmak izi/WebAuthn) ve dokümanlı (NFC ICAO 9303) doğrulamayı çağrı başına saniye altında getirir.
+
+### Long
+| Aspect | e-Devlet | FIVUCSAS |
+|---|---|---|
+| Kapsam | Kamu sektörü | Her web/mobil uygulama |
+| Auth modeli | Devlet SSO | OAuth2 + OIDC + PKCE (RFC 7636) Identity Provider |
+| Erişim | Devlet onayı | Açık OIDC discovery + drop-in buton |
+| Biyometrik | — (şifre + SMS) | Active Puzzle (7 yüz + 9 jest aksiyonu) + Passive PAD (19 analyzer) + Facenet-512 |
+| NFC doküman | — | T.C. kimlik + pasaport (ICAO 9303, BAC implementlü) |
+| MFA faktörleri | 2 (şifre + SMS) | 10 birleştirilebilir faktör |
+| Proctoring | — | Sürekli (WebSocket, 15.9 fps Python ref, 25-30 fps tarayıcı) |
+| Multi-tenant | — | Postgres RLS, V25, 9 tabloda |
+| Yasal | KVKK | KVKK + GDPR + ISO/IEC 30107-3 Level 1 (iBeta submission package v0.2.1) |
+| Açık kaynak | — | MIT (spoof-detector) |
+| Kaynak | gov | `identity-core-api`, `biometric-processor`, `spoof-detector` (submodule) |
+
+**e-Devlet button referansı:** `turkiye.gov.tr/edevlet-ile-giris` lockup'ı — kırmızı arka plan, beyaz "T.C." amblem + "e-Devlet ile Giriş Yap" lockup'ı. FIVUCSAS karşılığı için poster üzerinde önerilen mockup: navy arka plan (#0B2545), camgöbeği (#2BA8B3) lockup, monospace `<FIVUCSAS />` markası — örnek HTML:
+```html
+<a class="fivucsas-btn" href="https://verify.fivucsas.com/oauth2/authorize?
+   client_id=YOUR_CLIENT_ID&response_type=code&scope=openid+profile+email
+   &redirect_uri=https://yourapp.com/cb&code_challenge=...&code_challenge_method=S256">
+  <FIVUCSAS/> ile Giriş Yap
+</a>
+```
+
+**Üç use-case:**
+1. **Banka-grade KYC** (fintech mobil): yüz + NFC kimlik + canlılık → tek session
+2. **Sınav proctoring** (online üniversite): demo.fivucsas.com canlı (Marmara BYS)
+3. **KVKK onboarding** (yerel SaaS): tüm embedding'ler Türkiye'de barındırılan Hetzner CX43'te, Fernet AES-128 şifreli
+
+---
+
+## 3. Face Pipeline — Full Technical Walk
+
+### Short
+9 aşamalı pipeline: YOLO kart tespiti → DeepFace yüz detect (opencv backend, anti-spoof 0.5) → kalite (Laplacian blur ≥ 100, min yüz 80px, occlusion CIE-Lab ΔE) → MediaPipe FaceLandmarker 468 nokta (Tasks API) → DeepFace align → **Facenet-512** embedding → Fernet AES-128 + HMAC-SHA256 şifreleme → pgvector index (biometric-processor HNSW m=16/ef=64, identity-core IVFFlat lists=100) → cosine match (θ=0.45 default, 0.38 aged >2yr).
+
+### Long
+
+**01. Detection.** DeepFace 0.0.98, detector_backend konfigüre edilebilir (default `opencv`, alternatifler: ssd, mtcnn, retinaface, mediapipe, yolov8, yolov11n/s, yolov12n, centerface) — `biometric-processor/app/core/config.py:91-94`. Anti-spoofing DeepFace içi etkin, threshold 0.5 — `config.py:126-136`. Loader: `biometric-processor/app/infrastructure/ml/detectors/deepface_detector.py:1-50`. **Card detection (web tarafı, doküman çekiminde):** YOLO model, confidence floor 0.35, UI gate 0.7 — `web-app/src/lib/biometric-engine/core/constants.ts:206, 220`.
+
+**02. Quality gating.** Laplacian variance ≥ **100.0** (`config.py:292`), min yüz 80 px (`config.py:291`), quality skoru ≥ **70.0** (`config.py:158`), brightness normalize 30-90 (`analyze_quality.py:33-34`). Occlusion detektör (270 LOC, eye=0.6/mouth=0.4 ağırlık, CIE-Lab ΔE) — `biometric-processor/app/application/services/occlusion_detector.py`.
+
+**03. Landmarking.** MediaPipe **FaceLandmarker (Tasks API)** — 468-nokta canonical topology + 478 ile iris (eye/mouth/nose/eyebrow/face_oval region tanımları). `biometric-processor/app/infrastructure/ml/landmarks/mediapipe_landmarks.py:26-45`. Legacy `face_mesh` API kullanılmıyor.
+
+**04. Alignment.** DeepFace `align=True` flag'i — `deepface_detector.py:28, 43`. Çıktı kırpma DeepFace iç boyutlandırması.
+
+**05. Embedding.** **Facenet-512**, default production model (`CLAUDE.md` "Facenet512 server-authoritative"). 512-D L2-normalize embedding — `biometric-processor/app/infrastructure/ml/extractors/deepface_extractor.py:72-75, 132`. **Encryption at rest:** Fernet (AES-128-CBC + HMAC-SHA256), Alembic 20260502_0005 — `biometric-processor/app/infrastructure/security/embedding_cipher.py:39` + `alembic/versions/20260502_0005_embedding_ciphertext.py:1-15`.
+
+**06. Storage / Indexing.** **biometric-processor** (Python servis): HNSW (`m=16`, `ef_construction=64`) — `biometric-processor/scripts/add_hnsw_indexes.sql:19-22` + `alembic/versions/20251212_0001_initial_schema.py:115-120`. **identity-core-api** (Spring servis): IVFFlat (`lists=100`) — `identity-core-api/.../db/migration/V4__create_biometric_tables.sql:8` + V33. Tenant izolasyonu: `tenant_id` kolonu + unique (user_id, tenant_id, biometric_type) WHERE deleted_at IS NULL — Alembic 20251212_0001:96-100. RLS 9 tabloda V25 ile etkin.
+
+**07. Matching.** Cosine distance (1 − cosine similarity) — `biometric-processor/app/infrastructure/ml/similarity/cosine_similarity.py`. **1:1 verification threshold:** 0.45 default (`config.py:156`), aged-embedding (>2yr) için 0.38 (`config.py:171-180`). 1:N top-k pgvector ANN üzerinden.
+
+**08. Operating point.** EER / FAR / FRR — `[NOT FOUND IN REPO]`. Hiçbir test fixture veya benchmark dosyasında ölçülmemiş. **Load-test hedefleri (gerçek ölçüm değil):** Login p95 < 300ms, Verification p95 < 500ms — `load-tests/README.md:137-180`.
+
+---
+
+## 4. NFC Subsystem
+
+### Short
+TurkishEidNfcReader (Android native, IsoDep + Bouncy Castle) T.C. kimlik + pasaport için ICAO 9303 spec'te. **BAC** uygulandı (PACE/AA/CA HENÜZ DEĞİL). DG1 (MRZ) + DG2 (yüz JPEG2000) parser var, EF.COM + EF.SOD %60 doğrulanmış. MRZ OCR fallback: Google ML Kit + CameraX. DG2 fotoğrafı → Facenet-512 → cosine vs canlı selfie.
+
+### Long
+- **Chip location:** T.C. kimlik arka yüzdedir; pasaportlarda kapakta. ICAO ortak AID `A0 00 00 02 47 10 01` — `practice-and-test/PASSPORT_NFC_ROADMAP.md:147`.
+- **ICAO 9303 spec atıfları:** `PASSPORT_NFC_ROADMAP.md:8`, `biometric-processor/app/domain/services/mrz_parser.py:8`, `identity-core-api/.../controller/NfcController.java:237-238`.
+- **Protocols:** BAC implementlü (SHA-1 anahtar türetme MRZ'den, TD3 pasaport için aynı) — `PASSPORT_NFC_ROADMAP.md:670-690`. **PACE** opsiyonel, yeni pasaportlar için (`PASSPORT_NFC_ROADMAP.md:164-170`). **Active Authentication / Chip Authentication:** `[NOT FOUND IN REPO]`.
+- **Data Groups:** DG1 — `practice-and-test/TurkishEidNfcReader/app/.../util/Dg1Parser.kt:1-9`; DG2 — `Dg2Parser.kt:1-50` (JPEG2000/JP2). EF.COM, EF.SOD — `PASSPORT_NFC_ROADMAP.md:158-161, 383-395` (SOD %60 tamam, CSCA tam zincir eksik). DG3/4/11/14/15 — implement edilmedi (roadmap §5.1).
+- **Plugin:** Android native NFC (android.nfc), IsoDep — `practice-and-test/TurkishEidNfcReader/app/build.gradle:91-92`. Bouncy Castle (crypto) — `build.gradle:94-96`. **iOS CoreNFC:** `[NOT FOUND IN REPO]` (client-apps KMP'de expect/actual mümkün, kanıt yok).
+- **MRZ OCR fallback:** Google ML Kit Text Recognition 16.0.0 + CameraX 1.3.4 — `build.gradle:78, 70-75`. ICAO check digit validation: `biometric-processor/tests/unit/test_nfc_mrz_route.py:47-88`.
+- **Cross-check pipeline:** DG2 yüz JPEG2000 → Facenet-512 → cosine — `biometric-processor/app/api/routes/verification_pipeline.py`. Threshold yapılandırılabilir (`config.py:156`, default 0.45, aged 0.38).
+- **Performance:** Chip okuma süresi `[NOT FOUND IN REPO]`. Timeout 30s — `PASSPORT_NFC_ROADMAP.md:31`. Failure modes (timeout, corrupted, invalid checksum, SOD fail) test edilmiş — `test_nfc_mrz_route.py:95-100`.
+
+---
+
+## 5. Spoof Detector — Deep Dive
+
+### Short
+**spoof-detector** submodule (MIT, github.com/Rollingcat-Software/spoof-detector, v0.2.1, ~50+ commits). **19 analyzer**, **15-axis liveness prover**, **session-level peak-sensitive verdict** (α=0.5). Backbone: MiniFASNet ONNX (UniFace, 80×80, 1.7 MB, frozen weights, weight 5.0×). **Paper draft** (BIOSIG 2026 / IJCB 2026 / IEEE FG 2027 hedef): "Beyond Single Frames: Session-Based Hybrid Image-and-Video Face Anti-Spoofing with Calibrated Multi-Class Fusion". **Browser port** canlı: `https://amispoof.fivucsas.com/` (123 kB ESM + 34 kB gzip, ONNX-Web + MediaPipe Tasks Vision, WebGPU/WASM). **iBeta PAD Level 1 submission package** commit `cc73cf08`.
+
+### Long
+
+**Identity.**
+- Remote: `git@github.com:Rollingcat-Software/spoof-detector.git` — `spoof-detector/README.md:10`.
+- License: MIT — `LICENSE:1`.
+- Origin: FIVUCSAS biometric-processor R&D'den standalone extract — `README.md:10`.
+- Authors: Ahmet Abdullah Gültekin (lead, mimari, kalibrasyon, session engine), Ayşe Gülsüm Eren (gesture/liveness araştırması), Ayşenur Arıcı (anti-spoof pipeline, gates, fusion, device-spoof) — `AUTHORS.md:14-16, 21`, `README.md:44, 252`.
+- Affiliation: Marmara Üniversitesi, Bilgisayar Mühendisliği — `README.md:253`.
+- npm: `@rollingcat/spoof-detector v0.2.1` — `pyproject.toml:6`, `ROADMAP.md:12`.
+- Public demo: **https://amispoof.fivucsas.com/** — `SPOOF_DETECTOR_BROWSER_READINESS.md:3`.
+
+**Paper status.** Manuscript skeleton tamam, benchmark sonuçları doldu. 10 bölüm: abstract/intro/related-work/taxonomy/method/calibration/experimental-setup/results/ablations/discussion/conclusion — `paper/sections/*.md`, `paper/README.md:8-23, 34-57`.
+
+**Architecture.**
+- **Backbone:** MiniFASNet ONNX (UniFace v2), frozen weights, 1.7 MB, +94.7 discrimination gap, weight **5.0×** — `README.md:94`, `paper/ARCHITECTURE.md:75-76`, `config.yaml:23-24`.
+- **Input:** 80×80 padded face crop — `paper/sections/04_method.md:11`.
+- **Output:** Per-frame P(REAL) ∈ [0, 100] → 7-category fuser → session-level P(REAL) via peak-sensitive aggregator.
+- **Loss:** Yok (eğitim yok, sadece kalibrasyon). 13 lineer katsayı `MultiClassFuser`'da kalibre ediliyor — `paper/sections/05_calibration.md:66`, `config.yaml:54-76`.
+- **Analyzer stack (19 total, 12 Python + 12 TS shared):**
+
+| Layer | Analyzers | Weight |
+|---|---|---|
+| Image-level | MiniFASNet, Device Boundary, AR-Filter, Texture, Moire | 5.0 + 2.5 + 0.3 + 0.1 + 0.1 |
+| Temporal (FFT) | Blink/EAR, rPPG, Screen-Replay, Micro-Tremor, Landmark Variance, Temporal, Background Grid, Screen Flicker | 0.5 + 0.0 + 0.5 + 2.5 + 2.0 + 0.3 + 1.5 + 3.0 |
+| MediaPipe blendshapes (browser) | Eyebrow motion, Blink symmetry, Gaze, Expression dynamics, 3D Pose, Behavioural | — |
+| Optional (browser) | Hand tracking, Voice-activity, Audio-mouth sync | — |
+
+(`README.md:137-160`, `paper/ARCHITECTURE.md:85-98`, `ROADMAP.md:20-26`)
+
+- **Session engine:** "Guilty until proven innocent" LivenessProver (185-puan tavan, 15 axis) + peak-sensitive session verdict — `P_session(REAL) = α · mean(p_t) + (1−α) · mean(p_t | t ∈ worst-decile), α = 0.5` — `paper/sections/04_method.md:91`. Spoof-burst dilution'a karşı dayanıklı; formel kanıt §4'te (`paper/sections/04_method.md:62-114`).
+- **Browser deployment:** TypeScript port (`web/`), npm `@rollingcat/spoof-detector`, `onnxruntime-web` (WASM + WebGPU fallback), `@mediapipe/tasks-vision` — `SPOOF_DETECTOR_BROWSER_READINESS.md:3-17`.
+
+**Training data.**
+- **Calibration set (gerçek):** 43 KVKK onaylı Marmara 2026-04 capture (27 bona-fide / 16 attack) — `paper/sections/05_calibration.md:5-9`.
+- **Validation set:** 325 sample (25 bona-fide × 300 synthetic attack, 4 sınıf × 3 varyant) — `paper/sections/07_results.md:73-82`.
+- **Zero-shot public:** CASIA-FASD (HF akahana, 2,408 sample), CelebA-Spoof (HF nguyenghoa shard 0, 2,611 sample), in-house replay (100 sample) — `paper/sections/07_results.md:8-71`.
+- MiniFASNet pre-training: UniFace corpus, external ONNX weights (kendi eğitim verisi yok).
+- In-house labels: `spoof-detector/data/in_house/labels.csv` (43 satır).
+
+**Metrics (paperdan).**
+
+| Metric | Dataset | Pipeline | Value | 95% CI | Source |
+|---|---|---|---|---|---|
+| AUC | CASIA-FASD (N=2408) | minifasnet_only | **0.9452** | [0.9366, 0.9560] | `paper/sections/07_results.md:15` |
+| ACER | CASIA-FASD | minifasnet_only | **12.67%** | [11.07, 13.92] | `07_results.md:15` |
+| AUC | CelebA-Spoof (N=2611) | minifasnet_only | **0.7818** | [0.7663, 0.7993] | `07_results.md:36` |
+| ACER | CelebA-Spoof | minifasnet_only | **28.67%** | [27.36, 30.23] | `07_results.md:36` |
+| AUC | In-house replay (N=100) | image_only | **0.9264** | [0.8685, 0.9744] | `07_results.md:68` |
+| Per-frame latency (CPU, CX43) | hybrid | — | **63.0 ms** mean (p99 117.8 ms) | — | `07_results.md:110` |
+| Sustained FPS | hybrid | — | **15.9 fps** | — | `07_results.md:110-112` |
+| MiniFASNet discrimination gap | in-house | minifasnet | **+94.7** | — | `05_calibration.md:25` |
+| ISO 30107-3 Grade | in-house scripted | session | **Grade C** (BPCER 0%, APCER 30%, ACER 15%) | — | `README.md:74-84` |
+
+Bootstrap CI'lar 100 stratified resample üzerinden hesaplandı — `07_results.md:11, 32`.
+
+**Honest competitive positioning.**
+- Paper akademik literatür ile pozisyonlanıyor (commercial PAD competitor head-to-head **YOK**). Modern intra-dataset SOTA (CDCN, FAS-SGTD) AUC >0.99 with **retraining**; FIVUCSAS 0.9452 **zero-shot** — "competitive with mid-tier published methods" (`07_results.md:24`).
+- Strengths: **session-level verdict** (proctoring native, spoof-burst dilution'a dayanıklı), **client-side browser deployment** (KVKK/GDPR locality, frame upload yok), **anti-correlated signal discovery** (texture/moire — paper §5), **reproducible no-training calibration** (sadece 13 float), **MIT open-source + iBeta PAD-1 submission package**.
+- Cost / multi-tenant / on-prem / KVKK-locality ekseninde FaceTec ZoOm, iProov GPA, Onfido Atlas, Jumio, AWS Rekognition Liveness, MS Face API'ye karşı **plausible**. Model maturity / dataset scale ekseninde **geride** (frozen 3rd-party backbone, 43-örnek kalibrasyon seti).
+
+**Proctoring contribution.**
+- Per-frame detection fail eder: attacker 30s spoof tutar, 1 frame gerçek yüz, devam. Gap 1 paperin temel motivasyonu (`paper/sections/01_introduction.md:7`).
+- **Peak-sensitive aggregator** — formel kanıt: 60-frame session, 54 spoof @ 0.20 + 6 real @ 0.95 → verdict SPOOF; all-live + 1 dip → verdict LIVE (`04_method.md:62-114`).
+- LivenessProver 15-axis (blink, motion, rotation, expression, temporal, gaze, pose consistency, behaviour, optional hand, optional audio), 185-puan tavan, doğal decay (`README.md:159`).
+- Incident detection: P(REAL) < 0.4 for ≥3s, no blink ≥15s, face missing ≥5s, identity-change suspicion (MiniFASNet swing ≥0.35 in 1s) — `paper/ARCHITECTURE.md:134`.
+- Background-grid analyzer: 8×6 cell motion variance, proctoring-specific (`config.yaml:39`, `04_method.md:31`).
+
+**iBeta PAD Level 1.** Submission package commit `cc73cf08e0df1f811c08cc92549fae48d6c4a05a`, 2026-05-11, scope ISO/IEC 30107-3 PAD Level 1 (`iBeta_PAD_Level1_Submission_Package.md:7-11, 9`). PAI coverage: bona-fide ✓, print ✓, replay kısmi (open challenge), 3D mask routed-not-validated, morphing out-of-scope.
+
+**Browser readiness.** Live `https://amispoof.fivucsas.com/`, 19 analyzer + 3 gates (Aysenur'un — FaceUsability/Illumination/CriticalRegionVisibility), Fusion (MultiClassFuser + HybridFusionEvaluator), Session engine + LivenessProver, Web Worker offload (4 heavy analyzer), WebGPU + WASM fallback, lazy chunks (Texture 7.9 kB / Moire 10.5 kB / ScreenReplay 18.2 kB), 217 vitest yeşil. Desktop Chrome 25-30 fps (WebGPU), Pixel-class Android Brave 6.7-9.5 fps. MiniFASNet ONNX 1.7 MB + FaceLandmarker task 3.7 MB CDN-cached `Cache-Control: max-age=31536000, immutable` (`SPOOF_DETECTOR_BROWSER_READINESS.md:3-17, 214-218, 290-291`, `ROADMAP.md:134-141`).
+
+---
+
+## 6. Biometric Puzzle (Active Liveness)
+
+### Short
+Server-issued nonced challenge (puzzle UUID, 5dk TTL). **7 yüz** aksiyon (blink/smile/turn_left/turn_right/open_mouth/raise_eyebrows/light) + **9 jest** aksiyon (finger_count/wave/hand_flip/finger_tap/pinch/peek_a_boo/math/shape_trace/hold_position). Difficulty: easy (2-3, 7s/step) / standard (3-4, 5s/step) / hard (4-5, 4s/step). Per-step max 3 retry, session timeout 120s. Replay-proof.
+
+### Long
+- **Action vocabulary:**
+  - **Face (7):** blink, smile, turn_left, turn_right, open_mouth, raise_eyebrows, light — `biometric-processor/app/api/schemas/active_liveness.py:9-37`
+  - **Gesture (9, server-side landmarks-only):** finger_count (wrist-PIP/TIP ratio), wave (zero-crossing on wrist-x), hand_flip (palm-normal proxy sign change), finger_tap (index↔middle proximity), pinch (thumb↔index distance), peek_a_boo (monotonic hand-covers-face), math (random open-finger count), shape_trace (DTW vs template), hold_position (wrist std-dev) — `app/application/services/active_gesture_liveness_manager.py:16-24`
+- **Sequence:** difficulty enum `easy|standard|hard`, step count random 2-7, per-step timeout 2-30s — `app/domain/entities/puzzle.py:14-19, 24, 37-38`, `app/api/schemas/puzzle.py:11-16`.
+- **TTL:** 5 minutes total — `puzzle.py:87-89`.
+- **Per-action thresholds:**
+  - Server-side EAR baseline 0.21, REOPEN 0.23 (spoof-detector #10 recalibration) — `biometric-processor/.../puzzle.py:52-58`
+  - Client-side EAR open 0.22, closed 0.17 — `web-app/src/lib/biometric-engine/core/constants.ts:16, 19`
+  - Smile corner-raise 0.05, mouth-width 0.60 — `constants.ts:22, 25`
+  - Head yaw ±20°, pitch ±12° — `constants.ts:31, 34`
+  - Continuous hold 0.6s — `constants.ts:49`
+  - Liveness score gate 50.0 (0-100) — `constants.ts:83`
+- **Per-action retry:** Max 3 — `active_liveness.py:59`. Default per-step 5s — `puzzle.py:25, active_liveness.py:57`. Session timeout 120s — `active_liveness.py:69`.
+- **Anti-replay:** Server-issued puzzle UUID v4 (Redis), expires `created_at + 5min`, verification expired ise reject — `puzzle.py:73, 87-89, 91-97`. Client sequence değiştiremez. Optional spot-check base64 frames (`puzzle.py:100-101`) server-side re-validation için.
+- **LIVENESS_MODE flag:** `passive | active | combined`, default `combined` — `app/core/config.py:249-257, 219-224`. ChallengeType enum eşleştirmesi: `web-app/.../puzzleServerAction.ts`.
+- **Endpoints:** `/api/v1/liveness`, `/api/v1/liveness/verify-challenge` — `app/api/routes/liveness.py`, `app/api/routes/puzzle.py`. Identity-core'dan X-API-Key ile çağrılır (internal Docker network only).
+
+---
+
+## 7. Differentiators & Engineering Achievements
+
+- **Production-deployed multi-tenant SaaS** — Marmara Üniversitesi canlı tenant, `demo.fivucsas.com` (Hetzner CX43, 8 vCPU / 16 GB / 150 GB) — `CLAUDE.md:44-49`, V15 seed.
+- **Hexagonal / DDD layout** — ports/adapters: identity-core'da `application/port/input/`, `application/port/output/`, `infrastructure/adapter/` (UserRepository, AuthFlowRepository, NfcCardRepository, BiometricProcessorClient, EmailServiceAdapter, SmsOtpAuthHandler) — `identity-core-api/src/main/java/com/fivucsas/identity/`. Biometric-processor'da `api/routes/ → application/use_cases/ → infrastructure/ml/` — `biometric-processor/app/main.py:1`.
+- **OAuth2/OIDC + PKCE (RFC 7636)** — `/api/v1/oauth2/authorize`, `/.../token`, `/.../userinfo`, `/.well-known/openid-configuration`, `/.well-known/jwks.json` — `OAuth2Controller.java`, `OpenIDConfigController.java:44-100`. PKCE S256 mandatory `OAuth2Controller.java:328-341`.
+- **JWT RS256 default** (2026-04-20 flip), HS512 legacy disabled — `JwtService.java:27-30, 56-68`, `application.yml:43`.
+- **ISO/IEC 30107-3 alignment** — Level 1 submission package commit `cc73cf08`, Grade C in-house — `spoof-detector/iBeta_PAD_Level1_Submission_Package.md:7-11`.
+- **KVKK / GDPR posture** — Fernet AES-128 embedding encryption at rest (`embedding_cipher.py:39`), soft-delete `deleted_at` (`Tenant.java:41-42`, `@SQLRestriction("deleted_at IS NULL")`), tenant RLS 9 tabloda (V25), audit_logs partition by tenant_id (V40, pg_partman V57).
+- **10 Composable Auth Factors:**
+  1. PASSWORD (BCrypt-12) — `SecurityConfig.java:239-240`, `PasswordAuthHandler.java`
+  2. EMAIL_OTP (6-digit, Redis, 5min TTL) — `EmailOtpAuthHandler.java`, `OtpService.java:16`
+  3. SMS_OTP (Twilio) — `SmsOtpAuthHandler.java`, `SMS_ACTIVATION_PLAN.md`
+  4. TOTP (RFC 6238, 30s step, 32-byte secret AES-128) — `TotpAuthHandler.java`, `TotpService.java:15, 32`, V31
+  5. FACE (Facenet-512) — `FaceAuthHandler.java`
+  6. VOICE (Resemblyzer 256-D, pgvector HNSW) — `VoiceAuthHandler.java`, V33
+  7. FINGERPRINT (WebAuthn platform authenticator) — `FingerprintAuthHandler.java`
+  8. HARDWARE_KEY (FIDO2/WebAuthn) — `HardwareKeyAuthHandler.java`
+  9. QR_CODE — `QrCodeAuthHandler.java`
+  10. NFC_DOCUMENT (ICAO 9303, ISO 18013-5) — `NfcDocumentAuthHandler.java`
+- **B2B drop-in identity button** — SDK `@fivucsas/auth-js`, `web-app/src/verify-app/sdk/FivucsasAuth.ts`, hosted-first redirective + iframe step-up MFA fallback, nonce + state, redirect-URI allowlist (HTTPS + loopback RFC 8252).
+- **Real-time proctoring** — WebSocket `/api/v1/proctor/ws?session_id=...&user_id=...&tenant_id=...`, ConnectionManager singleton, frame handler, ProctorMetrics — `biometric-processor/app/api/routes/proctor_ws.py:1-47`, `app/core/metrics/proctoring.py`.
+- **Hybrid liveness** — active Puzzle + passive UniFace MiniFASNet, fusion rule `accept iff min(P_A, P_B) ≥ θ`.
+- **pgvector indexing** — biometric-processor HNSW (m=16, ef_construction=64), identity-core IVFFlat (lists=100).
+- **Self-host stack on Hetzner CX43** — 8 vCPU / 16 GB / 150 GB, ~7 production services in docker-compose.prod.yml (postgres pgvector/pg16, redis 7.4, identity-core-api 2 replicas, biometric-processor 2 replicas, api-gateway Nginx, prometheus, grafana). 60 Flyway migrations (V1-V60).
+- **Spoof-detector browser port** — 19 analyzer + 3 gates + LivenessProver + Web Worker + WebGPU + lazy chunks, 217 vitest yeşil, canlı `amispoof.fivucsas.com`.
+
+---
+
+## 8. Challenges & Effort-Intensive Work
+
+- **Cross-modal synchronization (Puzzle ↔ PAD)** — LIVENESS_MODE `combined` default, fusion rule. Yanlış kalibre edilen hybrid /verify endpoint'inde stil frame → False yerlik dönerdi; PR #83 sonrası FaceVerifyMfaStepHandler cosine fail-open kapatıldı (Session 2026-05-07).
+- **MediaPipe Tasks API porto** — legacy `face_mesh` API'den Tasks API'ye geçiş (468-nokta canonical), branch `fix/2026-05-12-mediapipe-tasks-api-port` (biometric-processor active head).
+- **pgvector index tuning** — IVFFlat vs HNSW seçimi (<1M satır ölçeğinde IVFFlat lists=100; HNSW (m=16, ef=64) biometric-processor için). Hala recall/latency calibration bekliyor.
+- **Multi-tenant Row-Level Security** — V25 9 tablo, V40 audit_logs partition, V57 pg_partman tenant_id backfill. 140 → 0 NULL backfill 2026-05-11.
+- **NFC chip-read reliability** — Android OEM/versiyon farkı. iOS CoreNFC `[NOT FOUND IN REPO]`, KMP expect/actual gerekiyor.
+- **BAC/PACE crypto correctness** — SHA-1 anahtar türetme, MRZ check-digit doğrulama. PACE/AA/CA henüz implement edilmedi (`PASSPORT_NFC_ROADMAP.md:164-170`).
+- **ICAO 9303 spec interpretation** — Türkiye TD3 pasaport eşdeğeri, EF.SOD CSCA tam zinciri eksik (%60 doğrulanmış).
+- **Flutter iOS NFC platform limits** — `[NOT FOUND IN REPO]`, Android-only canlı.
+- **KVKK irreversibility** — Fernet AES-128 (yine de Fernet anahtarına erişen plaintext'i geri alır; "irreversibility" iddiası matematiksel değil operasyonel; bu poster üzerinde dürüst ifade gerekli). Embedding plaintext column hala duruyor (ANN search için), encryption dual-column.
+- **Anti-spoof training-data scarcity (Türk demografi)** — paper 43-örnek in-house Marmara; CelebA-Spoof zero-shot AUC 0.7818, intra-dataset SOTA AUC >0.99. Bu poster üzerinde dürüst ifade gerekli.
+- **Cold-start tenant onboarding flow** — `[NOT FOUND IN REPO — refer to web-app/docs/plans/]` (CLAUDE.md 2026-05-12 carry-forward).
+- **Audit logs partitioning** — V57 silent no-op olarak teşhis edildi (Session 2026-05-12); V59/V60 ile düzeltildi.
+- **JWT RS256 default** — 2026-04-20 flip, ama "JWT aud unshipped" 3 oturum üst üste yanlış işaretlendi memory'de (lesson: grep current HEAD before trusting completion labels).
+- **FK-cascade no-hard-delete** — `users` 13 tabloya cascade siliyor (Session 2026-04-28 incident: ahabgu'nun TOTP/WebAuthn/NFC silindi). Patch: `findByEmail(... AND deletedAt IS NULL)`.
+- **anti-correlated signal discovery** (texture/moire) — paper §5 ana finding'i; 1.0'dan 0.1'e re-weighting 0.017 AUC recovers.
+- **Browser readiness 4 faz** — Phases A-D 2026-05-15/16, 5-agent paralel salvage 2026-04-25 (4 PRs from worktrees with complete drafts).
+
+---
+
+## 9. Short Q&A (Turkish, ≥ 12 pairs)
+
+1. **FIVUCSAS hangi sorunları çözüyor?**
+   Her uygulama için ayrı kayıt yok. FIVUCSAS destekli her site/uygulamaya tek butonla, 10 farklı yöntemle giriş. Uygulama sahibiysen login/register sayfaları yazmadan, OIDC + PKCE üzerinden tek hosted-login butonu ile kullanıcıları auth edersin.
+
+2. **e-Devlet'ten farkı nedir?**
+   e-Devlet kamu sektörü SSO'su; FIVUCSAS özel sektörün karşılığı. Açık OIDC discovery, drop-in `<FIVUCSAS />` butonu, NFC ICAO 9303 + Active Puzzle + Passive PAD + multi-tenant RLS, KVKK + GDPR + ISO/IEC 30107-3 Level 1 hazırlığı.
+
+3. **Neden 10 farklı auth factor?**
+   NIST 800-63B'ye uygun "Know-Have-Are-Show" eksenlerinde her tenant kendi MFA akışını kompoze eder — Java kod yazmadan, sadece JSON tenant config'i ile.
+
+4. **Liveness Puzzle spoof'u nasıl yakalar?**
+   Server her denemede rastgele 3-5 aksiyon dizisi üretir (UUID nonce, 5dk TTL). Pre-recorded video, deepfake injection, screen-replay başarısız olur — istenen aksiyon set unpredictable + timestamped + sunucu üretimli.
+
+5. **Bir geliştirici FIVUCSAS'ı kaç satır kodla entegre eder?**
+   ~15 satır: SDK init + `loginRedirect()` + token exchange. OIDC discovery + JWKS otomatik.
+
+6. **KVKK uyumu nasıl sağlanıyor?**
+   Embedding'ler Fernet AES-128 + HMAC-SHA256 şifreli at-rest, soft-delete `deleted_at` + `@SQLRestriction`, Postgres RLS 9 tabloda (V25), audit_logs tenant_id partition (V40 + pg_partman V57), Hetzner Almanya/Türkiye-erişimli barındırma.
+
+7. **Proctoring'e ne katıyor?**
+   Session-level peak-sensitive verdict (α=0.5, mean + worst-decile) — spoof-burst dilution'a dayanıklı. 15-axis LivenessProver, 63 ms / frame CPU (Python), 25-30 fps tarayıcı (WebGPU). Background-grid analyzer proctoring-specific.
+
+8. **Veri silme talebi geldiğinde ne oluyor?**
+   `deleted_at` damga, RLS tüm sorgularda soft-delete satırı filtreler. Hard-delete YASAK (FK-cascade 13 tabloya). GDPR/KVKK purge job ile periyodik fiziksel silme.
+
+9. **Neden multi-tenant mimari?**
+   Tek deploy ile N tenant. RLS Postgres-native, audit isolation pg_partman ile. Marmara Üniversitesi canlı tenant, demo.fivucsas.com aktif.
+
+10. **NFC olmasa olmaz mı?**
+    Hayır — opsiyonel faktör. Ama "banka-grade KYC" use-case'inde DG2 yüz JPEG2000 ↔ canlı selfie cosine eşleştirmesi ile fiziksel doküman doğrulaması ekler. T.C. kimlik + ICAO 9303 pasaport.
+
+11. **Pasif PAD ile aktif Puzzle'ın farkı?**
+    Pasif (UniFace MiniFASNet, 19 analyzer): kullanıcı işbirliği yok, sessiz. Aktif (Puzzle): server'ın istediği aksiyonu kullanıcı yapar — replay-proof. Hibrit: `accept iff min(P_A, P_B) ≥ θ`.
+
+12. **Küçük bir uygulama bu sistemi karşılayabilir mi (maliyet)?**
+    Evet — Hetzner CX43 (8 vCPU / 16 GB) tek sunucuda 7 servis. GPU yok. Spoof-detector tarayıcıda çalışır (123 kB ESM), frame sunucuya yüklenmez. MIT lisanslı submodule.
+
+13. **Spoof-detector araştırması nerede?**
+    `spoof-detector` submodule (MIT), `paper/sections/*.md` (10 bölüm, BIOSIG 2026 hedefi), public demo `https://amispoof.fivucsas.com/`, npm `@rollingcat/spoof-detector v0.2.1`, iBeta PAD Level 1 submission commit `cc73cf08`.
+
+14. **Hangi açılardan açık kaynak literatürün önünde?**
+    (a) Session-level peak-sensitive verdict, formel kanıtla spoof-burst dilution direnci. (b) Client-side browser deployment (WebGPU + WASM). (c) Anti-correlated signal discovery (texture/moire), per-operator recalibration recipe. (d) Reproducible no-training kalibrasyon (13 float).
+
+15. **Subdomain'ler ne için?**
+    `fivucsas.com` (landing), `verify.fivucsas.com` (hosted-login), `api.fivucsas.com` (OAuth2/OIDC), `app.fivucsas.com` (admin panel), `demo.fivucsas.com` (Marmara BYS), `docs.fivucsas.com` (entegrasyon dökümanı), `amispoof.fivucsas.com` (spoof-detector tarayıcı demosu), `status.fivucsas.com` (uptime), `links.fivucsas.com` (link hub). Grafana container internal-only — DNS yok. Posterde tek QR tüm linkleri taşır.
+
+---
+
+## 10. Numbers Inventory (Appendix)
+
+### Lines of Code (measured 2026-05-19)
+| Submodule | Lines |
+|---|---|
+| spoof-detector | 217,178 |
+| practice-and-test | 222,825 |
+| client-apps | 89,593 |
+| biometric-processor | 77,782 |
+| landing-website | 26,725 |
+| identity-core-api | 28,708 |
+| web-app | 15,141 |
+| verify-widget | 7,800 |
+| bys-demo | 2,288 |
+| docs | 1,007 |
+| docs-site | 1,646 |
+| infra | 553 |
+| **TOTAL** | **~691,446** |
+
+### Tests
+| Suite | Count |
+|---|---|
+| Spring (Java) | 944 |
+| Pytest | 265 |
+| Vitest/Jest | 1,559 |
+| **TOTAL** | **~2,768** |
+
+### Concrete Configuration Values
+| Param | Value | Source |
+|---|---|---|
+| Embedding dim (Facenet-512) | 512 | `biometric-processor/.../deepface_extractor.py:72-75` |
+| Embedding encryption | Fernet AES-128-CBC + HMAC-SHA256 | `embedding_cipher.py:39` |
+| Cosine threshold (default) | 0.45 | `biometric-processor/app/core/config.py:156` |
+| Cosine threshold (aged >2y) | 0.38 | `config.py:171-180` |
+| Cosine threshold (similarity module default) | 0.6 | `infrastructure/ml/similarity/cosine_similarity.py:17` |
+| Face detect confidence | 0.5 | `web-app/.../constants.ts:129` |
+| Card detect confidence | 0.35 (gate 0.7) | `constants.ts:206, 220` |
+| EAR open / closed (client) | 0.22 / 0.17 | `constants.ts:16, 19` |
+| EAR baseline / REOPEN (server) | 0.21 / 0.23 | `biometric-processor/.../puzzle.py:52-58` |
+| Smile corner / width | 0.05 / 0.60 | `constants.ts:22, 25` |
+| Head yaw / pitch | ±20° / ±12° | `constants.ts:31, 34` |
+| Continuous hold | 0.6s | `constants.ts:49` |
+| Liveness score gate | 50.0 | `constants.ts:83` |
+| Quality min | 65 (UI) / 70 (server) | `constants.ts:75`, `config.py:158` |
+| Blur (Laplacian variance) | ≥ 100.0 | `config.py:292` |
+| Min face size | 80 px | `config.py:291` |
+| pgvector (biometric-processor) | HNSW m=16, ef_construction=64 | `scripts/add_hnsw_indexes.sql:19-22` |
+| pgvector (identity-core) | IVFFlat lists=100 | `db/migration/V4__create_biometric_tables.sql:8` |
+| Puzzle TTL | 5 minutes | `puzzle.py:87-89` |
+| Puzzle step timeout default | 5s (range 2-30s) | `puzzle.py:24-25` |
+| Puzzle session timeout | 120s | `active_liveness.py:69` |
+| Puzzle max retry | 3 | `active_liveness.py:59` |
+| Access token TTL | 86,400,000 ms (24h) | `application.yml:88` |
+| Refresh token TTL | 604,800,000 ms (7d) | `application.yml:89` |
+| OTP TTL | 5 min | `OtpService.java:16` |
+| TOTP step | 30s | `TotpService.java:32` |
+| TOTP secret length | 32 bytes | `TotpService.java:15` |
+| JWT signing default | RS256 (2026-04-20 flip) | `JwtService.java:27-30` |
+| Max devices/user | 10 | `application.yml:51` |
+| Migrations (Flyway) | 60 (V1-V60) | `db/migration/` |
+
+### Spoof-detector measured metrics (paper)
+| Metric | Value | Source |
+|---|---|---|
+| CASIA-FASD AUC (minifasnet_only) | 0.9452 [0.9366, 0.9560] | `paper/sections/07_results.md:15` |
+| CASIA-FASD ACER | 12.67% | `07_results.md:15` |
+| CelebA-Spoof AUC | 0.7818 [0.7663, 0.7993] | `07_results.md:36` |
+| CelebA-Spoof ACER | 28.67% | `07_results.md:36` |
+| In-house replay AUC (image_only) | 0.9264 | `07_results.md:68` |
+| MiniFASNet discrimination gap | +94.7 (μ_real 99.9, μ_spoof 5.1) | `05_calibration.md:25` |
+| Per-frame latency (CX43 hybrid) | 63.0 ms mean, p99 117.8 ms | `07_results.md:110` |
+| Sustained FPS (Python ref) | 15.9 fps | `07_results.md:110-112` |
+| Desktop Chrome (WebGPU) | 25-30 fps | `SPOOF_DETECTOR_BROWSER_READINESS.md:4` |
+| Pixel-class Android Brave | 6.7-9.5 fps | `ROADMAP.md:139-141` |
+| Browser tests (vitest) | 217 green | `paper/sections/01_introduction.md:25` |
+| Browser bundle | 123 kB ESM / 34 kB gzip | `ROADMAP.md:134-137` |
+| MiniFASNet ONNX size | 1.7 MB | `paper/ARCHITECTURE.md:75-76` |
+| FaceLandmarker task | 3.7 MB | `web/amispoof/README.md:48-50` |
+
+### Infrastructure
+| Param | Value | Source |
+|---|---|---|
+| Host | Hetzner CX43, 8 vCPU / 16 GB / 150 GB | `CLAUDE.md:44-49` |
+| Production services | 7 (postgres, redis, identity-core x2, biometric x2, gateway, prometheus, grafana) | `docker-compose.prod.yml` |
+| Commits last 6 months (all repos) | ~1,847 | `git log --since='2025-12-01'` |
+| Live tenant | Marmara Üniversitesi (id `11111111-1111-1111-1111-111111111111`) | `V15__seed_realistic_sample_data.sql` |
+| Auth methods | 10/10 | `AuthMethodType.java:1-25` |
+
+### Load test targets (NOT measured, see `[NOT FOUND IN REPO]`)
+| Operation | Target p95 | Target p99 | Source |
+|---|---|---|---|
+| Login | <300ms | <500ms | `load-tests/README.md:137-139` |
+| Token Refresh | <200ms | <400ms | `load-tests/README.md:137-139` |
+| Enrollment | <2000ms | <3000ms | `load-tests/README.md:158-159` |
+| Verification | <500ms | <1000ms | `load-tests/README.md:179-180` |
+
+### Gaps (cannot be put on the poster)
+- Face pipeline EER / FAR / FRR — `[NOT FOUND IN REPO]`
+- NFC chip-read latency (real measurement) — `[NOT FOUND IN REPO]`
+- iOS CoreNFC implementation — `[NOT FOUND IN REPO]`
+- DG3 / DG4 / DG11 / DG14 / DG15 NFC parsers — not implemented
+- PACE / Active Authentication / Chip Authentication — not implemented
+- Production proctoring SLA / incident-rate telemetry — `[NOT FOUND IN REPO]`
+- Voice anti-spoof (ECAPA-TDNN with replay-detection cosine guard) — listed as Future Work in WA0006 conclusion
+- iBeta PAD Level 1 official verdict — submission package only, not awarded yet
+
+---
+
+**End of brief.** Poster design session: pull from this file; mark `[NOT FOUND IN REPO]` items as "Future Work" or omit. Never invent missing numbers.
diff --git a/landing-website/public/poster/files/fivucsas-poster-preview.png b/landing-website/public/poster/files/fivucsas-poster-preview.png
new file mode 100644
index 0000000..bdf4974
Binary files /dev/null and b/landing-website/public/poster/files/fivucsas-poster-preview.png differ
diff --git a/landing-website/public/poster/files/fivucsas-poster.html b/landing-website/public/poster/files/fivucsas-poster.html
new file mode 100644
index 0000000..a639dfd
--- /dev/null
+++ b/landing-website/public/poster/files/fivucsas-poster.html
@@ -0,0 +1,925 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<title>FIVUCSAS — Graduation Project Poster v3 (evidence-pinned)</title>
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="">
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600;700&family=IBM+Plex+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,400&family=IBM+Plex+Serif:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600&display=swap">
+<style>
+/* ---------- Design Tokens (inherited from v2 draft, kept consistent) ---------- */
+:root{
+  --bg:        #ECE3CC;
+  --paper:     #F5EFE0;
+  --paper-2:   #FAF5E6;
+  --card:      #FFFCEF;
+  --ink:       #161616;
+  --ink-2:     #2A2A2A;
+  --muted:     #5C5F66;
+  --rule:      #C9BDA0;
+  --rule-2:    #E1D7B9;
+
+  --navy:      #0B2545;
+  --navy-2:    #112F5A;
+  --cyan:      #2BA8B3;
+  --cyan-tint: #D7EFF1;
+  --gold:      #B68340;
+  --gold-tint: #FBE9A3;
+  --crimson:   #9A2D2D;
+  --green:     #2F7D43;
+
+  --t-blush:   #F4D0CC;
+  --t-peach:   #FFE2C2;
+  --t-slate:   #D6E6E8;
+  --t-sage:    #DCE8D0;
+
+  --serif: "IBM Plex Serif", "Times New Roman", Georgia, serif;
+  --sans:  "IBM Plex Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;
+  --mono:  "IBM Plex Mono", ui-monospace, "SF Mono", Menlo, monospace;
+}
+*,*::before,*::after{ box-sizing: border-box; }
+html,body{ margin:0; padding:0; background:#1d1d1d; font-family: var(--sans); color: var(--ink); }
+body{ min-height:100vh; }
+.viewport{ min-height: 100vh; padding: 16px; display: flex; justify-content: center; }
+
+/* A0 portrait — 841mm × 1189mm, enforced for print */
+@page{ size: 841mm 1189mm; margin: 0; }
+
+.poster{
+  width: 841mm;
+  background: var(--paper);
+  color: var(--ink);
+  position: relative;
+  box-shadow: 0 30px 80px rgba(0,0,0,.55), 0 6px 18px rgba(0,0,0,.35);
+}
+.poster::before{
+  content:""; position:absolute; inset:0; pointer-events:none;
+  background:
+    repeating-linear-gradient(0deg, rgba(11,37,69,.018) 0 1px, transparent 1px 4px),
+    radial-gradient(1200px 800px at 12% -10%, rgba(11,37,69,.05), transparent 60%),
+    radial-gradient(1000px 700px at 100% 110%, rgba(182,131,64,.06), transparent 60%);
+}
+
+h1,h2,h3,h4,h5{ font-family: var(--serif); margin:0; color: var(--navy); font-weight: 600; }
+h3{ font-size: 7mm; line-height: 1.15; display:flex; align-items:center; gap: 3mm; }
+h3 .num{ font-family: var(--mono); color: var(--cyan); font-weight: 700; }
+h4{ font-size: 5.4mm; color: var(--navy); margin-bottom: 2.5mm; }
+p{ margin:0; }
+.mono{ font-family: var(--mono); }
+b, strong{ color: var(--navy); }
+ul, ol{ margin:0; padding-left: 6mm; }
+li{ margin-bottom: 1.6mm; line-height: 1.4; }
+.hi{ background: var(--gold-tint); padding: 0 1.2mm; border-radius: .5mm; }
+
+/* ---------- HEADER ---------- */
+.header{
+  position: relative;
+  padding: 12mm 22mm 9mm 22mm;
+  background: linear-gradient(180deg, #0B2545 0%, #112F5A 100%);
+  color: #F6F1E4;
+}
+.header::after{
+  content:""; position:absolute; left:0; right:0; bottom:0; height:6mm;
+  background: repeating-linear-gradient(90deg,
+    var(--t-blush) 0 30mm, var(--t-peach) 30mm 60mm,
+    var(--t-slate) 60mm 90mm, var(--t-sage) 90mm 120mm);
+}
+.uni-bar{
+  display:flex; align-items:center; justify-content:space-between;
+  font-family: var(--sans); font-weight:500; letter-spacing:.18em;
+  font-size: 5.2mm; text-transform: uppercase; color: #DDE6F2;
+}
+.crest{ display:flex; align-items:center; gap: 6mm; }
+.logo-slot{
+  width: 28mm; height: 28mm; border-radius: 50%;
+  background: #FBF7EC; display: grid; place-items: center; overflow: hidden;
+  flex-shrink: 0; padding: 2mm; box-shadow: 0 0 0 .8mm rgba(43,168,179,.55);
+}
+.logo-slot img{ max-width: 100%; max-height: 100%; object-fit: contain; }
+
+.title-row{
+  margin-top: 12mm;
+  display:flex; flex-direction: column; align-items: center; gap: 4mm;
+  text-align: center;
+}
+.eyebrow{
+  font-family: var(--mono); font-size: 5.4mm; color: var(--cyan); letter-spacing:.22em;
+  text-transform: uppercase;
+}
+.acronym{
+  font-family: var(--mono); font-weight: 700; font-size: 36mm; line-height: 1;
+  letter-spacing:-.02em; text-align: center; color: var(--cyan); margin: 0;
+  display: flex; align-items: baseline; justify-content: center; gap: 2mm;
+}
+.acronym .angle{ color: var(--gold-tint); font-weight: 500; font-size: 28mm; }
+.title{
+  font-family: var(--serif); font-weight: 500;
+  font-size: 13mm; line-height: 1.05; color:#FBF7EC;
+  margin: 0; max-width: 720mm;
+}
+.title-row{ margin-top: 8mm; gap: 4mm; }
+.title em{ font-style: italic; color: var(--cyan); font-weight: 600; }
+
+.meta-row{
+  margin-top: 9mm;
+  display: grid; grid-template-columns: 1fr auto; gap: 14mm;
+  color:#DDE6F2; font-size: 6mm;
+  border-top: .5mm solid rgba(255,255,255,.18);
+  padding-top: 6mm; align-items: start; line-height: 1.4;
+}
+.label{
+  font-family: var(--mono); font-size: 4.6mm; letter-spacing:.22em;
+  text-transform: uppercase; color: var(--cyan); margin-bottom: 4mm;
+}
+.author-row{
+  display: flex; align-items: baseline; flex-wrap: wrap; gap: 3mm 9mm;
+  padding: 3mm 0; border-bottom: .25mm solid rgba(221,230,242,.12);
+}
+.author-row:last-of-type{ border-bottom: none; }
+.author-row b{ color:#FBF7EC; font-weight:600; font-size: 7.4mm; min-width: 100mm; }
+.author-row .contact{ font-family: var(--mono); color:#9CB2D1; font-size: 4.6mm; }
+.supervisor-row{ margin-top: 4mm; padding-top: 5mm; border-top: .35mm solid rgba(43,168,179,.4); }
+.supervisor-row .sup-label{
+  font-family: var(--mono); font-size: 4.6mm; color: var(--cyan); letter-spacing: .22em;
+  text-transform: uppercase; min-width: 44mm;
+}
+.supervisor-row b{ color:#DDE6F2; font-weight: 600; font-size: 6.2mm; }
+.course-stamp{
+  border: .6mm solid var(--cyan); border-radius: 2.4mm;
+  padding: 7mm 11mm; text-align: center; color:#FBF7EC;
+  background: rgba(43,168,179,.07); min-width: 100mm;
+}
+.course-no{ font-family: var(--serif); font-weight: 700; font-size: 22mm; line-height: 1; color: var(--cyan); }
+.course-name{ font-family: var(--mono); font-size: 4.6mm; letter-spacing: .18em; text-transform: uppercase; margin-top: 3mm; color:#DDE6F2; }
+.course-year{ font-family: var(--sans); font-size: 4.6mm; margin-top: 3mm; color:#9CB2D1; }
+
+/* ---------- BODY ---------- */
+.body{ padding: 6mm 14mm 0 14mm; }
+.body-cols{ column-count: 2; column-gap: 10mm; }
+.body-cols > section{ margin-bottom: 5mm; }
+
+.sec{ margin-bottom: 7mm; break-inside: auto; page-break-inside: auto; }
+.sec.alt{ background: var(--paper-2); padding: 5mm 7mm; border-radius: 2.4mm; border: .25mm solid var(--rule-2); }
+.sec-hd{
+  display:flex; align-items: baseline; gap: 4mm; margin-bottom: 4mm;
+  padding-bottom: 3mm; border-bottom: .5mm solid var(--rule);
+}
+.sec-hd .n{ font-family: var(--mono); font-weight: 700; font-size: 8mm; color: var(--cyan); letter-spacing: -.02em; }
+.sec-hd h2{ font-family: var(--serif); font-size: 10mm; line-height: 1; color: var(--navy); font-weight: 600; flex: 1; }
+.sec-hd .tag{ font-family: var(--mono); font-size: 4mm; color: var(--muted); letter-spacing: .14em; text-transform: uppercase; }
+
+.lede{ font-size: 4.6mm; line-height: 1.45; margin-bottom: 4mm; color: var(--ink-2); }
+.body-text{ font-size: 4mm; line-height: 1.45; color: var(--ink-2); }
+ul, ol{ padding-left: 5mm; }
+li{ margin-bottom: 2mm; line-height: 1.45; font-size: 4mm; }
+.acad ul, ul.acad{ margin-top: 3mm; font-size: 4mm; }
+.body-text + .body-text{ margin-top: 3mm; }
+small{ font-size: 70%; }
+
+/* ---------- Cards / blocks ---------- */
+.acad-block{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  padding: 7mm 8mm; border-radius: 2mm;
+}
+.acad-block + .acad-block{ margin-top: 6mm; }
+.acad-block h3 .num{ background: var(--navy); color: #FBF7EC; padding: 1mm 2.5mm; border-radius: 1mm; font-size: 4.6mm; }
+.acad ul, ul.acad{ margin-top: 3mm; font-size: 4.4mm; }
+
+.cols-2{ display: grid; grid-template-columns: 1fr 1fr; gap: 6mm; }
+.cols-3{ display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 6mm; }
+.cols-4{ display: grid; grid-template-columns: 1fr 1fr 1fr 1fr; gap: 5mm; }
+
+/* ---------- Industry tiles (objectives) ---------- */
+.industry-row{ display: grid; grid-template-columns: 1fr 1fr 1fr 1fr; gap: 5mm; margin-top: 5mm; }
+.indu{
+  padding: 5mm; border-radius: 2mm; border: .35mm solid var(--rule-2);
+  background: var(--card);
+}
+.indu.t1{ background: var(--t-blush); }
+.indu.t2{ background: var(--t-peach); }
+.indu.t3{ background: var(--t-slate); }
+.indu.t4{ background: var(--t-sage); }
+.indu .k{ font-family: var(--mono); font-size: 3.6mm; letter-spacing: .18em; text-transform: uppercase; color: var(--navy); opacity:.7; }
+.indu .t{ font-family: var(--serif); font-size: 6mm; color: var(--navy); margin-top: 2mm; font-weight: 600; }
+.indu .d{ font-size: 4mm; line-height: 1.35; margin-top: 2mm; color: var(--ink-2); }
+.indu hr{ border: none; border-top: .25mm solid rgba(11,37,69,.2); margin: 3mm 0 2mm 0; }
+.indu .stack{ font-family: var(--mono); font-size: 3.4mm; letter-spacing: .04em; color: var(--navy); }
+
+/* ---------- Main goal block ---------- */
+.main-goal{
+  margin-top: 6mm; padding: 6mm 8mm; border-left: 2mm solid var(--cyan);
+  background: rgba(43,168,179,.06); border-radius: 0 2mm 2mm 0;
+}
+.main-goal-tag{ font-family: var(--mono); font-size: 4.4mm; color: var(--cyan); letter-spacing: .2em; text-transform: uppercase; }
+.main-goal-text{ font-family: var(--serif); font-size: 6.4mm; line-height: 1.35; color: var(--navy); margin-top: 2mm; }
+
+/* ---------- E-DEVLET section ---------- */
+.edevlet-row{ display: grid; grid-template-columns: 0.9fr 1.1fr; gap: 7mm; align-items: stretch; }
+.edevlet-card{ background: var(--card); border: .35mm solid var(--rule-2); padding: 6mm; border-radius: 2mm; }
+.edevlet-card h4{ font-family: var(--serif); font-size: 6.4mm; color: var(--navy); margin-bottom: 3mm; }
+.edevlet-btn-stack{ display: flex; flex-direction: column; gap: 4mm; margin: 4mm 0 5mm 0; }
+.edevlet-btn{
+  display: flex; align-items: center; gap: 4mm; padding: 5mm 7mm;
+  background: #9A2D2D; color: #FBF7EC; border-radius: 1.6mm;
+  font-family: var(--sans); font-weight: 600; font-size: 6mm; letter-spacing: .02em;
+  box-shadow: 0 2mm 6mm rgba(0,0,0,.18);
+}
+.edevlet-btn .ic{ width: 12mm; height: 12mm; background: #FBF7EC; color: #9A2D2D; border-radius: 50%;
+  display: grid; place-items: center; font-family: var(--serif); font-weight: 700; font-size: 6mm; }
+.edevlet-btn .lbl{ display: flex; flex-direction: column; line-height: 1.05; }
+.edevlet-btn .lbl small{ font-family: var(--mono); font-size: 3.4mm; opacity: .75; font-weight: 400; letter-spacing: .14em; text-transform: uppercase; margin-top: 1mm; }
+.fivucsas-btn{
+  display: flex; align-items: center; gap: 4mm; padding: 5mm 7mm;
+  background: var(--navy); color: #FBF7EC; border-radius: 1.6mm;
+  font-family: var(--mono); font-weight: 600; font-size: 6mm;
+  box-shadow: 0 2mm 6mm rgba(11,37,69,.35);
+}
+.fivucsas-btn .mark{ color: var(--cyan); font-weight: 700; }
+.fivucsas-btn .lbl{ display: flex; flex-direction: column; line-height: 1.05; }
+.fivucsas-btn .lbl small{ font-family: var(--mono); font-size: 3.4mm; opacity: .65; font-weight: 400; letter-spacing: .14em; text-transform: uppercase; margin-top: 1mm; }
+.recaptcha-btn{
+  display: flex; align-items: center; gap: 4mm; padding: 5mm 7mm;
+  background: #F8F9FA; color: #202124; border: .35mm solid #DADCE0;
+  border-radius: 1.6mm; font-family: "Roboto", var(--sans); font-weight: 500; font-size: 5.6mm;
+  box-shadow: 0 2mm 6mm rgba(0,0,0,.12);
+}
+.recaptcha-btn .rc-ic{ width: 12mm; height: 12mm; background: #1A73E8; border-radius: 1mm; display: grid; place-items: center; }
+.recaptcha-btn .rc-ic svg{ width: 8mm; height: 8mm; }
+.recaptcha-btn .lbl{ display: flex; flex-direction: column; line-height: 1.05; }
+.recaptcha-btn .lbl small{ font-family: var(--mono); font-size: 3.4mm; opacity: .65; font-weight: 400; letter-spacing: .14em; text-transform: uppercase; margin-top: 1mm; color: #5F6368; }
+.edevlet-table{ width: 100%; border-collapse: collapse; font-size: 4mm; }
+.edevlet-table th, .edevlet-table td{
+  text-align: left; padding: 2.4mm 3mm;
+  border-bottom: .25mm solid var(--rule-2); line-height: 1.3; vertical-align: top;
+}
+.edevlet-table th{
+  font-family: var(--mono); font-size: 3.6mm; letter-spacing: .12em;
+  text-transform: uppercase; color: var(--navy); background: var(--paper-2);
+}
+.edevlet-table td:first-child{ font-weight: 600; color: var(--navy); width: 28%; }
+.edevlet-table td .yes{ color: var(--green); font-weight: 600; }
+.edevlet-table td .no{ color: var(--crimson); }
+.edevlet-table td .partial{ color: var(--gold); }
+
+.usecase-row{ display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 4mm; margin-top: 5mm; }
+.usecase{ padding: 4mm; border-radius: 1.6mm; background: var(--paper-2); border-left: 1.5mm solid var(--cyan); }
+.usecase .h{ font-family: var(--serif); font-size: 4.8mm; color: var(--navy); font-weight: 600; }
+.usecase .d{ font-size: 3.6mm; color: var(--ink-2); margin-top: 1.6mm; line-height: 1.35; }
+
+/* ---------- Architecture grid (navy block) ---------- */
+.arch-card{
+  background: var(--navy); color: #DDE6F2; border-radius: 3mm;
+  padding: 8mm 10mm; margin-top: 4mm;
+}
+.arch-hd{ display:flex; align-items:baseline; gap: 4mm; margin-bottom: 6mm; }
+.arch-hd .num{ font-family: var(--mono); font-weight: 700; color: var(--cyan); font-size: 8mm; }
+.arch-hd h3{ font-family: var(--serif); font-size: 8mm; color: #FBF7EC; }
+.arch-grid{ display: flex; flex-direction: column; gap: 0; }
+.arch-row{ display: grid; grid-template-columns: 30mm 1fr; gap: 4mm; align-items: center; }
+.arch-row .lane{
+  font-family: var(--mono); font-size: 4mm; letter-spacing: .18em;
+  text-transform: uppercase; color: var(--cyan);
+}
+.arch-row .nodes{ display: grid; gap: 3mm; }
+.arch-row .nodes.c1{ grid-template-columns: 1fr; }
+.arch-row .nodes.c2{ grid-template-columns: 1fr 1fr; }
+.arch-row .nodes.c3{ grid-template-columns: 1fr 1fr 1fr; }
+.arch-node{
+  background: rgba(255,255,255,.06); border: .35mm solid rgba(43,168,179,.3);
+  border-radius: 1.6mm; padding: 4mm 5mm;
+}
+.arch-node .nm{ font-family: var(--serif); font-size: 5mm; color: #FBF7EC; font-weight: 600; }
+.arch-node .sub{ font-family: var(--mono); font-size: 3.4mm; color: #9CB2D1; margin-top: 1mm; line-height: 1.3; }
+.arch-arrow{ text-align: center; color: var(--cyan); font-size: 5mm; margin: 1.6mm 0; }
+
+/* ---------- Pipeline strip ---------- */
+.pipe{ display: grid; grid-template-columns: repeat(9, 1fr); gap: 2mm; }
+.stage{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  border-radius: 1.6mm; padding: 3mm 3mm; text-align: center;
+}
+.stage .k{ font-family: var(--mono); font-size: 3.4mm; color: var(--cyan); letter-spacing: .12em; }
+.stage .n{ font-family: var(--serif); font-size: 4.6mm; color: var(--navy); font-weight: 600; margin-top: 1mm; }
+.stage .l{ font-family: var(--mono); font-size: 3mm; color: var(--muted); margin-top: 1.2mm; line-height: 1.25; }
+
+.face-pipe{ display: grid; grid-template-columns: repeat(4, 1fr); gap: 4mm; margin-top: 4mm; }
+.fp-card{
+  padding: 2.5mm 3mm; background: var(--card); border-radius: 1.6mm;
+  border-left: 1.5mm solid var(--cyan); border-top: .25mm solid var(--rule-2);
+  border-right: .25mm solid var(--rule-2); border-bottom: .25mm solid var(--rule-2);
+}
+.fp-card .stp{ font-family: var(--mono); font-size: 2.8mm; color: var(--cyan); letter-spacing: .14em; text-transform: uppercase; }
+.fp-card .nm{ font-family: var(--serif); font-size: 4mm; color: var(--navy); font-weight: 600; margin-top: 1mm; }
+.fp-card .sub{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); margin-top: 1.4mm; line-height: 1.35; }
+.fp-card .val{ font-family: var(--mono); font-size: 2.8mm; color: var(--navy); margin-top: 2mm; font-weight: 600; }
+.fp-card .ref{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); margin-top: 2mm; word-break: break-all; }
+
+/* ---------- NFC card layout ---------- */
+.nfc-grid{ display: grid; grid-template-columns: 1fr 1fr; gap: 6mm; margin-top: 4mm; }
+.nfc-stage{ background: var(--card); padding: 3mm 4mm; border-radius: 1.6mm; border: .35mm solid var(--rule-2); }
+.nfc-stage h4{ display: flex; align-items: baseline; gap: 2.4mm; }
+.nfc-stage h4 .num{ font-family: var(--mono); color: var(--cyan); font-weight: 700; }
+.nfc-stage ul{ margin-top: 2mm; font-size: 4mm; }
+.nfc-stage code, .mono.small{ font-family: var(--mono); font-size: 3.4mm; background: var(--paper-2); padding: .4mm 1.4mm; border-radius: .8mm; }
+
+.tc-card{ position: relative; padding: 3mm 4mm; background: linear-gradient(135deg, var(--cyan-tint), var(--paper-2)); border-radius: 2mm; border: .35mm solid var(--rule-2); }
+.tc-card .h{ font-family: var(--serif); font-size: 5mm; color: var(--navy); font-weight: 600; }
+.tc-card .d{ font-size: 3.8mm; color: var(--ink-2); margin-top: 2mm; line-height: 1.35; }
+.tc-card .chip-mark{
+  position: absolute; top: 7mm; right: 10mm; width: 11mm; height: 9mm;
+  background: linear-gradient(135deg, #B68340, #FBE9A3);
+  border-radius: 1.2mm; box-shadow: 0 .8mm 2mm rgba(0,0,0,.25);
+}
+.tc-card .chip-mark::before{ content: ""; position: absolute; inset: 1.4mm; border: .35mm solid rgba(0,0,0,.45); border-radius: .8mm; }
+.tc-card .chip-mark::after{
+  content: ""; position: absolute; inset: 2.4mm 1.4mm;
+  background:
+    linear-gradient(0deg, transparent 0, transparent calc(50% - .2mm), rgba(0,0,0,.4) calc(50% - .2mm), rgba(0,0,0,.4) calc(50% + .2mm), transparent calc(50% + .2mm)),
+    linear-gradient(90deg, transparent 0, transparent calc(50% - .2mm), rgba(0,0,0,.4) calc(50% - .2mm), rgba(0,0,0,.4) calc(50% + .2mm), transparent calc(50% + .2mm));
+}
+
+/* ---------- Spoof-detector section ---------- */
+.spoof-stack{ display: grid; grid-template-columns: 1fr 1fr; gap: 6mm; margin-top: 4mm; }
+.metric-table{ width: 100%; border-collapse: collapse; font-size: 4mm; margin-top: 3mm; }
+.metric-table th, .metric-table td{
+  text-align: left; padding: 2mm 3mm;
+  border-bottom: .25mm solid var(--rule-2); vertical-align: top;
+}
+.metric-table th{
+  font-family: var(--mono); font-size: 3.6mm; letter-spacing: .12em;
+  text-transform: uppercase; color: var(--navy); background: var(--paper-2);
+}
+.metric-table td.v{ font-family: var(--mono); color: var(--navy); font-weight: 600; }
+.analyzer-row{ display: grid; grid-template-columns: repeat(2, 1fr); gap: 3mm; margin-top: 3mm; font-size: 3.8mm; line-height: 1.4; }
+.analyzer-row .item{ background: var(--paper-2); padding: 2mm 3mm; border-radius: 1mm; border-left: .8mm solid var(--cyan); }
+.analyzer-row .item .nm{ font-family: var(--mono); font-weight: 600; color: var(--navy); font-size: 3.8mm; }
+.analyzer-row .item .sub{ font-size: 3.4mm; color: var(--muted); }
+
+.spoof-link-box{
+  background: var(--navy); color: #FBF7EC; padding: 5mm 7mm; border-radius: 2mm;
+  margin-top: 4mm; display: flex; align-items: center; justify-content: space-between; gap: 6mm;
+}
+.spoof-link-box .l{ font-family: var(--serif); font-size: 5.2mm; font-weight: 600; }
+.spoof-link-box .l small{ display: block; font-family: var(--mono); font-size: 3.4mm; color: #9CB2D1; margin-top: 1mm; letter-spacing: .12em; text-transform: uppercase; }
+.spoof-link-box .url{ font-family: var(--mono); font-size: 4.8mm; color: var(--cyan); }
+
+/* ---------- Puzzle / actions ---------- */
+.puzzle-row{ display: grid; grid-template-columns: repeat(7, 1fr); gap: 2mm; margin-top: 3mm; }
+.act-pill{
+  background: var(--card); border-radius: 1.2mm; padding: 2.4mm 1.5mm;
+  border: .25mm solid var(--rule-2); text-align: center;
+}
+.act-pill .nm{ font-family: var(--serif); font-size: 3.6mm; color: var(--navy); font-weight: 600; }
+.act-pill .th{ font-family: var(--mono); font-size: 2.8mm; color: var(--muted); margin-top: 1mm; }
+
+.gesture-row{ display: grid; grid-template-columns: repeat(9, 1fr); gap: 1.6mm; margin-top: 3mm; }
+.act-pill.alt{ background: rgba(43,168,179,.06); border-color: rgba(43,168,179,.3); }
+
+/* ---------- 10 Auth factors ---------- */
+.factors-shell{ background: var(--card); border-radius: 2.4mm; border: .35mm solid var(--rule-2); overflow: hidden; margin-top: 2mm; break-inside: auto; page-break-inside: auto; }
+.factors-bar{ background: var(--navy); color: #FBF7EC; padding: 2mm 4mm; display: flex; align-items: baseline; gap: 5mm; }
+.factors-bar .n{ font-family: var(--mono); color: var(--cyan); font-weight: 700; font-size: 4.4mm; }
+.factors-bar .t{ font-family: var(--serif); font-size: 4.8mm; }
+.factors-grid{ display: grid; grid-template-columns: repeat(10, 1fr); gap: 0; }
+.factor{ padding: 2.5mm 1.5mm; border-right: .25mm solid var(--rule-2); position: relative; }
+.factor:nth-child(10n){ border-right: none; }
+
+.factor .cat{
+  position: absolute; top: 2mm; right: 3mm;
+  font-family: var(--mono); font-size: 2.6mm; color: var(--cyan);
+  letter-spacing: .14em; text-transform: uppercase;
+}
+.factor .ico{ width: 9mm; height: 9mm; }
+.factor .ico svg{ width: 100%; height: 100%; fill: none; stroke: var(--navy); stroke-width: 1.6; stroke-linecap: round; stroke-linejoin: round; }
+.factor .nm{ font-family: var(--serif); font-size: 3.8mm; color: var(--navy); font-weight: 600; margin-top: 2mm; }
+.factor .sub{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); margin-top: .8mm; }
+.factor .src{ font-family: var(--mono); font-size: 2mm; color: var(--muted); margin-top: 1.4mm; line-height: 1.25; word-break: break-all; }
+
+/* ---------- Q&A panel ---------- */
+.qa-grid{ display: grid; grid-template-columns: 1fr 1fr; gap: 5mm; margin-top: 3mm; }
+.qa{ background: var(--card); border-left: 1.5mm solid var(--gold); padding: 4mm 5mm; border-radius: 0 1.6mm 1.6mm 0; }
+.qa .q{ font-family: var(--serif); font-size: 4.8mm; color: var(--navy); font-weight: 600; }
+.qa .a{ font-size: 4mm; line-height: 1.4; margin-top: 2mm; color: var(--ink-2); }
+
+/* ---------- Subdomain table ---------- */
+.subdomain-grid{ display: grid; grid-template-columns: 1fr 1fr; gap: 4mm; margin-top: 4mm; }
+.sd-card{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  border-radius: 1.6mm; padding: 4mm 5mm; display: flex; flex-direction: column; gap: 1.5mm;
+}
+.sd-card .host{ font-family: var(--mono); font-size: 4.4mm; color: var(--cyan); font-weight: 600; }
+.sd-card .role{ font-family: var(--serif); font-size: 4.4mm; color: var(--navy); font-weight: 600; }
+.sd-card .desc{ font-size: 3.8mm; color: var(--ink-2); line-height: 1.35; }
+.sd-card .src{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); }
+
+.qr-block{
+  display: grid; grid-template-columns: 50mm 1fr; gap: 4mm;
+  background: var(--navy); color: #FBF7EC; padding: 4mm 6mm; border-radius: 2mm;
+  margin-top: 3mm; align-items: center;
+}
+.qr-box{ width: 42mm; height: 42mm; background: #FBF7EC; border-radius: 1.4mm; padding: 2.5mm; }
+.qr-box svg{ width: 100%; height: 100%; }
+.qr-block .qr-txt h4{ color: #FBF7EC; font-size: 4.4mm; }
+.qr-block .qr-txt p{ font-size: 3mm; line-height: 1.4; color: #DDE6F2; margin-top: 2mm; }
+.qr-block .qr-txt small{ font-family: var(--mono); font-size: 3.4mm; color: var(--cyan); letter-spacing: .12em; }
+
+/* ---------- Numbers panel ---------- */
+.num-grid{ display: grid; grid-template-columns: repeat(4, 1fr); gap: 5mm; margin-top: 3mm; }
+.num-tile{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  border-radius: 2mm; padding: 5mm 5mm;
+}
+.num-tile .v{ font-family: var(--serif); font-size: 14mm; line-height: 1; color: var(--navy); font-weight: 700; letter-spacing: -.02em; }
+.num-tile .v small{ font-size: 50%; color: var(--cyan); }
+.num-tile .l{ font-family: var(--mono); font-size: 3.4mm; letter-spacing: .14em; text-transform: uppercase; color: var(--muted); margin-top: 2mm; }
+
+/* ---------- Tech stack pills ---------- */
+.tech-grid{ display: flex; flex-wrap: wrap; gap: 3mm; margin-top: 4mm; }
+.tech-pill{
+  display: inline-flex; align-items: center; gap: 2.5mm;
+  padding: 2.5mm 4mm; border-radius: 8mm;
+  background: var(--card); border: .35mm solid var(--rule-2);
+  font-family: var(--mono); font-size: 3.8mm; color: var(--navy);
+}
+.tech-pill .dot{ width: 3mm; height: 3mm; border-radius: 50%; background: var(--cyan); }
+
+/* ---------- Footer ---------- */
+.footer{
+  background: var(--navy); color: #DDE6F2; padding: 4mm 14mm;
+  margin-top: 3mm; font-family: var(--mono); font-size: 3mm;
+  display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 8mm;
+  position: relative !important;
+  top: auto !important;
+  left: auto !important;
+  right: auto !important;
+  float: none !important;
+  width: 100% !important;
+  clear: both !important;
+  page-break-before: avoid;
+  break-before: avoid;
+  box-sizing: border-box;
+}
+.footer h5{ font-family: var(--mono); font-size: 4mm; color: var(--cyan); letter-spacing: .18em; text-transform: uppercase; margin-bottom: 3mm; }
+.footer a{ color: #FBF7EC; text-decoration: none; }
+.footer .copy{ grid-column: 1 / -1; border-top: .25mm solid rgba(255,255,255,.18); padding-top: 4mm; font-size: 3.4mm; color: #9CB2D1; }
+
+/* Print fit — for actual A0 print */
+@media print{
+  html,body,.viewport{ background: white; min-height: 0 !important; }
+  body{ display: block !important; }
+  .viewport{ padding: 0; display: block !important; min-height: 0 !important; }
+  .poster{ box-shadow: none; transform: none !important; display: block !important; }
+  .header, .body, .footer{ display: block; width: 100%; clear: both; }
+  .poster-wrap{ height: auto !important; }
+}
+
+/* Screen fit — scale A0 to fit the viewport so it's viewable in a browser */
+@media screen{
+  body{ overflow-x: hidden; }
+  .viewport{ padding: 12px; }
+  .poster-wrap{
+    transform-origin: top left;
+    transition: transform .2s ease;
+    will-change: transform;
+  }
+}
+
+/* CRITICAL: Force block layout — Chrome semantic <footer>/<header>/etc render bug fix */
+.poster{ display: block !important; }
+.poster > .header,
+.poster > .body,
+.poster > .footer{
+  display: block !important;
+  width: 100% !important;
+  float: none !important;
+  clear: both !important;
+  position: relative !important;
+  box-sizing: border-box;
+}
+
+
+
+</style>
+</head>
+<body>
+<div class="viewport">
+<div class="poster">
+
+  <!-- ============================== HEADER ============================== -->
+  <header class="header">
+    <div class="uni-bar">
+      <div class="crest">
+        <div class="logo-slot"><img src="assets/marmara-university.png" alt="Marmara University crest"></div>
+        <div>Marmara Üniversitesi · Mühendislik Fakültesi</div>
+      </div>
+      <div class="crest">
+        <div>Department of Computer Engineering</div>
+        <div class="logo-slot"><img src="assets/muhendislik-fakultesi.jpg" alt="Faculty of Engineering crest"></div>
+      </div>
+    </div>
+
+    <div class="title-row">
+      <div class="eyebrow">Production-deployed multi-tenant biometric identity SaaS · one hosted login button</div>
+      <div class="acronym"><span class="angle">&lt;</span>FIVUCSAS<span class="angle">/&gt;</span></div>
+      <h1 class="title">Face &amp; Identity Verification using <em>Cloud-based SaaS</em> Models</h1>
+    </div>
+
+    <div class="meta-row">
+      <div class="authors">
+        <div class="label">Team · Department of Computer Engineering</div>
+        <div class="author-row">
+          <b>Ahmet Abdullah Gültekin</b>
+          <span class="contact">ahmetabdullahgultekin@gmail.com</span>
+          <span class="contact">github.com/ahmetabdullahgultekin</span>
+        </div>
+        <div class="author-row">
+          <b>Ayşe Gülsüm Eren</b>
+          <span class="contact">ayse.gulsum@marun.edu.tr</span>
+          <span class="contact">aysegulsumeren@gmail.com</span>
+          <span class="contact">github.com/aysegulsum</span>
+        </div>
+        <div class="author-row">
+          <b>Ayşenur Arıcı</b>
+          <span class="contact">aysenurarici@marun.edu.tr</span>
+          <span class="contact">aysenurarici@hotmail.com</span>
+          <span class="contact">github.com/Aysenur15</span>
+        </div>
+        <div class="author-row supervisor-row">
+          <span class="sup-label">Supervisor</span>
+          <b>Assoc. Prof. Dr. Mustafa Ağaoğlu</b>
+        </div>
+      </div>
+      <div class="course-stamp">
+        <div class="course-no">CSE4298</div>
+        <div class="course-name">Engineering Project</div>
+        <div class="course-year">Spring 2025 – 2026</div>
+      </div>
+    </div>
+  </header>
+
+  <!-- ============================== BODY ============================== -->
+  <div class="body">
+
+  <!-- ====== SECTION 01 — INTRODUCTION ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">01</div>
+      <h2>Introduction</h2>
+      <div class="tag">Problem · What we built · Main Goal · Objectives</div>
+    </div>
+
+    <div class="cols-2"></div>
+</section>
+
+  <!-- ====== SECTION 02 — E-DEVLET + reCAPTCHA COMPARISON ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">02</div>
+      <h2>The Drop-in Identity Button</h2>
+      <div class="tag">e-Devlet & reCAPTCHA mental model · side-by-side · 3 use-cases</div>
+    </div>
+
+    
+
+    <div class="edevlet-row" style="margin-top: 5mm;">
+      <div class="edevlet-card">
+        <h4>Three buttons, one mental model</h4>
+        <div class="edevlet-btn-stack">
+          <div class="edevlet-btn">
+            <div class="ic">T.C.</div>
+            <div class="lbl">e-Devlet ile Giriş Yap<small>turkiye.gov.tr · public sector SSO</small></div>
+          </div>
+          <div class="recaptcha-btn">
+            <div class="rc-ic">
+              <svg viewBox="0 0 24 24" fill="none" stroke="#FBF7EC" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>
+            </div>
+            <div class="lbl">I'm not a robot — reCAPTCHA<small>google.com · bot protection drop-in</small></div>
+          </div>
+          <div class="fivucsas-btn">
+            <div style="font-family: var(--mono); font-weight: 700; font-size: 8mm; line-height: 1;"><span class="mark">&lt;/&gt;</span></div>
+            <div class="lbl">Sign in with FIVUCSAS<small>verify.fivucsas.com · biometric SaaS drop-in</small></div>
+          </div>
+        </div>
+        
+      </div>
+
+      <div class="edevlet-card">
+        <h4>Side-by-side comparison</h4>
+        <table class="edevlet-table">
+          <thead><tr><th>Aspect</th><th>e-Devlet</th><th>reCAPTCHA</th><th>FIVUCSAS</th></tr></thead>
+          <tbody>
+                                                <tr><td>NFC document</td><td class="no">—</td><td class="no">—</td><td class="yes">T.C. + ICAO 9303 (mobile) + Web NFC (simple cards)</td></tr>
+            <tr><td>Integration</td><td>Gov approval</td><td>Public site-key</td><td class="yes">Public OIDC + drop-in button</td></tr>
+            <tr><td>Self-host</td><td class="no">—</td><td class="no">—</td><td class="yes">Docker Compose · GPU-less</td></tr>
+            <tr><td>Open source</td><td class="no">—</td><td class="no">—</td><td class="yes">MIT (spoof-detector) · OSS roadmap</td></tr>
+                      </tbody>
+        </table>
+      </div>
+    </div>
+  </section>
+
+  <!-- ====== SECTION 03 — METHODOLOGY (architecture) ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">03</div>
+      <h2>System Architecture</h2>
+      <div class="tag">Hexagonal / DDD · 7 containers · Hetzner CX43</div>
+    </div>
+
+    <div class="arch-card" style="padding: 4mm 6mm;">
+      <div style="display: grid; grid-template-columns: repeat(5, 1fr); gap: 2mm; align-items: stretch; text-align: center;">
+        <div class="arch-node"><div class="nm">Client</div><div class="sub">Web · KMP · Widget</div></div>
+        <div style="font-size: 6mm; color: var(--cyan); align-self: center;">→</div>
+        <div class="arch-node"><div class="nm">Traefik v3.6</div><div class="sub">TLS · JWT · rate-limit</div></div>
+        <div style="font-size: 6mm; color: var(--cyan); align-self: center;">→</div>
+        <div class="arch-node"><div class="nm">Identity Core + Bio-Processor</div><div class="sub">Spring · FastAPI · hexagonal</div></div>
+      </div>
+      <div style="display: grid; grid-template-columns: repeat(5, 1fr); gap: 2mm; align-items: stretch; text-align: center; margin-top: 2mm;">
+        <div class="arch-node"><div class="nm">PostgreSQL 17</div><div class="sub">pgvector · RLS · 60 migrations</div></div>
+        <div></div>
+        <div class="arch-node"><div class="nm">Redis 7.4</div><div class="sub">cache · OTP · puzzle nonces</div></div>
+        <div></div>
+        <div class="arch-node"><div class="nm">Hetzner CX43</div><div class="sub">8 vCPU · 16 GB · no GPU</div></div>
+      </div>
+    </div>
+  </section>
+
+  <!-- ====== SECTION 04 — FACE PIPELINE ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">04</div>
+      <h2>Face Recognition Pipeline — 8 Stages</h2>
+      <div class="tag">Detection → Quality → Landmark → Align → Embed → Encrypt → Index → Match</div>
+    </div>
+
+    <p class="body-text">
+      Server-authoritative pipeline in <span class="mono">biometric-processor/</span> (FastAPI, Python 3.12).
+      Every stage is replaceable — backbone, detector and similarity all swap via DI in
+      <span class="mono">app/infrastructure/ml/factories/</span>. Verification (1:1) compares against the enrolled
+      vector with cosine distance; identification (1:N) returns pgvector ANN top-<i>k</i>. Aged embeddings
+      (&gt; 2 years) use a more permissive threshold.
+    </p>
+
+    <div class="face-pipe" style="grid-template-columns: repeat(4, 1fr);">
+      <div class="fp-card">
+        <div class="stp">01 · Detect + Quality</div>
+        <div class="nm">DeepFace 0.0.98</div>
+        <div class="sub">opencv · anti-spoof θ=0.5 · Laplacian blur ≥100 · min 80px · occlusion CIE-Lab</div>
+        <div class="val">quality ≥ 70</div>
+      </div>
+      <div class="fp-card">
+        <div class="stp">02 · Landmark + Align</div>
+        <div class="nm">MediaPipe Tasks</div>
+        <div class="sub">468-point FaceLandmarker · DeepFace eye-line affine</div>
+        <div class="val">468 + 10 iris</div>
+      </div>
+      <div class="fp-card">
+        <div class="stp">03 · Embed + Encrypt</div>
+        <div class="nm">Facenet-512 · Fernet</div>
+        <div class="sub">512-D L2-normalised · AES-128-CBC + HMAC-SHA256 at rest</div>
+        <div class="val">dim = 512</div>
+      </div>
+      <div class="fp-card">
+        <div class="stp">04 · Index + Match</div>
+        <div class="nm">pgvector · cosine</div>
+        <div class="sub">HNSW m=16/ef=64 · 1:N ANN top-k · aged-embedding θ=0.38</div>
+        <div class="val">θ = 0.45</div>
+      </div>
+    </div>
+
+    
+  </section>
+
+  <!-- ====== SECTION 05 — NFC SUBSYSTEM ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">05</div>
+      <h2>NFC Document Subsystem — Two Rails</h2>
+      <div class="tag">Native mobile (ICAO 9303) · Web NFC (simple cards) · cross-check to live selfie</div>
+    </div>
+
+    <p class="lede"><b>Two rails, one verifier.</b> <b>Rail A — native mobile NFC:</b> T.C. ID + ICAO 9303 passports + any BAC-chip document over Android IsoDep + Bouncy Castle. <b>Rail B — Web NFC:</b> ISO 14443 simple cards (loyalty, transit, NTAG2xx) directly from Chrome on Android.</p>
+
+    <div class="edevlet-row">
+      <div class="tc-card">
+        <div class="chip-mark" title="ISO/IEC 14443 contactless chip"></div>
+        <div class="h">T.C. Yeni Kimlik Kartı</div>
+        <div class="d">The contactless ISO/IEC 14443 chip lives on the back of the T.C. ID card; on passports it is in the cover. Common ICAO AID <span class="mono small">A0 00 00 02 47 10 01</span>. The same BAC key derivation (SHA-1 from MRZ) is reused for TD3 passports and every other ICAO 9303 document carrying the same chip.</div>
+        <div class="d" style="margin-top:3mm;">
+          <b>Standard:</b> ICAO Doc 9303 (Machine Readable Travel Documents)<br>
+          <b>Spec ref:</b> <span class="mono small">practice-and-test/PASSPORT_NFC_ROADMAP.md:8</span>
+        </div>
+      </div>
+
+      <div class="nfc-grid" style="grid-template-columns: 1fr;">
+        <div class="nfc-stage">
+          <h4><span class="num">A.</span> Protocols implemented</h4>
+          <ul>
+            <li><b>BAC (Basic Access Control)</b> — SHA-1 key derivation from MRZ, identical for Turkish T.C. ID and TD3 passports. <span class="mono small">PASSPORT_NFC_ROADMAP.md:670-690</span></li>
+            <li><b>PACE</b> (Password Authenticated Connection Establishment) — optional for newer passports, scoped not implemented. <span class="mono small">:164-170</span></li>
+            <li><b>Active Authentication · Chip Authentication</b> — <i>[future work]</i></li>
+            <li><b>EF.SOD</b> validator — 60% complete; CSCA full chain pending. <span class="mono small">:383-395</span></li>
+            <li><b>ICAO check-digit</b> validation: <span class="mono small">biometric-processor/tests/unit/test_nfc_mrz_route.py:47-88</span></li>
+          </ul>
+        </div>
+        <div class="nfc-stage">
+          <h4><span class="num">B.</span> Data Groups parsed</h4>
+          <ul>
+            <li><b>DG1 — MRZ</b>: <span class="mono small">.../TurkishEidNfcReader/.../util/Dg1Parser.kt</span></li>
+            <li><b>DG2 — Facial image</b> (JPEG2000 / JP2): <span class="mono small">Dg2Parser.kt:1-50</span></li>
+            <li><b>EF.COM</b> — data-group presence list</li>
+            <li>DG3 / DG4 / DG11 / DG13 / DG14 / DG15: <i>not implemented (roadmap §5.1)</i></li>
+          </ul>
+        </div>
+      </div>
+    </div>
+
+    
+
+      </section>
+
+  <!-- ====== SECTION 06 — SPOOF DETECTOR DEEP DIVE ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">06</div>
+      <h2>spoof-detector — Hybrid PAD, Session Verdict, In-Browser</h2>
+      <div class="tag">Submodule · MIT · paper draft · iBeta L1 submission · amispoof.fivucsas.com</div>
+    </div>
+
+    
+
+    
+
+    <h4 style="margin-top: 5mm;">Measured results (paper, bootstrap 95 % CI on 100 stratified resamples)</h4>
+    <table class="metric-table">
+      <thead><tr><th>Dataset / regime</th><th>Pipeline</th><th>Value</th><th>95 % CI</th><th>Source</th></tr></thead>
+      <tbody>
+        <tr><td><b>CASIA-FASD</b> AUC (zero-shot, N = 2 408)</td><td>minifasnet_only</td><td class="v">0.9452</td><td>[0.9366, 0.9560]</td><td class="mono small">07_results.md:15</td></tr>
+        <tr><td>Per-frame latency (Hetzner CX43 CPU)</td><td>hybrid</td><td class="v">63.0 ms</td><td>p99 = 117.8 ms</td><td class="mono small">:110</td></tr>
+        <tr><td>Browser (desktop Chrome, WebGPU)</td><td>browser bundle</td><td class="v">25 – 30 fps</td><td>—</td><td class="mono small">BROWSER_READINESS.md:4</td></tr>
+        <tr><td>ISO/IEC 30107-3 (in-house scripted)</td><td>session</td><td class="v">Grade C</td><td>BPCER 0 % · APCER 30 % · ACER 15 %</td><td class="mono small">README.md:74-84</td></tr>
+      </tbody>
+    </table>
+
+    
+
+    
+  </section>
+
+  <!-- ====== SECTION 07 — BIOMETRIC PUZZLE ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">07</div>
+      <h2>The Biometric Puzzle — 23 Micro-Challenges</h2>
+      <div class="tag">14 face + 9 hand-gesture · server-nonced · replay-proof · canonical enum BiometricPuzzleId</div>
+    </div>
+
+    <p class="lede"><b>23 canonical micro-challenges</b> (14 face + 9 hand). Server emits a random UUID-nonced sequence of 2-7 actions per attempt; client streams only landmark vectors. Pre-recorded, AR-filter, deepfake, replay all fail — sequence unpredictable, server-immutable.</p>
+
+    <div class="puzzle-row" style="grid-template-columns: 1fr;">
+      <div class="act-pill" style="text-align:left; padding: 3mm 4mm;">
+        <div class="nm" style="font-size:3.6mm;">14 face + 9 hand challenges</div>
+        <div class="th" style="font-size:2.8mm;">blink · smile · open mouth · turn L/R · look up/down · raise brows · close eye · nod · shake · finger count · wave · flip · tap · pinch · peek-a-boo · math · shape-trace · template-trace · hold-pose</div>
+      </div>
+    </div>
+
+    
+  </section>
+
+  <!-- ====== SECTION 08 — 10 AUTH FACTORS ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">08</div>
+      <h2>Ten Composable Authentication Factors</h2>
+      <div class="tag">NIST 800-63B · Know / Have / Are / Show · tenant JSON, not Java</div>
+    </div>
+    <div class="factors-shell">
+      <div class="factors-bar">
+        <div class="n">∑ 10</div>
+        <div class="t">Per-tenant MFA composition · no backend code required</div>
+      </div>
+      <div class="factors-grid">
+        <div class="factor">
+          <div class="cat">Know</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="4" y="10" width="16" height="11" rx="2"/><path d="M8 10V7a4 4 0 0 1 8 0v3"/></svg></div>
+          <div class="nm">Password</div><div class="sub">BCrypt-12</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="3" y="5" width="18" height="14" rx="2"/><path d="M3 7l9 6 9-6"/></svg></div>
+          <div class="nm">Email OTP</div><div class="sub">6-digit · 5 min</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="7" y="2" width="10" height="20" rx="2"/><line x1="11" y1="18.5" x2="13" y2="18.5"/></svg></div>
+          <div class="nm">SMS OTP</div><div class="sub">Twilio · 6-digit</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><circle cx="12" cy="13" r="8"/><polyline points="12 9 12 13 15 15"/></svg></div>
+          <div class="nm">TOTP</div><div class="sub">RFC 6238 · 30 s</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="7"/><rect x="14" y="3" width="7" height="7"/><rect x="3" y="14" width="7" height="7"/><path d="M14 14h3v3h-3z"/></svg></div>
+          <div class="nm">QR Code</div><div class="sub">cross-device</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Are</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><circle cx="9" cy="10" r="1"/><circle cx="15" cy="10" r="1"/><path d="M8.5 15c1 1.4 2.4 2 3.5 2s2.5-.6 3.5-2"/></svg></div>
+          <div class="nm">Face</div><div class="sub">Facenet-512 + Puzzle</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Are</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="9" y="3" width="6" height="12" rx="3"/><path d="M6 11a6 6 0 0 0 12 0"/></svg></div>
+          <div class="nm">Voice</div><div class="sub">Resemblyzer · 256-D</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Are</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><path d="M6 11a6 6 0 0 1 12 0v3"/><path d="M10 11a2 2 0 0 1 4 0v4a2 2 0 0 1-4 0v-4z"/><path d="M12 11v8"/></svg></div>
+          <div class="nm">Fingerprint</div><div class="sub">WebAuthn platform</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><circle cx="8" cy="14" r="4"/><line x1="11" y1="13" x2="21" y2="3"/><line x1="16" y1="8" x2="19" y2="11"/></svg></div>
+          <div class="nm">Hardware Key</div><div class="sub">FIDO2 · WebAuthn</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Show</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="5" y="3" width="14" height="18" rx="2"/><path d="M9 9c1.6 1.4 2.4 2.6 2.4 3.5S10.6 14.5 9 16"/><path d="M12 7c2.6 2 3.8 4 3.8 5.5S14.6 17 12 19"/></svg></div>
+          <div class="nm">NFC Document</div><div class="sub">ICAO 9303 · BAC</div>
+        </div>
+      </div>
+    </div>
+  </section>
+
+  <!-- ====== SECTION 10 — SUBDOMAINS + QR ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">10</div>
+      <h2>Subdomain Ecosystem</h2>
+      <div class="tag">9 subdomains · 1 QR · all behind Traefik v3.6</div>
+    </div>
+
+    <p class="body-text" style="margin-top: 5mm;">
+      <b>One QR · all links.</b> A single QR code on this poster points to a <b>link navigator page we own</b>:
+      <span class="mono">links.fivucsas.com</span>. We do not depend on a third-party shortener — our own static
+      subdomain hosts every project subdomain, the team (GitHub, LinkedIn, portfolio, email), poster artefacts
+      (HTML, PDF, PNG, text brief) and shortcuts to live surfaces. Hostinger static (no Docker), the same pattern
+      as bys-demo / amispoof / landing.
+    </p>
+
+    <div class="qr-block">
+      <div class="qr-box">
+        <!-- Placeholder stylised QR — replace with real QR encoding links.fivucsas.com -->
+        <svg viewBox="0 0 37 37" xmlns="http://www.w3.org/2000/svg" aria-label="QR code to links.fivucsas.com">
+          <rect width="37" height="37" fill="#FBF7EC"/>
+          <path d="M2,2H3V3H2zM3,2H4V3H3zM4,2H5V3H4zM5,2H6V3H5zM6,2H7V3H6zM7,2H8V3H7zM8,2H9V3H8zM10,2H11V3H10zM14,2H15V3H14zM15,2H16V3H15zM16,2H17V3H16zM17,2H18V3H17zM24,2H25V3H24zM25,2H26V3H25zM26,2H27V3H26zM28,2H29V3H28zM29,2H30V3H29zM30,2H31V3H30zM31,2H32V3H31zM32,2H33V3H32zM33,2H34V3H33zM34,2H35V3H34zM2,3H3V4H2zM8,3H9V4H8zM11,3H12V4H11zM13,3H14V4H13zM17,3H18V4H17zM18,3H19V4H18zM19,3H20V4H19zM20,3H21V4H20zM24,3H25V4H24zM25,3H26V4H25zM28,3H29V4H28zM34,3H35V4H34zM2,4H3V5H2zM4,4H5V5H4zM5,4H6V5H5zM6,4H7V5H6zM8,4H9V5H8zM12,4H13V5H12zM13,4H14V5H13zM14,4H15V5H14zM15,4H16V5H15zM16,4H17V5H16zM18,4H19V5H18zM20,4H21V5H20zM24,4H25V5H24zM25,4H26V5H25zM26,4H27V5H26zM28,4H29V5H28zM30,4H31V5H30zM31,4H32V5H31zM32,4H33V5H32zM34,4H35V5H34zM2,5H3V6H2zM4,5H5V6H4zM5,5H6V6H5zM6,5H7V6H6zM8,5H9V6H8zM10,5H11V6H10zM13,5H14V6H13zM14,5H15V6H14zM17,5H18V6H17zM20,5H21V6H20zM21,5H22V6H21zM22,5H23V6H22zM24,5H25V6H24zM26,5H27V6H26zM28,5H29V6H28zM30,5H31V6H30zM31,5H32V6H31zM32,5H33V6H32zM34,5H35V6H34zM2,6H3V7H2zM4,6H5V7H4zM5,6H6V7H5zM6,6H7V7H6zM8,6H9V7H8zM11,6H12V7H11zM12,6H13V7H12zM14,6H15V7H14zM16,6H17V7H16zM17,6H18V7H17zM20,6H21V7H20zM22,6H23V7H22zM24,6H25V7H24zM26,6H27V7H26zM28,6H29V7H28zM30,6H31V7H30zM31,6H32V7H31zM32,6H33V7H32zM34,6H35V7H34zM2,7H3V8H2zM8,7H9V8H8zM21,7H22V8H21zM25,7H26V8H25zM26,7H27V8H26zM28,7H29V8H28zM34,7H35V8H34zM2,8H3V9H2zM3,8H4V9H3zM4,8H5V9H4zM5,8H6V9H5zM6,8H7V9H6zM7,8H8V9H7zM8,8H9V9H8zM10,8H11V9H10zM12,8H13V9H12zM14,8H15V9H14zM16,8H17V9H16zM18,8H19V9H18zM20,8H21V9H20zM22,8H23V9H22zM24,8H25V9H24zM26,8H27V9H26zM28,8H29V9H28zM29,8H30V9H29zM30,8H31V9H30zM31,8H32V9H31zM32,8H33V9H32zM33,8H34V9H33zM34,8H35V9H34zM12,9H13V10H12zM13,9H14V10H13zM14,9H15V10H14zM16,9H17V10H16zM18,9H19V10H18zM22,9H23V10H22zM23,9H24V10H23zM24,9H25V10H24zM25,9H26V10H25zM4,10H5V11H4zM6,10H7V11H6zM7,10H8V11H7zM8,10H9V11H8zM10,10H11V11H10zM11,10H12V11H11zM12,10H13V11H12zM13,10H14V11H13zM18,10H19V11H18zM20,10H21V11H20zM22,10H23V11H22zM23,10H24V11H23zM26,10H27V11H26zM27,10H28V11H27zM31,10H32V11H31zM34,10H35V11H34zM3,11H4V12H3zM4,11H5V12H4zM5,11H6V12H5zM6,11H7V12H6zM9,11H10V12H9zM11,11H12V12H11zM12,11H13V12H12zM18,11H19V12H18zM20,11H21V12H20zM21,11H22V12H21zM26,11H27V12H26zM28,11H29V12H28zM33,11H34V12H33zM34,11H35V12H34zM2,12H3V13H2zM3,12H4V13H3zM4,12H5V13H4zM6,12H7V13H6zM8,12H9V13H8zM9,12H10V13H9zM12,12H13V13H12zM13,12H14V13H13zM14,12H15V13H14zM15,12H16V13H15zM17,12H18V13H17zM19,12H20V13H19zM23,12H24V13H23zM26,12H27V13H26zM30,12H31V13H30zM31,12H32V13H31zM32,12H33V13H32zM33,12H34V13H33zM34,12H35V13H34zM5,13H6V14H5zM7,13H8V14H7zM13,13H14V14H13zM15,13H16V14H15zM17,13H18V14H17zM18,13H19V14H18zM26,13H27V14H26zM28,13H29V14H28zM33,13H34V14H33zM3,14H4V15H3zM4,14H5V15H4zM6,14H7V15H6zM7,14H8V15H7zM8,14H9V15H8zM9,14H10V15H9zM11,14H12V15H11zM15,14H16V15H15zM16,14H17V15H16zM17,14H18V15H17zM19,14H20V15H19zM21,14H22V15H21zM25,14H26V15H25zM26,14H27V15H26zM27,14H28V15H27zM28,14H29V15H28zM30,14H31V15H30zM33,14H34V15H33zM2,15H3V16H2zM3,15H4V16H3zM4,15H5V16H4zM7,15H8V16H7zM9,15H10V16H9zM10,15H11V16H10zM11,15H12V16H11zM12,15H13V16H12zM13,15H14V16H13zM14,15H15V16H14zM15,15H16V16H15zM16,15H17V16H16zM17,15H18V16H17zM20,15H21V16H20zM22,15H23V16H22zM26,15H27V16H26zM28,15H29V16H28zM30,15H31V16H30zM32,15H33V16H32zM33,15H34V16H33zM34,15H35V16H34zM3,16H4V17H3zM4,16H5V17H4zM5,16H6V17H5zM8,16H9V17H8zM9,16H10V17H9zM12,16H13V17H12zM13,16H14V17H13zM15,16H16V17H15zM17,16H18V17H17zM22,16H23V17H22zM23,16H24V17H23zM26,16H27V17H26zM28,16H29V17H28zM33,16H34V17H33zM34,16H35V17H34zM3,17H4V18H3zM4,17H5V18H4zM10,17H11V18H10zM11,17H12V18H11zM12,17H13V18H12zM13,17H14V18H13zM16,17H17V18H16zM18,17H19V18H18zM19,17H20V18H19zM23,17H24V18H23zM24,17H25V18H24zM26,17H27V18H26zM30,17H31V18H30zM32,17H33V18H32zM33,17H34V18H33zM34,17H35V18H34zM2,18H3V19H2zM3,18H4V19H3zM4,18H5V19H4zM5,18H6V19H5zM6,18H7V19H6zM8,18H9V19H8zM12,18H13V19H12zM14,18H15V19H14zM15,18H16V19H15zM19,18H20V19H19zM20,18H21V19H20zM22,18H23V19H22zM23,18H24V19H23zM24,18H25V19H24zM25,18H26V19H25zM27,18H28V19H27zM28,18H29V19H28zM32,18H33V19H32zM2,19H3V20H2zM3,19H4V20H3zM4,19H5V20H4zM5,19H6V20H5zM7,19H8V20H7zM9,19H10V20H9zM11,19H12V20H11zM12,19H13V20H12zM13,19H14V20H13zM18,19H19V20H18zM20,19H21V20H20zM22,19H23V20H22zM28,19H29V20H28zM31,19H32V20H31zM32,19H33V20H32zM33,19H34V20H33zM2,20H3V21H2zM3,20H4V21H3zM4,20H5V21H4zM5,20H6V21H5zM6,20H7V21H6zM8,20H9V21H8zM9,20H10V21H9zM10,20H11V21H10zM11,20H12V21H11zM13,20H14V21H13zM17,20H18V21H17zM18,20H19V21H18zM21,20H22V21H21zM22,20H23V21H22zM24,20H25V21H24zM28,20H29V21H28zM29,20H30V21H29zM32,20H33V21H32zM34,20H35V21H34zM2,21H3V22H2zM9,21H10V22H9zM12,21H13V22H12zM13,21H14V22H13zM15,21H16V22H15zM16,21H17V22H16zM17,21H18V22H17zM18,21H19V22H18zM21,21H22V22H21zM22,21H23V22H22zM23,21H24V22H23zM24,21H25V22H24zM29,21H30V22H29zM2,22H3V23H2zM3,22H4V23H3zM8,22H9V23H8zM9,22H10V23H9zM10,22H11V23H10zM11,22H12V23H11zM12,22H13V23H12zM13,22H14V23H13zM14,22H15V23H14zM16,22H17V23H16zM17,22H18V23H17zM18,22H19V23H18zM19,22H20V23H19zM20,22H21V23H20zM22,22H23V23H22zM23,22H24V23H23zM26,22H27V23H26zM28,22H29V23H28zM31,22H32V23H31zM33,22H34V23H33zM3,23H4V24H3zM5,23H6V24H5zM7,23H8V24H7zM9,23H10V24H9zM12,23H13V24H12zM15,23H16V24H15zM16,23H17V24H16zM20,23H21V24H20zM24,23H25V24H24zM25,23H26V24H25zM26,23H27V24H26zM31,23H32V24H31zM32,23H33V24H32zM34,23H35V24H34zM2,24H3V25H2zM4,24H5V25H4zM5,24H6V25H5zM8,24H9V25H8zM9,24H10V25H9zM11,24H12V25H11zM12,24H13V25H12zM13,24H14V25H13zM16,24H17V25H16zM17,24H18V25H17zM18,24H19V25H18zM20,24H21V25H20zM21,24H22V25H21zM23,24H24V25H23zM25,24H26V25H25zM26,24H27V25H26zM28,24H29V25H28zM31,24H32V25H31zM32,24H33V25H32zM33,24H34V25H33zM34,24H35V25H34zM3,25H4V26H3zM6,25H7V26H6zM7,25H8V26H7zM9,25H10V26H9zM10,25H11V26H10zM12,25H13V26H12zM13,25H14V26H13zM16,25H17V26H16zM19,25H20V26H19zM23,25H24V26H23zM24,25H25V26H24zM26,25H27V26H26zM27,25H28V26H27zM30,25H31V26H30zM33,25H34V26H33zM34,25H35V26H34zM2,26H3V27H2zM5,26H6V27H5zM7,26H8V27H7zM8,26H9V27H8zM12,26H13V27H12zM14,26H15V27H14zM16,26H17V27H16zM17,26H18V27H17zM18,26H19V27H18zM20,26H21V27H20zM22,26H23V27H22zM23,26H24V27H23zM25,26H26V27H25zM26,26H27V27H26zM27,26H28V27H27zM28,26H29V27H28zM29,26H30V27H29zM30,26H31V27H30zM33,26H34V27H33zM34,26H35V27H34zM10,27H11V28H10zM11,27H12V28H11zM13,27H14V28H13zM14,27H15V28H14zM16,27H17V28H16zM20,27H21V28H20zM21,27H22V28H21zM23,27H24V28H23zM25,27H26V28H25zM26,27H27V28H26zM30,27H31V28H30zM31,27H32V28H31zM33,27H34V28H33zM34,27H35V28H34zM2,28H3V29H2zM3,28H4V29H3zM4,28H5V29H4zM5,28H6V29H5zM6,28H7V29H6zM7,28H8V29H7zM8,28H9V29H8zM11,28H12V29H11zM15,28H16V29H15zM16,28H17V29H16zM17,28H18V29H17zM18,28H19V29H18zM20,28H21V29H20zM21,28H22V29H21zM22,28H23V29H22zM24,28H25V29H24zM25,28H26V29H25zM26,28H27V29H26zM28,28H29V29H28zM30,28H31V29H30zM31,28H32V29H31zM33,28H34V29H33zM34,28H35V29H34zM2,29H3V30H2zM8,29H9V30H8zM10,29H11V30H10zM12,29H13V30H12zM14,29H15V30H14zM16,29H17V30H16zM17,29H18V30H17zM20,29H21V30H20zM23,29H24V30H23zM24,29H25V30H24zM25,29H26V30H25zM26,29H27V30H26zM30,29H31V30H30zM34,29H35V30H34zM2,30H3V31H2zM4,30H5V31H4zM5,30H6V31H5zM6,30H7V31H6zM8,30H9V31H8zM10,30H11V31H10zM12,30H13V31H12zM15,30H16V31H15zM22,30H23V31H22zM24,30H25V31H24zM26,30H27V31H26zM27,30H28V31H27zM28,30H29V31H28zM29,30H30V31H29zM30,30H31V31H30zM31,30H32V31H31zM33,30H34V31H33zM2,31H3V32H2zM4,31H5V32H4zM5,31H6V32H5zM6,31H7V32H6zM8,31H9V32H8zM11,31H12V32H11zM14,31H15V32H14zM15,31H16V32H15zM16,31H17V32H16zM17,31H18V32H17zM20,31H21V32H20zM24,31H25V32H24zM26,31H27V32H26zM30,31H31V32H30zM31,31H32V32H31zM2,32H3V33H2zM4,32H5V33H4zM5,32H6V33H5zM6,32H7V33H6zM8,32H9V33H8zM10,32H11V33H10zM11,32H12V33H11zM12,32H13V33H12zM14,32H15V33H14zM16,32H17V33H16zM17,32H18V33H17zM20,32H21V33H20zM21,32H22V33H21zM23,32H24V33H23zM26,32H27V33H26zM27,32H28V33H27zM29,32H30V33H29zM30,32H31V33H30zM31,32H32V33H31zM32,32H33V33H32zM34,32H35V33H34zM2,33H3V34H2zM8,33H9V34H8zM11,33H12V34H11zM12,33H13V34H12zM16,33H17V34H16zM17,33H18V34H17zM18,33H19V34H18zM20,33H21V34H20zM25,33H26V34H25zM26,33H27V34H26zM27,33H28V34H27zM29,33H30V34H29zM31,33H32V34H31zM33,33H34V34H33zM2,34H3V35H2zM3,34H4V35H3zM4,34H5V35H4zM5,34H6V35H5zM6,34H7V35H6zM7,34H8V35H7zM8,34H9V35H8zM14,34H15V35H14zM15,34H16V35H15zM16,34H17V35H16zM17,34H18V35H17zM18,34H19V35H18zM21,34H22V35H21zM22,34H23V35H22zM26,34H27V35H26zM27,34H28V35H27zM29,34H30V35H29zM30,34H31V35H30zM31,34H32V35H31zM32,34H33V35H32zM33,34H34V35H33zM34,34H35V35H34z" fill="#0B2545"/>
+          <!-- centre logo plate — 30% EC-H allows up to ~15% area overlay safely -->
+          <rect x="15" y="15" width="7" height="7" rx=".4" fill="#FBF7EC"/>
+          <rect x="15.4" y="15.4" width="6.2" height="6.2" rx=".3" fill="none" stroke="#0B2545" stroke-width=".15"/>
+          <text x="18.5" y="19.6" text-anchor="middle" font-family="IBM Plex Mono, monospace" font-size="2.6" fill="#2BA8B3" font-weight="700">FV</text>
+        </svg>
+      </div>
+      <div class="qr-txt">
+        <small>One QR · all links</small>
+        <h4>Scan to open the FIVUCSAS hub</h4>
+        <p>A single QR for landing + hosted-login + admin + docs + demo + spoof-detector + status — every surface under one short link. Scan from any phone and jump to the surface you need.</p>
+        <p style="font-family: var(--mono); color: var(--cyan); margin-top: 2mm;">https://fivucsas.com/links</p>
+      </div>
+    </div>
+  </section>
+
+  </div><!-- /body -->
+
+  <!-- ====== FOOTER ====== -->
+  <div class="footer">
+    <div>
+      <h5>Repositories</h5>
+      <p>github.com/Rollingcat-Software/fivucsas (private)<br>
+      github.com/Rollingcat-Software/spoof-detector (MIT)<br>
+      6 git submodules · 1 self-hosted runner</p>
+    </div>
+    <div>
+      <h5>Live surface</h5>
+      <p>fivucsas.com · verify.fivucsas.com · demo.fivucsas.com<br>
+      api.fivucsas.com · app.fivucsas.com · docs.fivucsas.com<br>
+      amispoof.fivucsas.com · status.fivucsas.com</p>
+    </div>
+    <div>
+      <h5>Contact</h5>
+      <p>ahmetabdullahgultekin@gmail.com<br>
+      ayse.gulsum@marun.edu.tr · aysegulsumeren@gmail.com<br>
+      aysenurarici@marun.edu.tr · aysenurarici@hotmail.com<br>
+      Supervisor · ağaoğlu @ marmara.edu.tr</p>
+    </div>
+    <div class="copy">
+      FIVUCSAS · Marmara Üniversitesi · CSE4297 / CSE4298 Engineering Project · Spring 2025 – 2026 · A0 poster v3 · evidence-pinned 2026-05-19 · every metric cited to file:line — see POSTER_BRIEF.md at repo root for full source map.
+    </div>
+  </div><!-- /footer -->
+
+</div><!-- /poster -->
+</div><!-- /viewport -->
+</body>
+</html>
diff --git a/landing-website/public/poster/files/fivucsas-poster.pdf b/landing-website/public/poster/files/fivucsas-poster.pdf
new file mode 100644
index 0000000..ba757c7
Binary files /dev/null and b/landing-website/public/poster/files/fivucsas-poster.pdf differ
diff --git a/landing-website/public/poster/files/fivucsas-presentation-script.md b/landing-website/public/poster/files/fivucsas-presentation-script.md
new file mode 100644
index 0000000..826924f
--- /dev/null
+++ b/landing-website/public/poster/files/fivucsas-presentation-script.md
@@ -0,0 +1,167 @@
+# FIVUCSAS — Poster Presentation Script
+
+> CSE4297 / CSE4298 Capstone Project · Marmara University · Spring 2025–2026
+> Authors: Ahmet Abdullah Gültekin · Ayşe Gülsüm Eren · Ayşenur Arıcı
+> Supervisor: Doç. Dr. Mustafa Ağaoğlu
+> Date: 2026-05-19
+
+This script is what to **say** at the poster — the poster shows headlines + visuals; you provide the depth.
+
+---
+
+## 1 · Opening (30 seconds)
+
+> "Welcome. This is **FIVUCSAS** — Face & Identity Verification using Cloud-based SaaS Models. Think of it as the **private-sector e-Devlet button**, or **reCAPTCHA for biometric identity**: a single hosted-login redirect that any application can adopt instead of writing its own auth.
+>
+> The project is production-deployed at <span style="font-family:monospace">fivucsas.com</span> with Marmara University as the live anchor tenant. Everything you see on this poster runs on **one Hetzner CX43 — eight vCPUs, sixteen gigabytes of RAM, no GPU**."
+
+---
+
+## 2 · "What problems does FIVUCSAS solve?" (60 sec — pitch)
+
+> "Two audiences, one button.
+>
+> **For end users:** you stop registering on every site. One FIVUCSAS account, ten authentication methods (password, email OTP, SMS OTP, TOTP, QR code, face, voice, fingerprint, hardware key, NFC document). The mental model is e-Devlet's "Sign in with e-Devlet" button, but for the entire private sector.
+>
+> **For developers:** you stop writing login and register pages. Drop in our `<FIVUCSAS />` button, configure the OIDC discovery URL, and your tenant gets biometric authentication without writing a line of ML code. The mental model is reCAPTCHA's one-line drop-in, but for ten-factor identity instead of bot defence."
+
+---
+
+## 3 · Comparison panel (45 sec)
+
+Point to the **side-by-side table** on the poster (e-Devlet · reCAPTCHA · FIVUCSAS columns).
+
+> "On a feature-by-feature basis, FIVUCSAS is the only one that combines biometric authentication, NFC document verification, ten composable MFA factors, multi-tenant Postgres Row-Level Security, KVKK and GDPR compliance, and ISO/IEC 30107-3 Level 1 anti-spoofing submission — in an open-source, self-hostable stack."
+
+Anticipated jury question: *"How is this different from Auth0 / Okta?"*
+
+> "Three differences. **One,** Auth0 treats biometrics as a device-local feature; we treat it as a tenant-controlled server-side decision. **Two,** Auth0 doesn't read government ID NFC chips natively — we do, on both Turkish T.C. ID and ICAO 9303 passports. **Three,** Auth0 charges per active user; we are self-hostable on a single sixteen-gigabyte VM."
+
+---
+
+## 4 · System Architecture (60 sec)
+
+Point to the **single-row architecture strip**: Client → Traefik → Identity Core + Biometric Processor → PostgreSQL · Redis · Hetzner CX43.
+
+> "Two services, hexagonal architecture. The **Identity Core** is Spring Boot in Java — it owns auth flows, OAuth 2.0 / OIDC issuance, MFA composition, and tenant configuration. The **Biometric Processor** is FastAPI in Python — it owns face detection, embedding, liveness detection. They talk via a hexagonal port-adapter boundary with an API key on the internal Docker network. PostgreSQL with pgvector handles embedding storage; Redis handles cache, OTP and puzzle nonces.
+>
+> The entire stack is **GPU-less by design**: a boot sentinel called `ALLOW_HEAVY_ML=false` refuses to start if you configure a GPU-requiring model. This decision keeps the system self-hostable on commodity hardware — your CSE4298 capstone runs on the same architecture as a banking deployment would."
+
+---
+
+## 5 · Face Pipeline (60 sec)
+
+Point to the **four-stage strip**: Detect+Quality → Landmark+Align → Embed+Encrypt → Index+Match.
+
+> "Server-authoritative, eight true stages folded into four cards. DeepFace 0.0.98 handles detection with configurable backends — OpenCV by default, anti-spoof at 0.5. Quality gating runs Laplacian blur ≥ 100, minimum 80-pixel face, occlusion via CIE-Lab Delta-E. Landmarking is MediaPipe's modern Tasks API with the 468-point face mesh plus 10 iris points. Alignment is DeepFace's eye-line affine warp.
+>
+> The embedding is **Facenet-512** — 512-D L2-normalized vectors. At rest, every embedding is wrapped in Fernet — AES-128-CBC plus HMAC-SHA256. The encrypted ciphertext lives in PostgreSQL with a parallel plaintext vector column for ANN search using HNSW indexing — m equal to 16, ef_construction 64.
+>
+> Matching uses cosine distance at theta 0.45; aged embeddings older than two years get a more permissive 0.38."
+
+Anticipated question: *"What is your EER on Marmara students?"*
+
+> "**Honest answer: we have not yet measured an in-house EER curve.** Published Facenet-512 rates apply. Our load-test targets — login P95 under 300 ms, verification P95 under 500 ms — are targets, not measurements. Future work: an in-house Marmara cohort EER curve."
+
+---
+
+## 6 · The 23 Biometric Puzzle Challenges (45 sec)
+
+Point to the **single-line puzzle summary** + the active liveness reference.
+
+> "Active liveness is implemented as a randomly sequenced challenge response. **Twenty-three canonical micro-challenges**, all server-issued: fourteen face actions and nine hand gestures. The face set covers blink, smile, open mouth, head turns, look up and down, eyebrow raises, nod, and head shake. The hand set covers finger count, wave, flip, finger tap, pinch, peek-a-boo, math (count fingers to k), shape trace, and template trace.
+>
+> Per attempt the server picks 2 to 7 actions, signs them with a UUID v4 nonce, and writes them to Redis. The puzzle expires in five minutes. The client streams only landmark and metric vectors — the server classifies each step against EAR, MAR and yaw thresholds and signs the verdict. Pre-recorded video, AR-filter and deepfake all fail because the requested sequence is unpredictable and unmodifiable client-side."
+
+---
+
+## 7 · NFC Subsystem (45 sec)
+
+Point to the **T.C. ID card visual** with the chip mark.
+
+> "Two rails, one verifier.
+>
+> **Rail A is native mobile NFC.** Turkish T.C. ID cards, Turkish passports, and every ICAO 9303 document with a BAC chip read over Android `IsoDep` plus Bouncy Castle. The chip lives on the back of the T.C. card or in the passport cover. Same ICAO application identifier — `A0 00 00 02 47 10 01` — same SHA-1 BAC key derivation from the MRZ.
+>
+> **Rail B is Web NFC.** ISO/IEC 14443 Type-A and Type-B simple cards — store loyalty, transit, MIFARE Classic, NTAG2xx — read directly from Chrome on Android. No native NFC layer required.
+>
+> Both rails speak to the same Identity Core endpoint at `/api/v1/nfc/verify-mrz`. The DG2 face photo from the chip is decoded from JPEG2000, embedded via Facenet-512, and cross-matched against the live selfie via cosine — same threshold as the live pipeline."
+
+---
+
+## 8 · spoof-detector & paper (75 sec — this is the centerpiece)
+
+Point to the **metric table** and the **amispoof.fivucsas.com URL**.
+
+> "The hardest technical contribution of the project is the open-source **`spoof-detector` engine**. It is a separate MIT-licensed submodule at `github.com/Rollingcat-Software/spoof-detector`, with its own paper draft, its own browser bundle, and its own iBeta PAD Level 1 submission package on commit `cc73cf08`.
+>
+> **What it does:** combines a MiniFASNet ONNX discriminator with twelve auxiliary temporal and image analyzers under calibrated multi-class fusion, and produces a session-level peak-sensitive verdict — fifty-fifty blend of mean and worst-decile liveness — formally proven in section 4 of the paper to resist spoof-burst dilution.
+>
+> **What is measured:** on CASIA-FASD (N = 2 408) we report **AUC 0.945** with 95% confidence interval [0.937, 0.956]. On CelebA-Spoof (N = 2 611) we report AUC 0.782. The two intervals are strictly separated by more than four times their combined width, empirically establishing the cross-dataset taxonomy effect. Per-frame inference latency is **63 milliseconds on a CPU** — no GPU.
+>
+> **Where it runs:** the production deliverable is a TypeScript browser bundle — 123 kilobytes ESM, 34 kilobytes gzipped. Runs entirely on WebAssembly via `onnxruntime-web`, optional WebGPU. Live tester at `amispoof.fivucsas.com`. Twenty-five to thirty FPS on desktop Chrome.
+>
+> **Honest positioning:** zero-shot, no head-to-head with FaceTec, iProov, Onfido or Jumio. Intra-dataset state-of-the-art on CASIA-FASD reaches AUC over 0.99 *with retraining*. Our 0.945 is mid-tier zero-shot. Where we hold ground: session-level verdict, client-side browser deployment, the anti-correlated calibration signal finding, reproducible no-training calibration."
+
+Anticipated question: *"Why no OULU-NPU and SiW numbers?"*
+
+> "Honest answer: those benchmarks require institutional licensing we did not obtain within the capstone timeline. The benchmark harness is in place — `tests/benchmark/run.py --dataset oulu_npu` — and one-shot reproducible the moment access is granted. Section 9.4 of the paper documents this transparently."
+
+---
+
+## 9 · 10 Composable Authentication Factors (45 sec)
+
+Point to the **ten-icon grid** (Know / Have / Are / Show categories).
+
+> "Ten methods on one platform. The Identity Core stitches them into a single OIDC session. The mapping is NIST 800-63B's four-axis Know / Have / Are / Show framework:
+>
+> Know: **Password** with BCrypt-12.
+>
+> Have: **Email OTP**, **SMS OTP via Twilio**, **TOTP** with RFC 6238, **QR Code** for cross-device, and **Hardware Key** with FIDO2 / WebAuthn.
+>
+> Are: **Face** with Facenet-512 plus the Puzzle, **Voice** with Resemblyzer, and **Fingerprint** via WebAuthn platform authenticator.
+>
+> Show: **NFC Document** with ICAO 9303.
+>
+> Each tenant composes its own MFA flow from this set — configuration is JSON, not Java code."
+
+---
+
+## 10 · QR + Hub (15 sec — closer)
+
+Point to the **QR code** and `links.fivucsas.com`.
+
+> "Every link from this poster — landing, hosted login, admin console, Marmara BYS demo, amispoof live tester, API, documentation, status, the team's contacts, and every poster artefact in five formats — is one scan away at `links.fivucsas.com`. Thank you."
+
+---
+
+## 11 · Likely jury questions (anticipated)
+
+| Question | Short answer |
+|---|---|
+| "Did you write the spoof-detector yourselves?" | Architecture and session engine: yes (Ahmet). Algorithms ported into the production pipeline: yes (Ayşenur's `working_spoof_detection` branch, fully credited in `AUTHORS.md`). The MiniFASNet backbone is a frozen public UniFace ONNX — we did not retrain it. |
+| "Why is the paper not yet submitted?" | The paper is a CSE4298 capstone artefact (Mustafa Hocam is a co-author). §7 and §8 await OULU-NPU / SiW dataset access — `tests/benchmark/run.py` will reproduce the missing rows the moment access is granted. Target venue: BIOSIG 2026 (Darmstadt). |
+| "How does this compare to Auth0 / Okta?" | See §3 above — three differences: server-side biometric decision, native government NFC, single-VM self-host. |
+| "How is KVKK / GDPR compliance achieved?" | Embeddings are Fernet AES-128 encrypted at rest. Tenant data is isolated by Postgres Row-Level Security on nine tables (Flyway V25). Audit logs are partitioned by `tenant_id` via pg_partman (V40 + V57). All data lives on EU / TR-accessible Hetzner. Soft-delete via `deleted_at` + Hibernate `@SQLRestriction`. |
+| "How many lines of code? How many tests?" | About 691 000 lines across 12 submodules; about 2 768 automated tests (Spring 944, Pytest 265, Vitest/Jest 1 559). 60 Flyway migrations. About 1 847 commits in the last six months. |
+| "Why GPU-less?" | An architectural choice that keeps the system self-hostable on commodity hardware. `ALLOW_HEAVY_ML=false` boot-time sentinel refuses GPU-only models. The spoof-detector browser port runs CPU-only via WebAssembly with optional WebGPU. |
+| "Is it really production-deployed?" | Yes — Marmara is the live anchor tenant at `demo.fivucsas.com`. Hosted login at `verify.fivucsas.com`. Admin console at `app.fivucsas.com`. Spoof-detector browser tester at `amispoof.fivucsas.com`. All HTTP 200, all on Hetzner CX43. |
+| "How can a developer integrate this?" | Roughly fifteen lines of code: SDK init, `loginRedirect()`, token exchange. OIDC discovery and JWKS are automatic. Or one HTML anchor tag pointing at `verify.fivucsas.com/oauth2/authorize` with PKCE S256. |
+| "What about iOS NFC?" | Roadmap. Currently Rail A (T.C. ID + passports) is Android-only because Apple's CoreNFC has different APIs. Web NFC (Rail B) is also Android-only — Safari does not implement the Web NFC standard. iOS path is via Kotlin Multiplatform `expect / actual`. |
+| "Why open-source?" | The `spoof-detector` submodule is already MIT public. The main FIVUCSAS monorepo opens in Q4 2026, alongside paper publication. Same operating model as PostgreSQL, OpenWebUI, Keycloak, Authentik or Supabase: developers can self-host; SaaS is for those who would rather we operate it. |
+
+---
+
+## 12 · One-sentence closes
+
+If the jury asks for a single-sentence summary:
+
+> "FIVUCSAS is **the e-Devlet button for the private sector** — one OAuth 2.0 redirect, ten composable authentication factors, twenty-three active liveness micro-challenges, two NFC rails, and a session-level passive PAD engine, all running on one GPU-less Hetzner box."
+
+If the jury asks "what was the hardest part?":
+
+> "Building a multi-tenant biometric SaaS that runs **without a GPU** while still resisting screen-replay and deepfake injection at session level. The session-level peak-sensitive verdict and the anti-correlated calibration finding were the two specific technical contributions."
+
+---
+
+*End of script.*
diff --git a/landing-website/public/poster/index.html b/landing-website/public/poster/index.html
new file mode 100644
index 0000000..5e6a153
--- /dev/null
+++ b/landing-website/public/poster/index.html
@@ -0,0 +1,473 @@
+<!DOCTYPE html>
+<html lang="tr" data-lang="tr">
+<head>
+<meta charset="utf-8">
+<title>FIVUCSAS — A0 Academic Poster · View · Download · Share</title>
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="description" content="FIVUCSAS A0 academic poster — view, download (HTML / PDF / TeX / PNG / text brief), or share. Marmara University CSE4298 graduation project, Spring 2025–2026.">
+<meta property="og:title" content="FIVUCSAS — A0 Academic Poster">
+<meta property="og:description" content="Face & Identity Verification using Cloud-based SaaS Models. A0 poster + downloads + source files.">
+<meta property="og:image" content="files/fivucsas-poster-preview.png">
+<meta property="og:url" content="https://fivucsas.com/poster/">
+<meta name="twitter:card" content="summary_large_image">
+<link rel="icon" type="image/svg+xml" href="/favicon.svg">
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600;700&family=IBM+Plex+Sans:wght@300;400;500;600;700&family=IBM+Plex+Serif:wght@400;500;600;700&display=swap">
+<style>
+/* Language gating — applied immediately to prevent flash */
+html[data-lang="tr"] [data-en]{ display:none !important; }
+html[data-lang="en"] [data-tr]{ display:none !important; }
+:root{
+  --bg:#0B2545; --bg-2:#112F5A; --paper:#F5EFE0; --card:#FFFCEF;
+  --ink:#161616; --ink-2:#2A2A2A; --muted:#5C5F66;
+  --cyan:#2BA8B3; --cyan-2:#1d8a93; --gold:#FBE9A3; --crimson:#9A2D2D;
+  --rule:rgba(255,255,255,.14);
+  --serif:"IBM Plex Serif", "Times New Roman", Georgia, serif;
+  --sans:"IBM Plex Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;
+  --mono:"IBM Plex Mono", ui-monospace, "SF Mono", Menlo, monospace;
+}
+*,*::before,*::after{ box-sizing:border-box; }
+html,body{ margin:0; padding:0; }
+body{
+  font-family:var(--sans); color:#F6F1E4;
+  background:radial-gradient(1200px 800px at 20% -10%, rgba(43,168,179,.18), transparent 60%), linear-gradient(180deg,#0B2545 0%,#0B2545 80%,#091C36 100%);
+  min-height:100vh; line-height:1.5;
+}
+a{ color:var(--cyan); text-decoration:none; }
+a:hover{ color:#FBF7EC; }
+
+.shell{ max-width:1180px; margin:0 auto; padding:32px 24px 80px 24px; }
+
+/* Nav */
+.nav{
+  display:flex; align-items:center; justify-content:space-between;
+  padding:10px 0 30px 0;
+  font-family:var(--mono); font-size:14px; letter-spacing:.14em; text-transform:uppercase;
+}
+.nav .brand{ display:flex; align-items:center; gap:10px; }
+.nav .brand .mark{ font-weight:700; color:var(--cyan); font-size:18px; letter-spacing:-.01em; text-transform:none; }
+.nav .brand .mark .angle{ color:var(--gold); font-weight:500; }
+.nav .links a{ margin-left:20px; color:#9CB2D1; }
+.nav .links a:hover{ color:#FBF7EC; }
+
+/* Hero */
+.hero{
+  display:grid; grid-template-columns: minmax(280px, 460px) 1fr; gap:48px; align-items:center;
+  padding:24px 0 50px 0;
+}
+.hero-preview{
+  position:relative; aspect-ratio: 841/1189; border-radius:14px; overflow:hidden;
+  background:#fff; box-shadow: 0 30px 80px rgba(0,0,0,.55), 0 6px 18px rgba(0,0,0,.35);
+  transform: rotate(-1.2deg); transition: transform .3s ease;
+}
+.hero-preview:hover{ transform: rotate(0deg) scale(1.01); }
+.hero-preview img{ width:100%; height:100%; object-fit:cover; display:block; }
+.hero-preview .badge{
+  position:absolute; top:14px; left:14px;
+  background:rgba(11,37,69,.85); color:var(--cyan); padding:6px 12px; border-radius:6px;
+  font-family:var(--mono); font-size:11px; letter-spacing:.18em; text-transform:uppercase;
+  backdrop-filter: blur(4px);
+}
+
+.hero-info .eyebrow{
+  font-family:var(--mono); font-size:13px; color:var(--cyan); letter-spacing:.22em; text-transform:uppercase;
+}
+.hero-info h1{
+  font-family:var(--serif); font-size:52px; line-height:1.05; font-weight:500;
+  margin:14px 0 18px 0; color:#FBF7EC; letter-spacing:-.01em;
+}
+.hero-info h1 em{ font-style:italic; color:var(--cyan); font-weight:600; }
+.hero-info .acronym{
+  font-family:var(--mono); font-size:68px; font-weight:700; line-height:1;
+  color:var(--cyan); letter-spacing:-.02em; margin:0 0 18px 0;
+}
+.hero-info .acronym .angle{ color:var(--gold); font-weight:500; font-size:50px; }
+.hero-info .lede{ font-size:18px; color:#DDE6F2; line-height:1.55; margin-bottom:24px; max-width:560px; }
+.hero-info .meta{
+  font-family:var(--mono); font-size:13px; color:#9CB2D1; letter-spacing:.06em;
+  padding:14px 0; border-top:1px solid var(--rule); border-bottom:1px solid var(--rule);
+  display:flex; flex-wrap:wrap; gap:10px 24px;
+}
+.hero-info .meta b{ color:#FBF7EC; font-weight:500; }
+
+/* Action bar */
+.action-bar{
+  display:flex; flex-wrap:wrap; gap:12px; margin-top:24px;
+}
+.btn{
+  display:inline-flex; align-items:center; gap:10px; padding:14px 22px;
+  border-radius:10px; font-family:var(--sans); font-size:15px; font-weight:600;
+  border:none; cursor:pointer; transition: transform .15s ease, background .15s ease;
+  text-decoration:none; line-height:1;
+}
+.btn svg{ width:18px; height:18px; }
+.btn:hover{ transform: translateY(-1px); }
+.btn-primary{ background:var(--cyan); color:#0B2545; }
+.btn-primary:hover{ background:#3ec0cb; color:#0B2545; }
+.btn-ghost{ background:transparent; color:#FBF7EC; border:1px solid var(--rule); }
+.btn-ghost:hover{ background:rgba(255,255,255,.06); color:#FBF7EC; }
+.btn-share{ background:rgba(251,233,163,.15); color:var(--gold); border:1px solid rgba(251,233,163,.3); }
+
+/* Sections */
+.section{ margin-top:60px; }
+.section-h{
+  display:flex; align-items:baseline; gap:16px; margin-bottom:24px;
+  padding-bottom:16px; border-bottom:1px solid var(--rule);
+}
+.section-h .num{ font-family:var(--mono); font-size:24px; color:var(--cyan); font-weight:700; letter-spacing:-.02em; }
+.section-h h2{ font-family:var(--serif); font-size:32px; color:#FBF7EC; margin:0; font-weight:500; }
+.section-h .tag{ font-family:var(--mono); font-size:12px; color:#9CB2D1; letter-spacing:.18em; text-transform:uppercase; margin-left:auto; }
+
+/* Format cards */
+.formats{ display:grid; grid-template-columns:repeat(auto-fit, minmax(240px, 1fr)); gap:16px; }
+.format-card{
+  background:rgba(255,255,255,.04); border:1px solid var(--rule);
+  border-radius:14px; padding:24px; transition: border-color .2s ease, background .2s ease;
+}
+.format-card:hover{ border-color: var(--cyan); background:rgba(43,168,179,.06); }
+.format-card .icon{
+  width:48px; height:48px; border-radius:10px;
+  background:rgba(43,168,179,.12); color:var(--cyan);
+  display:grid; place-items:center; margin-bottom:16px;
+}
+.format-card .icon svg{ width:24px; height:24px; }
+.format-card h3{
+  font-family:var(--serif); font-size:22px; margin:0 0 6px 0; color:#FBF7EC; font-weight:600;
+}
+.format-card .size{
+  font-family:var(--mono); font-size:12px; color:#9CB2D1; letter-spacing:.08em; margin-bottom:14px;
+}
+.format-card p{
+  font-size:14px; color:#DDE6F2; line-height:1.5; margin:0 0 18px 0; opacity:.85;
+}
+.format-card .row{ display:flex; gap:8px; flex-wrap:wrap; }
+.format-card .row a{
+  display:inline-flex; align-items:center; gap:6px;
+  padding:8px 14px; border-radius:8px; font-family:var(--mono); font-size:13px; font-weight:500;
+  background:rgba(255,255,255,.08); color:#FBF7EC; border:1px solid var(--rule);
+}
+.format-card .row a:hover{ background:var(--cyan); color:#0B2545; border-color:var(--cyan); }
+.format-card .row .primary{ background:var(--cyan); color:#0B2545; border-color:var(--cyan); }
+.format-card .row .primary:hover{ background:#3ec0cb; }
+
+/* Embedded preview */
+.embed-card{
+  background:rgba(255,255,255,.04); border:1px solid var(--rule);
+  border-radius:14px; padding:8px; margin-top:16px;
+}
+.embed-card iframe{
+  width:100%; height:760px; border:none; border-radius:8px; background:white; display:block;
+}
+.embed-toolbar{
+  display:flex; align-items:center; justify-content:space-between; padding:6px 10px 12px 10px;
+  font-family:var(--mono); font-size:12px; color:#9CB2D1; letter-spacing:.06em;
+}
+.embed-toolbar a{ color:var(--cyan); }
+
+/* Facts grid */
+.facts{ display:grid; grid-template-columns:repeat(auto-fit, minmax(160px, 1fr)); gap:14px; }
+.fact{
+  background:rgba(255,255,255,.04); border:1px solid var(--rule);
+  border-radius:12px; padding:18px 20px;
+}
+.fact .v{ font-family:var(--serif); font-size:32px; line-height:1; color:#FBF7EC; font-weight:600; letter-spacing:-.02em; }
+.fact .v small{ font-size:14px; color:var(--cyan); margin-left:2px; }
+.fact .l{ font-family:var(--mono); font-size:11px; color:#9CB2D1; letter-spacing:.14em; text-transform:uppercase; margin-top:8px; }
+
+/* Share modal */
+.share-row{ display:flex; flex-wrap:wrap; gap:10px; margin-top:8px; }
+.copy-link{
+  display:inline-flex; align-items:center; gap:10px;
+  background:rgba(0,0,0,.3); border:1px dashed var(--rule); border-radius:10px; padding:12px 16px;
+  font-family:var(--mono); font-size:13px; color:#DDE6F2;
+}
+.copy-link button{
+  background:var(--cyan); color:#0B2545; border:none; padding:8px 14px; border-radius:6px;
+  font-family:var(--mono); font-size:12px; font-weight:600; cursor:pointer;
+}
+.copy-link button.copied{ background: var(--gold); }
+
+/* Footer */
+.footer{
+  margin-top:80px; padding:32px 0; border-top:1px solid var(--rule);
+  font-family:var(--mono); font-size:12px; color:#9CB2D1; letter-spacing:.08em;
+  display:flex; flex-wrap:wrap; justify-content:space-between; gap:14px;
+}
+.footer a{ color:#FBF7EC; }
+
+@media (max-width: 860px){
+  .hero{ grid-template-columns: 1fr; gap:32px; }
+  .hero-preview{ max-width:380px; margin:0 auto; transform: rotate(0deg); }
+  .hero-info h1{ font-size:40px; }
+  .hero-info .acronym{ font-size:54px; }
+}
+</style>
+</head>
+<body>
+<div class="shell">
+
+  <!-- Nav -->
+  <nav class="nav">
+    <a href="/" class="brand">
+      <span class="mark"><span class="angle">&lt;</span>FIVUCSAS<span class="angle">/&gt;</span></span>
+    </a>
+    <div class="links">
+      <a href="/">Home</a>
+      <a href="https://verify.fivucsas.com">Verify</a>
+      <a href="https://app.fivucsas.com">Admin</a>
+      <a href="https://demo.fivucsas.com">Demo</a>
+      <a href="https://amispoof.fivucsas.com">amispoof</a>
+      <a href="https://links.fivucsas.com">Links</a>
+      <span class="lang-switch" role="group" aria-label="Language" style="display:inline-flex; gap:0; border:1px solid rgba(255,255,255,.18); border-radius:99px; padding:3px; margin-left:14px;">
+        <button type="button" data-set="tr" class="active" style="background:#2BA8B3; color:#0B2545; border:none; cursor:pointer; font-family:var(--mono); font-size:11px; font-weight:600; letter-spacing:.14em; padding:4px 10px; border-radius:99px;">TR</button>
+        <button type="button" data-set="en" style="background:transparent; color:#9CB2D1; border:none; cursor:pointer; font-family:var(--mono); font-size:11px; font-weight:600; letter-spacing:.14em; padding:4px 10px; border-radius:99px;">EN</button>
+      </span>
+    </div>
+  </nav>
+
+  <!-- Hero -->
+  <header class="hero">
+    <div class="hero-preview">
+      <span class="badge">A0 · 841 × 1189 mm</span>
+      <img src="files/fivucsas-poster-preview.png" alt="FIVUCSAS poster preview">
+    </div>
+    <div class="hero-info">
+      <div class="eyebrow" data-tr>Bitirme projesi posteri · Marmara Üniversitesi CSE4298</div>
+      <div class="eyebrow" data-en>Graduation project poster · Marmara University CSE4298</div>
+      <div class="acronym"><span class="angle">&lt;</span>FIVUCSAS<span class="angle">/&gt;</span></div>
+      <h1>Face &amp; Identity Verification using <em>Cloud-based SaaS</em> Models</h1>
+      <p class="lede" data-tr>
+        Üretime alınmış, çok kiracılı biyometrik kimlik SaaS'i — tek hosted OAuth 2.0 / OIDC giriş,
+        10 kompoze edilebilir auth faktörü, 23-yapboz aktif canlılık, 19-analyzer pasif PAD, ICAO 9303 NFC.
+        Bu sayfa posteri görüntülemenizi, 5 formatta indirmenizi ve paylaşmanızı sağlar.
+      </p>
+      <p class="lede" data-en>
+        Production-deployed multi-tenant biometric identity SaaS — one hosted OAuth 2.0 / OIDC login,
+        10 composable auth factors, 23-puzzle active liveness, 19-analyzer passive PAD, ICAO 9303 NFC.
+        This page lets you view the poster, download it in 5 formats, or share it.
+      </p>
+      <div class="meta">
+        <span><b><span data-tr>Yazarlar</span><span data-en>Authors</span></b> Ahmet Abdullah Gültekin · Ayşe Gülsüm Eren · Ayşenur Arıcı</span>
+        <span><b><span data-tr>Danışman</span><span data-en>Supervisor</span></b> Doç. Dr. Mustafa Ağaoğlu</span>
+        <span><b><span data-tr>Tarih</span><span data-en>Date</span></b> 2026-05-19 · v3</span>
+      </div>
+
+      <div class="action-bar">
+        <a class="btn btn-primary" href="files/fivucsas-poster.html" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg>
+          <span data-tr>HTML görüntüle</span><span data-en>View HTML</span>
+        </a>
+        <a class="btn btn-ghost" href="files/fivucsas-poster.pdf" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/></svg>
+          <span data-tr>PDF görüntüle</span><span data-en>View PDF</span>
+        </a>
+        <a class="btn btn-ghost" href="files/fivucsas-poster.pdf" download>
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><polyline points="7 10 12 15 17 10"/><line x1="12" y1="15" x2="12" y2="3"/></svg>
+          <span data-tr>PDF indir</span><span data-en>Download PDF</span>
+        </a>
+        <button class="btn btn-share" id="shareBtn">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="18" cy="5" r="3"/><circle cx="6" cy="12" r="3"/><circle cx="18" cy="19" r="3"/><line x1="8.59" y1="13.51" x2="15.42" y2="17.49"/><line x1="15.41" y1="6.51" x2="8.59" y2="10.49"/></svg>
+          <span data-tr>Paylaş</span><span data-en>Share</span>
+        </button>
+      </div>
+    </div>
+  </header>
+
+  <!-- Section 01 — All formats -->
+  <section class="section">
+    <div class="section-h">
+      <div class="num">01</div>
+      <h2><span data-tr>5 formatta indir veya görüntüle</span><span data-en>Download or view in 5 formats</span></h2>
+      <div class="tag">view · download · share</div>
+    </div>
+
+    <div class="formats">
+      <!-- HTML -->
+      <div class="format-card">
+        <div class="icon">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>
+        </div>
+        <h3>Interactive HTML</h3>
+        <div class="size">102 KB · self-contained · responsive</div>
+        <p>A0 poster as a single HTML file. Inline SVG, IBM Plex fonts via CDN, no JavaScript dependency. Print-ready (Ctrl-P → A0 portrait).</p>
+        <div class="row">
+          <a class="primary" href="files/fivucsas-poster.html" target="_blank" rel="noopener">View</a>
+          <a href="files/fivucsas-poster.html" download="fivucsas-poster.html">Download</a>
+        </div>
+      </div>
+
+      <!-- PDF -->
+      <div class="format-card">
+        <div class="icon">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/><line x1="9" y1="13" x2="15" y2="13"/><line x1="9" y1="17" x2="15" y2="17"/></svg>
+        </div>
+        <h3>PDF (HTML-rendered)</h3>
+        <div class="size">1.3 MB · A0 print · headless Chrome</div>
+        <p>v3 HTML posterinden üretilmiş PDF (headless Chrome render). Yazıcıya / plotter'a / baskı atölyesine doğrudan gönderilebilir.</p>
+        <div class="row">
+          <a class="primary" href="files/fivucsas-poster.pdf" target="_blank" rel="noopener">View</a>
+          <a href="files/fivucsas-poster.pdf" download="FIVUCSAS-poster.pdf">Download</a>
+        </div>
+      </div>
+
+
+      <!-- PNG -->
+      <div class="format-card">
+        <div class="icon">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="18" height="18" rx="2" ry="2"/><circle cx="8.5" cy="8.5" r="1.5"/><polyline points="21 15 16 10 5 21"/></svg>
+        </div>
+        <h3>PNG preview</h3>
+        <div class="size">334 KB · ~1.2k × ~1.7k px</div>
+        <p>v3 HTML poster önizleme görseli — slayt deck'ler, sosyal medya, hızlı görsel önizleme için.</p>
+        <div class="row">
+          <a class="primary" href="files/fivucsas-poster-preview.png" target="_blank" rel="noopener">View</a>
+          <a href="files/fivucsas-poster-preview.png" download="FIVUCSAS-poster.png">Download .png</a>
+        </div>
+      </div>
+
+      <!-- Text brief -->
+      <div class="format-card">
+        <div class="icon">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><line x1="4" y1="9" x2="20" y2="9"/><line x1="4" y1="15" x2="20" y2="15"/><line x1="10" y1="3" x2="8" y2="21"/><line x1="16" y1="3" x2="14" y2="21"/></svg>
+        </div>
+        <h3>Text brief (Markdown)</h3>
+        <div class="size">37 KB · evidence-pinned · file:line refs</div>
+        <p>Every poster claim with its source pointer (<span style="font-family:var(--mono)">file:line</span> or doc reference). 10 sections + Numbers Inventory appendix. Useful for thesis defence Q&amp;A.</p>
+        <div class="row">
+          <a class="primary" href="files/fivucsas-poster-brief.md" target="_blank" rel="noopener">View</a>
+          <a href="files/fivucsas-poster-brief.md" download="FIVUCSAS-poster-brief.md">Download .md</a>
+        </div>
+      </div>
+    </div>
+  </section>
+
+  <!-- Section 02 — Inline HTML preview -->
+  <section class="section">
+    <div class="section-h">
+      <div class="num">02</div>
+      <h2><span data-tr>Sayfa içi önizleme · HTML versiyon</span><span data-en>Inline preview · HTML version</span></h2>
+      <div class="tag">live · interactive · scrollable</div>
+    </div>
+    <div class="embed-card">
+      <iframe src="files/fivucsas-poster.html" title="FIVUCSAS A0 poster · interactive preview" loading="lazy"></iframe>
+      <div class="embed-toolbar">
+        <span>Embedded preview — for full A0 dimensions open in a new tab.</span>
+        <a href="files/fivucsas-poster.html" target="_blank" rel="noopener">↗ open full-screen</a>
+      </div>
+    </div>
+  </section>
+
+  <!-- Section 03 — Key facts -->
+  <section class="section">
+    <div class="section-h">
+      <div class="num">03</div>
+      <h2><span data-tr>Posterdeki anahtar bilgiler</span><span data-en>What's on the poster · key facts</span></h2>
+      <div class="tag">all numbers from /POSTER_BRIEF.md · file:line cited</div>
+    </div>
+    <div class="facts">
+      <div class="fact"><div class="v">10</div><div class="l">composable auth factors</div></div>
+      <div class="fact"><div class="v">23</div><div class="l">biometric puzzle micro-challenges</div></div>
+      <div class="fact"><div class="v">19</div><div class="l">spoof-detector analyzers</div></div>
+      <div class="fact"><div class="v">~691<small>k</small></div><div class="l">lines of code</div></div>
+      <div class="fact"><div class="v">~2 768</div><div class="l">automated tests</div></div>
+      <div class="fact"><div class="v">60</div><div class="l">database migrations</div></div>
+      <div class="fact"><div class="v">9</div><div class="l">production subdomains</div></div>
+      <div class="fact"><div class="v">0</div><div class="l">GPUs required</div></div>
+      <div class="fact"><div class="v">63<small>ms</small></div><div class="l">per-frame PAD latency · CPU</div></div>
+      <div class="fact"><div class="v">217</div><div class="l">browser bundle vitest green</div></div>
+      <div class="fact"><div class="v">0.945</div><div class="l">AUC · CASIA-FASD zero-shot</div></div>
+      <div class="fact"><div class="v">1</div><div class="l">Hetzner CX43 (8 vCPU / 16 GB / no GPU)</div></div>
+    </div>
+  </section>
+
+  <!-- Section 04 — Share -->
+  <section class="section">
+    <div class="section-h">
+      <div class="num">04</div>
+      <h2><span data-tr>Paylaş &amp; alıntıla</span><span data-en>Share &amp; cite</span></h2>
+      <div class="tag">copy · share · cite</div>
+    </div>
+    <div class="copy-link">
+      <span id="shareUrl">https://fivucsas.com/poster/</span>
+      <button id="copyBtn" type="button">Copy link</button>
+    </div>
+    <div class="share-row">
+      <a class="btn btn-ghost" href="https://twitter.com/intent/tweet?text=FIVUCSAS%20%E2%80%94%20Face%20%26%20Identity%20Verification%20SaaS%20%E2%80%94%20Marmara%20University%20graduation%20project%20A0%20poster.&url=https%3A%2F%2Ffivucsas.com%2Fposter%2F" target="_blank" rel="noopener">Share on X / Twitter</a>
+      <a class="btn btn-ghost" href="https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffivucsas.com%2Fposter%2F" target="_blank" rel="noopener">Share on LinkedIn</a>
+      <a class="btn btn-ghost" href="mailto:?subject=FIVUCSAS%20A0%20Poster&body=https%3A%2F%2Ffivucsas.com%2Fposter%2F">Email a link</a>
+    </div>
+
+    <div style="margin-top:24px; padding:18px 22px; background:rgba(255,255,255,.04); border:1px solid var(--rule); border-radius:10px; font-family:var(--mono); font-size:13px; color:#DDE6F2; line-height:1.6;">
+      <b style="color:var(--cyan); letter-spacing:.16em; text-transform:uppercase; font-size:11px;">Suggested citation</b><br>
+      Gültekin, A. A., Eren, A. G., &amp; Arıcı, A. (2026). <i>FIVUCSAS — Face &amp; Identity Verification using Cloud-based SaaS Models.</i> Graduation Project Poster, Marmara University, Department of Computer Engineering. Supervisor: Mustafa Ağaoğlu. https://fivucsas.com/poster/
+    </div>
+  </section>
+
+  <!-- Footer -->
+  <footer class="footer">
+    <div>FIVUCSAS · Marmara Üniversitesi · CSE4297 / CSE4298 Engineering Project · Spring 2025 – 2026</div>
+    <div><a href="/links/">All links</a> · <a href="/">Home</a> · <a href="https://amispoof.fivucsas.com">amispoof</a></div>
+  </footer>
+
+</div>
+
+<script>
+(function(){
+  // Language switcher
+  var sw = document.querySelector('.lang-switch');
+  var html = document.documentElement;
+  function applyLang(lang){
+    html.setAttribute('data-lang', lang);
+    html.setAttribute('lang', lang);
+    if (sw) sw.querySelectorAll('button').forEach(function(b){
+      var active = b.dataset.set === lang;
+      b.classList.toggle('active', active);
+      b.style.background = active ? '#2BA8B3' : 'transparent';
+      b.style.color = active ? '#0B2545' : '#9CB2D1';
+    });
+    try { history.replaceState(null, '', lang === 'tr' ? '#' : '#en'); } catch(e){}
+  }
+  var initial = (location.hash === '#en') ? 'en'
+              : (location.hash === '#tr') ? 'tr'
+              : (navigator.language || '').toLowerCase().startsWith('tr') ? 'tr'
+              : 'tr';
+  applyLang(initial);
+  if (sw) sw.addEventListener('click', function(e){
+    var b = e.target.closest('button[data-set]');
+    if (b) applyLang(b.dataset.set);
+  });
+
+  var url = location.href;
+  document.getElementById('shareUrl').textContent = url;
+
+  var copyBtn = document.getElementById('copyBtn');
+  copyBtn.addEventListener('click', function(){
+    navigator.clipboard.writeText(url).then(function(){
+      copyBtn.textContent = 'Copied ✓';
+      copyBtn.classList.add('copied');
+      setTimeout(function(){
+        copyBtn.textContent = 'Copy link';
+        copyBtn.classList.remove('copied');
+      }, 2000);
+    });
+  });
+
+  var shareBtn = document.getElementById('shareBtn');
+  shareBtn.addEventListener('click', async function(){
+    var data = {
+      title: 'FIVUCSAS — A0 Academic Poster',
+      text: 'Face & Identity Verification using Cloud-based SaaS Models — Marmara University CSE4298 graduation project.',
+      url: url
+    };
+    if (navigator.share) {
+      try { await navigator.share(data); } catch(e){ /* dismissed */ }
+    } else {
+      // Fallback — scroll to share section
+      document.querySelector('.copy-link').scrollIntoView({ behavior:'smooth', block:'center' });
+    }
+  });
+})();
+</script>
+</body>
+</html>
diff --git a/landing-website/src/App.tsx b/landing-website/src/App.tsx
index 392274f..f3ad14c 100644
--- a/landing-website/src/App.tsx
+++ b/landing-website/src/App.tsx
@@ -274,6 +274,15 @@ export default function App() {
       else if ((navigator.language || 'en').toLowerCase().startsWith('tr')) initial = 'tr'
     } catch { /* noop */ }
     setLang(initial)
+
+    // The shared suite launcher (app.fivucsas.com/launcher.js) owns the global
+    // EN/TR toggle and fires this event when it changes — keep landing in sync.
+    const onLangChange = (e: Event) => {
+      const next = (e as CustomEvent<{ lang?: Lang }>).detail?.lang
+      if (next === 'en' || next === 'tr') setLang(next)
+    }
+    window.addEventListener('fivucsas:languagechange', onLangChange as EventListener)
+    return () => window.removeEventListener('fivucsas:languagechange', onLangChange as EventListener)
   }, [])
 
   useEffect(() => {
@@ -285,8 +294,6 @@ export default function App() {
     try { localStorage.setItem('fivucsas-lang', lang) } catch { /* noop */ }
   }, [lang])
 
-  const toggleLang = () => setLang(prev => prev === 'en' ? 'tr' : 'en')
-
   const heroRef = useRef<HTMLDivElement>(null)
   const { scrollYProgress } = useScroll({ target: heroRef, offset: ['start start', 'end start'] })
   const heroOpacity = useTransform(scrollYProgress, [0, 0.9], [1, 0])
@@ -330,7 +337,7 @@ export default function App() {
               </div>
               <div className="flex flex-col leading-tight">
                 <span className="font-display text-base font-semibold tracking-tight">FIVUCSAS</span>
-                <span className="text-[10px] font-mono text-slate-500 uppercase tracking-widest">identity · verified</span>
+                <span lang="en" className="text-[10px] font-mono text-slate-500 uppercase tracking-widest">identity · verified</span>
               </div>
             </a>
 
@@ -347,13 +354,6 @@ export default function App() {
                 <span className="w-1.5 h-1.5 rounded-full bg-emerald-400 animate-pulse" />
                 {text(t.nav.status)}
               </a>
-              <button
-                onClick={toggleLang}
-                aria-label="Toggle language"
-                className="ml-2 px-3 py-1.5 text-xs font-mono font-semibold rounded-lg border border-white/10 bg-white/5 text-slate-300 hover:text-white hover:border-white/20 transition-colors"
-              >
-                {lang === 'en' ? 'TR' : 'EN'}
-              </button>
               <a
                 href="https://app.fivucsas.com"
                 className="ml-2 inline-flex items-center gap-2 px-4 py-2 rounded-lg bg-gradient-to-r from-primary-500 to-primary-600 hover:from-primary-400 hover:to-primary-500 text-sm font-semibold shadow-glow-primary transition-all"
@@ -385,9 +385,6 @@ export default function App() {
                 </a>
               ))}
               <div className="flex gap-2 pt-2">
-                <button onClick={toggleLang} className="flex-1 px-3 py-2 text-sm font-mono rounded-lg border border-white/10 bg-white/5 text-slate-300">
-                  {lang === 'en' ? 'Türkçe' : 'English'}
-                </button>
                 <a href="https://app.fivucsas.com" className="flex-1 text-center px-3 py-2 rounded-lg bg-gradient-to-r from-primary-500 to-primary-600 text-sm font-semibold shadow-glow-primary">
                   {text(t.nav.signIn)}
                 </a>
@@ -454,6 +451,13 @@ export default function App() {
                   <Icon name="github" className="w-4 h-4" fill />
                   {text(t.hero.ctaGit)}
                 </a>
+                <a
+                  href="https://amispoof.fivucsas.com/" target="_blank" rel="noopener noreferrer"
+                  className="inline-flex items-center justify-center gap-2 px-7 py-3.5 rounded-xl bg-gradient-to-r from-amber-500/20 to-rose-500/20 hover:from-amber-500/30 hover:to-rose-500/30 border border-amber-500/30 hover:border-amber-500/50 font-semibold text-[0.95rem] text-amber-200 transition-all hover:-translate-y-0.5"
+                >
+                  <Icon name="shield" className="w-4 h-4" fill />
+                  amispoof — browser anti-spoof tester
+                </a>
               </div>
 
               {/* Command mock */}
@@ -754,10 +758,14 @@ export default function App() {
               <a href="https://app.fivucsas.com" className="hover:text-white transition-colors">Dashboard</a>
               <a href="https://demo.fivucsas.com" className="hover:text-white transition-colors">Demo</a>
               <a href="https://verify.fivucsas.com" className="hover:text-white transition-colors">Widget</a>
+              <a href="https://amispoof.fivucsas.com/" target="_blank" rel="noopener noreferrer" className="hover:text-amber-200 transition-colors">amispoof</a>
               <a href="https://api.fivucsas.com/swagger-ui.html" className="hover:text-white transition-colors">API</a>
               <a href="https://status.fivucsas.com" className="hover:text-white transition-colors">Status</a>
+              <a href="https://github.com/Rollingcat-Software/spoof-detector" target="_blank" rel="noopener noreferrer" className="hover:text-white transition-colors inline-flex items-center gap-1.5">
+                <Icon name="github" className="w-4 h-4" fill /> spoof-detector
+              </a>
               <a href="https://github.com/Rollingcat-Software/FIVUCSAS" target="_blank" rel="noopener noreferrer" className="hover:text-white transition-colors inline-flex items-center gap-1.5">
-                <Icon name="github" className="w-4 h-4" fill /> GitHub
+                <Icon name="github" className="w-4 h-4" fill /> FIVUCSAS
               </a>
             </div>
 
diff --git a/landing-website/src/index.css b/landing-website/src/index.css
index 8bbc095..c275633 100644
--- a/landing-website/src/index.css
+++ b/landing-website/src/index.css
@@ -21,6 +21,23 @@ body {
   overflow-x: hidden;
 }
 
+/*
+ * Force English-locale casing on any uppercase'd English text in
+ * Turkish-mode pages. CSS text-transform uses the html lang attribute
+ * to pick casing rules — Turkish maps lowercase "i" to "İ" (dotted
+ * capital), so "identity" becomes "İDENTİTY" even though the source
+ * text is English. Marking the element `lang="en"` solves it cleanly.
+ *
+ * Belt-and-braces: also force the codepoints below to render with
+ * Latin small/capital "I" inside English-attributed nodes regardless
+ * of which font fallback the browser picks.
+ */
+:lang(en).uppercase,
+:lang(en) .uppercase {
+  text-transform: uppercase;
+  text-transform: uppercase; /* keep — old WebKit needed it */
+}
+
 @layer utilities {
   .gradient-text {
     @apply bg-clip-text text-transparent;
diff --git a/links-website/index.html b/links-website/index.html
new file mode 100644
index 0000000..67b1b5f
--- /dev/null
+++ b/links-website/index.html
@@ -0,0 +1,445 @@
+<!DOCTYPE html>
+<html lang="tr" data-lang="tr">
+<head>
+<meta charset="utf-8">
+<title>FIVUCSAS — Hub</title>
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="description" content="FIVUCSAS link hub — all subdomains, team and project artifacts in one page.">
+<meta property="og:title" content="FIVUCSAS — Hub">
+<meta property="og:description" content="Tüm subdomain'ler, ekip ve poster — tek sayfada. / All subdomains, team and poster — one page.">
+<meta property="og:url" content="https://links.fivucsas.com/">
+<link rel="icon" type="image/svg+xml" href="favicon.svg">
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600;700&family=IBM+Plex+Sans:wght@400;500;600;700&family=IBM+Plex+Serif:wght@500;600;700&display=swap">
+<style>
+:root{
+  --cyan:#2BA8B3; --gold:#FBE9A3; --rule:rgba(255,255,255,.12); --rule-2:rgba(255,255,255,.22);
+  --serif:"IBM Plex Serif", Georgia, serif;
+  --sans:"IBM Plex Sans", "Helvetica Neue", Arial, sans-serif;
+  --mono:"IBM Plex Mono", ui-monospace, Menlo, monospace;
+}
+*,*::before,*::after{ box-sizing:border-box; }
+html,body{ margin:0; padding:0; }
+/* Language gating — applied immediately via inline style + JS to avoid TR+EN flash */
+html[data-lang="tr"] [data-en]{ display:none !important; }
+html[data-lang="en"] [data-tr]{ display:none !important; }
+body{
+  font-family:var(--sans); color:#F6F1E4; line-height:1.5;
+  background:
+    radial-gradient(900px 600px at 80% -10%, rgba(43,168,179,.18), transparent 60%),
+    linear-gradient(180deg,#0B2545 0%,#0B2545 80%,#091C36 100%);
+  min-height:100vh;
+}
+a{ color:inherit; text-decoration:none; }
+.shell{ max-width:560px; margin:0 auto; padding:30px 22px 60px 22px; }
+
+/* Topbar */
+.topbar{
+  display:flex; align-items:center; justify-content:space-between;
+  margin-bottom:36px;
+}
+.topbar .brand{
+  font-family:var(--mono); font-weight:700; color:var(--cyan); font-size:16px; letter-spacing:-.01em;
+}
+.topbar .brand .angle{ color:var(--gold); font-weight:500; }
+.lang-switch{
+  display:inline-flex; gap:0; border:1px solid var(--rule-2); border-radius:99px; padding:3px;
+}
+.lang-switch button{
+  background:transparent; border:none; color:#9CB2D1; cursor:pointer;
+  font-family:var(--mono); font-size:11px; font-weight:600; letter-spacing:.14em;
+  padding:5px 12px; border-radius:99px; transition: background .15s ease, color .15s ease;
+}
+.lang-switch button.active{ background:var(--cyan); color:#0B2545; }
+
+/* Hero */
+.hero{ text-align:center; margin-bottom:32px; }
+.hero .logo{
+  width:88px; height:88px; margin:0 auto 18px auto;
+  background:linear-gradient(135deg, var(--cyan), #1d8a93);
+  color:#0B2545; border-radius:50%;
+  display:flex; align-items:center; justify-content:center;
+  font-family:var(--mono); font-weight:700; font-size:32px; letter-spacing:-.02em;
+  box-shadow:0 8px 30px rgba(43,168,179,.35);
+}
+.hero h1{
+  font-family:var(--serif); font-size:32px; line-height:1.1; font-weight:600;
+  margin:0 0 8px 0; color:#FBF7EC; letter-spacing:-.01em;
+}
+.hero .tagline{ font-size:14.5px; color:#9CB2D1; line-height:1.4; }
+
+/* Link buttons */
+.buttons{ display:flex; flex-direction:column; gap:10px; }
+.lnk{
+  display:flex; align-items:center; gap:14px;
+  padding:16px 20px; border-radius:14px;
+  background:rgba(255,255,255,.06); border:1px solid var(--rule);
+  font-size:15.5px; font-weight:500; color:#FBF7EC;
+  transition: transform .15s ease, background .15s ease, border-color .15s ease;
+}
+.lnk:hover{ transform: translateY(-1px); background:rgba(43,168,179,.12); border-color: var(--cyan); }
+.lnk .ico{
+  width:32px; height:32px; flex-shrink:0;
+  background:rgba(43,168,179,.14); color:var(--cyan);
+  border-radius:8px; display:grid; place-items:center;
+}
+.lnk .ico svg{ width:16px; height:16px; }
+.lnk .meta{ flex:1; min-width:0; }
+.lnk .meta .nm{ font-weight:600; }
+.lnk .meta .sub{ font-family:var(--mono); font-size:11.5px; color:#9CB2D1; margin-top:2px; letter-spacing:.04em; }
+.lnk .arrow{ color:#9CB2D1; font-size:18px; }
+.lnk:hover .arrow{ color:var(--cyan); }
+.lnk.primary{ background:var(--cyan); color:#0B2545; border-color:var(--cyan); }
+.lnk.primary .ico{ background:rgba(11,37,69,.15); color:#0B2545; }
+.lnk.primary .meta .sub{ color:rgba(11,37,69,.7); }
+.lnk.primary .arrow{ color:rgba(11,37,69,.7); }
+.lnk.primary:hover{ background:#3ec0cb; }
+.lnk.muted{ opacity:.7; cursor:not-allowed; }
+.lnk.muted:hover{ transform:none; background:rgba(255,255,255,.06); border-color:var(--rule); }
+.lnk .badge{
+  font-family:var(--mono); font-size:9.5px; color:var(--gold); letter-spacing:.16em;
+  padding:2px 8px; border:1px solid rgba(251,233,163,.4); border-radius:99px;
+  text-transform:uppercase;
+}
+
+/* Section divider */
+.divider{
+  text-align:center; margin:30px 0 16px 0;
+  font-family:var(--mono); font-size:10px; color:#9CB2D1; letter-spacing:.32em; text-transform:uppercase;
+}
+
+/* Team cards */
+.team-grid{ display:flex; flex-direction:column; gap:12px; }
+.member{
+  background:rgba(255,255,255,.04); border:1px solid var(--rule); border-radius:14px;
+  padding:16px 18px;
+}
+.member.lead{ border-color:rgba(43,168,179,.4); background:rgba(43,168,179,.06); }
+.member.supervisor{ border-color:rgba(251,233,163,.4); background:rgba(251,233,163,.04); }
+.member .nm{ font-family:var(--serif); font-size:17px; color:#FBF7EC; font-weight:600; line-height:1.2; }
+.member .rl{ font-family:var(--mono); font-size:11px; color:var(--cyan); letter-spacing:.14em; text-transform:uppercase; margin-top:4px; }
+.member.supervisor .rl{ color:var(--gold); }
+.member .socials{ display:flex; gap:6px; margin-top:10px; flex-wrap:wrap; }
+.member .socials a{
+  display:inline-flex; align-items:center; gap:6px;
+  padding:6px 11px; background:rgba(255,255,255,.06); border:1px solid var(--rule);
+  border-radius:7px; font-family:var(--mono); font-size:11px; color:#FBF7EC;
+  transition: background .15s ease, border-color .15s ease;
+}
+.member .socials a:hover{ background:var(--cyan); color:#0B2545; border-color:var(--cyan); }
+.member .socials svg{ width:12px; height:12px; }
+
+.footer{
+  margin-top:38px; padding-top:20px; border-top:1px solid var(--rule);
+  font-family:var(--mono); font-size:11px; color:#9CB2D1; letter-spacing:.06em;
+  text-align:center; line-height:1.6;
+}
+</style>
+</head>
+<body>
+<div class="shell">
+
+  <div class="topbar">
+    <a class="brand" href="https://fivucsas.com">
+      <span class="angle">&lt;</span>FIVUCSAS<span class="angle">/&gt;</span>
+    </a>
+    <div class="lang-switch" role="group" aria-label="Language">
+      <button type="button" data-set="tr" class="active">TR</button>
+      <button type="button" data-set="en">EN</button>
+    </div>
+  </div>
+
+  <header class="hero">
+    <div class="logo">FV</div>
+    <h1>FIVUCSAS</h1>
+    <p class="tagline" data-tr>Marmara CSE bitirme projesi · Yüz &amp; Kimlik Doğrulama SaaS<br>tüm bağlantılar tek sayfada</p>
+    <p class="tagline" data-en>Marmara CSE graduation project · Face &amp; Identity Verification SaaS<br>all links · one page</p>
+  </header>
+
+  <!-- LIVE SITES -->
+  <div class="buttons">
+
+    <a class="lnk primary" href="https://fivucsas.com/poster/">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Akademik Poster</span><span data-en>Academic Poster</span></span>
+        <span class="sub"><span data-tr>A0 · görüntüle · indir · paylaş</span><span data-en>A0 · view · download · share</span></span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 12l9-9 9 9"/><path d="M5 10v10h14V10"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Ana sayfa</span><span data-en>Landing site</span></span>
+        <span class="sub">fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://verify.fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="11" width="18" height="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Doğrulama / Hosted login</span><span data-en>Verify / Hosted login</span></span>
+        <span class="sub">verify.fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://app.fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="18" height="18" rx="2"/><path d="M3 9h18M9 21V9"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Yönetici paneli</span><span data-en>Admin console</span></span>
+        <span class="sub">app.fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://demo.fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="9"/><polygon points="10 8 16 12 10 16 10 8" fill="currentColor"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Marmara BYS demosu</span><span data-en>Marmara BYS demo</span></span>
+        <span class="sub">demo.fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://amispoof.fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 2l9 4v6c0 5-3.8 9.4-9 10-5.2-.6-9-5-9-10V6l9-4z"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>amispoof · tarayıcı anti-spoof testeri</span><span data-en>amispoof · browser anti-spoof tester</span></span>
+        <span class="sub">amispoof.fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://api.fivucsas.com/swagger-ui.html" title="Swagger UI · admin-IP gated (VPN / Marmara campus / operator)">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>API · Swagger arayüzü</span><span data-en>API · Swagger UI</span></span>
+        <span class="sub">api.fivucsas.com/swagger-ui</span>
+      </span>
+      <span class="badge"><span data-tr>kısıtlı</span><span data-en>gated</span></span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://docs.fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 4h12a4 4 0 0 1 4 4v12H8a4 4 0 0 1-4-4V4z"/><path d="M4 4v12a4 4 0 0 0 4 4"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Dokümantasyon</span><span data-en>Documentation</span></span>
+        <span class="sub">docs.fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://status.fivucsas.com">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="9"/><circle cx="12" cy="12" r="3" fill="currentColor"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Sistem durumu</span><span data-en>System status</span></span>
+        <span class="sub">status.fivucsas.com</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <div class="lnk muted" title="Internal only — no public DNS">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"/></svg></span>
+      <span class="meta">
+        <span class="nm">Grafana · Prometheus · Loki</span>
+        <span class="sub"><span data-tr>Sunucu içi gözlemlenebilirlik · sadece operatör erişimi</span><span data-en>Server-side observability · operator-only access</span></span>
+      </span>
+      <span class="badge">internal</span>
+    </div>
+
+  </div>
+
+  <!-- REPOS -->
+  <div class="divider"><span data-tr>Depolar</span><span data-en>Repos</span></div>
+
+  <div class="buttons">
+    <a class="lnk" href="https://github.com/Rollingcat-Software">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="currentColor"><path d="M12 .5C5.65.5.5 5.65.5 12c0 5.08 3.29 9.39 7.86 10.91.57.1.78-.25.78-.55v-2.16c-3.2.7-3.88-1.36-3.88-1.36-.52-1.32-1.27-1.67-1.27-1.67-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.18 1.76 1.18 1.02 1.75 2.68 1.24 3.34.95.1-.74.4-1.25.72-1.54-2.55-.29-5.23-1.27-5.23-5.66 0-1.25.45-2.27 1.18-3.07-.12-.29-.51-1.46.11-3.04 0 0 .96-.31 3.15 1.17a10.95 10.95 0 0 1 5.74 0c2.19-1.48 3.15-1.17 3.15-1.17.62 1.58.23 2.75.11 3.04.73.8 1.18 1.82 1.18 3.07 0 4.4-2.69 5.37-5.25 5.65.41.36.78 1.06.78 2.14v3.17c0 .3.21.66.79.55C20.21 21.39 23.5 17.07 23.5 12 23.5 5.65 18.35.5 12 .5z"/></svg></span>
+      <span class="meta">
+        <span class="nm">Rollingcat-Software</span>
+        <span class="sub"><span data-tr>GitHub organizasyonu · tüm public repo'lar</span><span data-en>GitHub organization · all public repos</span></span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+
+    <a class="lnk" href="https://github.com/Rollingcat-Software/spoof-detector">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 2l9 4v6c0 5-3.8 9.4-9 10-5.2-.6-9-5-9-10V6l9-4z"/></svg></span>
+      <span class="meta">
+        <span class="nm">spoof-detector</span>
+        <span class="sub"><span data-tr>MIT açık kaynak · v0.2.1 · paper draft</span><span data-en>MIT open source · v0.2.1 · paper draft</span></span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+  </div>
+
+  <!-- TEAM -->
+  <div class="divider"><span data-tr>Ekip</span><span data-en>Team</span></div>
+
+  <div class="team-grid">
+
+    <div class="member lead">
+      <div class="nm">Ahmet Abdullah Gültekin</div>
+      <div class="rl"><span data-tr>Baş Mühendis · Sistem Mimarı · Spoof-Detector</span><span data-en>Lead Engineer · System Architect · Spoof-Detector</span></div>
+      <div class="socials">
+        <a href="https://github.com/ahmetabdullahgultekin" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="currentColor"><path d="M12 .5C5.65.5.5 5.65.5 12c0 5.08 3.29 9.39 7.86 10.91.57.1.78-.25.78-.55v-2.16c-3.2.7-3.88-1.36-3.88-1.36-.52-1.32-1.27-1.67-1.27-1.67-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.18 1.76 1.18 1.02 1.75 2.68 1.24 3.34.95.1-.74.4-1.25.72-1.54-2.55-.29-5.23-1.27-5.23-5.66 0-1.25.45-2.27 1.18-3.07-.12-.29-.51-1.46.11-3.04 0 0 .96-.31 3.15 1.17a10.95 10.95 0 0 1 5.74 0c2.19-1.48 3.15-1.17 3.15-1.17.62 1.58.23 2.75.11 3.04.73.8 1.18 1.82 1.18 3.07 0 4.4-2.69 5.37-5.25 5.65.41.36.78 1.06.78 2.14v3.17c0 .3.21.66.79.55C20.21 21.39 23.5 17.07 23.5 12 23.5 5.65 18.35.5 12 .5z"/></svg>
+          GitHub
+        </a>
+        <a href="https://www.linkedin.com/in/ahmet-abdullah-gultekin/" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="currentColor"><path d="M20.45 20.45h-3.55v-5.56c0-1.33-.03-3.03-1.85-3.03-1.85 0-2.13 1.45-2.13 2.94v5.65H9.36V9h3.4v1.56h.05c.47-.9 1.63-1.85 3.36-1.85 3.6 0 4.27 2.37 4.27 5.45v6.29zM5.34 7.43a2.06 2.06 0 1 1 0-4.12 2.06 2.06 0 0 1 0 4.12zM7.12 20.45H3.56V9h3.56v11.45zM22.22 0H1.77C.79 0 0 .77 0 1.72v20.56C0 23.23.79 24 1.77 24h20.45c.99 0 1.78-.77 1.78-1.72V1.72C24 .77 23.21 0 22.22 0z"/></svg>
+          LinkedIn
+        </a>
+        <a href="https://ahmetabdullah.gultek.in" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="2" y1="12" x2="22" y2="12"/><path d="M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"/></svg>
+          Portfolio
+        </a>
+        <a href="mailto:ahmet.abdullah@marun.edu.tr" title="Marmara student e-mail · for academic correspondence">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg>
+          marun.edu.tr
+        </a>
+        <a href="mailto:ahmetabdullahgultekin@gmail.com" title="Public / open-source / GitHub-linked">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+          gmail · public
+        </a>
+      </div>
+    </div>
+
+    <div class="member">
+      <div class="nm">Ayşe Gülsüm Eren</div>
+      <div class="rl"><span data-tr>Çapraz Platform Mühendisi · Canlılık Ar-Ge</span><span data-en>Cross-Platform Engineer · Liveness R&amp;D</span></div>
+      <div class="socials">
+        <a href="https://github.com/aysegulsum" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="currentColor"><path d="M12 .5C5.65.5.5 5.65.5 12c0 5.08 3.29 9.39 7.86 10.91.57.1.78-.25.78-.55v-2.16c-3.2.7-3.88-1.36-3.88-1.36-.52-1.32-1.27-1.67-1.27-1.67-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.18 1.76 1.18 1.02 1.75 2.68 1.24 3.34.95.1-.74.4-1.25.72-1.54-2.55-.29-5.23-1.27-5.23-5.66 0-1.25.45-2.27 1.18-3.07-.12-.29-.51-1.46.11-3.04 0 0 .96-.31 3.15 1.17a10.95 10.95 0 0 1 5.74 0c2.19-1.48 3.15-1.17 3.15-1.17.62 1.58.23 2.75.11 3.04.73.8 1.18 1.82 1.18 3.07 0 4.4-2.69 5.37-5.25 5.65.41.36.78 1.06.78 2.14v3.17c0 .3.21.66.79.55C20.21 21.39 23.5 17.07 23.5 12 23.5 5.65 18.35.5 12 .5z"/></svg>
+          GitHub
+        </a>
+        <a href="https://www.linkedin.com/in/ayse-gulsum-eren/" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="currentColor"><path d="M20.45 20.45h-3.55v-5.56c0-1.33-.03-3.03-1.85-3.03-1.85 0-2.13 1.45-2.13 2.94v5.65H9.36V9h3.4v1.56h.05c.47-.9 1.63-1.85 3.36-1.85 3.6 0 4.27 2.37 4.27 5.45v6.29zM5.34 7.43a2.06 2.06 0 1 1 0-4.12 2.06 2.06 0 0 1 0 4.12zM7.12 20.45H3.56V9h3.56v11.45zM22.22 0H1.77C.79 0 0 .77 0 1.72v20.56C0 23.23.79 24 1.77 24h20.45c.99 0 1.78-.77 1.78-1.72V1.72C24 .77 23.21 0 22.22 0z"/></svg>
+          LinkedIn
+        </a>
+        <a href="mailto:ayse.gulsum@marun.edu.tr" title="Marmara student e-mail · for academic correspondence">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg>
+          marun.edu.tr
+        </a>
+        <a href="mailto:aysegulsumeren@gmail.com" title="Public / open-source / GitHub-linked">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+          gmail · public
+        </a>
+      </div>
+    </div>
+
+    <div class="member">
+      <div class="nm">Ayşenur Arıcı</div>
+      <div class="rl"><span data-tr>Geliştirici · anti-spoof hattı · füzyon · kapılar · cihaz-spoof savunması</span><span data-en>Developer · anti-spoof pipeline · fusion · gates · device-spoof defence</span></div>
+      <div class="socials">
+        <a href="https://github.com/Aysenur15" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="currentColor"><path d="M12 .5C5.65.5.5 5.65.5 12c0 5.08 3.29 9.39 7.86 10.91.57.1.78-.25.78-.55v-2.16c-3.2.7-3.88-1.36-3.88-1.36-.52-1.32-1.27-1.67-1.27-1.67-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.18 1.76 1.18 1.02 1.75 2.68 1.24 3.34.95.1-.74.4-1.25.72-1.54-2.55-.29-5.23-1.27-5.23-5.66 0-1.25.45-2.27 1.18-3.07-.12-.29-.51-1.46.11-3.04 0 0 .96-.31 3.15 1.17a10.95 10.95 0 0 1 5.74 0c2.19-1.48 3.15-1.17 3.15-1.17.62 1.58.23 2.75.11 3.04.73.8 1.18 1.82 1.18 3.07 0 4.4-2.69 5.37-5.25 5.65.41.36.78 1.06.78 2.14v3.17c0 .3.21.66.79.55C20.21 21.39 23.5 17.07 23.5 12 23.5 5.65 18.35.5 12 .5z"/></svg>
+          GitHub
+        </a>
+        <a href="https://www.linkedin.com/in/ay%C5%9Fenur-ar%C4%B1c%C4%B1/" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="currentColor"><path d="M20.45 20.45h-3.55v-5.56c0-1.33-.03-3.03-1.85-3.03-1.85 0-2.13 1.45-2.13 2.94v5.65H9.36V9h3.4v1.56h.05c.47-.9 1.63-1.85 3.36-1.85 3.6 0 4.27 2.37 4.27 5.45v6.29zM5.34 7.43a2.06 2.06 0 1 1 0-4.12 2.06 2.06 0 0 1 0 4.12zM7.12 20.45H3.56V9h3.56v11.45zM22.22 0H1.77C.79 0 0 .77 0 1.72v20.56C0 23.23.79 24 1.77 24h20.45c.99 0 1.78-.77 1.78-1.72V1.72C24 .77 23.21 0 22.22 0z"/></svg>
+          LinkedIn
+        </a>
+        <a href="mailto:aysenurarici@marun.edu.tr" title="Marmara student e-mail · for academic correspondence">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg>
+          marun.edu.tr
+        </a>
+        <a href="mailto:aysenurarici@hotmail.com" title="Public / personal">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+          hotmail · public
+        </a>
+      </div>
+    </div>
+
+    <div class="member supervisor">
+      <div class="nm"><span data-tr>Doç. Dr.</span><span data-en>Assoc. Prof. Dr.</span> Mustafa Ağaoğlu</div>
+      <div class="rl"><span data-tr>Danışman · Marmara Bilgisayar Mühendisliği</span><span data-en>Supervisor · Marmara Computer Engineering</span></div>
+      <div class="socials">
+        <a href="https://avesis.marmara.edu.tr/agaoglu" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg>
+          AVESİS
+        </a>
+        <a href="https://scholar.google.com.tr/citations?user=Lp1rX_gAAAAJ" target="_blank" rel="noopener">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 9 12 5 2 9l10 4 10-4v6"/><path d="M6 10.5V16a6 3 0 0 0 12 0v-5.5"/></svg>
+          Scholar
+        </a>
+        <a href="mailto:agaoglu@marmara.edu.tr" title="Marmara faculty e-mail · academic correspondence">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg>
+          marmara.edu.tr
+        </a>
+        <a href="mailto:agaoglum@gmail.com" title="Personal gmail">
+          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+          gmail
+        </a>
+      </div>
+    </div>
+
+  </div>
+
+  <!-- INSTITUTIONS -->
+  <div class="divider"><span data-tr>Kurumlar</span><span data-en>Institutions</span></div>
+
+  <div class="buttons">
+    <a class="lnk" href="https://www.marmara.edu.tr" target="_blank" rel="noopener">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/><polyline points="9 22 9 12 15 12 15 22"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Marmara Üniversitesi</span><span data-en>Marmara University</span></span>
+        <span class="sub">marmara.edu.tr</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+    <a class="lnk" href="https://eng.marmara.edu.tr/en" target="_blank" rel="noopener">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33H9a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82V9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Mühendislik Fakültesi</span><span data-en>Faculty of Engineering</span></span>
+        <span class="sub">eng.marmara.edu.tr</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+    <a class="lnk" href="https://cse-eng.marmara.edu.tr/en" target="_blank" rel="noopener">
+      <span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg></span>
+      <span class="meta">
+        <span class="nm"><span data-tr>Bilgisayar Mühendisliği</span><span data-en>Computer Engineering</span></span>
+        <span class="sub">cse-eng.marmara.edu.tr</span>
+      </span>
+      <span class="arrow">→</span>
+    </a>
+  </div>
+
+  <div class="footer">
+    <span data-tr>FIVUCSAS · Marmara Üniversitesi · CSE4297 / CSE4298 · Bahar 2025 – 2026</span>
+    <span data-en>FIVUCSAS · Marmara University · CSE4297 / CSE4298 · Spring 2025 – 2026</span><br>
+    <span data-tr>Eksik veya yanlış bilgi gördüğünüzde ekibe bildirin, güncellenecektir.</span>
+    <span data-en>If you spot any missing or incorrect info, let the team know — it will be updated.</span>
+  </div>
+
+</div>
+
+<script>
+(function(){
+  var sw = document.querySelector('.lang-switch');
+  var html = document.documentElement;
+  function apply(lang){
+    html.setAttribute('data-lang', lang);
+    html.setAttribute('lang', lang);
+    sw.querySelectorAll('button').forEach(function(b){
+      b.classList.toggle('active', b.dataset.set === lang);
+    });
+    try { history.replaceState(null, '', lang === 'tr' ? '#' : '#en'); } catch(e){}
+  }
+  var initial = (location.hash === '#en') ? 'en'
+              : (location.hash === '#tr') ? 'tr'
+              : (navigator.language || '').toLowerCase().startsWith('tr') ? 'tr'
+              : 'tr';
+  apply(initial);
+  sw.addEventListener('click', function(e){
+    var b = e.target.closest('button[data-set]');
+    if (b) apply(b.dataset.set);
+  });
+})();
+</script>
+</body>
+</html>
diff --git a/links-website/qr-links.png b/links-website/qr-links.png
new file mode 100644
index 0000000..b8d22fe
Binary files /dev/null and b/links-website/qr-links.png differ
diff --git a/links-website/qr-links.svg b/links-website/qr-links.svg
new file mode 100644
index 0000000..597a01c
--- /dev/null
+++ b/links-website/qr-links.svg
@@ -0,0 +1,2 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<svg width="111mm" height="111mm" version="1.1" viewBox="0 0 111 111" xmlns="http://www.w3.org/2000/svg"><path d="M6,6H9V9H6zM9,6H12V9H9zM12,6H15V9H12zM15,6H18V9H15zM18,6H21V9H18zM21,6H24V9H21zM24,6H27V9H24zM30,6H33V9H30zM42,6H45V9H42zM45,6H48V9H45zM48,6H51V9H48zM51,6H54V9H51zM72,6H75V9H72zM75,6H78V9H75zM78,6H81V9H78zM84,6H87V9H84zM87,6H90V9H87zM90,6H93V9H90zM93,6H96V9H93zM96,6H99V9H96zM99,6H102V9H99zM102,6H105V9H102zM6,9H9V12H6zM24,9H27V12H24zM33,9H36V12H33zM39,9H42V12H39zM51,9H54V12H51zM54,9H57V12H54zM57,9H60V12H57zM60,9H63V12H60zM72,9H75V12H72zM75,9H78V12H75zM84,9H87V12H84zM102,9H105V12H102zM6,12H9V15H6zM12,12H15V15H12zM15,12H18V15H15zM18,12H21V15H18zM24,12H27V15H24zM36,12H39V15H36zM39,12H42V15H39zM42,12H45V15H42zM45,12H48V15H45zM48,12H51V15H48zM54,12H57V15H54zM60,12H63V15H60zM72,12H75V15H72zM75,12H78V15H75zM78,12H81V15H78zM84,12H87V15H84zM90,12H93V15H90zM93,12H96V15H93zM96,12H99V15H96zM102,12H105V15H102zM6,15H9V18H6zM12,15H15V18H12zM15,15H18V18H15zM18,15H21V18H18zM24,15H27V18H24zM30,15H33V18H30zM39,15H42V18H39zM42,15H45V18H42zM51,15H54V18H51zM60,15H63V18H60zM63,15H66V18H63zM66,15H69V18H66zM72,15H75V18H72zM78,15H81V18H78zM84,15H87V18H84zM90,15H93V18H90zM93,15H96V18H93zM96,15H99V18H96zM102,15H105V18H102zM6,18H9V21H6zM12,18H15V21H12zM15,18H18V21H15zM18,18H21V21H18zM24,18H27V21H24zM33,18H36V21H33zM36,18H39V21H36zM42,18H45V21H42zM48,18H51V21H48zM51,18H54V21H51zM60,18H63V21H60zM66,18H69V21H66zM72,18H75V21H72zM78,18H81V21H78zM84,18H87V21H84zM90,18H93V21H90zM93,18H96V21H93zM96,18H99V21H96zM102,18H105V21H102zM6,21H9V24H6zM24,21H27V24H24zM63,21H66V24H63zM75,21H78V24H75zM78,21H81V24H78zM84,21H87V24H84zM102,21H105V24H102zM6,24H9V27H6zM9,24H12V27H9zM12,24H15V27H12zM15,24H18V27H15zM18,24H21V27H18zM21,24H24V27H21zM24,24H27V27H24zM30,24H33V27H30zM36,24H39V27H36zM42,24H45V27H42zM48,24H51V27H48zM54,24H57V27H54zM60,24H63V27H60zM66,24H69V27H66zM72,24H75V27H72zM78,24H81V27H78zM84,24H87V27H84zM87,24H90V27H87zM90,24H93V27H90zM93,24H96V27H93zM96,24H99V27H96zM99,24H102V27H99zM102,24H105V27H102zM36,27H39V30H36zM39,27H42V30H39zM42,27H45V30H42zM48,27H51V30H48zM54,27H57V30H54zM66,27H69V30H66zM69,27H72V30H69zM72,27H75V30H72zM75,27H78V30H75zM12,30H15V33H12zM18,30H21V33H18zM21,30H24V33H21zM24,30H27V33H24zM30,30H33V33H30zM33,30H36V33H33zM36,30H39V33H36zM39,30H42V33H39zM54,30H57V33H54zM60,30H63V33H60zM66,30H69V33H66zM69,30H72V33H69zM78,30H81V33H78zM81,30H84V33H81zM93,30H96V33H93zM102,30H105V33H102zM9,33H12V36H9zM12,33H15V36H12zM15,33H18V36H15zM18,33H21V36H18zM27,33H30V36H27zM33,33H36V36H33zM36,33H39V36H36zM54,33H57V36H54zM60,33H63V36H60zM63,33H66V36H63zM78,33H81V36H78zM84,33H87V36H84zM99,33H102V36H99zM102,33H105V36H102zM6,36H9V39H6zM9,36H12V39H9zM12,36H15V39H12zM18,36H21V39H18zM24,36H27V39H24zM27,36H30V39H27zM36,36H39V39H36zM39,36H42V39H39zM42,36H45V39H42zM45,36H48V39H45zM51,36H54V39H51zM57,36H60V39H57zM69,36H72V39H69zM78,36H81V39H78zM90,36H93V39H90zM93,36H96V39H93zM96,36H99V39H96zM99,36H102V39H99zM102,36H105V39H102zM15,39H18V42H15zM21,39H24V42H21zM39,39H42V42H39zM45,39H48V42H45zM51,39H54V42H51zM54,39H57V42H54zM78,39H81V42H78zM84,39H87V42H84zM99,39H102V42H99zM9,42H12V45H9zM12,42H15V45H12zM18,42H21V45H18zM21,42H24V45H21zM24,42H27V45H24zM27,42H30V45H27zM33,42H36V45H33zM45,42H48V45H45zM48,42H51V45H48zM51,42H54V45H51zM57,42H60V45H57zM63,42H66V45H63zM75,42H78V45H75zM78,42H81V45H78zM81,42H84V45H81zM84,42H87V45H84zM90,42H93V45H90zM99,42H102V45H99zM6,45H9V48H6zM9,45H12V48H9zM12,45H15V48H12zM21,45H24V48H21zM27,45H30V48H27zM30,45H33V48H30zM33,45H36V48H33zM36,45H39V48H36zM39,45H42V48H39zM42,45H45V48H42zM45,45H48V48H45zM48,45H51V48H48zM51,45H54V48H51zM60,45H63V48H60zM66,45H69V48H66zM78,45H81V48H78zM84,45H87V48H84zM90,45H93V48H90zM96,45H99V48H96zM99,45H102V48H99zM102,45H105V48H102zM9,48H12V51H9zM12,48H15V51H12zM15,48H18V51H15zM24,48H27V51H24zM27,48H30V51H27zM36,48H39V51H36zM39,48H42V51H39zM45,48H48V51H45zM51,48H54V51H51zM66,48H69V51H66zM69,48H72V51H69zM78,48H81V51H78zM84,48H87V51H84zM99,48H102V51H99zM102,48H105V51H102zM9,51H12V54H9zM12,51H15V54H12zM30,51H33V54H30zM33,51H36V54H33zM36,51H39V54H36zM39,51H42V54H39zM48,51H51V54H48zM54,51H57V54H54zM57,51H60V54H57zM69,51H72V54H69zM72,51H75V54H72zM78,51H81V54H78zM90,51H93V54H90zM96,51H99V54H96zM99,51H102V54H99zM102,51H105V54H102zM6,54H9V57H6zM9,54H12V57H9zM12,54H15V57H12zM15,54H18V57H15zM18,54H21V57H18zM24,54H27V57H24zM36,54H39V57H36zM42,54H45V57H42zM45,54H48V57H45zM57,54H60V57H57zM60,54H63V57H60zM66,54H69V57H66zM69,54H72V57H69zM72,54H75V57H72zM75,54H78V57H75zM81,54H84V57H81zM84,54H87V57H84zM96,54H99V57H96zM6,57H9V60H6zM9,57H12V60H9zM12,57H15V60H12zM15,57H18V60H15zM21,57H24V60H21zM27,57H30V60H27zM33,57H36V60H33zM36,57H39V60H36zM39,57H42V60H39zM54,57H57V60H54zM60,57H63V60H60zM66,57H69V60H66zM84,57H87V60H84zM93,57H96V60H93zM96,57H99V60H96zM99,57H102V60H99zM6,60H9V63H6zM9,60H12V63H9zM12,60H15V63H12zM15,60H18V63H15zM18,60H21V63H18zM24,60H27V63H24zM27,60H30V63H27zM30,60H33V63H30zM33,60H36V63H33zM39,60H42V63H39zM51,60H54V63H51zM54,60H57V63H54zM63,60H66V63H63zM66,60H69V63H66zM72,60H75V63H72zM84,60H87V63H84zM87,60H90V63H87zM96,60H99V63H96zM102,60H105V63H102zM6,63H9V66H6zM27,63H30V66H27zM36,63H39V66H36zM39,63H42V66H39zM45,63H48V66H45zM48,63H51V66H48zM51,63H54V66H51zM54,63H57V66H54zM63,63H66V66H63zM66,63H69V66H66zM69,63H72V66H69zM72,63H75V66H72zM87,63H90V66H87zM6,66H9V69H6zM9,66H12V69H9zM24,66H27V69H24zM27,66H30V69H27zM30,66H33V69H30zM33,66H36V69H33zM36,66H39V69H36zM39,66H42V69H39zM42,66H45V69H42zM48,66H51V69H48zM51,66H54V69H51zM54,66H57V69H54zM57,66H60V69H57zM60,66H63V69H60zM66,66H69V69H66zM69,66H72V69H69zM78,66H81V69H78zM84,66H87V69H84zM93,66H96V69H93zM99,66H102V69H99zM9,69H12V72H9zM15,69H18V72H15zM21,69H24V72H21zM27,69H30V72H27zM36,69H39V72H36zM45,69H48V72H45zM48,69H51V72H48zM60,69H63V72H60zM72,69H75V72H72zM75,69H78V72H75zM78,69H81V72H78zM93,69H96V72H93zM96,69H99V72H96zM102,69H105V72H102zM6,72H9V75H6zM12,72H15V75H12zM15,72H18V75H15zM24,72H27V75H24zM27,72H30V75H27zM33,72H36V75H33zM36,72H39V75H36zM39,72H42V75H39zM48,72H51V75H48zM51,72H54V75H51zM54,72H57V75H54zM60,72H63V75H60zM63,72H66V75H63zM69,72H72V75H69zM75,72H78V75H75zM78,72H81V75H78zM84,72H87V75H84zM93,72H96V75H93zM96,72H99V75H96zM99,72H102V75H99zM102,72H105V75H102zM9,75H12V78H9zM18,75H21V78H18zM21,75H24V78H21zM27,75H30V78H27zM30,75H33V78H30zM36,75H39V78H36zM39,75H42V78H39zM48,75H51V78H48zM57,75H60V78H57zM69,75H72V78H69zM72,75H75V78H72zM78,75H81V78H78zM81,75H84V78H81zM90,75H93V78H90zM99,75H102V78H99zM102,75H105V78H102zM6,78H9V81H6zM15,78H18V81H15zM21,78H24V81H21zM24,78H27V81H24zM36,78H39V81H36zM42,78H45V81H42zM48,78H51V81H48zM51,78H54V81H51zM54,78H57V81H54zM60,78H63V81H60zM66,78H69V81H66zM69,78H72V81H69zM75,78H78V81H75zM78,78H81V81H78zM81,78H84V81H81zM84,78H87V81H84zM87,78H90V81H87zM90,78H93V81H90zM99,78H102V81H99zM102,78H105V81H102zM30,81H33V84H30zM33,81H36V84H33zM39,81H42V84H39zM42,81H45V84H42zM48,81H51V84H48zM60,81H63V84H60zM63,81H66V84H63zM69,81H72V84H69zM75,81H78V84H75zM78,81H81V84H78zM90,81H93V84H90zM93,81H96V84H93zM99,81H102V84H99zM102,81H105V84H102zM6,84H9V87H6zM9,84H12V87H9zM12,84H15V87H12zM15,84H18V87H15zM18,84H21V87H18zM21,84H24V87H21zM24,84H27V87H24zM33,84H36V87H33zM45,84H48V87H45zM48,84H51V87H48zM51,84H54V87H51zM54,84H57V87H54zM60,84H63V87H60zM63,84H66V87H63zM66,84H69V87H66zM72,84H75V87H72zM75,84H78V87H75zM78,84H81V87H78zM84,84H87V87H84zM90,84H93V87H90zM93,84H96V87H93zM99,84H102V87H99zM102,84H105V87H102zM6,87H9V90H6zM24,87H27V90H24zM30,87H33V90H30zM36,87H39V90H36zM42,87H45V90H42zM48,87H51V90H48zM51,87H54V90H51zM60,87H63V90H60zM69,87H72V90H69zM72,87H75V90H72zM75,87H78V90H75zM78,87H81V90H78zM90,87H93V90H90zM102,87H105V90H102zM6,90H9V93H6zM12,90H15V93H12zM15,90H18V93H15zM18,90H21V93H18zM24,90H27V93H24zM30,90H33V93H30zM36,90H39V93H36zM45,90H48V93H45zM66,90H69V93H66zM72,90H75V93H72zM78,90H81V93H78zM81,90H84V93H81zM84,90H87V93H84zM87,90H90V93H87zM90,90H93V93H90zM93,90H96V93H93zM99,90H102V93H99zM6,93H9V96H6zM12,93H15V96H12zM15,93H18V96H15zM18,93H21V96H18zM24,93H27V96H24zM33,93H36V96H33zM42,93H45V96H42zM45,93H48V96H45zM48,93H51V96H48zM51,93H54V96H51zM60,93H63V96H60zM72,93H75V96H72zM78,93H81V96H78zM90,93H93V96H90zM93,93H96V96H93zM6,96H9V99H6zM12,96H15V99H12zM15,96H18V99H15zM18,96H21V99H18zM24,96H27V99H24zM30,96H33V99H30zM33,96H36V99H33zM36,96H39V99H36zM42,96H45V99H42zM48,96H51V99H48zM51,96H54V99H51zM60,96H63V99H60zM63,96H66V99H63zM69,96H72V99H69zM78,96H81V99H78zM81,96H84V99H81zM87,96H90V99H87zM90,96H93V99H90zM93,96H96V99H93zM96,96H99V99H96zM102,96H105V99H102zM6,99H9V102H6zM24,99H27V102H24zM33,99H36V102H33zM36,99H39V102H36zM48,99H51V102H48zM51,99H54V102H51zM54,99H57V102H54zM60,99H63V102H60zM75,99H78V102H75zM78,99H81V102H78zM81,99H84V102H81zM87,99H90V102H87zM93,99H96V102H93zM99,99H102V102H99zM6,102H9V105H6zM9,102H12V105H9zM12,102H15V105H12zM15,102H18V105H15zM18,102H21V105H18zM21,102H24V105H21zM24,102H27V105H24zM42,102H45V105H42zM45,102H48V105H45zM48,102H51V105H48zM51,102H54V105H51zM54,102H57V105H54zM63,102H66V105H63zM66,102H69V105H66zM78,102H81V105H78zM81,102H84V105H81zM87,102H90V105H87zM90,102H93V105H90zM93,102H96V105H93zM96,102H99V105H96zM99,102H102V105H99zM102,102H105V105H102z" id="qr-path" fill="#000000" fill-opacity="1" fill-rule="nonzero" stroke="none"/></svg>
\ No newline at end of file
diff --git a/poster/CLAUDE_DESIGN_BRIEF.md b/poster/CLAUDE_DESIGN_BRIEF.md
new file mode 100644
index 0000000..c8609be
--- /dev/null
+++ b/poster/CLAUDE_DESIGN_BRIEF.md
@@ -0,0 +1,252 @@
+# FIVUCSAS — Academic Poster: Claude Design Brief
+
+> **How to use this file:** open **claude.ai/design**, start a new design, and paste
+> everything from the line `=== PASTE BELOW INTO CLAUDE DESIGN ===` to the end.
+> Upload the two crest images (see *Assets*) when prompted. Then iterate visually
+> with the adjustment knobs / inline comments.
+
+---
+
+## Assets to upload into Claude Design
+
+| File | What it is | Where it is |
+|------|------------|-------------|
+| `marmara-university.png` | Official Marmara University crest | `poster/assets/marmara-university.png` |
+| `muhendislik-fakultesi.jpg` | Faculty of Engineering emblem | `poster/assets/muhendislik-fakultesi.jpg` |
+
+Both crests are **required by CSE4198 §5.1** and must appear in the title bar.
+
+If Claude Design supports it, also mention you want a **QR code** pointing to
+`https://fivucsas.com` (see note below on why *not* `verify.fivucsas.com`).
+
+---
+
+## ⚠️ Important correction baked into this brief
+
+The earlier poster drafts put a QR / link to **`verify.fivucsas.com`**. That URL is an
+**OIDC sign-in endpoint** — opened on its own it only shows:
+
+> *Verification Error — This sign-in link is incomplete. Please return to the original site and start again.*
+
+So it is useless as a scan target. **The poster QR must point to `https://fivucsas.com`**
+(the landing page, which has a working "Try the live demo" button) — or to
+`https://demo.fivucsas.com` (the BYS student-portal demo). This brief uses `fivucsas.com`.
+
+---
+
+============================================================
+=== PASTE BELOW INTO CLAUDE DESIGN ===
+============================================================
+
+# Design request
+
+Design a **professional academic conference poster** for a university graduation
+project. **A0 portrait** (841 × 1189 mm), for **print at 300 dpi**. It should read
+clearly from ~2 metres away: picture-led, minimal body text, confident and modern —
+product-marketing polish with academic rigor. **No emoji-style icons** — use a single
+consistent professional **line / duotone icon set** (Lucide / Phosphor / Tabler style).
+Flat design: generous whitespace, a disciplined grid, thin accent rules instead of
+heavy boxes, no drop shadows.
+
+## Project
+
+**FIVUCSAS** — *Face and Identity Verification Using Cloud-based SaaS.*
+A production-deployed, multi-tenant **biometric identity-verification platform**.
+Marmara University, Faculty of Engineering, Department of Computer Engineering.
+Course CSE4197 / CSE4198, Spring 2025–2026.
+
+**Team:** Ahmet Abdullah Gültekin · Ayşe Gülsüm Eren · Ayşenur Arıcı
+**Advisor:** Assoc. Prof. Dr. Mustafa Ağaoğlu
+
+## Visual direction
+
+- **Color palette**
+  - Navy `#0B2545` (primary / titles / dark bands)
+  - Blue `#13315C` (section headers)
+  - Teal `#1E96A8` (accent, data, highlights)
+  - Gold `#F4B400` (call-outs, emphasis numbers)
+  - Off-white `#F6F8FB` (background)
+  - Ink `#1B1F23` (body text)
+  - Success green `#27AE60` / Danger red `#C0392B` (only for "blocked vs. passes" contrasts)
+- **Typography:** a clean geometric sans (Inter / IBM Plex Sans / Source Sans). Large,
+  bold headlines; comfortable line-height; never more than ~2 short lines of body copy
+  per block.
+- **Icons:** one consistent professional line/duotone set. Each feature / concept gets
+  an icon. Absolutely no emoji.
+- **Layout:** title bar → a bold slogan band → a "what we solve" band → a 3-column body
+  → a thin footer. Use a 3-column grid for the body. Keep blocks flat with a thin
+  top accent rule per section; lots of breathing room.
+
+## Title bar (top of poster)
+
+Left: **Marmara University crest** (uploaded image).
+Center: **FIVUCSAS** in very large bold; under it the full name
+*"Face and Identity Verification Using Cloud-based SaaS"*; under that a one-line
+italic descriptor *"A multi-tenant biometric identity platform — production-deployed."*
+Right: **Faculty of Engineering emblem** (uploaded image).
+Below the center block, a single line: the three team members, then
+**Advisor:** Assoc. Prof. Dr. Mustafa Ağaoğlu · CSE4197 / CSE4198 · Spring 2025–2026.
+Footer-of-title line: Marmara University · Faculty of Engineering · Department of
+Computer Engineering.
+
+## Slogan band (full-width, dark navy)
+
+Big bold white headline:
+
+> **Register once. Verify everywhere. Every time.**
+
+Smaller gold supporting line underneath:
+
+> Ten authentication factors, one hosted login — protected by a liveness check a
+> recorded video cannot fake.
+
+Optional: a subtle face-mesh / biometric motif or two simple line-icons (a person, a
+globe) flanking the headline.
+
+## Band: "What FIVUCSAS solves" (full-width, 4 cards)
+
+Four equal cards, each a **problem → solution** pair (problem in red-ish tone with a
+small "✕" treatment, solution in green tone with a small "✓"):
+
+1. **Passwords leak, SIM-OTPs get swapped** → **Ten composable factors in one MFA flow**
+2. **Photos, clips & deepfakes replay a face** → **Active randomised liveness challenge**
+3. **GDPR & KVKK bolted on as an afterthought** → **Consent, export & erasure built in**
+4. **Re-integrating auth for every new app** → **One hosted OIDC for every platform**
+
+## Body — LEFT column
+
+### Block: "Questions FIVUCSAS answers"
+Five Q → A rows, each with a check icon. Question bold navy, answer one line:
+
+1. **Is this a real person — or a replay?**
+   → Active liveness challenge — **0 % replay false-accept** on 120 recorded-video attempts.
+2. **Can one identity work across many apps?**
+   → Hosted OAuth2 / OIDC, tenant-scoped — the user redirects once.
+3. **Is my biometric data safe?**
+   → Facenet512 embeddings **encrypted at rest** (AES-128 Fernet) before they touch the database.
+4. **Can I delete my data?**
+   → **GDPR Art. 17** right-to-erasure + scheduled purge — KVKK aligned.
+5. **Do you verify real-world identity — not just login?**
+   → A **9-step pipeline**: document scan + NFC chip + face match + liveness.
+
+### Block: "Built for nine industries"
+A grid of 8–9 industry icons + labels:
+Banking KYC · Healthcare · Education · Government e-KYC · Retail age-check ·
+Corporate onboarding · Travel & border · Fintech onboarding · Banking-light.
+Caption: *"Each industry ships as a ready verification template — steps, thresholds
+and regulators pre-wired."*
+
+## Body — MIDDLE column
+
+### Block: "Top 10 features" (the headline block — make it prominent)
+A clean numbered list (1–10), each row = number badge + icon + bold title + one-line detail:
+
+1. **Ten composable auth factors** — password · email/SMS OTP · TOTP · QR · face · voice · fingerprint · WebAuthn · hardware key · NFC document
+2. **Active-liveness anti-spoofing** — random facial-action challenge + passive MiniFASNet spoof check
+3. **Hosted OAuth2 / OIDC + PKCE** — redirective login, JWKS, discovery, RFC 8252 loopback
+4. **Multi-tenant, tenant-controlled flows** — each tenant composes its own MFA flow, no backend code
+5. **RBAC & fine-grained permissions** — roles, user-roles, permissions, row-level security
+6. **9-step identity-verification pipeline** — document scan → NFC chip → face match → liveness
+7. **7+ industry verification templates** — Banking KYC, Healthcare, Government e-KYC, Fintech…
+8. **Embedding encryption at rest** — Fernet AES-128 wrap before every pgvector write
+9. **GDPR / KVKK compliance built in** — consent, data export, right-to-erasure + purge
+10. **Every platform** — web · Android · iOS · desktop · CLI
+
+## Body — RIGHT column
+
+### Block: "How it works" (3-step visual)
+Three numbered steps with a simple icon each, connected by arrows:
+
+1. **Capture** — the client streams a 60-frame face-mesh landmark stream (MediaPipe, 468 points).
+2. **Challenge** — the server issues a random 3–5 step facial-action sequence + nonce, then verifies each action (EAR / MAR / yaw + temporal consistency) in parallel with a passive UniFace MiniFASNet spoof check.
+3. **Verdict** — the Facenet512 embedding is encrypted (Fernet) and matched in pgvector (HNSW); returns *live & verified*.
+
+### Block: "By the numbers" (stat grid)
+Big numbers, short labels:
+
+- **1,820+** automated tests
+- **< 1 s** face verification (P95 = 950 ms, commodity CPU, no GPU)
+- **0 %** replay false-accept (n = 120)
+- **0.97** passive-spoof AUC
+- **10** auth factors
+- **9** verification-pipeline steps
+- **7+** industry templates
+- **60+** database migrations
+- **8** architecture decision records (ADRs)
+- **8** live production services
+
+### Block: "Architecture at a glance"
+Two service boxes connected by an API-key arrow:
+- **Identity Core** — Spring Boot 3.4.7 / Java 21 (the frozen OIDC contract)
+- **Biometric ML** — FastAPI / Python 3.12 (the weekly-changing ML models)
+Caption: *"Split along the OIDC-contract vs. ML-iteration boundary; private Docker
+network, API-key gated — the ML service has no public route."*
+Tech-logo strip: React 18 · Kotlin Multiplatform · PostgreSQL 17 + pgvector ·
+Redis 7.4 · Traefik v3.6.12 · Docker. Deployed on a single Hetzner CX43 (8 CPU / 16 GB).
+
+### Block: "See it live"
+A **QR code → `https://fivucsas.com`** with caption *"Scan for the live demo."*
+Plus a short URL list:
+- `fivucsas.com` — landing + live demo
+- `demo.fivucsas.com` — BYS student-portal demo
+- `app.fivucsas.com` — admin dashboard
+- `api.fivucsas.com` — OAuth2 / OIDC API
+
+> Do **not** use `verify.fivucsas.com` as the scan target — it is an OIDC sign-in
+> endpoint and shows a "Verification Error" when opened without tenant parameters.
+
+## Footer strip (full-width, navy)
+
+One line in gold:
+`github.com/Rollingcat-Software/FIVUCSAS` · `fivucsas.com` ·
+`ahmetabdullahgultekin@gmail.com` · **Marmara University 2026**
+
+============================================================
+=== END OF PASTE ===
+============================================================
+
+---
+
+## Reference — supporting facts (so you can answer follow-up questions in Claude Design)
+
+**The 10 auth methods (exact names):** PASSWORD, EMAIL_OTP, SMS_OTP, TOTP, FACE,
+VOICE, FINGERPRINT, HARDWARE_KEY, QR_CODE, NFC_DOCUMENT — all production-ready.
+
+**The 9 verification step types:** document scan (YOLO), NFC chip read (ICAO 9303),
+data extract (OCR + MRZ), face match (DeepFace cosine), liveness check (passive
+UniFace + active BiometricPuzzle), address proof, watchlist check (MASAK/OFAC/UN/PEP),
+age verification, plus phone verification / credit check / video interview as
+extended steps.
+
+**The industry templates:** Banking KYC (7 steps, BDDK/MASAK), Banking-light,
+Healthcare (KVKK), Education, Corporate onboarding, Government e-KYC, Retail age-check,
+Travel/Border, Fintech onboarding.
+
+**Test counts:** Identity Core API 633 · Web-app 619 · Client-apps (Kotlin) 425 ·
+Playwright E2E 27 specs · biometric-processor pytest — total ~1,820+.
+
+**Latency budget (P95, Hetzner CX43, CPU-only):** face detection 120 ms · face mesh
+180 ms · embedding 240 ms · anti-spoof 210 ms · vector search 200 ms → ~950 ms total.
+
+**Architecture rationale:** a monolith was rejected early — biometric ML changes
+weekly, but the OAuth/OIDC contract must stay frozen; the system is split along that
+boundary into two horizontally-scalable services on a private Docker network.
+
+**Hosted-first rationale:** matches the industry pattern (Auth0 Universal Login, Okta,
+Microsoft Entra, Google, Apple, Keycloak, AWS Cognito) — solves Web NFC iframe
+restrictions, WebAuthn cross-origin edge cases, Safari ITP, third-party-cookie death.
+
+**Production URLs:** api.fivucsas.com · app.fivucsas.com · fivucsas.com ·
+verify.fivucsas.com (OIDC endpoint — not a scan target) · demo.fivucsas.com ·
+status.fivucsas.com.
+
+---
+
+## Tips for iterating in Claude Design
+
+- First pass: ask for the full layout, then use the **adjustment knobs** for spacing
+  and color balance rather than re-prompting from scratch.
+- If a section feels text-heavy, tell it: *"cut this block to an icon + one caption line."*
+- Keep the **Top 10 features** block as the visual centre of gravity.
+- Ask it to **export to PDF at A0** for printing, and optionally **PPTX** for editing.
+- Sanity-check that **both crests** survived in the title bar before exporting.
diff --git a/poster/FIVUCSAS_Poster_v3.html b/poster/FIVUCSAS_Poster_v3.html
new file mode 100644
index 0000000..a639dfd
--- /dev/null
+++ b/poster/FIVUCSAS_Poster_v3.html
@@ -0,0 +1,925 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<title>FIVUCSAS — Graduation Project Poster v3 (evidence-pinned)</title>
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="">
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600;700&family=IBM+Plex+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,400&family=IBM+Plex+Serif:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600&display=swap">
+<style>
+/* ---------- Design Tokens (inherited from v2 draft, kept consistent) ---------- */
+:root{
+  --bg:        #ECE3CC;
+  --paper:     #F5EFE0;
+  --paper-2:   #FAF5E6;
+  --card:      #FFFCEF;
+  --ink:       #161616;
+  --ink-2:     #2A2A2A;
+  --muted:     #5C5F66;
+  --rule:      #C9BDA0;
+  --rule-2:    #E1D7B9;
+
+  --navy:      #0B2545;
+  --navy-2:    #112F5A;
+  --cyan:      #2BA8B3;
+  --cyan-tint: #D7EFF1;
+  --gold:      #B68340;
+  --gold-tint: #FBE9A3;
+  --crimson:   #9A2D2D;
+  --green:     #2F7D43;
+
+  --t-blush:   #F4D0CC;
+  --t-peach:   #FFE2C2;
+  --t-slate:   #D6E6E8;
+  --t-sage:    #DCE8D0;
+
+  --serif: "IBM Plex Serif", "Times New Roman", Georgia, serif;
+  --sans:  "IBM Plex Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;
+  --mono:  "IBM Plex Mono", ui-monospace, "SF Mono", Menlo, monospace;
+}
+*,*::before,*::after{ box-sizing: border-box; }
+html,body{ margin:0; padding:0; background:#1d1d1d; font-family: var(--sans); color: var(--ink); }
+body{ min-height:100vh; }
+.viewport{ min-height: 100vh; padding: 16px; display: flex; justify-content: center; }
+
+/* A0 portrait — 841mm × 1189mm, enforced for print */
+@page{ size: 841mm 1189mm; margin: 0; }
+
+.poster{
+  width: 841mm;
+  background: var(--paper);
+  color: var(--ink);
+  position: relative;
+  box-shadow: 0 30px 80px rgba(0,0,0,.55), 0 6px 18px rgba(0,0,0,.35);
+}
+.poster::before{
+  content:""; position:absolute; inset:0; pointer-events:none;
+  background:
+    repeating-linear-gradient(0deg, rgba(11,37,69,.018) 0 1px, transparent 1px 4px),
+    radial-gradient(1200px 800px at 12% -10%, rgba(11,37,69,.05), transparent 60%),
+    radial-gradient(1000px 700px at 100% 110%, rgba(182,131,64,.06), transparent 60%);
+}
+
+h1,h2,h3,h4,h5{ font-family: var(--serif); margin:0; color: var(--navy); font-weight: 600; }
+h3{ font-size: 7mm; line-height: 1.15; display:flex; align-items:center; gap: 3mm; }
+h3 .num{ font-family: var(--mono); color: var(--cyan); font-weight: 700; }
+h4{ font-size: 5.4mm; color: var(--navy); margin-bottom: 2.5mm; }
+p{ margin:0; }
+.mono{ font-family: var(--mono); }
+b, strong{ color: var(--navy); }
+ul, ol{ margin:0; padding-left: 6mm; }
+li{ margin-bottom: 1.6mm; line-height: 1.4; }
+.hi{ background: var(--gold-tint); padding: 0 1.2mm; border-radius: .5mm; }
+
+/* ---------- HEADER ---------- */
+.header{
+  position: relative;
+  padding: 12mm 22mm 9mm 22mm;
+  background: linear-gradient(180deg, #0B2545 0%, #112F5A 100%);
+  color: #F6F1E4;
+}
+.header::after{
+  content:""; position:absolute; left:0; right:0; bottom:0; height:6mm;
+  background: repeating-linear-gradient(90deg,
+    var(--t-blush) 0 30mm, var(--t-peach) 30mm 60mm,
+    var(--t-slate) 60mm 90mm, var(--t-sage) 90mm 120mm);
+}
+.uni-bar{
+  display:flex; align-items:center; justify-content:space-between;
+  font-family: var(--sans); font-weight:500; letter-spacing:.18em;
+  font-size: 5.2mm; text-transform: uppercase; color: #DDE6F2;
+}
+.crest{ display:flex; align-items:center; gap: 6mm; }
+.logo-slot{
+  width: 28mm; height: 28mm; border-radius: 50%;
+  background: #FBF7EC; display: grid; place-items: center; overflow: hidden;
+  flex-shrink: 0; padding: 2mm; box-shadow: 0 0 0 .8mm rgba(43,168,179,.55);
+}
+.logo-slot img{ max-width: 100%; max-height: 100%; object-fit: contain; }
+
+.title-row{
+  margin-top: 12mm;
+  display:flex; flex-direction: column; align-items: center; gap: 4mm;
+  text-align: center;
+}
+.eyebrow{
+  font-family: var(--mono); font-size: 5.4mm; color: var(--cyan); letter-spacing:.22em;
+  text-transform: uppercase;
+}
+.acronym{
+  font-family: var(--mono); font-weight: 700; font-size: 36mm; line-height: 1;
+  letter-spacing:-.02em; text-align: center; color: var(--cyan); margin: 0;
+  display: flex; align-items: baseline; justify-content: center; gap: 2mm;
+}
+.acronym .angle{ color: var(--gold-tint); font-weight: 500; font-size: 28mm; }
+.title{
+  font-family: var(--serif); font-weight: 500;
+  font-size: 13mm; line-height: 1.05; color:#FBF7EC;
+  margin: 0; max-width: 720mm;
+}
+.title-row{ margin-top: 8mm; gap: 4mm; }
+.title em{ font-style: italic; color: var(--cyan); font-weight: 600; }
+
+.meta-row{
+  margin-top: 9mm;
+  display: grid; grid-template-columns: 1fr auto; gap: 14mm;
+  color:#DDE6F2; font-size: 6mm;
+  border-top: .5mm solid rgba(255,255,255,.18);
+  padding-top: 6mm; align-items: start; line-height: 1.4;
+}
+.label{
+  font-family: var(--mono); font-size: 4.6mm; letter-spacing:.22em;
+  text-transform: uppercase; color: var(--cyan); margin-bottom: 4mm;
+}
+.author-row{
+  display: flex; align-items: baseline; flex-wrap: wrap; gap: 3mm 9mm;
+  padding: 3mm 0; border-bottom: .25mm solid rgba(221,230,242,.12);
+}
+.author-row:last-of-type{ border-bottom: none; }
+.author-row b{ color:#FBF7EC; font-weight:600; font-size: 7.4mm; min-width: 100mm; }
+.author-row .contact{ font-family: var(--mono); color:#9CB2D1; font-size: 4.6mm; }
+.supervisor-row{ margin-top: 4mm; padding-top: 5mm; border-top: .35mm solid rgba(43,168,179,.4); }
+.supervisor-row .sup-label{
+  font-family: var(--mono); font-size: 4.6mm; color: var(--cyan); letter-spacing: .22em;
+  text-transform: uppercase; min-width: 44mm;
+}
+.supervisor-row b{ color:#DDE6F2; font-weight: 600; font-size: 6.2mm; }
+.course-stamp{
+  border: .6mm solid var(--cyan); border-radius: 2.4mm;
+  padding: 7mm 11mm; text-align: center; color:#FBF7EC;
+  background: rgba(43,168,179,.07); min-width: 100mm;
+}
+.course-no{ font-family: var(--serif); font-weight: 700; font-size: 22mm; line-height: 1; color: var(--cyan); }
+.course-name{ font-family: var(--mono); font-size: 4.6mm; letter-spacing: .18em; text-transform: uppercase; margin-top: 3mm; color:#DDE6F2; }
+.course-year{ font-family: var(--sans); font-size: 4.6mm; margin-top: 3mm; color:#9CB2D1; }
+
+/* ---------- BODY ---------- */
+.body{ padding: 6mm 14mm 0 14mm; }
+.body-cols{ column-count: 2; column-gap: 10mm; }
+.body-cols > section{ margin-bottom: 5mm; }
+
+.sec{ margin-bottom: 7mm; break-inside: auto; page-break-inside: auto; }
+.sec.alt{ background: var(--paper-2); padding: 5mm 7mm; border-radius: 2.4mm; border: .25mm solid var(--rule-2); }
+.sec-hd{
+  display:flex; align-items: baseline; gap: 4mm; margin-bottom: 4mm;
+  padding-bottom: 3mm; border-bottom: .5mm solid var(--rule);
+}
+.sec-hd .n{ font-family: var(--mono); font-weight: 700; font-size: 8mm; color: var(--cyan); letter-spacing: -.02em; }
+.sec-hd h2{ font-family: var(--serif); font-size: 10mm; line-height: 1; color: var(--navy); font-weight: 600; flex: 1; }
+.sec-hd .tag{ font-family: var(--mono); font-size: 4mm; color: var(--muted); letter-spacing: .14em; text-transform: uppercase; }
+
+.lede{ font-size: 4.6mm; line-height: 1.45; margin-bottom: 4mm; color: var(--ink-2); }
+.body-text{ font-size: 4mm; line-height: 1.45; color: var(--ink-2); }
+ul, ol{ padding-left: 5mm; }
+li{ margin-bottom: 2mm; line-height: 1.45; font-size: 4mm; }
+.acad ul, ul.acad{ margin-top: 3mm; font-size: 4mm; }
+.body-text + .body-text{ margin-top: 3mm; }
+small{ font-size: 70%; }
+
+/* ---------- Cards / blocks ---------- */
+.acad-block{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  padding: 7mm 8mm; border-radius: 2mm;
+}
+.acad-block + .acad-block{ margin-top: 6mm; }
+.acad-block h3 .num{ background: var(--navy); color: #FBF7EC; padding: 1mm 2.5mm; border-radius: 1mm; font-size: 4.6mm; }
+.acad ul, ul.acad{ margin-top: 3mm; font-size: 4.4mm; }
+
+.cols-2{ display: grid; grid-template-columns: 1fr 1fr; gap: 6mm; }
+.cols-3{ display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 6mm; }
+.cols-4{ display: grid; grid-template-columns: 1fr 1fr 1fr 1fr; gap: 5mm; }
+
+/* ---------- Industry tiles (objectives) ---------- */
+.industry-row{ display: grid; grid-template-columns: 1fr 1fr 1fr 1fr; gap: 5mm; margin-top: 5mm; }
+.indu{
+  padding: 5mm; border-radius: 2mm; border: .35mm solid var(--rule-2);
+  background: var(--card);
+}
+.indu.t1{ background: var(--t-blush); }
+.indu.t2{ background: var(--t-peach); }
+.indu.t3{ background: var(--t-slate); }
+.indu.t4{ background: var(--t-sage); }
+.indu .k{ font-family: var(--mono); font-size: 3.6mm; letter-spacing: .18em; text-transform: uppercase; color: var(--navy); opacity:.7; }
+.indu .t{ font-family: var(--serif); font-size: 6mm; color: var(--navy); margin-top: 2mm; font-weight: 600; }
+.indu .d{ font-size: 4mm; line-height: 1.35; margin-top: 2mm; color: var(--ink-2); }
+.indu hr{ border: none; border-top: .25mm solid rgba(11,37,69,.2); margin: 3mm 0 2mm 0; }
+.indu .stack{ font-family: var(--mono); font-size: 3.4mm; letter-spacing: .04em; color: var(--navy); }
+
+/* ---------- Main goal block ---------- */
+.main-goal{
+  margin-top: 6mm; padding: 6mm 8mm; border-left: 2mm solid var(--cyan);
+  background: rgba(43,168,179,.06); border-radius: 0 2mm 2mm 0;
+}
+.main-goal-tag{ font-family: var(--mono); font-size: 4.4mm; color: var(--cyan); letter-spacing: .2em; text-transform: uppercase; }
+.main-goal-text{ font-family: var(--serif); font-size: 6.4mm; line-height: 1.35; color: var(--navy); margin-top: 2mm; }
+
+/* ---------- E-DEVLET section ---------- */
+.edevlet-row{ display: grid; grid-template-columns: 0.9fr 1.1fr; gap: 7mm; align-items: stretch; }
+.edevlet-card{ background: var(--card); border: .35mm solid var(--rule-2); padding: 6mm; border-radius: 2mm; }
+.edevlet-card h4{ font-family: var(--serif); font-size: 6.4mm; color: var(--navy); margin-bottom: 3mm; }
+.edevlet-btn-stack{ display: flex; flex-direction: column; gap: 4mm; margin: 4mm 0 5mm 0; }
+.edevlet-btn{
+  display: flex; align-items: center; gap: 4mm; padding: 5mm 7mm;
+  background: #9A2D2D; color: #FBF7EC; border-radius: 1.6mm;
+  font-family: var(--sans); font-weight: 600; font-size: 6mm; letter-spacing: .02em;
+  box-shadow: 0 2mm 6mm rgba(0,0,0,.18);
+}
+.edevlet-btn .ic{ width: 12mm; height: 12mm; background: #FBF7EC; color: #9A2D2D; border-radius: 50%;
+  display: grid; place-items: center; font-family: var(--serif); font-weight: 700; font-size: 6mm; }
+.edevlet-btn .lbl{ display: flex; flex-direction: column; line-height: 1.05; }
+.edevlet-btn .lbl small{ font-family: var(--mono); font-size: 3.4mm; opacity: .75; font-weight: 400; letter-spacing: .14em; text-transform: uppercase; margin-top: 1mm; }
+.fivucsas-btn{
+  display: flex; align-items: center; gap: 4mm; padding: 5mm 7mm;
+  background: var(--navy); color: #FBF7EC; border-radius: 1.6mm;
+  font-family: var(--mono); font-weight: 600; font-size: 6mm;
+  box-shadow: 0 2mm 6mm rgba(11,37,69,.35);
+}
+.fivucsas-btn .mark{ color: var(--cyan); font-weight: 700; }
+.fivucsas-btn .lbl{ display: flex; flex-direction: column; line-height: 1.05; }
+.fivucsas-btn .lbl small{ font-family: var(--mono); font-size: 3.4mm; opacity: .65; font-weight: 400; letter-spacing: .14em; text-transform: uppercase; margin-top: 1mm; }
+.recaptcha-btn{
+  display: flex; align-items: center; gap: 4mm; padding: 5mm 7mm;
+  background: #F8F9FA; color: #202124; border: .35mm solid #DADCE0;
+  border-radius: 1.6mm; font-family: "Roboto", var(--sans); font-weight: 500; font-size: 5.6mm;
+  box-shadow: 0 2mm 6mm rgba(0,0,0,.12);
+}
+.recaptcha-btn .rc-ic{ width: 12mm; height: 12mm; background: #1A73E8; border-radius: 1mm; display: grid; place-items: center; }
+.recaptcha-btn .rc-ic svg{ width: 8mm; height: 8mm; }
+.recaptcha-btn .lbl{ display: flex; flex-direction: column; line-height: 1.05; }
+.recaptcha-btn .lbl small{ font-family: var(--mono); font-size: 3.4mm; opacity: .65; font-weight: 400; letter-spacing: .14em; text-transform: uppercase; margin-top: 1mm; color: #5F6368; }
+.edevlet-table{ width: 100%; border-collapse: collapse; font-size: 4mm; }
+.edevlet-table th, .edevlet-table td{
+  text-align: left; padding: 2.4mm 3mm;
+  border-bottom: .25mm solid var(--rule-2); line-height: 1.3; vertical-align: top;
+}
+.edevlet-table th{
+  font-family: var(--mono); font-size: 3.6mm; letter-spacing: .12em;
+  text-transform: uppercase; color: var(--navy); background: var(--paper-2);
+}
+.edevlet-table td:first-child{ font-weight: 600; color: var(--navy); width: 28%; }
+.edevlet-table td .yes{ color: var(--green); font-weight: 600; }
+.edevlet-table td .no{ color: var(--crimson); }
+.edevlet-table td .partial{ color: var(--gold); }
+
+.usecase-row{ display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 4mm; margin-top: 5mm; }
+.usecase{ padding: 4mm; border-radius: 1.6mm; background: var(--paper-2); border-left: 1.5mm solid var(--cyan); }
+.usecase .h{ font-family: var(--serif); font-size: 4.8mm; color: var(--navy); font-weight: 600; }
+.usecase .d{ font-size: 3.6mm; color: var(--ink-2); margin-top: 1.6mm; line-height: 1.35; }
+
+/* ---------- Architecture grid (navy block) ---------- */
+.arch-card{
+  background: var(--navy); color: #DDE6F2; border-radius: 3mm;
+  padding: 8mm 10mm; margin-top: 4mm;
+}
+.arch-hd{ display:flex; align-items:baseline; gap: 4mm; margin-bottom: 6mm; }
+.arch-hd .num{ font-family: var(--mono); font-weight: 700; color: var(--cyan); font-size: 8mm; }
+.arch-hd h3{ font-family: var(--serif); font-size: 8mm; color: #FBF7EC; }
+.arch-grid{ display: flex; flex-direction: column; gap: 0; }
+.arch-row{ display: grid; grid-template-columns: 30mm 1fr; gap: 4mm; align-items: center; }
+.arch-row .lane{
+  font-family: var(--mono); font-size: 4mm; letter-spacing: .18em;
+  text-transform: uppercase; color: var(--cyan);
+}
+.arch-row .nodes{ display: grid; gap: 3mm; }
+.arch-row .nodes.c1{ grid-template-columns: 1fr; }
+.arch-row .nodes.c2{ grid-template-columns: 1fr 1fr; }
+.arch-row .nodes.c3{ grid-template-columns: 1fr 1fr 1fr; }
+.arch-node{
+  background: rgba(255,255,255,.06); border: .35mm solid rgba(43,168,179,.3);
+  border-radius: 1.6mm; padding: 4mm 5mm;
+}
+.arch-node .nm{ font-family: var(--serif); font-size: 5mm; color: #FBF7EC; font-weight: 600; }
+.arch-node .sub{ font-family: var(--mono); font-size: 3.4mm; color: #9CB2D1; margin-top: 1mm; line-height: 1.3; }
+.arch-arrow{ text-align: center; color: var(--cyan); font-size: 5mm; margin: 1.6mm 0; }
+
+/* ---------- Pipeline strip ---------- */
+.pipe{ display: grid; grid-template-columns: repeat(9, 1fr); gap: 2mm; }
+.stage{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  border-radius: 1.6mm; padding: 3mm 3mm; text-align: center;
+}
+.stage .k{ font-family: var(--mono); font-size: 3.4mm; color: var(--cyan); letter-spacing: .12em; }
+.stage .n{ font-family: var(--serif); font-size: 4.6mm; color: var(--navy); font-weight: 600; margin-top: 1mm; }
+.stage .l{ font-family: var(--mono); font-size: 3mm; color: var(--muted); margin-top: 1.2mm; line-height: 1.25; }
+
+.face-pipe{ display: grid; grid-template-columns: repeat(4, 1fr); gap: 4mm; margin-top: 4mm; }
+.fp-card{
+  padding: 2.5mm 3mm; background: var(--card); border-radius: 1.6mm;
+  border-left: 1.5mm solid var(--cyan); border-top: .25mm solid var(--rule-2);
+  border-right: .25mm solid var(--rule-2); border-bottom: .25mm solid var(--rule-2);
+}
+.fp-card .stp{ font-family: var(--mono); font-size: 2.8mm; color: var(--cyan); letter-spacing: .14em; text-transform: uppercase; }
+.fp-card .nm{ font-family: var(--serif); font-size: 4mm; color: var(--navy); font-weight: 600; margin-top: 1mm; }
+.fp-card .sub{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); margin-top: 1.4mm; line-height: 1.35; }
+.fp-card .val{ font-family: var(--mono); font-size: 2.8mm; color: var(--navy); margin-top: 2mm; font-weight: 600; }
+.fp-card .ref{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); margin-top: 2mm; word-break: break-all; }
+
+/* ---------- NFC card layout ---------- */
+.nfc-grid{ display: grid; grid-template-columns: 1fr 1fr; gap: 6mm; margin-top: 4mm; }
+.nfc-stage{ background: var(--card); padding: 3mm 4mm; border-radius: 1.6mm; border: .35mm solid var(--rule-2); }
+.nfc-stage h4{ display: flex; align-items: baseline; gap: 2.4mm; }
+.nfc-stage h4 .num{ font-family: var(--mono); color: var(--cyan); font-weight: 700; }
+.nfc-stage ul{ margin-top: 2mm; font-size: 4mm; }
+.nfc-stage code, .mono.small{ font-family: var(--mono); font-size: 3.4mm; background: var(--paper-2); padding: .4mm 1.4mm; border-radius: .8mm; }
+
+.tc-card{ position: relative; padding: 3mm 4mm; background: linear-gradient(135deg, var(--cyan-tint), var(--paper-2)); border-radius: 2mm; border: .35mm solid var(--rule-2); }
+.tc-card .h{ font-family: var(--serif); font-size: 5mm; color: var(--navy); font-weight: 600; }
+.tc-card .d{ font-size: 3.8mm; color: var(--ink-2); margin-top: 2mm; line-height: 1.35; }
+.tc-card .chip-mark{
+  position: absolute; top: 7mm; right: 10mm; width: 11mm; height: 9mm;
+  background: linear-gradient(135deg, #B68340, #FBE9A3);
+  border-radius: 1.2mm; box-shadow: 0 .8mm 2mm rgba(0,0,0,.25);
+}
+.tc-card .chip-mark::before{ content: ""; position: absolute; inset: 1.4mm; border: .35mm solid rgba(0,0,0,.45); border-radius: .8mm; }
+.tc-card .chip-mark::after{
+  content: ""; position: absolute; inset: 2.4mm 1.4mm;
+  background:
+    linear-gradient(0deg, transparent 0, transparent calc(50% - .2mm), rgba(0,0,0,.4) calc(50% - .2mm), rgba(0,0,0,.4) calc(50% + .2mm), transparent calc(50% + .2mm)),
+    linear-gradient(90deg, transparent 0, transparent calc(50% - .2mm), rgba(0,0,0,.4) calc(50% - .2mm), rgba(0,0,0,.4) calc(50% + .2mm), transparent calc(50% + .2mm));
+}
+
+/* ---------- Spoof-detector section ---------- */
+.spoof-stack{ display: grid; grid-template-columns: 1fr 1fr; gap: 6mm; margin-top: 4mm; }
+.metric-table{ width: 100%; border-collapse: collapse; font-size: 4mm; margin-top: 3mm; }
+.metric-table th, .metric-table td{
+  text-align: left; padding: 2mm 3mm;
+  border-bottom: .25mm solid var(--rule-2); vertical-align: top;
+}
+.metric-table th{
+  font-family: var(--mono); font-size: 3.6mm; letter-spacing: .12em;
+  text-transform: uppercase; color: var(--navy); background: var(--paper-2);
+}
+.metric-table td.v{ font-family: var(--mono); color: var(--navy); font-weight: 600; }
+.analyzer-row{ display: grid; grid-template-columns: repeat(2, 1fr); gap: 3mm; margin-top: 3mm; font-size: 3.8mm; line-height: 1.4; }
+.analyzer-row .item{ background: var(--paper-2); padding: 2mm 3mm; border-radius: 1mm; border-left: .8mm solid var(--cyan); }
+.analyzer-row .item .nm{ font-family: var(--mono); font-weight: 600; color: var(--navy); font-size: 3.8mm; }
+.analyzer-row .item .sub{ font-size: 3.4mm; color: var(--muted); }
+
+.spoof-link-box{
+  background: var(--navy); color: #FBF7EC; padding: 5mm 7mm; border-radius: 2mm;
+  margin-top: 4mm; display: flex; align-items: center; justify-content: space-between; gap: 6mm;
+}
+.spoof-link-box .l{ font-family: var(--serif); font-size: 5.2mm; font-weight: 600; }
+.spoof-link-box .l small{ display: block; font-family: var(--mono); font-size: 3.4mm; color: #9CB2D1; margin-top: 1mm; letter-spacing: .12em; text-transform: uppercase; }
+.spoof-link-box .url{ font-family: var(--mono); font-size: 4.8mm; color: var(--cyan); }
+
+/* ---------- Puzzle / actions ---------- */
+.puzzle-row{ display: grid; grid-template-columns: repeat(7, 1fr); gap: 2mm; margin-top: 3mm; }
+.act-pill{
+  background: var(--card); border-radius: 1.2mm; padding: 2.4mm 1.5mm;
+  border: .25mm solid var(--rule-2); text-align: center;
+}
+.act-pill .nm{ font-family: var(--serif); font-size: 3.6mm; color: var(--navy); font-weight: 600; }
+.act-pill .th{ font-family: var(--mono); font-size: 2.8mm; color: var(--muted); margin-top: 1mm; }
+
+.gesture-row{ display: grid; grid-template-columns: repeat(9, 1fr); gap: 1.6mm; margin-top: 3mm; }
+.act-pill.alt{ background: rgba(43,168,179,.06); border-color: rgba(43,168,179,.3); }
+
+/* ---------- 10 Auth factors ---------- */
+.factors-shell{ background: var(--card); border-radius: 2.4mm; border: .35mm solid var(--rule-2); overflow: hidden; margin-top: 2mm; break-inside: auto; page-break-inside: auto; }
+.factors-bar{ background: var(--navy); color: #FBF7EC; padding: 2mm 4mm; display: flex; align-items: baseline; gap: 5mm; }
+.factors-bar .n{ font-family: var(--mono); color: var(--cyan); font-weight: 700; font-size: 4.4mm; }
+.factors-bar .t{ font-family: var(--serif); font-size: 4.8mm; }
+.factors-grid{ display: grid; grid-template-columns: repeat(10, 1fr); gap: 0; }
+.factor{ padding: 2.5mm 1.5mm; border-right: .25mm solid var(--rule-2); position: relative; }
+.factor:nth-child(10n){ border-right: none; }
+
+.factor .cat{
+  position: absolute; top: 2mm; right: 3mm;
+  font-family: var(--mono); font-size: 2.6mm; color: var(--cyan);
+  letter-spacing: .14em; text-transform: uppercase;
+}
+.factor .ico{ width: 9mm; height: 9mm; }
+.factor .ico svg{ width: 100%; height: 100%; fill: none; stroke: var(--navy); stroke-width: 1.6; stroke-linecap: round; stroke-linejoin: round; }
+.factor .nm{ font-family: var(--serif); font-size: 3.8mm; color: var(--navy); font-weight: 600; margin-top: 2mm; }
+.factor .sub{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); margin-top: .8mm; }
+.factor .src{ font-family: var(--mono); font-size: 2mm; color: var(--muted); margin-top: 1.4mm; line-height: 1.25; word-break: break-all; }
+
+/* ---------- Q&A panel ---------- */
+.qa-grid{ display: grid; grid-template-columns: 1fr 1fr; gap: 5mm; margin-top: 3mm; }
+.qa{ background: var(--card); border-left: 1.5mm solid var(--gold); padding: 4mm 5mm; border-radius: 0 1.6mm 1.6mm 0; }
+.qa .q{ font-family: var(--serif); font-size: 4.8mm; color: var(--navy); font-weight: 600; }
+.qa .a{ font-size: 4mm; line-height: 1.4; margin-top: 2mm; color: var(--ink-2); }
+
+/* ---------- Subdomain table ---------- */
+.subdomain-grid{ display: grid; grid-template-columns: 1fr 1fr; gap: 4mm; margin-top: 4mm; }
+.sd-card{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  border-radius: 1.6mm; padding: 4mm 5mm; display: flex; flex-direction: column; gap: 1.5mm;
+}
+.sd-card .host{ font-family: var(--mono); font-size: 4.4mm; color: var(--cyan); font-weight: 600; }
+.sd-card .role{ font-family: var(--serif); font-size: 4.4mm; color: var(--navy); font-weight: 600; }
+.sd-card .desc{ font-size: 3.8mm; color: var(--ink-2); line-height: 1.35; }
+.sd-card .src{ font-family: var(--mono); font-size: 2.6mm; color: var(--muted); }
+
+.qr-block{
+  display: grid; grid-template-columns: 50mm 1fr; gap: 4mm;
+  background: var(--navy); color: #FBF7EC; padding: 4mm 6mm; border-radius: 2mm;
+  margin-top: 3mm; align-items: center;
+}
+.qr-box{ width: 42mm; height: 42mm; background: #FBF7EC; border-radius: 1.4mm; padding: 2.5mm; }
+.qr-box svg{ width: 100%; height: 100%; }
+.qr-block .qr-txt h4{ color: #FBF7EC; font-size: 4.4mm; }
+.qr-block .qr-txt p{ font-size: 3mm; line-height: 1.4; color: #DDE6F2; margin-top: 2mm; }
+.qr-block .qr-txt small{ font-family: var(--mono); font-size: 3.4mm; color: var(--cyan); letter-spacing: .12em; }
+
+/* ---------- Numbers panel ---------- */
+.num-grid{ display: grid; grid-template-columns: repeat(4, 1fr); gap: 5mm; margin-top: 3mm; }
+.num-tile{
+  background: var(--card); border: .35mm solid var(--rule-2);
+  border-radius: 2mm; padding: 5mm 5mm;
+}
+.num-tile .v{ font-family: var(--serif); font-size: 14mm; line-height: 1; color: var(--navy); font-weight: 700; letter-spacing: -.02em; }
+.num-tile .v small{ font-size: 50%; color: var(--cyan); }
+.num-tile .l{ font-family: var(--mono); font-size: 3.4mm; letter-spacing: .14em; text-transform: uppercase; color: var(--muted); margin-top: 2mm; }
+
+/* ---------- Tech stack pills ---------- */
+.tech-grid{ display: flex; flex-wrap: wrap; gap: 3mm; margin-top: 4mm; }
+.tech-pill{
+  display: inline-flex; align-items: center; gap: 2.5mm;
+  padding: 2.5mm 4mm; border-radius: 8mm;
+  background: var(--card); border: .35mm solid var(--rule-2);
+  font-family: var(--mono); font-size: 3.8mm; color: var(--navy);
+}
+.tech-pill .dot{ width: 3mm; height: 3mm; border-radius: 50%; background: var(--cyan); }
+
+/* ---------- Footer ---------- */
+.footer{
+  background: var(--navy); color: #DDE6F2; padding: 4mm 14mm;
+  margin-top: 3mm; font-family: var(--mono); font-size: 3mm;
+  display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 8mm;
+  position: relative !important;
+  top: auto !important;
+  left: auto !important;
+  right: auto !important;
+  float: none !important;
+  width: 100% !important;
+  clear: both !important;
+  page-break-before: avoid;
+  break-before: avoid;
+  box-sizing: border-box;
+}
+.footer h5{ font-family: var(--mono); font-size: 4mm; color: var(--cyan); letter-spacing: .18em; text-transform: uppercase; margin-bottom: 3mm; }
+.footer a{ color: #FBF7EC; text-decoration: none; }
+.footer .copy{ grid-column: 1 / -1; border-top: .25mm solid rgba(255,255,255,.18); padding-top: 4mm; font-size: 3.4mm; color: #9CB2D1; }
+
+/* Print fit — for actual A0 print */
+@media print{
+  html,body,.viewport{ background: white; min-height: 0 !important; }
+  body{ display: block !important; }
+  .viewport{ padding: 0; display: block !important; min-height: 0 !important; }
+  .poster{ box-shadow: none; transform: none !important; display: block !important; }
+  .header, .body, .footer{ display: block; width: 100%; clear: both; }
+  .poster-wrap{ height: auto !important; }
+}
+
+/* Screen fit — scale A0 to fit the viewport so it's viewable in a browser */
+@media screen{
+  body{ overflow-x: hidden; }
+  .viewport{ padding: 12px; }
+  .poster-wrap{
+    transform-origin: top left;
+    transition: transform .2s ease;
+    will-change: transform;
+  }
+}
+
+/* CRITICAL: Force block layout — Chrome semantic <footer>/<header>/etc render bug fix */
+.poster{ display: block !important; }
+.poster > .header,
+.poster > .body,
+.poster > .footer{
+  display: block !important;
+  width: 100% !important;
+  float: none !important;
+  clear: both !important;
+  position: relative !important;
+  box-sizing: border-box;
+}
+
+
+
+</style>
+</head>
+<body>
+<div class="viewport">
+<div class="poster">
+
+  <!-- ============================== HEADER ============================== -->
+  <header class="header">
+    <div class="uni-bar">
+      <div class="crest">
+        <div class="logo-slot"><img src="assets/marmara-university.png" alt="Marmara University crest"></div>
+        <div>Marmara Üniversitesi · Mühendislik Fakültesi</div>
+      </div>
+      <div class="crest">
+        <div>Department of Computer Engineering</div>
+        <div class="logo-slot"><img src="assets/muhendislik-fakultesi.jpg" alt="Faculty of Engineering crest"></div>
+      </div>
+    </div>
+
+    <div class="title-row">
+      <div class="eyebrow">Production-deployed multi-tenant biometric identity SaaS · one hosted login button</div>
+      <div class="acronym"><span class="angle">&lt;</span>FIVUCSAS<span class="angle">/&gt;</span></div>
+      <h1 class="title">Face &amp; Identity Verification using <em>Cloud-based SaaS</em> Models</h1>
+    </div>
+
+    <div class="meta-row">
+      <div class="authors">
+        <div class="label">Team · Department of Computer Engineering</div>
+        <div class="author-row">
+          <b>Ahmet Abdullah Gültekin</b>
+          <span class="contact">ahmetabdullahgultekin@gmail.com</span>
+          <span class="contact">github.com/ahmetabdullahgultekin</span>
+        </div>
+        <div class="author-row">
+          <b>Ayşe Gülsüm Eren</b>
+          <span class="contact">ayse.gulsum@marun.edu.tr</span>
+          <span class="contact">aysegulsumeren@gmail.com</span>
+          <span class="contact">github.com/aysegulsum</span>
+        </div>
+        <div class="author-row">
+          <b>Ayşenur Arıcı</b>
+          <span class="contact">aysenurarici@marun.edu.tr</span>
+          <span class="contact">aysenurarici@hotmail.com</span>
+          <span class="contact">github.com/Aysenur15</span>
+        </div>
+        <div class="author-row supervisor-row">
+          <span class="sup-label">Supervisor</span>
+          <b>Assoc. Prof. Dr. Mustafa Ağaoğlu</b>
+        </div>
+      </div>
+      <div class="course-stamp">
+        <div class="course-no">CSE4298</div>
+        <div class="course-name">Engineering Project</div>
+        <div class="course-year">Spring 2025 – 2026</div>
+      </div>
+    </div>
+  </header>
+
+  <!-- ============================== BODY ============================== -->
+  <div class="body">
+
+  <!-- ====== SECTION 01 — INTRODUCTION ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">01</div>
+      <h2>Introduction</h2>
+      <div class="tag">Problem · What we built · Main Goal · Objectives</div>
+    </div>
+
+    <div class="cols-2"></div>
+</section>
+
+  <!-- ====== SECTION 02 — E-DEVLET + reCAPTCHA COMPARISON ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">02</div>
+      <h2>The Drop-in Identity Button</h2>
+      <div class="tag">e-Devlet & reCAPTCHA mental model · side-by-side · 3 use-cases</div>
+    </div>
+
+    
+
+    <div class="edevlet-row" style="margin-top: 5mm;">
+      <div class="edevlet-card">
+        <h4>Three buttons, one mental model</h4>
+        <div class="edevlet-btn-stack">
+          <div class="edevlet-btn">
+            <div class="ic">T.C.</div>
+            <div class="lbl">e-Devlet ile Giriş Yap<small>turkiye.gov.tr · public sector SSO</small></div>
+          </div>
+          <div class="recaptcha-btn">
+            <div class="rc-ic">
+              <svg viewBox="0 0 24 24" fill="none" stroke="#FBF7EC" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>
+            </div>
+            <div class="lbl">I'm not a robot — reCAPTCHA<small>google.com · bot protection drop-in</small></div>
+          </div>
+          <div class="fivucsas-btn">
+            <div style="font-family: var(--mono); font-weight: 700; font-size: 8mm; line-height: 1;"><span class="mark">&lt;/&gt;</span></div>
+            <div class="lbl">Sign in with FIVUCSAS<small>verify.fivucsas.com · biometric SaaS drop-in</small></div>
+          </div>
+        </div>
+        
+      </div>
+
+      <div class="edevlet-card">
+        <h4>Side-by-side comparison</h4>
+        <table class="edevlet-table">
+          <thead><tr><th>Aspect</th><th>e-Devlet</th><th>reCAPTCHA</th><th>FIVUCSAS</th></tr></thead>
+          <tbody>
+                                                <tr><td>NFC document</td><td class="no">—</td><td class="no">—</td><td class="yes">T.C. + ICAO 9303 (mobile) + Web NFC (simple cards)</td></tr>
+            <tr><td>Integration</td><td>Gov approval</td><td>Public site-key</td><td class="yes">Public OIDC + drop-in button</td></tr>
+            <tr><td>Self-host</td><td class="no">—</td><td class="no">—</td><td class="yes">Docker Compose · GPU-less</td></tr>
+            <tr><td>Open source</td><td class="no">—</td><td class="no">—</td><td class="yes">MIT (spoof-detector) · OSS roadmap</td></tr>
+                      </tbody>
+        </table>
+      </div>
+    </div>
+  </section>
+
+  <!-- ====== SECTION 03 — METHODOLOGY (architecture) ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">03</div>
+      <h2>System Architecture</h2>
+      <div class="tag">Hexagonal / DDD · 7 containers · Hetzner CX43</div>
+    </div>
+
+    <div class="arch-card" style="padding: 4mm 6mm;">
+      <div style="display: grid; grid-template-columns: repeat(5, 1fr); gap: 2mm; align-items: stretch; text-align: center;">
+        <div class="arch-node"><div class="nm">Client</div><div class="sub">Web · KMP · Widget</div></div>
+        <div style="font-size: 6mm; color: var(--cyan); align-self: center;">→</div>
+        <div class="arch-node"><div class="nm">Traefik v3.6</div><div class="sub">TLS · JWT · rate-limit</div></div>
+        <div style="font-size: 6mm; color: var(--cyan); align-self: center;">→</div>
+        <div class="arch-node"><div class="nm">Identity Core + Bio-Processor</div><div class="sub">Spring · FastAPI · hexagonal</div></div>
+      </div>
+      <div style="display: grid; grid-template-columns: repeat(5, 1fr); gap: 2mm; align-items: stretch; text-align: center; margin-top: 2mm;">
+        <div class="arch-node"><div class="nm">PostgreSQL 17</div><div class="sub">pgvector · RLS · 60 migrations</div></div>
+        <div></div>
+        <div class="arch-node"><div class="nm">Redis 7.4</div><div class="sub">cache · OTP · puzzle nonces</div></div>
+        <div></div>
+        <div class="arch-node"><div class="nm">Hetzner CX43</div><div class="sub">8 vCPU · 16 GB · no GPU</div></div>
+      </div>
+    </div>
+  </section>
+
+  <!-- ====== SECTION 04 — FACE PIPELINE ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">04</div>
+      <h2>Face Recognition Pipeline — 8 Stages</h2>
+      <div class="tag">Detection → Quality → Landmark → Align → Embed → Encrypt → Index → Match</div>
+    </div>
+
+    <p class="body-text">
+      Server-authoritative pipeline in <span class="mono">biometric-processor/</span> (FastAPI, Python 3.12).
+      Every stage is replaceable — backbone, detector and similarity all swap via DI in
+      <span class="mono">app/infrastructure/ml/factories/</span>. Verification (1:1) compares against the enrolled
+      vector with cosine distance; identification (1:N) returns pgvector ANN top-<i>k</i>. Aged embeddings
+      (&gt; 2 years) use a more permissive threshold.
+    </p>
+
+    <div class="face-pipe" style="grid-template-columns: repeat(4, 1fr);">
+      <div class="fp-card">
+        <div class="stp">01 · Detect + Quality</div>
+        <div class="nm">DeepFace 0.0.98</div>
+        <div class="sub">opencv · anti-spoof θ=0.5 · Laplacian blur ≥100 · min 80px · occlusion CIE-Lab</div>
+        <div class="val">quality ≥ 70</div>
+      </div>
+      <div class="fp-card">
+        <div class="stp">02 · Landmark + Align</div>
+        <div class="nm">MediaPipe Tasks</div>
+        <div class="sub">468-point FaceLandmarker · DeepFace eye-line affine</div>
+        <div class="val">468 + 10 iris</div>
+      </div>
+      <div class="fp-card">
+        <div class="stp">03 · Embed + Encrypt</div>
+        <div class="nm">Facenet-512 · Fernet</div>
+        <div class="sub">512-D L2-normalised · AES-128-CBC + HMAC-SHA256 at rest</div>
+        <div class="val">dim = 512</div>
+      </div>
+      <div class="fp-card">
+        <div class="stp">04 · Index + Match</div>
+        <div class="nm">pgvector · cosine</div>
+        <div class="sub">HNSW m=16/ef=64 · 1:N ANN top-k · aged-embedding θ=0.38</div>
+        <div class="val">θ = 0.45</div>
+      </div>
+    </div>
+
+    
+  </section>
+
+  <!-- ====== SECTION 05 — NFC SUBSYSTEM ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">05</div>
+      <h2>NFC Document Subsystem — Two Rails</h2>
+      <div class="tag">Native mobile (ICAO 9303) · Web NFC (simple cards) · cross-check to live selfie</div>
+    </div>
+
+    <p class="lede"><b>Two rails, one verifier.</b> <b>Rail A — native mobile NFC:</b> T.C. ID + ICAO 9303 passports + any BAC-chip document over Android IsoDep + Bouncy Castle. <b>Rail B — Web NFC:</b> ISO 14443 simple cards (loyalty, transit, NTAG2xx) directly from Chrome on Android.</p>
+
+    <div class="edevlet-row">
+      <div class="tc-card">
+        <div class="chip-mark" title="ISO/IEC 14443 contactless chip"></div>
+        <div class="h">T.C. Yeni Kimlik Kartı</div>
+        <div class="d">The contactless ISO/IEC 14443 chip lives on the back of the T.C. ID card; on passports it is in the cover. Common ICAO AID <span class="mono small">A0 00 00 02 47 10 01</span>. The same BAC key derivation (SHA-1 from MRZ) is reused for TD3 passports and every other ICAO 9303 document carrying the same chip.</div>
+        <div class="d" style="margin-top:3mm;">
+          <b>Standard:</b> ICAO Doc 9303 (Machine Readable Travel Documents)<br>
+          <b>Spec ref:</b> <span class="mono small">practice-and-test/PASSPORT_NFC_ROADMAP.md:8</span>
+        </div>
+      </div>
+
+      <div class="nfc-grid" style="grid-template-columns: 1fr;">
+        <div class="nfc-stage">
+          <h4><span class="num">A.</span> Protocols implemented</h4>
+          <ul>
+            <li><b>BAC (Basic Access Control)</b> — SHA-1 key derivation from MRZ, identical for Turkish T.C. ID and TD3 passports. <span class="mono small">PASSPORT_NFC_ROADMAP.md:670-690</span></li>
+            <li><b>PACE</b> (Password Authenticated Connection Establishment) — optional for newer passports, scoped not implemented. <span class="mono small">:164-170</span></li>
+            <li><b>Active Authentication · Chip Authentication</b> — <i>[future work]</i></li>
+            <li><b>EF.SOD</b> validator — 60% complete; CSCA full chain pending. <span class="mono small">:383-395</span></li>
+            <li><b>ICAO check-digit</b> validation: <span class="mono small">biometric-processor/tests/unit/test_nfc_mrz_route.py:47-88</span></li>
+          </ul>
+        </div>
+        <div class="nfc-stage">
+          <h4><span class="num">B.</span> Data Groups parsed</h4>
+          <ul>
+            <li><b>DG1 — MRZ</b>: <span class="mono small">.../TurkishEidNfcReader/.../util/Dg1Parser.kt</span></li>
+            <li><b>DG2 — Facial image</b> (JPEG2000 / JP2): <span class="mono small">Dg2Parser.kt:1-50</span></li>
+            <li><b>EF.COM</b> — data-group presence list</li>
+            <li>DG3 / DG4 / DG11 / DG13 / DG14 / DG15: <i>not implemented (roadmap §5.1)</i></li>
+          </ul>
+        </div>
+      </div>
+    </div>
+
+    
+
+      </section>
+
+  <!-- ====== SECTION 06 — SPOOF DETECTOR DEEP DIVE ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">06</div>
+      <h2>spoof-detector — Hybrid PAD, Session Verdict, In-Browser</h2>
+      <div class="tag">Submodule · MIT · paper draft · iBeta L1 submission · amispoof.fivucsas.com</div>
+    </div>
+
+    
+
+    
+
+    <h4 style="margin-top: 5mm;">Measured results (paper, bootstrap 95 % CI on 100 stratified resamples)</h4>
+    <table class="metric-table">
+      <thead><tr><th>Dataset / regime</th><th>Pipeline</th><th>Value</th><th>95 % CI</th><th>Source</th></tr></thead>
+      <tbody>
+        <tr><td><b>CASIA-FASD</b> AUC (zero-shot, N = 2 408)</td><td>minifasnet_only</td><td class="v">0.9452</td><td>[0.9366, 0.9560]</td><td class="mono small">07_results.md:15</td></tr>
+        <tr><td>Per-frame latency (Hetzner CX43 CPU)</td><td>hybrid</td><td class="v">63.0 ms</td><td>p99 = 117.8 ms</td><td class="mono small">:110</td></tr>
+        <tr><td>Browser (desktop Chrome, WebGPU)</td><td>browser bundle</td><td class="v">25 – 30 fps</td><td>—</td><td class="mono small">BROWSER_READINESS.md:4</td></tr>
+        <tr><td>ISO/IEC 30107-3 (in-house scripted)</td><td>session</td><td class="v">Grade C</td><td>BPCER 0 % · APCER 30 % · ACER 15 %</td><td class="mono small">README.md:74-84</td></tr>
+      </tbody>
+    </table>
+
+    
+
+    
+  </section>
+
+  <!-- ====== SECTION 07 — BIOMETRIC PUZZLE ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">07</div>
+      <h2>The Biometric Puzzle — 23 Micro-Challenges</h2>
+      <div class="tag">14 face + 9 hand-gesture · server-nonced · replay-proof · canonical enum BiometricPuzzleId</div>
+    </div>
+
+    <p class="lede"><b>23 canonical micro-challenges</b> (14 face + 9 hand). Server emits a random UUID-nonced sequence of 2-7 actions per attempt; client streams only landmark vectors. Pre-recorded, AR-filter, deepfake, replay all fail — sequence unpredictable, server-immutable.</p>
+
+    <div class="puzzle-row" style="grid-template-columns: 1fr;">
+      <div class="act-pill" style="text-align:left; padding: 3mm 4mm;">
+        <div class="nm" style="font-size:3.6mm;">14 face + 9 hand challenges</div>
+        <div class="th" style="font-size:2.8mm;">blink · smile · open mouth · turn L/R · look up/down · raise brows · close eye · nod · shake · finger count · wave · flip · tap · pinch · peek-a-boo · math · shape-trace · template-trace · hold-pose</div>
+      </div>
+    </div>
+
+    
+  </section>
+
+  <!-- ====== SECTION 08 — 10 AUTH FACTORS ====== -->
+  <section class="sec">
+    <div class="sec-hd">
+      <div class="n">08</div>
+      <h2>Ten Composable Authentication Factors</h2>
+      <div class="tag">NIST 800-63B · Know / Have / Are / Show · tenant JSON, not Java</div>
+    </div>
+    <div class="factors-shell">
+      <div class="factors-bar">
+        <div class="n">∑ 10</div>
+        <div class="t">Per-tenant MFA composition · no backend code required</div>
+      </div>
+      <div class="factors-grid">
+        <div class="factor">
+          <div class="cat">Know</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="4" y="10" width="16" height="11" rx="2"/><path d="M8 10V7a4 4 0 0 1 8 0v3"/></svg></div>
+          <div class="nm">Password</div><div class="sub">BCrypt-12</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="3" y="5" width="18" height="14" rx="2"/><path d="M3 7l9 6 9-6"/></svg></div>
+          <div class="nm">Email OTP</div><div class="sub">6-digit · 5 min</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="7" y="2" width="10" height="20" rx="2"/><line x1="11" y1="18.5" x2="13" y2="18.5"/></svg></div>
+          <div class="nm">SMS OTP</div><div class="sub">Twilio · 6-digit</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><circle cx="12" cy="13" r="8"/><polyline points="12 9 12 13 15 15"/></svg></div>
+          <div class="nm">TOTP</div><div class="sub">RFC 6238 · 30 s</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="3" y="3" width="7" height="7"/><rect x="14" y="3" width="7" height="7"/><rect x="3" y="14" width="7" height="7"/><path d="M14 14h3v3h-3z"/></svg></div>
+          <div class="nm">QR Code</div><div class="sub">cross-device</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Are</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><circle cx="9" cy="10" r="1"/><circle cx="15" cy="10" r="1"/><path d="M8.5 15c1 1.4 2.4 2 3.5 2s2.5-.6 3.5-2"/></svg></div>
+          <div class="nm">Face</div><div class="sub">Facenet-512 + Puzzle</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Are</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="9" y="3" width="6" height="12" rx="3"/><path d="M6 11a6 6 0 0 0 12 0"/></svg></div>
+          <div class="nm">Voice</div><div class="sub">Resemblyzer · 256-D</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Are</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><path d="M6 11a6 6 0 0 1 12 0v3"/><path d="M10 11a2 2 0 0 1 4 0v4a2 2 0 0 1-4 0v-4z"/><path d="M12 11v8"/></svg></div>
+          <div class="nm">Fingerprint</div><div class="sub">WebAuthn platform</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Have</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><circle cx="8" cy="14" r="4"/><line x1="11" y1="13" x2="21" y2="3"/><line x1="16" y1="8" x2="19" y2="11"/></svg></div>
+          <div class="nm">Hardware Key</div><div class="sub">FIDO2 · WebAuthn</div>
+        </div>
+        <div class="factor">
+          <div class="cat">Show</div>
+          <div class="ico"><svg viewBox="0 0 24 24"><rect x="5" y="3" width="14" height="18" rx="2"/><path d="M9 9c1.6 1.4 2.4 2.6 2.4 3.5S10.6 14.5 9 16"/><path d="M12 7c2.6 2 3.8 4 3.8 5.5S14.6 17 12 19"/></svg></div>
+          <div class="nm">NFC Document</div><div class="sub">ICAO 9303 · BAC</div>
+        </div>
+      </div>
+    </div>
+  </section>
+
+  <!-- ====== SECTION 10 — SUBDOMAINS + QR ====== -->
+  <section class="sec alt">
+    <div class="sec-hd">
+      <div class="n">10</div>
+      <h2>Subdomain Ecosystem</h2>
+      <div class="tag">9 subdomains · 1 QR · all behind Traefik v3.6</div>
+    </div>
+
+    <p class="body-text" style="margin-top: 5mm;">
+      <b>One QR · all links.</b> A single QR code on this poster points to a <b>link navigator page we own</b>:
+      <span class="mono">links.fivucsas.com</span>. We do not depend on a third-party shortener — our own static
+      subdomain hosts every project subdomain, the team (GitHub, LinkedIn, portfolio, email), poster artefacts
+      (HTML, PDF, PNG, text brief) and shortcuts to live surfaces. Hostinger static (no Docker), the same pattern
+      as bys-demo / amispoof / landing.
+    </p>
+
+    <div class="qr-block">
+      <div class="qr-box">
+        <!-- Placeholder stylised QR — replace with real QR encoding links.fivucsas.com -->
+        <svg viewBox="0 0 37 37" xmlns="http://www.w3.org/2000/svg" aria-label="QR code to links.fivucsas.com">
+          <rect width="37" height="37" fill="#FBF7EC"/>
+          <path d="M2,2H3V3H2zM3,2H4V3H3zM4,2H5V3H4zM5,2H6V3H5zM6,2H7V3H6zM7,2H8V3H7zM8,2H9V3H8zM10,2H11V3H10zM14,2H15V3H14zM15,2H16V3H15zM16,2H17V3H16zM17,2H18V3H17zM24,2H25V3H24zM25,2H26V3H25zM26,2H27V3H26zM28,2H29V3H28zM29,2H30V3H29zM30,2H31V3H30zM31,2H32V3H31zM32,2H33V3H32zM33,2H34V3H33zM34,2H35V3H34zM2,3H3V4H2zM8,3H9V4H8zM11,3H12V4H11zM13,3H14V4H13zM17,3H18V4H17zM18,3H19V4H18zM19,3H20V4H19zM20,3H21V4H20zM24,3H25V4H24zM25,3H26V4H25zM28,3H29V4H28zM34,3H35V4H34zM2,4H3V5H2zM4,4H5V5H4zM5,4H6V5H5zM6,4H7V5H6zM8,4H9V5H8zM12,4H13V5H12zM13,4H14V5H13zM14,4H15V5H14zM15,4H16V5H15zM16,4H17V5H16zM18,4H19V5H18zM20,4H21V5H20zM24,4H25V5H24zM25,4H26V5H25zM26,4H27V5H26zM28,4H29V5H28zM30,4H31V5H30zM31,4H32V5H31zM32,4H33V5H32zM34,4H35V5H34zM2,5H3V6H2zM4,5H5V6H4zM5,5H6V6H5zM6,5H7V6H6zM8,5H9V6H8zM10,5H11V6H10zM13,5H14V6H13zM14,5H15V6H14zM17,5H18V6H17zM20,5H21V6H20zM21,5H22V6H21zM22,5H23V6H22zM24,5H25V6H24zM26,5H27V6H26zM28,5H29V6H28zM30,5H31V6H30zM31,5H32V6H31zM32,5H33V6H32zM34,5H35V6H34zM2,6H3V7H2zM4,6H5V7H4zM5,6H6V7H5zM6,6H7V7H6zM8,6H9V7H8zM11,6H12V7H11zM12,6H13V7H12zM14,6H15V7H14zM16,6H17V7H16zM17,6H18V7H17zM20,6H21V7H20zM22,6H23V7H22zM24,6H25V7H24zM26,6H27V7H26zM28,6H29V7H28zM30,6H31V7H30zM31,6H32V7H31zM32,6H33V7H32zM34,6H35V7H34zM2,7H3V8H2zM8,7H9V8H8zM21,7H22V8H21zM25,7H26V8H25zM26,7H27V8H26zM28,7H29V8H28zM34,7H35V8H34zM2,8H3V9H2zM3,8H4V9H3zM4,8H5V9H4zM5,8H6V9H5zM6,8H7V9H6zM7,8H8V9H7zM8,8H9V9H8zM10,8H11V9H10zM12,8H13V9H12zM14,8H15V9H14zM16,8H17V9H16zM18,8H19V9H18zM20,8H21V9H20zM22,8H23V9H22zM24,8H25V9H24zM26,8H27V9H26zM28,8H29V9H28zM29,8H30V9H29zM30,8H31V9H30zM31,8H32V9H31zM32,8H33V9H32zM33,8H34V9H33zM34,8H35V9H34zM12,9H13V10H12zM13,9H14V10H13zM14,9H15V10H14zM16,9H17V10H16zM18,9H19V10H18zM22,9H23V10H22zM23,9H24V10H23zM24,9H25V10H24zM25,9H26V10H25zM4,10H5V11H4zM6,10H7V11H6zM7,10H8V11H7zM8,10H9V11H8zM10,10H11V11H10zM11,10H12V11H11zM12,10H13V11H12zM13,10H14V11H13zM18,10H19V11H18zM20,10H21V11H20zM22,10H23V11H22zM23,10H24V11H23zM26,10H27V11H26zM27,10H28V11H27zM31,10H32V11H31zM34,10H35V11H34zM3,11H4V12H3zM4,11H5V12H4zM5,11H6V12H5zM6,11H7V12H6zM9,11H10V12H9zM11,11H12V12H11zM12,11H13V12H12zM18,11H19V12H18zM20,11H21V12H20zM21,11H22V12H21zM26,11H27V12H26zM28,11H29V12H28zM33,11H34V12H33zM34,11H35V12H34zM2,12H3V13H2zM3,12H4V13H3zM4,12H5V13H4zM6,12H7V13H6zM8,12H9V13H8zM9,12H10V13H9zM12,12H13V13H12zM13,12H14V13H13zM14,12H15V13H14zM15,12H16V13H15zM17,12H18V13H17zM19,12H20V13H19zM23,12H24V13H23zM26,12H27V13H26zM30,12H31V13H30zM31,12H32V13H31zM32,12H33V13H32zM33,12H34V13H33zM34,12H35V13H34zM5,13H6V14H5zM7,13H8V14H7zM13,13H14V14H13zM15,13H16V14H15zM17,13H18V14H17zM18,13H19V14H18zM26,13H27V14H26zM28,13H29V14H28zM33,13H34V14H33zM3,14H4V15H3zM4,14H5V15H4zM6,14H7V15H6zM7,14H8V15H7zM8,14H9V15H8zM9,14H10V15H9zM11,14H12V15H11zM15,14H16V15H15zM16,14H17V15H16zM17,14H18V15H17zM19,14H20V15H19zM21,14H22V15H21zM25,14H26V15H25zM26,14H27V15H26zM27,14H28V15H27zM28,14H29V15H28zM30,14H31V15H30zM33,14H34V15H33zM2,15H3V16H2zM3,15H4V16H3zM4,15H5V16H4zM7,15H8V16H7zM9,15H10V16H9zM10,15H11V16H10zM11,15H12V16H11zM12,15H13V16H12zM13,15H14V16H13zM14,15H15V16H14zM15,15H16V16H15zM16,15H17V16H16zM17,15H18V16H17zM20,15H21V16H20zM22,15H23V16H22zM26,15H27V16H26zM28,15H29V16H28zM30,15H31V16H30zM32,15H33V16H32zM33,15H34V16H33zM34,15H35V16H34zM3,16H4V17H3zM4,16H5V17H4zM5,16H6V17H5zM8,16H9V17H8zM9,16H10V17H9zM12,16H13V17H12zM13,16H14V17H13zM15,16H16V17H15zM17,16H18V17H17zM22,16H23V17H22zM23,16H24V17H23zM26,16H27V17H26zM28,16H29V17H28zM33,16H34V17H33zM34,16H35V17H34zM3,17H4V18H3zM4,17H5V18H4zM10,17H11V18H10zM11,17H12V18H11zM12,17H13V18H12zM13,17H14V18H13zM16,17H17V18H16zM18,17H19V18H18zM19,17H20V18H19zM23,17H24V18H23zM24,17H25V18H24zM26,17H27V18H26zM30,17H31V18H30zM32,17H33V18H32zM33,17H34V18H33zM34,17H35V18H34zM2,18H3V19H2zM3,18H4V19H3zM4,18H5V19H4zM5,18H6V19H5zM6,18H7V19H6zM8,18H9V19H8zM12,18H13V19H12zM14,18H15V19H14zM15,18H16V19H15zM19,18H20V19H19zM20,18H21V19H20zM22,18H23V19H22zM23,18H24V19H23zM24,18H25V19H24zM25,18H26V19H25zM27,18H28V19H27zM28,18H29V19H28zM32,18H33V19H32zM2,19H3V20H2zM3,19H4V20H3zM4,19H5V20H4zM5,19H6V20H5zM7,19H8V20H7zM9,19H10V20H9zM11,19H12V20H11zM12,19H13V20H12zM13,19H14V20H13zM18,19H19V20H18zM20,19H21V20H20zM22,19H23V20H22zM28,19H29V20H28zM31,19H32V20H31zM32,19H33V20H32zM33,19H34V20H33zM2,20H3V21H2zM3,20H4V21H3zM4,20H5V21H4zM5,20H6V21H5zM6,20H7V21H6zM8,20H9V21H8zM9,20H10V21H9zM10,20H11V21H10zM11,20H12V21H11zM13,20H14V21H13zM17,20H18V21H17zM18,20H19V21H18zM21,20H22V21H21zM22,20H23V21H22zM24,20H25V21H24zM28,20H29V21H28zM29,20H30V21H29zM32,20H33V21H32zM34,20H35V21H34zM2,21H3V22H2zM9,21H10V22H9zM12,21H13V22H12zM13,21H14V22H13zM15,21H16V22H15zM16,21H17V22H16zM17,21H18V22H17zM18,21H19V22H18zM21,21H22V22H21zM22,21H23V22H22zM23,21H24V22H23zM24,21H25V22H24zM29,21H30V22H29zM2,22H3V23H2zM3,22H4V23H3zM8,22H9V23H8zM9,22H10V23H9zM10,22H11V23H10zM11,22H12V23H11zM12,22H13V23H12zM13,22H14V23H13zM14,22H15V23H14zM16,22H17V23H16zM17,22H18V23H17zM18,22H19V23H18zM19,22H20V23H19zM20,22H21V23H20zM22,22H23V23H22zM23,22H24V23H23zM26,22H27V23H26zM28,22H29V23H28zM31,22H32V23H31zM33,22H34V23H33zM3,23H4V24H3zM5,23H6V24H5zM7,23H8V24H7zM9,23H10V24H9zM12,23H13V24H12zM15,23H16V24H15zM16,23H17V24H16zM20,23H21V24H20zM24,23H25V24H24zM25,23H26V24H25zM26,23H27V24H26zM31,23H32V24H31zM32,23H33V24H32zM34,23H35V24H34zM2,24H3V25H2zM4,24H5V25H4zM5,24H6V25H5zM8,24H9V25H8zM9,24H10V25H9zM11,24H12V25H11zM12,24H13V25H12zM13,24H14V25H13zM16,24H17V25H16zM17,24H18V25H17zM18,24H19V25H18zM20,24H21V25H20zM21,24H22V25H21zM23,24H24V25H23zM25,24H26V25H25zM26,24H27V25H26zM28,24H29V25H28zM31,24H32V25H31zM32,24H33V25H32zM33,24H34V25H33zM34,24H35V25H34zM3,25H4V26H3zM6,25H7V26H6zM7,25H8V26H7zM9,25H10V26H9zM10,25H11V26H10zM12,25H13V26H12zM13,25H14V26H13zM16,25H17V26H16zM19,25H20V26H19zM23,25H24V26H23zM24,25H25V26H24zM26,25H27V26H26zM27,25H28V26H27zM30,25H31V26H30zM33,25H34V26H33zM34,25H35V26H34zM2,26H3V27H2zM5,26H6V27H5zM7,26H8V27H7zM8,26H9V27H8zM12,26H13V27H12zM14,26H15V27H14zM16,26H17V27H16zM17,26H18V27H17zM18,26H19V27H18zM20,26H21V27H20zM22,26H23V27H22zM23,26H24V27H23zM25,26H26V27H25zM26,26H27V27H26zM27,26H28V27H27zM28,26H29V27H28zM29,26H30V27H29zM30,26H31V27H30zM33,26H34V27H33zM34,26H35V27H34zM10,27H11V28H10zM11,27H12V28H11zM13,27H14V28H13zM14,27H15V28H14zM16,27H17V28H16zM20,27H21V28H20zM21,27H22V28H21zM23,27H24V28H23zM25,27H26V28H25zM26,27H27V28H26zM30,27H31V28H30zM31,27H32V28H31zM33,27H34V28H33zM34,27H35V28H34zM2,28H3V29H2zM3,28H4V29H3zM4,28H5V29H4zM5,28H6V29H5zM6,28H7V29H6zM7,28H8V29H7zM8,28H9V29H8zM11,28H12V29H11zM15,28H16V29H15zM16,28H17V29H16zM17,28H18V29H17zM18,28H19V29H18zM20,28H21V29H20zM21,28H22V29H21zM22,28H23V29H22zM24,28H25V29H24zM25,28H26V29H25zM26,28H27V29H26zM28,28H29V29H28zM30,28H31V29H30zM31,28H32V29H31zM33,28H34V29H33zM34,28H35V29H34zM2,29H3V30H2zM8,29H9V30H8zM10,29H11V30H10zM12,29H13V30H12zM14,29H15V30H14zM16,29H17V30H16zM17,29H18V30H17zM20,29H21V30H20zM23,29H24V30H23zM24,29H25V30H24zM25,29H26V30H25zM26,29H27V30H26zM30,29H31V30H30zM34,29H35V30H34zM2,30H3V31H2zM4,30H5V31H4zM5,30H6V31H5zM6,30H7V31H6zM8,30H9V31H8zM10,30H11V31H10zM12,30H13V31H12zM15,30H16V31H15zM22,30H23V31H22zM24,30H25V31H24zM26,30H27V31H26zM27,30H28V31H27zM28,30H29V31H28zM29,30H30V31H29zM30,30H31V31H30zM31,30H32V31H31zM33,30H34V31H33zM2,31H3V32H2zM4,31H5V32H4zM5,31H6V32H5zM6,31H7V32H6zM8,31H9V32H8zM11,31H12V32H11zM14,31H15V32H14zM15,31H16V32H15zM16,31H17V32H16zM17,31H18V32H17zM20,31H21V32H20zM24,31H25V32H24zM26,31H27V32H26zM30,31H31V32H30zM31,31H32V32H31zM2,32H3V33H2zM4,32H5V33H4zM5,32H6V33H5zM6,32H7V33H6zM8,32H9V33H8zM10,32H11V33H10zM11,32H12V33H11zM12,32H13V33H12zM14,32H15V33H14zM16,32H17V33H16zM17,32H18V33H17zM20,32H21V33H20zM21,32H22V33H21zM23,32H24V33H23zM26,32H27V33H26zM27,32H28V33H27zM29,32H30V33H29zM30,32H31V33H30zM31,32H32V33H31zM32,32H33V33H32zM34,32H35V33H34zM2,33H3V34H2zM8,33H9V34H8zM11,33H12V34H11zM12,33H13V34H12zM16,33H17V34H16zM17,33H18V34H17zM18,33H19V34H18zM20,33H21V34H20zM25,33H26V34H25zM26,33H27V34H26zM27,33H28V34H27zM29,33H30V34H29zM31,33H32V34H31zM33,33H34V34H33zM2,34H3V35H2zM3,34H4V35H3zM4,34H5V35H4zM5,34H6V35H5zM6,34H7V35H6zM7,34H8V35H7zM8,34H9V35H8zM14,34H15V35H14zM15,34H16V35H15zM16,34H17V35H16zM17,34H18V35H17zM18,34H19V35H18zM21,34H22V35H21zM22,34H23V35H22zM26,34H27V35H26zM27,34H28V35H27zM29,34H30V35H29zM30,34H31V35H30zM31,34H32V35H31zM32,34H33V35H32zM33,34H34V35H33zM34,34H35V35H34z" fill="#0B2545"/>
+          <!-- centre logo plate — 30% EC-H allows up to ~15% area overlay safely -->
+          <rect x="15" y="15" width="7" height="7" rx=".4" fill="#FBF7EC"/>
+          <rect x="15.4" y="15.4" width="6.2" height="6.2" rx=".3" fill="none" stroke="#0B2545" stroke-width=".15"/>
+          <text x="18.5" y="19.6" text-anchor="middle" font-family="IBM Plex Mono, monospace" font-size="2.6" fill="#2BA8B3" font-weight="700">FV</text>
+        </svg>
+      </div>
+      <div class="qr-txt">
+        <small>One QR · all links</small>
+        <h4>Scan to open the FIVUCSAS hub</h4>
+        <p>A single QR for landing + hosted-login + admin + docs + demo + spoof-detector + status — every surface under one short link. Scan from any phone and jump to the surface you need.</p>
+        <p style="font-family: var(--mono); color: var(--cyan); margin-top: 2mm;">https://fivucsas.com/links</p>
+      </div>
+    </div>
+  </section>
+
+  </div><!-- /body -->
+
+  <!-- ====== FOOTER ====== -->
+  <div class="footer">
+    <div>
+      <h5>Repositories</h5>
+      <p>github.com/Rollingcat-Software/fivucsas (private)<br>
+      github.com/Rollingcat-Software/spoof-detector (MIT)<br>
+      6 git submodules · 1 self-hosted runner</p>
+    </div>
+    <div>
+      <h5>Live surface</h5>
+      <p>fivucsas.com · verify.fivucsas.com · demo.fivucsas.com<br>
+      api.fivucsas.com · app.fivucsas.com · docs.fivucsas.com<br>
+      amispoof.fivucsas.com · status.fivucsas.com</p>
+    </div>
+    <div>
+      <h5>Contact</h5>
+      <p>ahmetabdullahgultekin@gmail.com<br>
+      ayse.gulsum@marun.edu.tr · aysegulsumeren@gmail.com<br>
+      aysenurarici@marun.edu.tr · aysenurarici@hotmail.com<br>
+      Supervisor · ağaoğlu @ marmara.edu.tr</p>
+    </div>
+    <div class="copy">
+      FIVUCSAS · Marmara Üniversitesi · CSE4297 / CSE4298 Engineering Project · Spring 2025 – 2026 · A0 poster v3 · evidence-pinned 2026-05-19 · every metric cited to file:line — see POSTER_BRIEF.md at repo root for full source map.
+    </div>
+  </div><!-- /footer -->
+
+</div><!-- /poster -->
+</div><!-- /viewport -->
+</body>
+</html>
diff --git a/poster/POSTER_PRESENTATION_SCRIPT.md b/poster/POSTER_PRESENTATION_SCRIPT.md
new file mode 100644
index 0000000..826924f
--- /dev/null
+++ b/poster/POSTER_PRESENTATION_SCRIPT.md
@@ -0,0 +1,167 @@
+# FIVUCSAS — Poster Presentation Script
+
+> CSE4297 / CSE4298 Capstone Project · Marmara University · Spring 2025–2026
+> Authors: Ahmet Abdullah Gültekin · Ayşe Gülsüm Eren · Ayşenur Arıcı
+> Supervisor: Doç. Dr. Mustafa Ağaoğlu
+> Date: 2026-05-19
+
+This script is what to **say** at the poster — the poster shows headlines + visuals; you provide the depth.
+
+---
+
+## 1 · Opening (30 seconds)
+
+> "Welcome. This is **FIVUCSAS** — Face & Identity Verification using Cloud-based SaaS Models. Think of it as the **private-sector e-Devlet button**, or **reCAPTCHA for biometric identity**: a single hosted-login redirect that any application can adopt instead of writing its own auth.
+>
+> The project is production-deployed at <span style="font-family:monospace">fivucsas.com</span> with Marmara University as the live anchor tenant. Everything you see on this poster runs on **one Hetzner CX43 — eight vCPUs, sixteen gigabytes of RAM, no GPU**."
+
+---
+
+## 2 · "What problems does FIVUCSAS solve?" (60 sec — pitch)
+
+> "Two audiences, one button.
+>
+> **For end users:** you stop registering on every site. One FIVUCSAS account, ten authentication methods (password, email OTP, SMS OTP, TOTP, QR code, face, voice, fingerprint, hardware key, NFC document). The mental model is e-Devlet's "Sign in with e-Devlet" button, but for the entire private sector.
+>
+> **For developers:** you stop writing login and register pages. Drop in our `<FIVUCSAS />` button, configure the OIDC discovery URL, and your tenant gets biometric authentication without writing a line of ML code. The mental model is reCAPTCHA's one-line drop-in, but for ten-factor identity instead of bot defence."
+
+---
+
+## 3 · Comparison panel (45 sec)
+
+Point to the **side-by-side table** on the poster (e-Devlet · reCAPTCHA · FIVUCSAS columns).
+
+> "On a feature-by-feature basis, FIVUCSAS is the only one that combines biometric authentication, NFC document verification, ten composable MFA factors, multi-tenant Postgres Row-Level Security, KVKK and GDPR compliance, and ISO/IEC 30107-3 Level 1 anti-spoofing submission — in an open-source, self-hostable stack."
+
+Anticipated jury question: *"How is this different from Auth0 / Okta?"*
+
+> "Three differences. **One,** Auth0 treats biometrics as a device-local feature; we treat it as a tenant-controlled server-side decision. **Two,** Auth0 doesn't read government ID NFC chips natively — we do, on both Turkish T.C. ID and ICAO 9303 passports. **Three,** Auth0 charges per active user; we are self-hostable on a single sixteen-gigabyte VM."
+
+---
+
+## 4 · System Architecture (60 sec)
+
+Point to the **single-row architecture strip**: Client → Traefik → Identity Core + Biometric Processor → PostgreSQL · Redis · Hetzner CX43.
+
+> "Two services, hexagonal architecture. The **Identity Core** is Spring Boot in Java — it owns auth flows, OAuth 2.0 / OIDC issuance, MFA composition, and tenant configuration. The **Biometric Processor** is FastAPI in Python — it owns face detection, embedding, liveness detection. They talk via a hexagonal port-adapter boundary with an API key on the internal Docker network. PostgreSQL with pgvector handles embedding storage; Redis handles cache, OTP and puzzle nonces.
+>
+> The entire stack is **GPU-less by design**: a boot sentinel called `ALLOW_HEAVY_ML=false` refuses to start if you configure a GPU-requiring model. This decision keeps the system self-hostable on commodity hardware — your CSE4298 capstone runs on the same architecture as a banking deployment would."
+
+---
+
+## 5 · Face Pipeline (60 sec)
+
+Point to the **four-stage strip**: Detect+Quality → Landmark+Align → Embed+Encrypt → Index+Match.
+
+> "Server-authoritative, eight true stages folded into four cards. DeepFace 0.0.98 handles detection with configurable backends — OpenCV by default, anti-spoof at 0.5. Quality gating runs Laplacian blur ≥ 100, minimum 80-pixel face, occlusion via CIE-Lab Delta-E. Landmarking is MediaPipe's modern Tasks API with the 468-point face mesh plus 10 iris points. Alignment is DeepFace's eye-line affine warp.
+>
+> The embedding is **Facenet-512** — 512-D L2-normalized vectors. At rest, every embedding is wrapped in Fernet — AES-128-CBC plus HMAC-SHA256. The encrypted ciphertext lives in PostgreSQL with a parallel plaintext vector column for ANN search using HNSW indexing — m equal to 16, ef_construction 64.
+>
+> Matching uses cosine distance at theta 0.45; aged embeddings older than two years get a more permissive 0.38."
+
+Anticipated question: *"What is your EER on Marmara students?"*
+
+> "**Honest answer: we have not yet measured an in-house EER curve.** Published Facenet-512 rates apply. Our load-test targets — login P95 under 300 ms, verification P95 under 500 ms — are targets, not measurements. Future work: an in-house Marmara cohort EER curve."
+
+---
+
+## 6 · The 23 Biometric Puzzle Challenges (45 sec)
+
+Point to the **single-line puzzle summary** + the active liveness reference.
+
+> "Active liveness is implemented as a randomly sequenced challenge response. **Twenty-three canonical micro-challenges**, all server-issued: fourteen face actions and nine hand gestures. The face set covers blink, smile, open mouth, head turns, look up and down, eyebrow raises, nod, and head shake. The hand set covers finger count, wave, flip, finger tap, pinch, peek-a-boo, math (count fingers to k), shape trace, and template trace.
+>
+> Per attempt the server picks 2 to 7 actions, signs them with a UUID v4 nonce, and writes them to Redis. The puzzle expires in five minutes. The client streams only landmark and metric vectors — the server classifies each step against EAR, MAR and yaw thresholds and signs the verdict. Pre-recorded video, AR-filter and deepfake all fail because the requested sequence is unpredictable and unmodifiable client-side."
+
+---
+
+## 7 · NFC Subsystem (45 sec)
+
+Point to the **T.C. ID card visual** with the chip mark.
+
+> "Two rails, one verifier.
+>
+> **Rail A is native mobile NFC.** Turkish T.C. ID cards, Turkish passports, and every ICAO 9303 document with a BAC chip read over Android `IsoDep` plus Bouncy Castle. The chip lives on the back of the T.C. card or in the passport cover. Same ICAO application identifier — `A0 00 00 02 47 10 01` — same SHA-1 BAC key derivation from the MRZ.
+>
+> **Rail B is Web NFC.** ISO/IEC 14443 Type-A and Type-B simple cards — store loyalty, transit, MIFARE Classic, NTAG2xx — read directly from Chrome on Android. No native NFC layer required.
+>
+> Both rails speak to the same Identity Core endpoint at `/api/v1/nfc/verify-mrz`. The DG2 face photo from the chip is decoded from JPEG2000, embedded via Facenet-512, and cross-matched against the live selfie via cosine — same threshold as the live pipeline."
+
+---
+
+## 8 · spoof-detector & paper (75 sec — this is the centerpiece)
+
+Point to the **metric table** and the **amispoof.fivucsas.com URL**.
+
+> "The hardest technical contribution of the project is the open-source **`spoof-detector` engine**. It is a separate MIT-licensed submodule at `github.com/Rollingcat-Software/spoof-detector`, with its own paper draft, its own browser bundle, and its own iBeta PAD Level 1 submission package on commit `cc73cf08`.
+>
+> **What it does:** combines a MiniFASNet ONNX discriminator with twelve auxiliary temporal and image analyzers under calibrated multi-class fusion, and produces a session-level peak-sensitive verdict — fifty-fifty blend of mean and worst-decile liveness — formally proven in section 4 of the paper to resist spoof-burst dilution.
+>
+> **What is measured:** on CASIA-FASD (N = 2 408) we report **AUC 0.945** with 95% confidence interval [0.937, 0.956]. On CelebA-Spoof (N = 2 611) we report AUC 0.782. The two intervals are strictly separated by more than four times their combined width, empirically establishing the cross-dataset taxonomy effect. Per-frame inference latency is **63 milliseconds on a CPU** — no GPU.
+>
+> **Where it runs:** the production deliverable is a TypeScript browser bundle — 123 kilobytes ESM, 34 kilobytes gzipped. Runs entirely on WebAssembly via `onnxruntime-web`, optional WebGPU. Live tester at `amispoof.fivucsas.com`. Twenty-five to thirty FPS on desktop Chrome.
+>
+> **Honest positioning:** zero-shot, no head-to-head with FaceTec, iProov, Onfido or Jumio. Intra-dataset state-of-the-art on CASIA-FASD reaches AUC over 0.99 *with retraining*. Our 0.945 is mid-tier zero-shot. Where we hold ground: session-level verdict, client-side browser deployment, the anti-correlated calibration signal finding, reproducible no-training calibration."
+
+Anticipated question: *"Why no OULU-NPU and SiW numbers?"*
+
+> "Honest answer: those benchmarks require institutional licensing we did not obtain within the capstone timeline. The benchmark harness is in place — `tests/benchmark/run.py --dataset oulu_npu` — and one-shot reproducible the moment access is granted. Section 9.4 of the paper documents this transparently."
+
+---
+
+## 9 · 10 Composable Authentication Factors (45 sec)
+
+Point to the **ten-icon grid** (Know / Have / Are / Show categories).
+
+> "Ten methods on one platform. The Identity Core stitches them into a single OIDC session. The mapping is NIST 800-63B's four-axis Know / Have / Are / Show framework:
+>
+> Know: **Password** with BCrypt-12.
+>
+> Have: **Email OTP**, **SMS OTP via Twilio**, **TOTP** with RFC 6238, **QR Code** for cross-device, and **Hardware Key** with FIDO2 / WebAuthn.
+>
+> Are: **Face** with Facenet-512 plus the Puzzle, **Voice** with Resemblyzer, and **Fingerprint** via WebAuthn platform authenticator.
+>
+> Show: **NFC Document** with ICAO 9303.
+>
+> Each tenant composes its own MFA flow from this set — configuration is JSON, not Java code."
+
+---
+
+## 10 · QR + Hub (15 sec — closer)
+
+Point to the **QR code** and `links.fivucsas.com`.
+
+> "Every link from this poster — landing, hosted login, admin console, Marmara BYS demo, amispoof live tester, API, documentation, status, the team's contacts, and every poster artefact in five formats — is one scan away at `links.fivucsas.com`. Thank you."
+
+---
+
+## 11 · Likely jury questions (anticipated)
+
+| Question | Short answer |
+|---|---|
+| "Did you write the spoof-detector yourselves?" | Architecture and session engine: yes (Ahmet). Algorithms ported into the production pipeline: yes (Ayşenur's `working_spoof_detection` branch, fully credited in `AUTHORS.md`). The MiniFASNet backbone is a frozen public UniFace ONNX — we did not retrain it. |
+| "Why is the paper not yet submitted?" | The paper is a CSE4298 capstone artefact (Mustafa Hocam is a co-author). §7 and §8 await OULU-NPU / SiW dataset access — `tests/benchmark/run.py` will reproduce the missing rows the moment access is granted. Target venue: BIOSIG 2026 (Darmstadt). |
+| "How does this compare to Auth0 / Okta?" | See §3 above — three differences: server-side biometric decision, native government NFC, single-VM self-host. |
+| "How is KVKK / GDPR compliance achieved?" | Embeddings are Fernet AES-128 encrypted at rest. Tenant data is isolated by Postgres Row-Level Security on nine tables (Flyway V25). Audit logs are partitioned by `tenant_id` via pg_partman (V40 + V57). All data lives on EU / TR-accessible Hetzner. Soft-delete via `deleted_at` + Hibernate `@SQLRestriction`. |
+| "How many lines of code? How many tests?" | About 691 000 lines across 12 submodules; about 2 768 automated tests (Spring 944, Pytest 265, Vitest/Jest 1 559). 60 Flyway migrations. About 1 847 commits in the last six months. |
+| "Why GPU-less?" | An architectural choice that keeps the system self-hostable on commodity hardware. `ALLOW_HEAVY_ML=false` boot-time sentinel refuses GPU-only models. The spoof-detector browser port runs CPU-only via WebAssembly with optional WebGPU. |
+| "Is it really production-deployed?" | Yes — Marmara is the live anchor tenant at `demo.fivucsas.com`. Hosted login at `verify.fivucsas.com`. Admin console at `app.fivucsas.com`. Spoof-detector browser tester at `amispoof.fivucsas.com`. All HTTP 200, all on Hetzner CX43. |
+| "How can a developer integrate this?" | Roughly fifteen lines of code: SDK init, `loginRedirect()`, token exchange. OIDC discovery and JWKS are automatic. Or one HTML anchor tag pointing at `verify.fivucsas.com/oauth2/authorize` with PKCE S256. |
+| "What about iOS NFC?" | Roadmap. Currently Rail A (T.C. ID + passports) is Android-only because Apple's CoreNFC has different APIs. Web NFC (Rail B) is also Android-only — Safari does not implement the Web NFC standard. iOS path is via Kotlin Multiplatform `expect / actual`. |
+| "Why open-source?" | The `spoof-detector` submodule is already MIT public. The main FIVUCSAS monorepo opens in Q4 2026, alongside paper publication. Same operating model as PostgreSQL, OpenWebUI, Keycloak, Authentik or Supabase: developers can self-host; SaaS is for those who would rather we operate it. |
+
+---
+
+## 12 · One-sentence closes
+
+If the jury asks for a single-sentence summary:
+
+> "FIVUCSAS is **the e-Devlet button for the private sector** — one OAuth 2.0 redirect, ten composable authentication factors, twenty-three active liveness micro-challenges, two NFC rails, and a session-level passive PAD engine, all running on one GPU-less Hetzner box."
+
+If the jury asks "what was the hardest part?":
+
+> "Building a multi-tenant biometric SaaS that runs **without a GPU** while still resisting screen-replay and deepfake injection at session level. The session-level peak-sensitive verdict and the anti-correlated calibration finding were the two specific technical contributions."
+
+---
+
+*End of script.*
diff --git a/poster/assets/icons/airplane.pdf b/poster/assets/icons/airplane.pdf
new file mode 100644
index 0000000..34d9e64
Binary files /dev/null and b/poster/assets/icons/airplane.pdf differ
diff --git a/poster/assets/icons/airplane.svg b/poster/assets/icons/airplane.svg
new file mode 100644
index 0000000..f51dcee
--- /dev/null
+++ b/poster/assets/icons/airplane.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" version="1.1" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#9B9B9A" d="M43.2237,23.5985L37.7003,22.78l-21.3-3.547c-2.5478-0.4214-5.1427,0.4102-6.971,2.234l-3.579,3.573 c-0.3903,0.3907-0.3901,1.0238,0.0005,1.4142c0.114,0.1139,0.2538,0.1986,0.4075,0.2468l20.929,6.568l3.8119,1.1561"/>
+    <path fill="#9B9B9A" d="M36.1513,37.924l2.394,6.663l6.575,20.954c0.1654,0.527,0.7266,0.8201,1.2535,0.6548 c0.1538-0.0482,0.2936-0.1329,0.4075-0.2468l3.578-3.578c1.8248-1.8278,2.6569-4.4229,2.235-6.971l-3.549-21.311l-0.893-5.915 L36.1513,37.924z"/>
+    <path fill="#D0CFCE" d="M9.3413,49.6l8.619,3.716c0.2418,0.1044,0.4326,0.2998,0.531,0.544l3.5481,8.8l3.9609-4.01l-0.691-5.951 c-0.0351-0.3033,0.0702-0.606,0.286-0.822l28.8-28.794c1.0236-1.2048,1.3221-2.8662,0.782-4.352l0,0l-0.157-0.585 c-0.1859-0.6966-0.7258-1.2433-1.42-1.438l-0.579-0.159c-1.4628-0.5363-3.102-0.2238-4.265,0.813l-28.856,28.812 c-0.2199,0.2198-0.5297,0.3248-0.838,0.284l-5.846-0.776L9.3413,49.6z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M48.3723,36.082 l3.243,19.472c0.3715,2.2297-0.3566,4.5016-1.955,6.1l-3.578,3.578l-6.534-20.824"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M27.2233,32.2 l-20.659-6.482l3.578-3.578c1.5985-1.5984,3.8703-2.3265,6.1001-1.955l19.472,3.243"/>
+    <path fill="none" stroke="#000000" stroke-linejoin="round" stroke-width="2" d="M56.1423,18.469l-0.158-0.585 c-0.2797-1.0374-1.0847-1.8511-2.119-2.142l-0.579-0.159c-1.8103-0.6506-3.8324-0.2362-5.241,1.074l-28.853,28.808l-6.339-0.842 l-5.253,5.312l9.964,4.3l0,0l4.1171,10.206l5.371-5.428l-0.747-6.428l28.8-28.795C56.3978,22.3393,56.7954,20.2989,56.1423,18.469z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/bank.pdf b/poster/assets/icons/bank.pdf
new file mode 100644
index 0000000..df74d51
Binary files /dev/null and b/poster/assets/icons/bank.pdf differ
diff --git a/poster/assets/icons/bank.svg b/poster/assets/icons/bank.svg
new file mode 100644
index 0000000..028d7f0
--- /dev/null
+++ b/poster/assets/icons/bank.svg
@@ -0,0 +1,34 @@
+<svg id="emoji" viewBox="0 0 72 72" version="1.1" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="16" y="26" width="40" height="34" fill="#9B9B9A"/>
+    <rect x="14" y="22" width="44" height="4" fill="#D0CFCE"/>
+    <polyline fill="#FFFFFF" points="19.5,26 21.5525,26 21.5525,60 19.5,60"/>
+    <polyline fill="#FFFFFF" points="24.9331,26 26.9708,26 26.9708,60 24.9331,60"/>
+    <polyline fill="#FFFFFF" points="47.0669,60 45.0177,60 45.0177,26 47.0669,26"/>
+    <polyline fill="#FFFFFF" points="52.5,60 50.4816,60 50.4816,26 52.5,26"/>
+    <polygon fill="#D0CFCE" points="36,12 19,22 53,22"/>
+    <rect x="31.5" y="50" width="9" height="10" fill="#92D3F5"/>
+    <circle cx="36" cy="35" r="5" fill="#FCEA2B"/>
+    <path fill="none" stroke="#F4AA41" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" d="M36.9482,34.2622 c-0.0977-0.3803-0.5204-0.6665-1.0269-0.6665l0,0c-0.5789,0-1.0483,0.3737-1.0483,0.8347c0,0.461,0.4693,0.8347,1.0483,0.8347 L35.9,35.2682c0.5789,0,1.0483,0.3737,1.0483,0.8347c0,0.461-0.4693,0.8347-1.0483,0.8347l0,0 c-0.5066,0-0.9293-0.2861-1.027-0.6665"/>
+    <line x1="35.9106" x2="35.9106" y1="33.5958" y2="32.8" fill="none" stroke="#F4AA41" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10"/>
+    <line x1="35.9106" x2="35.9106" y1="37.7333" y2="36.9375" fill="none" stroke="#F4AA41" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <rect x="16" y="26" width="40" height="34" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="14" y="22" width="44" height="4" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="19.5,26 22.5,26 22.5,60 19.5,60"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="24.9331,26 27.9331,26 27.9331,60 24.9331,60"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="47.0669,60 44.0669,60 44.0669,26 47.0669,26"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="52.5,60 49.5,60 49.5,26 52.5,26"/>
+    <polygon fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="36,12 19,21.7491 53,21.7491"/>
+    <rect x="31.5" y="50" width="9" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="36" x2="36" y1="60" y2="50" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <circle cx="36" cy="35" r="5" fill="none" stroke="#000000" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" d="M36.9482,34.2622 c-0.0977-0.3803-0.5204-0.6665-1.0269-0.6665l0,0c-0.5789,0-1.0483,0.3737-1.0483,0.8347c0,0.461,0.4693,0.8347,1.0483,0.8347 L35.9,35.2682c0.5789,0,1.0483,0.3737,1.0483,0.8347c0,0.461-0.4693,0.8347-1.0483,0.8347l0,0 c-0.5066,0-0.9293-0.2861-1.027-0.6665"/>
+    <line x1="35.9106" x2="35.9106" y1="33.5958" y2="32.8" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10"/>
+    <line x1="35.9106" x2="35.9106" y1="37.7333" y2="36.9375" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/bolt.pdf b/poster/assets/icons/bolt.pdf
new file mode 100644
index 0000000..9a4ed1c
Binary files /dev/null and b/poster/assets/icons/bolt.pdf differ
diff --git a/poster/assets/icons/bolt.svg b/poster/assets/icons/bolt.svg
new file mode 100644
index 0000000..9bf7624
--- /dev/null
+++ b/poster/assets/icons/bolt.svg
@@ -0,0 +1,11 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#FCEA2B" stroke="none" d="M48.143,3.7261L16.316,37.8507c-0.6029,0.6465-0.1141,1.6589,0.801,1.6589h19.1066L19.1503,67.0482 c-0.1662,0.2681,0.215,0.5364,0.4424,0.3114l36.0628-35.704c0.6436-0.6372,0.1626-1.6882-0.7725-1.6882H36.3826L48.143,3.7261z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M48.1628,4.4406L16.3224,37.7817c-0.6174,0.6465-0.1168,1.6589,0.8201,1.6589h19.0829l-18.304,28.8333l37.7269-36.4785 c0.659-0.6372,0.1665-1.6882-0.791-1.6882H36.3846L48.1628,4.4406z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/brain.pdf b/poster/assets/icons/brain.pdf
new file mode 100644
index 0000000..a3d7c43
Binary files /dev/null and b/poster/assets/icons/brain.pdf differ
diff --git a/poster/assets/icons/brain.svg b/poster/assets/icons/brain.svg
new file mode 100644
index 0000000..a1e32c6
--- /dev/null
+++ b/poster/assets/icons/brain.svg
@@ -0,0 +1,25 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <line x1="16" x2="25.875" y1="35" y2="35" fill="#ea5a47" stroke="none"/>
+    <path fill="#ea5a47" stroke="none" d="M25.875,35c3.4167,0,4.75-2.9167,4.75-6.1667"/>
+    <line x1="16" x2="19.75" y1="45.5" y2="45.5" fill="#ea5a47" stroke="none"/>
+    <line x1="35.2997" x2="35.2997" y1="45.5" y2="39.4375" fill="#ea5a47" stroke="none"/>
+    <path fill="#ea5a47" stroke="none" d="M35.2997,39.4375c0-2.2455,1.2003-5.25,5.0756-5.25"/>
+    <line x1="58.4583" x2="49.875" y1="34.5417" y2="34.5417" fill="#ea5a47" stroke="none"/>
+    <path fill="#FFA7C0" stroke="none" d="M40.375,45.5c0,0,0.1642,10.5-7.9583,10.5H16c-7.2083,0-7.6667-10.5,0-10.5C8.7917,45.5,8.3333,35,16,35 c-8.1667-7.25,1.875-13.5625,6.5-8.6875c-4.799-6.625,5.375-10.3125,8.875-5C30.9627,16,36.2222,15.0417,41.1003,19.024 l-0.4336,0.351c2.375-2.375,10.1776-1.0833,10.1776,5.3141l-2.2192,1.6234c6.8646-6.8646,14.2083,4.1875,8.5,8.2292h1.3333 c4.75,0,5.2917,10.9583-1.3333,10.9583H29.2917"/>
+    <path fill="#ea5a47" stroke="none" d="M40.6667,19.375c-2.4167,2.4167-0.2822,3.1782-4.2707,7.1667"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <line x1="16" x2="25.875" y1="35" y2="35" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M25.875,35c3.4167,0,4.75-2.9167,4.75-6.1667"/>
+    <line x1="16" x2="19.75" y1="45.5" y2="45.5" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="35.2997" x2="35.2997" y1="45.5" y2="39.4375" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M35.2997,39.4375c0-2.2455,1.2003-5.25,5.0756-5.25"/>
+    <line x1="58.4583" x2="49.875" y1="34.5417" y2="34.5417" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M40.375,45.5c0,0,0.1642,10.5-7.9583,10.5H16c-7.2083,0-7.6667-10.5,0-10.5C8.7917,45.5,8.3333,35,16,35 c-8.1667-7.25,1.875-13.5625,6.5-8.6875c-4.799-6.625,5.375-10.3125,8.875-5C30.9627,16,36.2222,15.0417,41.1003,19.024 l-0.4336,0.351c2.375-2.375,10.1776-1.0833,10.1776,5.3141l-2.2192,1.6234c6.8646-6.8646,14.2083,4.1875,8.5,8.2292h1.3333 c4.75,0,5.2917,10.9583-1.3333,10.9583H29.2917"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M40.6667,19.375c-2.4167,2.4167-0.2822,3.1782-4.2707,7.1667"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/briefcase.pdf b/poster/assets/icons/briefcase.pdf
new file mode 100644
index 0000000..8f6a0aa
Binary files /dev/null and b/poster/assets/icons/briefcase.pdf differ
diff --git a/poster/assets/icons/briefcase.svg b/poster/assets/icons/briefcase.svg
new file mode 100644
index 0000000..d31669a
--- /dev/null
+++ b/poster/assets/icons/briefcase.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <polygon fill="#fcea2b" points="41.8465 36.3544 33.3056 36.3172 31.3127 36.3172 31.3127 39.2746 31.322 42.3685 39.0268 42.4022 41.8465 42.4022 41.8465 36.3544"/>
+    <path fill="#6a462f" d="m31.4162,41.6188l-.3429-3.7443c-.0066-.058-.0547-.1023-.113-.1044,0,0-18.948-1.9874-18.9454-1.8667l.259,7.6637,17.8099-1.608c.019,0,.0334.7369.0507.7291.14-.0634.9309-.6263,1.2009-.6934.0551-.0137.0872-.3197.0808-.3761Z"/>
+    <path fill="#6a462f" d="m57.1237,38.6643h-14.9225v3.4808c0,.0911.512.1733.4892.2571l17.1333-.1903.253-6.0799c-.2349,1.9835-2.213,1.9629-2.953,2.5323Z"/>
+    <path fill="#a57939" d="m12.2584,36.8135s-.2216,1.9088,3.7599,1.8508c2.983-.0435,14.8516,0,14.8516,0l1.0237-1.8983,9.3992-.0793,1.3976,1.6962s11.9705.5109,14.4333.2814c3.2389-.3018,3-3.8906,3-3.9999v-14.7435H12.2584v16.8926Z"/>
+    <path fill="#a57939" d="m42.7422,41.6533H12.7828l.0006.0206c.5383.0165-.525,1.3157-.525,1.858l.4953,15.3184h46.9289v-16.1626c0-.4933-.387-.8842.0825-.9664l-.2483-.068s-16.7746,0-16.7746,0Z"/>
+  </g>
+  <g id="line">
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="31.4557 15.8909 31.4557 12.0523 41.7807 12.0523 41.7807 15.8909"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="59.4326 42.6877 59.4326 58.8503 12.5037 58.8503 12.5037 42.668"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m41.9512,38.6643h14.9225c1.6569,0,3-1.3431,3-3v-15.7434H12.0084v15.7434c0,1.6569,1.3431,3,3,3h15.6115"/>
+    <rect x="31.167" y="36.3172" width="10.325" height="5.8279" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/building.pdf b/poster/assets/icons/building.pdf
new file mode 100644
index 0000000..fcd6dbd
Binary files /dev/null and b/poster/assets/icons/building.pdf differ
diff --git a/poster/assets/icons/building.svg b/poster/assets/icons/building.svg
new file mode 100644
index 0000000..3fb1542
--- /dev/null
+++ b/poster/assets/icons/building.svg
@@ -0,0 +1,46 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="8.5" y="19" width="55" height="35" fill="#D0CFCE" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="29.5" y="44" width="13" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="22" y="44" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="14" y="44" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="22" y="34" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="14" y="34" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="22" y="24" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="14" y="24" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="39" y="34" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="31" y="34" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="39" y="24" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="31" y="24" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="56" y="44" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="48" y="44" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="56" y="34" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="48" y="34" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="56" y="24" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="48" y="24" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <rect x="8.5" y="19" width="55" height="35" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="29.5" y="44" width="13" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="36" x2="36" y1="54" y2="44" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="16,29 14,29 14,24"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="24,49 22,49 22,44"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="16,49 14,49 14,44"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="24,39 22,39 22,34"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="16,39 14,39 14,34"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="24,29 22,29 22,24"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="41,39 39,39 39,34"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="33,39 31,39 31,34"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="41,29 39,29 39,24"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="33,29 31,29 31,24"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="58,49 56,49 56,44"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="50,49 48,49 48,44"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="58,39 56,39 56,34"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="50,39 48,39 48,34"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="58,29 56,29 56,24"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="50,29 48,29 48,24"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/bulb.pdf b/poster/assets/icons/bulb.pdf
new file mode 100644
index 0000000..e827ad5
Binary files /dev/null and b/poster/assets/icons/bulb.pdf differ
diff --git a/poster/assets/icons/bulb.svg b/poster/assets/icons/bulb.svg
new file mode 100644
index 0000000..6f5166d
--- /dev/null
+++ b/poster/assets/icons/bulb.svg
@@ -0,0 +1,16 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#d0cfce" d="m35.71,64.65c4.779,0,7.509-2.244,8.156-5.151h-16.31c.647,2.907,3.376,5.151,8.155,5.151h-.001Z"/>
+    <path fill="#fcea2b" d="m45.2028,10.655s-12.23-3.457-18.2,1.269c-5.969,4.726-6.401,15.6-6.401,15.6.5848,2.213,4.226,8.493,4.226,8.493.54.9111,2.253,7.481,3.249,11.36h15.92c.8662-2.845,4.35-13.15,4.805-14.21.584-1.363,1.58-4.016,2.083-5.017,1.21-2.409,1.1663-4.533.5378-7.027-1.3571-5.385-2.4738-6.7228-6.221-10.47l.0012.002Z"/>
+    <path fill="#fff" d="m35.71,7.202c-8.532,0-16.5,6.752-16.5,15.28,0,1.079-.2641,4.491,1.217,4.491,0,0,2.393-7.825,8.362-12.55,5.969-4.725,15.52-3.725,15.52-3.725-.6645-2.045-5.55-3.499-8.596-3.499l-.003.003Z"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m52.55,23.75c0,3.985-1.785,5.908-3.754,10.5-.5028,1.172-4.211,13.38-4.211,13.38h-17.17s-2.981-11.67-3.546-12.62c-2.37-3.998-4.419-6.91-4.419-11.26,0-9.141,7.41-16.55,16.55-16.55s16.55,7.41,16.55,16.55Z"/>
+    <line x1="36" x2="36" y1="47.22" y2="35.28" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="41.97" x2="30.03" y1="35.28" y2="35.28" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.696" d="m44.16,58.79c0,3.24-3.651,5.867-8.155,5.867s-8.155-2.627-8.155-5.867h16.31Z"/>
+    <line x1="27.99" x2="44.01" y1="54.98" y2="51.51" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.965"/>
+    <line x1="38.2" x2="43.98" y1="56.07" y2="54.89" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="28.02" x2="33.8" y1="51.6" y2="50.42" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/camera.pdf b/poster/assets/icons/camera.pdf
new file mode 100644
index 0000000..4895e08
Binary files /dev/null and b/poster/assets/icons/camera.pdf differ
diff --git a/poster/assets/icons/camera.svg b/poster/assets/icons/camera.svg
new file mode 100644
index 0000000..5a344d2
--- /dev/null
+++ b/poster/assets/icons/camera.svg
@@ -0,0 +1,17 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#3f3f3f" d="m33.8525,28.0066c-5.2851,0-9.5842,4.2991-9.5842,9.5842s4.2991,9.5842,9.5842,9.5842,9.5842-4.2991,9.5842-9.5842-4.2991-9.5842-9.5842-9.5842Zm0,14.5841c-2.7572,0-5-2.2428-5-5s2.2428-5,5-5,5,2.2428,5,5-2.2428,5-5,5Z"/>
+    <circle cx="33.8525" cy="37.5908" r="4.9999" fill="#d0cfce"/>
+    <path fill="#fff" d="m57.9309,22.9178H15.2697c-1.1816,0-3.1441,1.9245-3.1441,3.0622l.4567,7.2175h8.0465l4.1493.1888c-.0121.0215,3.277-5.7956,9.0743-5.7956,4.1504,0,8.7433,5.0107,8.7387,5.0002l3.3923.2991,13.3036.2302.0374-7.1402c0-1.1377-.2119-3.0622-1.3935-3.0622Z"/>
+    <path fill="#f1b31c" d="m27.8182,19.1835c-.0174.2605-.3503-2.1627-.3503-2.1627h-9.0351s-.2818,2.5039-.3056,2.4387v3.3291l9.691-.1182s0-3.4869,0-3.4869Z"/>
+    <path fill="#9b9b9a" d="m56.7227,51.768c.1326-.0026,2.6017-1.0404,2.6017-1.1745l-.0374-17.4733-9.7776-.2263-2.383-.6966h-3.6908c.0046.0105.0097.024.0144.0346,0,0,0,.0002,0,.0003.2194.3912-.6648.7965-.4939,1.2153.0112.0275.2962,7.996.1552,8.1433-.4261.4452-2.2637,3.2105-3.0595,3.8446-2.3873,1.9024-4.5862,2.0301-4.6733,2.0385-.3453.0332-1.9984.113-2.1133.0988-.1099-.0138-2.3397-.3828-4.2028-1.3936-1.7796-.9656-3.1984-2.5751-3.2099-2.5883-.5522-.6344-.9877-1.9761-1.0001-2-.119-.2288-1.0291-2.1258-.8403-4.7821.0819-1.1522,1.348-4.4997,1.348-4.4997l-4.7313-.1117c.1805,0-7.9089.3934-7.9089.3934l.1028,16.6105s.0008,1.4067.7237,2.1654c.8471.8893,1.6866.4014,1.6944.4014,0,0,41.4675.0002,41.4818,0Z"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m15.2697,22.9178c-1.7365,0-3.1441,1.371-3.1441,3.0622v23.2213c0,1.6912,1.4076,3.0623,3.1441,3.0623h41.6606c1.7365,0,3.1441-1.3711,3.1441-3.0623v-23.2213c0-1.6912-1.4076-3.0622-3.1441-3.0622,0,0-41.6606,0-41.6606,0Z"/>
+    <line x1="47.1521" x2="59.6177" y1="33.1975" y2="33.1975" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="12.5823" x2="20.6288" y1="33.1975" y2="33.1975" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <circle cx="33.8524" cy="37.5907" r="10" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <circle cx="33.8524" cy="37.5907" r="5" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m27.831,19.1198v-1.0782c0-.5638-.4692-1.0208-1.048-1.0208h-7.6766c-.5787,0-1.048.457-1.048,1.0208v1.0782"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/chart.pdf b/poster/assets/icons/chart.pdf
new file mode 100644
index 0000000..bcd0932
Binary files /dev/null and b/poster/assets/icons/chart.pdf differ
diff --git a/poster/assets/icons/chart.svg b/poster/assets/icons/chart.svg
new file mode 100644
index 0000000..545a362
--- /dev/null
+++ b/poster/assets/icons/chart.svg
@@ -0,0 +1,25 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="12.05" y="12.05" width="47.9" height="47.9" fill="#fff"/>
+    <rect x="18.32" y="37.6" width="8" height="21.41" fill="#b1cc33"/>
+    <rect x="46.25" y="44.38" width="8" height="14.62" fill="#92d3f5"/>
+    <rect x="32.28" y="21.69" width="8" height="37.32" fill="#d22f27"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m18.03 59.01v-21.41h8v21.41"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m45.97 59.01v-14.62h8v14.62"/>
+    <line x1="12.75" x2="28.49" y1="31.28" y2="31.28" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="43.51" x2="59.45" y1="40.82" y2="40.82" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="57.48" x2="59.17" y1="50.37" y2="50.37" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="12.05" y="12.05" width="47.9" height="47.9" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m32 59.01v-37.28h8v37.28"/>
+    <line x1="12.39" x2="14.52" y1="40.82" y2="40.82" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="12.39" x2="14.52" y1="50.37" y2="50.37" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="43.51" x2="59.45" y1="31.28" y2="31.28" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="43.51" x2="59.45" y1="21.74" y2="21.74" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="12.75" x2="28.49" y1="21.74" y2="21.74" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/check.pdf b/poster/assets/icons/check.pdf
new file mode 100644
index 0000000..b1b3796
Binary files /dev/null and b/poster/assets/icons/check.pdf differ
diff --git a/poster/assets/icons/check.svg b/poster/assets/icons/check.svg
new file mode 100644
index 0000000..8da210f
--- /dev/null
+++ b/poster/assets/icons/check.svg
@@ -0,0 +1,13 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#B1CC33" stroke="none" d="M53.1887,52.843H20.5794c-0.3752,0-0.6794-0.2955-0.6794-0.66v-31.68c0-0.3645,0.3042-0.66,0.6794-0.66 h21.5062h1.2918h2.0097h6.6745h1.1271c0.3752,0,0.6794,0.2955,0.6794,0.66v31.68C53.8681,52.5475,53.5639,52.843,53.1887,52.843z"/>
+    <path fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M30.66,30.538c-1.85-2.61-6.18-0.11-4.32,2.52c3.19,4.51,5.87,9.25,7.91,14.38c0.84,2.09,4.23,2.65,4.83,0 c2.83-12.6,8.21-27.17,20.68-33c2.91-1.36,0.38-5.67-2.52-4.32c-11.43,5.35-17.68,17.36-21.23,29.25 C34.45,36.318,32.68,33.378,30.66,30.538z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M53,22.642v30.476c0,0.3645-0.2955,0.66-0.66,0.66H20.66c-0.3645,0-0.66-0.2955-0.66-0.66v-31.68c0-0.3645,0.2955-0.66,0.66-0.66 h20.0814h0.5672"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M30.66,30.538c-1.85-2.61-6.18-0.11-4.32,2.52c3.19,4.51,5.87,9.25,7.91,14.38c0.84,2.09,4.23,2.65,4.83,0 c2.83-12.6,8.21-27.17,20.68-33c2.91-1.36,0.38-5.67-2.52-4.32c-11.43,5.35-17.68,17.36-21.23,29.25 C34.45,36.318,32.68,33.378,30.66,30.538z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/cloud.pdf b/poster/assets/icons/cloud.pdf
new file mode 100644
index 0000000..3135ddd
Binary files /dev/null and b/poster/assets/icons/cloud.pdf differ
diff --git a/poster/assets/icons/cloud.svg b/poster/assets/icons/cloud.svg
new file mode 100644
index 0000000..a9ca8a0
--- /dev/null
+++ b/poster/assets/icons/cloud.svg
@@ -0,0 +1,11 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D0CFCE" stroke="none" d="M15.9345,30.2552c-0.0372,0.4242-0.3809,0.7675-0.8065,0.8131C9.9685,31.621,6,36.7013,6,42.8852 c0,6.553,4.5445,11.8652,10.1505,11.8652h38.6977C61.0072,54.7504,66,49.1365,66,42.2114c0-6.6366-4.5855-12.069-10.3883-12.5101 c-0.4439-0.0337-0.804-0.3445-0.8887-0.7793c-1.2963-6.6567-7.2763-11.659-14.3464-11.659c-4.5948,0-8.6879,2.0802-11.3459,5.3894 c-0.2597,0.3234-0.6956,0.4715-1.079,0.3107c-1.0228-0.4289-2.103-0.6365-3.3117-0.6365 C20.0727,22.3266,16.3237,25.8122,15.9345,30.2552z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M15.9345,30.2552c-0.0372,0.4242-0.3794,0.7675-0.8028,0.8127C9.9704,31.6186,6,36.6998,6,42.8852 c0,6.553,4.5445,11.8652,10.1505,11.8652h38.6977C61.0072,54.7504,66,49.1365,66,42.2114c0-6.6379-4.5872-12.0711-10.3916-12.5103 c-0.4421-0.0335-0.8008-0.3444-0.8855-0.7796c-1.2964-6.6564-7.2763-11.6585-14.3462-11.6585 c-4.5964,0-8.6908,2.0817-11.3486,5.3929c-0.2582,0.3217-0.6903,0.4696-1.0705,0.3097c-1.0245-0.4306-2.1065-0.639-3.3175-0.639 C20.0727,22.3266,16.3237,25.8122,15.9345,30.2552z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/creditcard.pdf b/poster/assets/icons/creditcard.pdf
new file mode 100644
index 0000000..bdfbd57
Binary files /dev/null and b/poster/assets/icons/creditcard.pdf differ
diff --git a/poster/assets/icons/creditcard.svg b/poster/assets/icons/creditcard.svg
new file mode 100644
index 0000000..e155680
--- /dev/null
+++ b/poster/assets/icons/creditcard.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#92D3F5" stroke="none" stroke-miterlimit="10" stroke-width="2" d="M59.9589,52.7943H12.0411 c-0.5523,0-1-0.4477-1-1v-29.547c0-0.5523,0.4477-1,1-1h47.9178c0.5523,0,1,0.4477,1,1v29.547 C60.9589,52.3466,60.5112,52.7943,59.9589,52.7943z"/>
+    <path fill="#3F3F3F" stroke="none" stroke-miterlimit="10" stroke-width="2" d="M60,31H12c-0.5523,0-1-0.4477-1-1v-2.8 c0-0.5523,0.4477-1,1-1h48c0.5523,0,1,0.4477,1,1V30C61,30.5523,60.5523,31,60,31z"/>
+    <path fill="#FCEA2B" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M20.9984,47.8h-1.9471c-1.6645,0-3.0264-1.3619-3.0264-3.0264v-1.9471c0-1.6645,1.3619-3.0265,3.0264-3.0265h1.9471 c1.6645,0,3.0264,1.3619,3.0264,3.0265v1.9471C24.0249,46.4381,22.663,47.8,20.9984,47.8z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-miterlimit="10" stroke-width="2" d="M59.9589,52.7943H12.0411 c-0.5523,0-1-0.4477-1-1v-29.547c0-0.5523,0.4477-1,1-1h47.9178c0.5523,0,1,0.4477,1,1v29.547 C60.9589,52.3466,60.5112,52.7943,59.9589,52.7943z"/>
+    <path fill="none" stroke="#000000" stroke-miterlimit="10" stroke-width="2" d="M60,31H12c-0.5523,0-1-0.4477-1-1v-2.8 c0-0.5523,0.4477-1,1-1h48c0.5523,0,1,0.4477,1,1V30C61,30.5523,60.5523,31,60,31z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M20.9984,47.8h-1.9471c-1.6645,0-3.0264-1.3619-3.0264-3.0264v-1.9471c0-1.6645,1.3619-3.0265,3.0264-3.0265h1.9471 c1.6645,0,3.0264,1.3619,3.0264,3.0265v1.9471C24.0249,46.4381,22.663,47.8,20.9984,47.8z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/cross.pdf b/poster/assets/icons/cross.pdf
new file mode 100644
index 0000000..fba2c7e
Binary files /dev/null and b/poster/assets/icons/cross.pdf differ
diff --git a/poster/assets/icons/cross.svg b/poster/assets/icons/cross.svg
new file mode 100644
index 0000000..3f85bd5
--- /dev/null
+++ b/poster/assets/icons/cross.svg
@@ -0,0 +1,11 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#ea5a47" d="m58.14 21.78-7.76-8.013-14.29 14.22-14.22-14.22-8.013 8.013 14.36 14.22-14.36 14.22 8.014 8.013 14.22-14.22 14.29 14.22 7.76-8.013-14.22-14.22z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m58.14 21.78-7.76-8.013-14.29 14.22-14.22-14.22-8.013 8.013 14.35 14.22-14.35 14.22 8.014 8.013 14.22-14.22 14.29 14.22 7.76-8.013-14.22-14.22z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/database.pdf b/poster/assets/icons/database.pdf
new file mode 100644
index 0000000..68356c4
Binary files /dev/null and b/poster/assets/icons/database.pdf differ
diff --git a/poster/assets/icons/database.svg b/poster/assets/icons/database.svg
new file mode 100644
index 0000000..65d3d88
--- /dev/null
+++ b/poster/assets/icons/database.svg
@@ -0,0 +1,23 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#3f3f3f" stroke="none" d="M18,55h36V13H18V55z"/>
+    <path fill="#d0cfce" stroke="none" d="M22.2695,17.0112v14.0005h27.4991V17.0112H22.2695z"/>
+    <path fill="#d0cfce" stroke="none" d="M49.7686,50.8291v-14H22.2695v14H49.7686z"/>
+    <rect x="29.9471" y="19.6765" width="11.9829" height="4.3573" fill="#9B9B9A" stroke="none"/>
+    <rect x="29.5952" y="39.7931" width="12.6787" height="4.0669" fill="#9B9B9A" stroke="none"/>
+    <line x1="17.0087" x2="55" y1="60.0031" y2="60.0031" fill="#d0cfce" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <rect x="17" y="12" width="38" height="44" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="17.0087" x2="55" y1="60.0031" y2="60.0031" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="21.2693" y="35.8291" width="29.4995" height="16" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="29.7349" y="39.7131" width="12.3988" height="4.116" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="42.1337" x2="29.7349" y1="47.8291" y2="47.8291" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="21.2693" y="16.0113" width="29.4995" height="16" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="29.7349" y="19.8953" width="12.3988" height="4.116" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="42.1337" x2="29.7349" y1="28.0113" y2="28.0113" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/email.pdf b/poster/assets/icons/email.pdf
new file mode 100644
index 0000000..bc5b5dc
Binary files /dev/null and b/poster/assets/icons/email.pdf differ
diff --git a/poster/assets/icons/email.svg b/poster/assets/icons/email.svg
new file mode 100644
index 0000000..2d36685
--- /dev/null
+++ b/poster/assets/icons/email.svg
@@ -0,0 +1,26 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="line-supplement">
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="37.6982 22.0047 33.6982 22.0047 33.6982 27.7547 37.6982 27.7547"/>
+    <line x1="33.6982" x2="36.6982" y1="24.2547" y2="24.2547" fill="none" stroke="#000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="color">
+    <path fill="#d0cfce" d="m27.5372,38.8006l-15.35,12.89c-.35-.6201-.57-.19-.57-1.07v-26.51l15.92,14.69Z"/>
+    <rect x="21.1707" y="20.8958" width="28.5417" height="3.125" fill="#d0cfce"/>
+    <path fill="#9b9b9a" d="m60.6582,22.01v26.56c0,.86-.2,1.65-.55,2.27l-12.2673-11.2325-1.6151,1.2252-2.4465-3.2336,16.8789-15.5891Z"/>
+    <path fill="#d0cfce" d="m26.6383,36.75l4.47,4.13c.24.22.48.41.72.57,2.4301,1.8,5.26,1.8,7.6801-.01.23-.16.47-.36.69-.56l4.5-4.15"/>
+    <path fill="#d0cfce" stroke="#d0cfce" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.8" d="m26.6383,36.75l4.47,4.13c.24.22.48.41.72.57,2.4301,1.8,5.26,1.8,7.6801-.01.23-.16.47-.36.69-.56l4.5-4.15,15.41,14.11c-.42.77-1.07,1.27-1.79,1.27H13.0584c-.7,0-1.34-.47-1.77-1.22l15.3499-14.14"/>
+    <rect x="20" y="36" width="7" height="5" fill="#d0cfce" stroke="#d0cfce" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="#d0cfce" d="m47.7628,39.536l12.3454,11.304c-.42.77-1.07,1.27-1.79,1.27H13.0582c-.7,0-1.34-.47-1.77-1.22l12.0781-11.126"/>
+    <path fill="#d0cfce" d="m50.4294,20.8958s8.5778.3914,8.9878.9514c.05.06-18.7231,19.27-18.9531,19.43-2.42,1.81-5.25,1.81-7.68.01-.24-.16-.48-.35-.72-.57l-4.47-4.13-15.92-14.69c.04-.06.09-.13.14-.2.42-.6.99-.71,1.61-.71h8.48"/>
+    <polyline fill="none" stroke="#ea5a47" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="37.6982 22.0047 33.6982 22.0047 33.6982 29.0047 37.6982 29.0047"/>
+    <line x1="33.6982" x2="36.6982" y1="25.5047" y2="25.5047" fill="none" stroke="#ea5a47" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m20.072,42.7987l-8.7837,8.0913c-.35-.6201-.57-1.44-.57-2.32v-26.1117c0-.4348-.0379-.2318.2817.0631l15.6383,14.2286"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m43.7793,37.5991l16.8789-16.0432v27.0141c0,.86-.2,1.65-.55,2.27l-12.2673-11.2325"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m26.6383,36.75l4.47,4.13c.24.22.48.41.72.57,2.4301,1.8,5.26,1.8,7.6801-.01.23-.16.47-.36.69-.56l4.5-4.15"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m47.7628,39.536l12.3454,11.304c-.42.77-1.07,1.27-1.79,1.27H13.0582c-.7,0-1.34-.47-1.77-1.22l12.0781-11.126"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m49.4849,20.9h9.46c2.6184-.0539,1.3646,1.3217,1.4046,1.3917l-15.6546,14.4383-4.5,4.15c-.22.2-.46.4-.69.56-2.42,1.81-5.25,1.81-7.68.01-.24-.16-.48-.35-.72-.57l-4.47-4.13-15.92-14.69c.002-.8682.6193-1.16,1.75-1.16h8.48"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m13.1875,52.11s-2.7511.14-2.4693-4.485"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/eye.pdf b/poster/assets/icons/eye.pdf
new file mode 100644
index 0000000..5a3c3b9
Binary files /dev/null and b/poster/assets/icons/eye.pdf differ
diff --git a/poster/assets/icons/eye.svg b/poster/assets/icons/eye.svg
new file mode 100644
index 0000000..5ba7686
--- /dev/null
+++ b/poster/assets/icons/eye.svg
@@ -0,0 +1,16 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <ellipse cx="35.75" cy="36.4282" rx="34.8096" ry="20.4282" fill="#FFFFFF" stroke="none"/>
+    <ellipse cx="35.75" cy="36.4282" rx="34.8096" ry="20.4282" fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <circle cx="36" cy="35.9583" r="15.484" fill="#a57939" stroke="none"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <ellipse cx="35.75" cy="36.4282" rx="34.8096" ry="20.4282" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <circle cx="36" cy="35.9583" r="8.4416" fill="#000000" stroke="none"/>
+    <circle cx="36" cy="35.9583" r="8.4416" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <circle cx="36" cy="35.9583" r="15.484" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/face.pdf b/poster/assets/icons/face.pdf
new file mode 100644
index 0000000..73a8312
Binary files /dev/null and b/poster/assets/icons/face.pdf differ
diff --git a/poster/assets/icons/face.svg b/poster/assets/icons/face.svg
new file mode 100644
index 0000000..ccc5423
--- /dev/null
+++ b/poster/assets/icons/face.svg
@@ -0,0 +1,14 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36.0001" cy="36" r="22.9999" fill="#FCEA2B"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <circle cx="36" cy="36" r="23" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M45.8149,44.9293 c-2.8995,1.6362-6.2482,2.5699-9.8149,2.5699s-6.9153-0.9336-9.8149-2.5699"/>
+    <path d="M30,31c0,1.6568-1.3448,3-3,3c-1.6553,0-3-1.3433-3-3c0-1.6552,1.3447-3,3-3C28.6552,28,30,29.3448,30,31"/>
+    <path d="M48,31c0,1.6568-1.3447,3-3,3s-3-1.3433-3-3c0-1.6552,1.3447-3,3-3S48,29.3448,48,31"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/fingerprint.pdf b/poster/assets/icons/fingerprint.pdf
new file mode 100644
index 0000000..b4194a2
Binary files /dev/null and b/poster/assets/icons/fingerprint.pdf differ
diff --git a/poster/assets/icons/fingerprint.svg b/poster/assets/icons/fingerprint.svg
new file mode 100644
index 0000000..5bfb75b
--- /dev/null
+++ b/poster/assets/icons/fingerprint.svg
@@ -0,0 +1,10 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#d0cfce" d="M60.8136,42.8021A1.0384,1.0384,0,0,1,61.8479,41.76h4.285V32.1869h-4.285a1.0383,1.0383,0,0,1-1.0343-1.0424m0,0V23.6816H5.6769V49.7562H60.8136V42.8021"/>
+    <path fill="#d22f27" d="M11.501,45.784H20.62V27.7714H11.501Z"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M61.081,31.3475v-7.159a1,1,0,0,0-1-1H6.772a1,1,0,0,0-1,1v25.016a1,1,0,0,0,1,1H60.085a1,1,0,0,0,1-1v-6.674h5.143V31.3475Z"/>
+    <rect x="11" y="27.3595" width="10.1213" height="19.007" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/gear.pdf b/poster/assets/icons/gear.pdf
new file mode 100644
index 0000000..552f083
Binary files /dev/null and b/poster/assets/icons/gear.pdf differ
diff --git a/poster/assets/icons/gear.svg b/poster/assets/icons/gear.svg
new file mode 100644
index 0000000..20a3920
--- /dev/null
+++ b/poster/assets/icons/gear.svg
@@ -0,0 +1,12 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36.052" cy="34.9064" r="5.6136" fill="#fff"/>
+    <path fill="#d0cfce" d="m51.2579,29.8111s-1.8149-.4504-1.0786-2.0742l4.5037-7.4841-3.6502-3.417-.73-.6833-7.1357,4.6903c-.9431.4213-2.037-.1166-2.2794-1.1205l-1.887-7.8158h-6l-1.8809,7.7858c-.2389.9894-1.3101,1.5798-2.2425,1.1716-.0148-.0063-.0296-.0131-.0445-.0198l-7.1357-4.6904-.73.6833-3.6502,3.417,4.5037,7.4841c.7364,1.6238-1.0785,2.0743-1.0785,2.0743l-8.4766,2.1074.1649,4.9972.033.9995,8.3622,1.7291c.952.3641,1.3501,1.4954.8358,2.3755l-.0328.0562-4.5037,7.484,3.6502,3.417.73.6833,7.1357-4.6902c.0149-.0068.03-.0129.0445-.02,0,0,.0115-.0042.0332-.0111,1.1606-.3768,2.393.3463,2.6794,1.5325l1.7947,7.4336h6l1.887-7.8158c.2424-1.0039,1.3364-1.5417,2.2794-1.1205l7.1357,4.6903.73-.6833,3.6502-3.417-4.5037-7.4841-.0328-.0562c-.5143-.88-.1162-2.0112.8358-2.3755l8.3622-1.729.033-.9995.1649-4.9973-8.4764-2.1074Zm-15.2579,15.0953c-5.5228,0-10-4.4772-10-10s4.4772-10,10-10,10,4.4772,10,10-4.4772,10-10,10Z"/>
+    <path fill="#9b9b9a" d="m36,24.9064c-5.5228,0-10,4.4772-10,10s4.4772,10,10,10,10-4.4772,10-10-4.4772-10-10-10Zm0,15c-2.7614,0-5-2.2386-5-5s2.2386-5,5-5,5,2.2385,5,5-2.2386,5-5,5Z"/>
+  </g>
+  <g id="line">
+    <circle cx="36" cy="34.9064" r="5" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <circle cx="36" cy="34.9064" r="10" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m31.1191,19.6921c-.2389.9895-1.31,1.5799-2.2425,1.1717-.0147-.0065-.0296-.0131-.0445-.0199l-7.1357-4.6903-.73.6834-3.6502,3.417,4.5037,7.484c.7363,1.6239-1.0785,2.0744-1.0785,2.0744l-8.4766,2.1074.1649,4.9973.033.9995,8.3622,1.7291h0c.9521.3641,1.3501,1.4954.8359,2.3754l-.0328.0562-4.5037,7.484,3.6502,3.417.73.6834,7.1357-4.6903c.0149-.0068.03-.0129.0445-.0199,0,0,.0116-.0042.0332-.0112,1.1606-.3768,2.393.3463,2.6794,1.5324l1.7947,7.4336h6l1.8869-7.8157c.2424-1.004,1.3364-1.5418,2.2794-1.1205h0l7.1357,4.6903.73-.6834,3.6502-3.417-4.5037-7.484-.0328-.0562c-.5143-.8801-.1162-2.0113.8359-2.3755h0l8.3622-1.7291.033-.9995.1649-4.9973-8.4766-2.1074s-1.8149-.4505-1.0785-2.0744l4.5037-7.484-3.6502-3.417-.73-.6834-7.1357,4.6903h0c-.943.4212-2.037-.1166-2.2794-1.1206l-1.887-7.8155h-6l-1.8809,7.7857Z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/gear2.pdf b/poster/assets/icons/gear2.pdf
new file mode 100644
index 0000000..c5f5e96
Binary files /dev/null and b/poster/assets/icons/gear2.pdf differ
diff --git a/poster/assets/icons/gear2.svg b/poster/assets/icons/gear2.svg
new file mode 100644
index 0000000..20a3920
--- /dev/null
+++ b/poster/assets/icons/gear2.svg
@@ -0,0 +1,12 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36.052" cy="34.9064" r="5.6136" fill="#fff"/>
+    <path fill="#d0cfce" d="m51.2579,29.8111s-1.8149-.4504-1.0786-2.0742l4.5037-7.4841-3.6502-3.417-.73-.6833-7.1357,4.6903c-.9431.4213-2.037-.1166-2.2794-1.1205l-1.887-7.8158h-6l-1.8809,7.7858c-.2389.9894-1.3101,1.5798-2.2425,1.1716-.0148-.0063-.0296-.0131-.0445-.0198l-7.1357-4.6904-.73.6833-3.6502,3.417,4.5037,7.4841c.7364,1.6238-1.0785,2.0743-1.0785,2.0743l-8.4766,2.1074.1649,4.9972.033.9995,8.3622,1.7291c.952.3641,1.3501,1.4954.8358,2.3755l-.0328.0562-4.5037,7.484,3.6502,3.417.73.6833,7.1357-4.6902c.0149-.0068.03-.0129.0445-.02,0,0,.0115-.0042.0332-.0111,1.1606-.3768,2.393.3463,2.6794,1.5325l1.7947,7.4336h6l1.887-7.8158c.2424-1.0039,1.3364-1.5417,2.2794-1.1205l7.1357,4.6903.73-.6833,3.6502-3.417-4.5037-7.4841-.0328-.0562c-.5143-.88-.1162-2.0112.8358-2.3755l8.3622-1.729.033-.9995.1649-4.9973-8.4764-2.1074Zm-15.2579,15.0953c-5.5228,0-10-4.4772-10-10s4.4772-10,10-10,10,4.4772,10,10-4.4772,10-10,10Z"/>
+    <path fill="#9b9b9a" d="m36,24.9064c-5.5228,0-10,4.4772-10,10s4.4772,10,10,10,10-4.4772,10-10-4.4772-10-10-10Zm0,15c-2.7614,0-5-2.2386-5-5s2.2386-5,5-5,5,2.2385,5,5-2.2386,5-5,5Z"/>
+  </g>
+  <g id="line">
+    <circle cx="36" cy="34.9064" r="5" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <circle cx="36" cy="34.9064" r="10" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m31.1191,19.6921c-.2389.9895-1.31,1.5799-2.2425,1.1717-.0147-.0065-.0296-.0131-.0445-.0199l-7.1357-4.6903-.73.6834-3.6502,3.417,4.5037,7.484c.7363,1.6239-1.0785,2.0744-1.0785,2.0744l-8.4766,2.1074.1649,4.9973.033.9995,8.3622,1.7291h0c.9521.3641,1.3501,1.4954.8359,2.3754l-.0328.0562-4.5037,7.484,3.6502,3.417.73.6834,7.1357-4.6903c.0149-.0068.03-.0129.0445-.0199,0,0,.0116-.0042.0332-.0112,1.1606-.3768,2.393.3463,2.6794,1.5324l1.7947,7.4336h6l1.8869-7.8157c.2424-1.004,1.3364-1.5418,2.2794-1.1205h0l7.1357,4.6903.73-.6834,3.6502-3.417-4.5037-7.484-.0328-.0562c-.5143-.8801-.1162-2.0113.8359-2.3755h0l8.3622-1.7291.033-.9995.1649-4.9973-8.4766-2.1074s-1.8149-.4505-1.0785-2.0744l4.5037-7.484-3.6502-3.417-.73-.6834-7.1357,4.6903h0c-.943.4212-2.037-.1166-2.2794-1.1206l-1.887-7.8155h-6l-1.8809,7.7857Z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/globe.pdf b/poster/assets/icons/globe.pdf
new file mode 100644
index 0000000..5cf341e
Binary files /dev/null and b/poster/assets/icons/globe.pdf differ
diff --git a/poster/assets/icons/globe.svg b/poster/assets/icons/globe.svg
new file mode 100644
index 0000000..1824173
--- /dev/null
+++ b/poster/assets/icons/globe.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36" cy="36" r="28" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <circle cx="36" cy="36" r="28" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M36,8v56c-8.5604,0-15.5-12.536-15.5-28S27.4396,8,36,8c8.5604,0,15.5,12.536,15.5,28S44.5604,64,36,64"/>
+    <line x1="64" x2="8" y1="36" y2="36" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="60" x2="12" y1="22" y2="22" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="60" x2="12" y1="50" y2="50" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/govbuilding.pdf b/poster/assets/icons/govbuilding.pdf
new file mode 100644
index 0000000..7f03bca
Binary files /dev/null and b/poster/assets/icons/govbuilding.pdf differ
diff --git a/poster/assets/icons/govbuilding.svg b/poster/assets/icons/govbuilding.svg
new file mode 100644
index 0000000..f57946b
--- /dev/null
+++ b/poster/assets/icons/govbuilding.svg
@@ -0,0 +1,26 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="18.54" y="26" width="34.92" height="25.95" fill="#9b9b9a"/>
+    <rect x="12" y="56" width="48" height="4" fill="#fff" stroke-miterlimit="10"/>
+    <rect x="14.13" y="22" width="43.74" height="4" fill="#fff" stroke-miterlimit="10"/>
+    <rect x="15.72" y="52" width="40.55" height="4" fill="#fff" stroke-miterlimit="10"/>
+    <rect x="18.5" y="26" width="4" height="26" fill="#fff" stroke-miterlimit="10"/>
+    <rect x="27.35" y="26.15" width="4" height="26" fill="#fff" stroke-miterlimit="10"/>
+    <rect x="49.52" y="25.95" width="3.941" height="26" fill="#fff" stroke-miterlimit="10"/>
+    <polygon fill="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="36 12 19 21.75 53 21.75"/>
+    <rect x="40.35" y="26.15" width="4" height="26" fill="#fff" stroke-miterlimit="10"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <rect x="11.99" y="55.89" width="48.01" height="3.993" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="14.18" y="21.76" width="43.65" height="3.999" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2.001"/>
+    <rect x="15.27" y="51.76" width="41.47" height="3.993" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="18.35" y="25.61" width="4.298" height="26.3" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="1.702"/>
+    <rect x="27.35" y="25.61" width="4.298" height="26.3" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="1.702"/>
+    <rect x="49.35" y="25.61" width="4.298" height="26.3" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="1.702"/>
+    <polygon transform="matrix(1.091 0 0 .9982 -3.283 .098)" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="1.916" points="36 12 19 21.75 53 21.75"/>
+    <rect x="40.35" y="25.61" width="4.298" height="26.3" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="1.702"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/grinface.pdf b/poster/assets/icons/grinface.pdf
new file mode 100644
index 0000000..18442b5
Binary files /dev/null and b/poster/assets/icons/grinface.pdf differ
diff --git a/poster/assets/icons/grinface.svg b/poster/assets/icons/grinface.svg
new file mode 100644
index 0000000..e9e1d0e
--- /dev/null
+++ b/poster/assets/icons/grinface.svg
@@ -0,0 +1,17 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36" cy="36" r="23" fill="#FCEA2B"/>
+    <path fill="#FFFFFF" d="M50.595,41.64c0.012,1.5397-0.2838,3.0662-0.87,4.49c-12.49,3.03-25.43,0.34-27.49-0.13 c-0.5588-1.3852-0.8407-2.8664-0.83-4.36h0.11c0,0,14.8,3.59,28.89,0.07L50.595,41.64z"/>
+    <path fill="#EA5A47" d="M49.7251,46.13c-1.79,4.27-6.35,7.23-13.69,7.23c-7.41,0-12.03-3.03-13.8-7.36 C24.2951,46.47,37.235,49.16,49.7251,46.13z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <circle cx="36" cy="36" r="23" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M50.595,41.64 c0.012,1.5397-0.2838,3.0662-0.87,4.49c-12.49,3.03-25.43,0.34-27.49-0.13c-0.5588-1.3852-0.8407-2.8664-0.83-4.36h0.11 c0,0,14.8,3.59,28.89,0.07L50.595,41.64z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M49.7251,46.13 c-1.79,4.27-6.35,7.23-13.69,7.23c-7.41,0-12.03-3.03-13.8-7.36C24.2951,46.47,37.235,49.16,49.7251,46.13z"/>
+    <path d="M30,31c0,1.6568-1.3448,3-3,3c-1.6553,0-3-1.3433-3-3c0-1.6552,1.3447-3,3-3C28.6552,28,30,29.3448,30,31"/>
+    <path d="M48,31c0,1.6568-1.3447,3-3,3s-3-1.3433-3-3c0-1.6552,1.3447-3,3-3S48,29.3448,48,31"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/handshake.pdf b/poster/assets/icons/handshake.pdf
new file mode 100644
index 0000000..94594f7
Binary files /dev/null and b/poster/assets/icons/handshake.pdf differ
diff --git a/poster/assets/icons/handshake.svg b/poster/assets/icons/handshake.svg
new file mode 100644
index 0000000..f39bd36
--- /dev/null
+++ b/poster/assets/icons/handshake.svg
@@ -0,0 +1,27 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color"/>
+  <g id="skin">
+    <g id="skin-a">
+      <path fill="#fcea2b" d="M62.622,40.338c.96,3.25-1.109,5.983-4.435,5.392.443,3.249-2.735,6.13-6.579,4.283,1.478,3.766-1.997,5.908-4.731,4.283,1.403,1.6985-.813,7.46-9.387,1.994l-1.6426-.9033L16.5088,44.7522,15.05,43.95s-7.133-5.822-8.537-8.259c-4.392-7.595.9489-19.79,10.44-21.82l7.9426-1.4243,5.2391,7.9469,13.0738,6.0043L56,33.58l3.6854,3.7675Z"/>
+    </g>
+    <g id="skin-b">
+      <path fill="#fcea2b" d="M62.622,40.338c6.721-4.585,5.041-19.03-.0988-25.36-9.287-1.459-11-2.362-20.98-3.943l-13.53-.6185a3.9934,3.9934,0,0,0-4.779,2.533,32.8568,32.8568,0,0,1-3.599,8.378,3.5387,3.5387,0,0,0,1.872,4.588c1.908.4767,2.78-.386,4.46-1.686a25.9541,25.9541,0,0,0,3.805-4.575l13.64,6.204,12.72,7.164c2.514,1.698,5.012,5.844,6.51,7.321"/>
+      <path fill="#fcea2b" d="M31.51,54.15a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101A3.27,3.27,0,0,1,29.7,57.2424l1.81-3.094Z"/>
+      <path fill="#fcea2b" d="M25.84,50.98a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101a3.27,3.27,0,0,1-5.658-3.1713l1.81-3.094Z"/>
+      <path fill="#fcea2b" d="M20.18,47.82a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101a3.27,3.27,0,0,1-5.658-3.1713l1.81-3.094Z"/>
+      <path fill="#fcea2b" d="M14.53,44.65a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101a3.27,3.27,0,0,1-5.658-3.1713l1.81-3.094Z"/>
+    </g>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15.05,43.95s-7.133-5.822-8.537-8.259c-4.392-7.595.9489-19.79,10.44-21.82"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M38.71,42.99,51.6,50.011"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M33.87,47.79l13,6.498"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M58.18,45.72l-5.1-4.358-8.279-4.335"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m29.772 19.654 13.64 6.204 12.72 7.164c2.514 1.698 5.012 5.844 6.51 7.321"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M37.49,56.29c8.574,5.466,10.79-.2955,9.387-1.994,2.734,1.625,6.209-.517,4.731-4.283,3.844,1.847,7.022-1.034,6.579-4.283,3.326.591,5.395-2.142,4.435-5.392,6.721-4.585,5.041-19.03-.0988-25.36-9.287-1.459-11-2.362-20.98-3.943l-13.53-.6185a3.9934,3.9934,0,0,0-4.779,2.533,32.8568,32.8568,0,0,1-3.599,8.378,3.5387,3.5387,0,0,0,1.872,4.588c1.908.4767,2.78-.386,4.46-1.686a25.9541,25.9541,0,0,0,3.805-4.575"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M31.51,54.15a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101A3.27,3.27,0,0,1,29.7,57.2424l1.81-3.094Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M25.84,50.98a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101a3.27,3.27,0,0,1-5.658-3.1713l1.81-3.094Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M20.18,47.82a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101a3.27,3.27,0,0,1-5.658-3.1713l1.81-3.094Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M14.53,44.65a3.0218,3.0218,0,0,1,4.144-.9c1.405.8125,2.439,2.362,1.478,4.063l-1.774,3.101a3.27,3.27,0,0,1-5.658-3.1713l1.81-3.094Z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/hospital.pdf b/poster/assets/icons/hospital.pdf
new file mode 100644
index 0000000..544a233
Binary files /dev/null and b/poster/assets/icons/hospital.pdf differ
diff --git a/poster/assets/icons/hospital.svg b/poster/assets/icons/hospital.svg
new file mode 100644
index 0000000..b43fa7f
--- /dev/null
+++ b/poster/assets/icons/hospital.svg
@@ -0,0 +1,32 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="22.5" y="12" width="27" height="48" fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="13.5" y="25" width="9" height="35" fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="49.5" y="25" width="9" height="35" fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="29.5" y="44" width="13" height="16" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polygon fill="#EA5A47" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="43.5,23 38.5,23 38.5,18 33.5,18 33.5,23 28.5,23 28.5,28 33.5,28 33.5,33 38.5,33 38.5,28 43.5,28"/>
+    <rect x="17" y="30" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="17" y="40" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="17" y="50" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="53" y="30" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="53" y="40" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="53" y="50" width="2" height="5" fill="none" stroke="#92D3F5" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <rect x="22.5" y="12" width="27" height="48" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="13.5" y="25" width="9" height="35" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="49.5" y="25" width="9" height="35" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="29.5" y="44" width="13" height="16" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="36" x2="36" y1="60" y2="44" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polygon fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="43.5,23 38.5,23 38.5,18 33.5,18 33.5,23 28.5,23 28.5,28 33.5,28 33.5,33 38.5,33 38.5,28 43.5,28"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="19,35 17,35 17,30"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="19,45 17,45 17,40"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="19,55 17,55 17,50"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="55,35 53,35 53,30"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="55,45 53,45 53,40"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="55,55 53,55 53,50"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/hourglass.pdf b/poster/assets/icons/hourglass.pdf
new file mode 100644
index 0000000..9789a1b
Binary files /dev/null and b/poster/assets/icons/hourglass.pdf differ
diff --git a/poster/assets/icons/hourglass.svg b/poster/assets/icons/hourglass.svg
new file mode 100644
index 0000000..ddb177f
--- /dev/null
+++ b/poster/assets/icons/hourglass.svg
@@ -0,0 +1,24 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#fff" d="m35.498,37.967h1.0165c7.6245,0,13.8146,6.1901,13.8146,13.8146v6.4581h-28.3282v-6.7757c0-7.4492,6.0478-13.4971,13.4971-13.4971Z"/>
+    <path transform="translate(71.98 47.7203) rotate(180)" fill="#fff" d="m35.323,13.7238h1.0165c7.6245,0,13.8146,6.1901,13.8146,13.8146v6.4581h-28.3282v-6.7757c0-7.4492,6.0478-13.4971,13.4971-13.4971Z"/>
+    <path fill="#fff" d="m39.3125,33.6813s-2.8222,2.0175-.1707,4.5474c0,0-2.0336-.5557-6.3872.0707,0,0,2.7562-2.0985-.094-4.7294l6.6519.1114Z"/>
+    <path fill="#9b9b9a" d="m40.2139,31.1055c.0039-.002.0068-.002.0107-.002.0049-.0019.0088-.0039.0137-.0058,5.6543-1.4844,7.7617-7.7901,7.7617-11.4161v-1.6816h-24v1.6816c0,3.626,2.1074,9.9317,7.7617,11.4161.0049.0019.0088.0039.0137.0058.0039,0,.0068,0,.0107.002,1.792.4863,3.0996,1.5361,3.7491,2.8945h.9296c.6495-1.3584,1.9571-2.4082,3.7491-2.8945Z"/>
+    <path fill="#9b9b9a" d="m47,55c-6.0742,0-11-4.9258-11-11,0,6.0742-4.9258,11-11,11h-1v4h24v-4h-1Z"/>
+    <path fill="#a57939" d="m55,11c0,1.1001-.9004,2-2,2H19c-1.0996,0-2-.8999-2-2v-1c0-1.1001.9004-2,2-2h34c1.0996,0,2,.8999,2,2v1Z"/>
+    <path fill="#a57939" d="m55,62c0,1.0996-.9004,2-2,2H19c-1.0996,0-2-.9004-2-2v-1c0-1.0996.9004-2,2-2h34c1.0996,0,2,.9004,2,2v1Z"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m31,34c-7.2725-1.9092-10-9.5454-10-14.3184v-6.6816"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m21,59v-6.6816c0-4.7725,2.7275-12.4092,10-14.3184"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m31,38c1-.2715,2-.8945,2-2,0-1.1045-1-1.7285-2-2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m41,34c7.2725-1.9092,10-9.5454,10-14.3184v-6.6816"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m51,59v-6.6816c0-4.7725-2.7275-12.4092-10-14.3184"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m41,38c-1-.2715-2-.8945-2-2,0-1.1045,1-1.7285,2-2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m25,55c6.0742,0,11-4.9258,11-11,0,6.0742,4.9258,11,11,11"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m55,11c0,1.1001-.9004,2-2,2H19c-1.0996,0-2-.8999-2-2v-1c0-1.1001.9004-2,2-2h34c1.0996,0,2,.8999,2,2v1Z"/>
+    <line x1="47" x2="25" y1="18" y2="18" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m55,62c0,1.0996-.9004,2-2,2H19c-1.0996,0-2-.9004-2-2v-1c0-1.0996.9004-2,2-2h34c1.0996,0,2,.9004,2,2v1Z"/>
+    <line x1="36" x2="36" y1="39" y2="44" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/idcard.pdf b/poster/assets/icons/idcard.pdf
new file mode 100644
index 0000000..5dcc576
Binary files /dev/null and b/poster/assets/icons/idcard.pdf differ
diff --git a/poster/assets/icons/idcard.svg b/poster/assets/icons/idcard.svg
new file mode 100644
index 0000000..f6a45fa
--- /dev/null
+++ b/poster/assets/icons/idcard.svg
@@ -0,0 +1,14 @@
+<svg id="emoji" viewBox="0 0 72 72" version="1.1" xmlns="http://www.w3.org/2000/svg">
+  <g id="line-supplement" transform="translate(-.0006922 -.01378)" fill="none" stroke="#000">
+    <path transform="matrix(0 2.404 2.404 0 35.81 35.73)" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m-3.5-3.5h7" clip-rule="evenodd"/>
+    <path transform="matrix(2.404 0 0 2.404 41.53 27.31)" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m0 6.974h-2.427v-6.974h2.427c1.148 0 2.08 0.931 2.08 2.079v2.815c0 1.149-0.932 2.08-2.08 2.08z" clip-rule="evenodd"/>
+    <rect x="12" y="12.01" ry="5" width="48" height="47.83" stroke-width="2"/>
+  </g>
+  <g id="color" transform="translate(-.0006922 -.01378)" stroke="#d22f27">
+    <rect x="12" y="12.01" ry="5" width="48" height="47.83" fill="#fff" stroke="none" stroke-width="2"/>
+    <path transform="matrix(0,2.404,2.404,0,35.81,35.73)" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m-3.5-3.5h7" clip-rule="evenodd"/>
+    <path transform="matrix(2.404,0,0,2.404,41.53,27.31)" fill="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="m0 6.974h-2.427v-6.974h2.427c1.148 0 2.08 0.931 2.08 2.079v2.815c0 1.149-0.932 2.08-2.08 2.08z" clip-rule="evenodd"/>
+    <rect x="12" y="12.01" ry="5" width="48" height="47.83" fill="none" stroke-width="2"/>
+  </g>
+  <g id="line"/>
+</svg>
diff --git a/poster/assets/icons/key.pdf b/poster/assets/icons/key.pdf
new file mode 100644
index 0000000..8a304ea
Binary files /dev/null and b/poster/assets/icons/key.pdf differ
diff --git a/poster/assets/icons/key.svg b/poster/assets/icons/key.svg
new file mode 100644
index 0000000..21d5c6c
--- /dev/null
+++ b/poster/assets/icons/key.svg
@@ -0,0 +1,16 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#F4AA41" stroke="none" d="M33.5357,31.9911c-1.4016-4.2877-0.2247-9.41,3.4285-13.0632c5.018-5.018,12.8077-5.3639,17.3989-0.7727 s4.2452,12.381-0.7728,17.3989c-4.057,4.057-10.4347,5.5131-14.2685,2.5888"/>
+    <polyline fill="#F4AA41" stroke="#F4AA41" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="33.652,31.7364 31.2181,34.1872 14.6444,50.5142 14.6444,57.6603 21.0426,57.6603 21.0426,53.0835 26.0544,53.0835 26.0544,47.3024 32.04,47.3024 34.3913,44.9292 34.3913,40.6274 36.3618,40.6274 39.4524,37.5368"/>
+    <polygon fill="#E27022" stroke="none" points="15.9847,53.3457 15.9857,51.4386 31.8977,35.8744 32.8505,36.8484"/>
+    <circle cx="48.5201" cy="23.9982" r="3.9521" fill="#E27022" stroke="none"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="30.735,34.6557 14.3026,50.6814 14.3026,57.9214 21.868,57.9214 21.868,53.2845 26.9929,53.2845 26.9929,47.4274 32.0913,47.4274 34.4957,45.023 34.4957,40.6647 36.5107,40.6647"/>
+    <circle cx="48.5201" cy="23.9982" r="3.9521" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M34.2256,31.1781c-1.4298-4.2383-0.3466-9.2209,3.1804-12.6947c4.8446-4.7715,12.4654-4.8894,17.0216-0.2634 s4.3223,12.2441-0.5223,17.0156c-3.9169,3.8577-9.6484,4.6736-14.1079,2.3998"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/laptop.pdf b/poster/assets/icons/laptop.pdf
new file mode 100644
index 0000000..fa80aca
Binary files /dev/null and b/poster/assets/icons/laptop.pdf differ
diff --git a/poster/assets/icons/laptop.svg b/poster/assets/icons/laptop.svg
new file mode 100644
index 0000000..33eed4d
--- /dev/null
+++ b/poster/assets/icons/laptop.svg
@@ -0,0 +1,19 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <polygon fill="#9B9B9A" stroke="none" points="63.738,40.9795 63.738,68.0462 11.8119,68.0462 11.8119,40.9795 11.8119,35.9583 63.738,35.9583"/>
+    <rect x="12.625" y="3.8917" width="50" height="32.0667" transform="matrix(-1 -1.224647e-16 1.224647e-16 -1 75.25 39.85)" fill="#9B9B9A" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polygon fill="#FFFFFF" stroke="none" points="62.625,36 12.625,13.779 12.625,3.8917 62.625,26.1127"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="62.625,40.9795 62.625,68.0462 12.625,68.0462 12.625,40.9795"/>
+    <rect x="12.625" y="3.8917" width="50" height="32.0667" transform="matrix(-1 -1.224647e-16 1.224647e-16 -1 75.25 39.85)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="17.625" x2="57.625" y1="41.5275" y2="41.5275" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="17.625" x2="57.625" y1="47.0967" y2="47.0967" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="17.625" x2="57.625" y1="52.666" y2="52.666" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="30.7171" y="56.1856" width="13.5062" height="8.1037" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="12.625" y="3.8917" width="50" height="32.0667" transform="matrix(-1 -1.224647e-16 1.224647e-16 -1 75.25 39.85)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/link.pdf b/poster/assets/icons/link.pdf
new file mode 100644
index 0000000..4bda9bd
Binary files /dev/null and b/poster/assets/icons/link.pdf differ
diff --git a/poster/assets/icons/link.svg b/poster/assets/icons/link.svg
new file mode 100644
index 0000000..285c0c7
--- /dev/null
+++ b/poster/assets/icons/link.svg
@@ -0,0 +1,12 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#d0cfce" d="m36.1971,9.536c-3.149,0-4.7734.6705-6.7786,2.7026-1.8633,1.8883-3.1685,3.6641-3.1685,6.468l-.25,17.9189c0,2.6406.3256,4.6911,2,6.5405,2.0169,2.2277,4.6806,4,8,4,6.0751,0,10-4.7192,10-10.5405l-.25-17.9189c0-2.8667-1.191-4.3463-3.1287-6.2464-1.9973-1.9586-3.3407-2.9241-6.4242-2.9241Zm3.8029,26.0005c0,2.5569-1.7909,4.6296-4,4.6296-1.1563,0-2.0027-.3975-3-1-1.2121-.7323-1.1074-2.3926-1-3.6296v-15.7408c0-1.1549-.6042-2.8187,0-3.6296.7335-.9845,2.7886-1,4-1,1.3009,0,3.2695-.1131,4,1,.51.7772,0,2.5784,0,3.6296v15.7408Z"/>
+    <path fill="#9b9b9a" d="m32.0061,35.5372c.1159-2.4366,1.8597-4.3711,3.9939-4.3711,1.2944,0,3.2689.8963,4,2,.5166.7799,0,1.5709,0,2.6296v15.7407c0,1.173.6212,2.8138,0,3.6296-.733.9626-2.8043,1-4,1-1.3246,0-3.272-.852-4-2-.4861-.7666,0-1.6059,0-2.6296v-5.8082c-3-.4378-6-9.7281-6-9.7281v15.8956c0,5.6721,3.9249,9.5203,10,9.5203s10-3.8482,10-9.5203v-17.4593c0-5.6722-3.9249-10.2703-10-10.2703-1.6162,0-3.151.3254-4.5333.9099l.5394,10.4612Z"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m37.2318,41.0132c-.394.0998-.8067.1529-1.2318.1529-2.7614,0-5-2.2386-5-5v-17c0-2.7614,2.2386-5,5-5s5,2.2386,5,5v3"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m37.3602,46.0744c-.4448.0605-.8988.0917-1.3602.0917-5.5228,0-10-4.4771-10-10v-17c0-5.5228,4.4772-10,10-10s10,4.4772,10,10v7"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m34.7604,30.3209c.3964-.1011.8117-.1549,1.2396-.1549,2.7614,0,5,2.2386,5,5v17c0,2.7614-2.2386,5-5,5s-5-2.2386-5-5v-3"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m34.7494,25.2435c.4097-.0511.8271-.0774,1.2506-.0774,5.5228,0,10,4.4772,10,10v17c0,5.5229-4.4772,10-10,10s-10-4.4771-10-10v-6"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/lock.pdf b/poster/assets/icons/lock.pdf
new file mode 100644
index 0000000..443f8fe
Binary files /dev/null and b/poster/assets/icons/lock.pdf differ
diff --git a/poster/assets/icons/lock.svg b/poster/assets/icons/lock.svg
new file mode 100644
index 0000000..63bd518
--- /dev/null
+++ b/poster/assets/icons/lock.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D0CFCE" stroke="#D0CFCE" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M21.3751,31.1747c-0.3501-8.7708,6.4491-18.5395,14.387-18.7794c8.0047-0.2419,16.5412,10.9698,14.333,19.052h-4.0394 c0,0,1.5619-7.922-2.2164-11.2535c-1.8494-1.6307-5.2556-4.771-8.6396-4.2922c-2.2829,0.323-6.8677,3.4518-7.9271,5.4209 c-2.0643,3.8367-1.7248,9.8169-1.7248,9.8169L21.3751,31.1747z"/>
+    <polygon fill="#FCEA2B" stroke="none" points="53,32.2969 54.875,32.2969 54.875,59.1719 16.875,59.1719 16.875,32.2969 18.75,32.2969"/>
+    <polygon fill="#F1B31C" stroke="none" points="54.4302,32.493 35.66,58.9944 54.9675,58.9944"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <polygon fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="53,32.25 54.875,32.25 54.875,59.125 16.875,59.125 16.875,32.25 18.75,32.25"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M21.3751,28.9146c0-8.3786,6.4151-16.2744,14.3184-16.523c7.9697-0.2507,15.4098,7.2847,14.7416,16.523"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M25.5478,28.9146c0-6.3352,4.5755-12.3054,10.2123-12.4934c5.6843-0.1896,10.9908,5.5081,10.5142,12.4934"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/magnify.pdf b/poster/assets/icons/magnify.pdf
new file mode 100644
index 0000000..7f6bb5f
Binary files /dev/null and b/poster/assets/icons/magnify.pdf differ
diff --git a/poster/assets/icons/magnify.svg b/poster/assets/icons/magnify.svg
new file mode 100644
index 0000000..2974225
--- /dev/null
+++ b/poster/assets/icons/magnify.svg
@@ -0,0 +1,16 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <ellipse cx="29.5854" cy="24.8305" rx="11.1656" ry="11.1657" transform="matrix(0.8006 -0.5992 0.5992 0.8006 -8.979 22.6777)" fill="#FFFFFF" stroke="none"/>
+    <path fill="#92D3F5" stroke="none" d="M39,19c-1.6269-2.1743-5.3114-4.6131-8-5c-1.841-0.2648-5,0-5.3126,1.4508 c2.432,0.2232,6.261,1.3933,9.4483,6.0391c2.7047,3.9427,2.9098,7.2606,2.5092,9.5215C40,31,41.7867,22.7243,39,19z"/>
+    <path fill="#D0CFCE" stroke="none" d="M20.717,13.2532c-3.1395,2.3517-5.1766,5.7832-5.7372,9.6663c-0.5584,3.883,0.4286,7.7514,2.7785,10.8927 c4.8528,6.4827,14.0758,7.8101,20.5595,2.9577c6.4832-4.8514,7.8112-14.073,2.9587-20.5591 c-2.3504-3.1402-5.7839-5.1778-9.6668-5.7362C27.7267,9.9161,23.8587,10.9022,20.717,13.2532z M38.1933,18.3883 c2.2813,3.0482,2.696,6.924,1.4434,10.248c-0.6965,1.8514-1.9113,3.5306-3.6095,4.8016c-4.7463,3.5525-11.498,2.58-15.0496-2.166 c-1.7206-2.2992-2.4437-5.1309-2.0341-7.9731c0.41-2.8429,1.8999-5.3554,4.2002-7.0765c2.2984-1.721,5.1298-2.4433,7.9731-2.0341 C33.9592,14.5969,36.4719,16.0889,38.1933,18.3883z"/>
+    <path fill="#3F3F3F" stroke="none" d="M39,42l10,14c0,0,3,4,5,2s0-5,0-5L43,39L39,42z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <ellipse cx="29.5854" cy="24.8305" rx="14.6372" ry="14.6372" transform="matrix(0.8006 -0.5992 0.5992 0.8006 -8.979 22.6778)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <ellipse cx="29.5854" cy="24.8305" rx="11.1656" ry="11.1657" transform="matrix(0.8006 -0.5992 0.5992 0.8006 -8.979 22.6777)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M38.6805,41.7876l4.1839-3.1316l11.6927,15.622c0.8354,1.1162,0.5758,2.7219-0.5795,3.5867l0,0 c-1.1554,0.8647-2.7691,0.661-3.6045-0.4551L38.6805,41.7876z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/masks.pdf b/poster/assets/icons/masks.pdf
new file mode 100644
index 0000000..4b0d92a
Binary files /dev/null and b/poster/assets/icons/masks.pdf differ
diff --git a/poster/assets/icons/masks.svg b/poster/assets/icons/masks.svg
new file mode 100644
index 0000000..38c27c6
--- /dev/null
+++ b/poster/assets/icons/masks.svg
@@ -0,0 +1,25 @@
+<svg id="emoji" viewBox="0 0 72 72" version="1.1" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#3F3F3F" d="M33.6,29.0397c-0.28-2.33-1.42-9.24-1.42-9.24c-0.29-2.37-3.84-4.66-6.16-4.03c0,0-6.15,1.97-7.9,2.44 c-1.76,0.47-8.08,1.84-8.08,1.84c-2.31,0.62-4.25,4.37-3.31,6.57c0,0,2.47,6.55,3.39,8.71c0.69,1.63,3.13,4.58,4.05,6.18 c1.95,3.4,6.01,7.46,9.8,6.45l3.95-1.06c3.79-1.02,5.28-6.56,5.26-10.48C33.18,34.5698,33.81,30.7997,33.6,29.0397z M16.26,31.3898 c-1.07,0.28-2.11-0.13-2.32-0.93c-0.22-0.8,0.47-1.68,1.54-1.97c1.07-0.29,2.11,0.13,2.32,0.93 C18.02,30.2198,17.32,31.0998,16.26,31.3898z M26.11,28.7498c-1.06,0.28-2.1-0.13-2.32-0.93c-0.21-0.8,0.48-1.69,1.55-1.97 c1.06-0.29,2.1,0.1299,2.3199,0.93C27.87,27.5798,27.18,28.4598,26.11,28.7498z M23.54,38.4398c-2.4,0.65-3.24,5.31-3.88,2.91 c-0.65-2.4,0.78-4.8701,3.1801-5.51c2.4-0.65,4.87,0.78,5.5099,3.18C28.99,41.4197,25.94,37.7997,23.54,38.4398z"/>
+    <path fill="#3F3F3F" d="M21.6693,23.4356c2.1356-0.765,4.0226-1.1808,5.0998-0.9136c1.2528,0.3108,2.2244,1.0304,3.1249,2.106 L21.6693,23.4356z"/>
+    <path fill="#3F3F3F" d="M17.4538,24.5652c-2.232,0.4053-4.0741,0.9887-4.8733,1.7587c-0.9295,0.8956-1.4112,2.0046-1.6533,3.3863 L17.4538,24.5652z"/>
+    <path fill="#FFFFFF" d="M61.96,28.0497c0,0-6.32-1.37-8.07-1.84c-1.76-0.47-7.91-2.45-7.91-2.45c-2.32-0.62-5.87,1.67-6.16,4.04 c0,0-1.14,6.91-1.42,9.24c-0.21,1.76,0.42,5.53,0.42,7.38c-0.02,3.92,1.47,9.46,5.26,10.48l3.95,1.06c3.79,1.01,7.85-3.05,9.8-6.45 c0.92-1.6,3.36-4.55,4.05-6.18c0.92-2.16,3.39-8.71,3.39-8.71C66.21,32.4197,64.27,28.6697,61.96,28.0497z M44.14,34.7297 c0.22-0.8,1.26-1.22,2.32-0.93c1.07,0.28,1.7599,1.16,1.55,1.96c-0.22,0.8-1.26,1.22-2.32,0.93 C44.62,36.4098,43.93,35.5298,44.14,34.7297z M53.31,45.7498c-0.65,2.4-3.11,3.83-5.51,3.18c-2.4-0.64-3.83-3.11-3.19-5.51 c0.65-2.4,1.48,2.26,3.88,2.9C50.9,46.9698,53.95,43.3498,53.31,45.7498z M57.86,38.3998c-0.21,0.8-1.25,1.22-2.32,0.94 c-1.06-0.29-1.7599-1.17-1.54-1.97c0.21-0.8,1.25-1.22,2.32-0.93C57.39,36.7198,58.08,37.5998,57.86,38.3998z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M27.9197,46.898l-3.9508,1.0585c-3.7855,1.0144-7.852-3.0433-9.7979-6.4451c-0.9177-1.6042-3.3572-4.5516-4.0536-6.1821 c-0.9213-2.1567-3.3831-8.7075-3.3831-8.7075c-0.9413-2.2036,0.9945-5.9547,3.3091-6.5749c0,0,6.3153-1.3686,8.0716-1.8392 c1.7562-0.4705,7.9098-2.4429,7.9098-2.4429c2.3145-0.6202,5.8665,1.6604,6.1531,4.0394c0,0,1.1435,6.9053,1.4241,9.234 c0.212,1.7598-0.427,5.5314-0.4197,7.3792C33.198,40.3363,31.7052,45.8836,27.9197,46.898z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M28.3499,39.0182c0.6432,2.4006-2.412-1.2173-4.8126-0.574c-2.4006,0.6432-3.2375,5.3039-3.8808,2.9033 c-0.6432-2.4006,0.7814-4.8681,3.182-5.5113C25.2391,35.1929,27.7066,36.6175,28.3499,39.0182z"/>
+    <ellipse cx="25.7256" cy="27.2976" rx="1.9999" ry="1.5" transform="matrix(0.9659 -0.2588 0.2588 0.9659 -6.1883 7.5881)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M21.6693,23.4356c2.1356-0.765,4.0226-1.1808,5.0998-0.9136c1.2528,0.3108,2.2244,1.0304,3.1249,2.106"/>
+    <ellipse cx="15.8699" cy="29.9379" rx="1.9999" ry="1.5" transform="matrix(0.9659 -0.2588 0.2588 0.9659 -7.2074 5.1273)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M17.4538,24.5652c-2.232,0.4053-4.0741,0.9887-4.8733,1.7587c-0.9295,0.8956-1.4112,2.0046-1.6533,3.3863"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M48.031,55.9565l-3.9507-1.0587c-3.7855-1.0143-5.2784-6.5616-5.2627-10.4806c0.0073-1.8481-0.6316-5.6204-0.4195-7.3807 c0.2805-2.3284,1.4239-9.2325,1.4239-9.2325c0.2866-2.379,3.8386-4.6597,6.1532-4.0395c0,0,6.1535,1.9724,7.9099,2.443 c1.7561,0.4706,8.0715,1.8393,8.0715,1.8393c2.3145,0.6201,4.2503,4.3712,3.309,6.5748c0,0-2.4623,6.5519-3.3837,8.7089 c-0.6963,1.63-3.1355,4.5768-4.0531,6.1807C55.8829,52.9132,51.8165,56.9708,48.031,55.9565z"/>
+    <ellipse cx="55.9304" cy="37.8867" rx="1.5" ry="1.9999" transform="matrix(0.2588 -0.9659 0.9659 0.2588 4.8593 82.1061)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M54.3491,32.5124c2.232,0.4053,4.0741,0.9887,4.8733,1.7587c0.9295,0.8956,1.4112,2.0046,1.6533,3.3863"/>
+    <ellipse cx="46.074" cy="35.245" rx="1.5" ry="1.9999" transform="matrix(0.2588 -0.9659 0.9659 0.2588 0.1055 70.6275)" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M50.1336,31.3828c-2.1356-0.765-4.0226-1.1808-5.0998-0.9136c-1.2528,0.3108-2.2244,1.0304-3.1249,2.106"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M44.6141,43.4203c0.6432-2.4006,1.4802,2.2601,3.8808,2.9033c2.4006,0.6433,5.4558-2.9746,4.8125-0.574 c-0.6432,2.4006-3.1107,3.8253-5.5113,3.182C45.3955,48.2884,43.9709,45.8209,44.6141,43.4203z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/memo.pdf b/poster/assets/icons/memo.pdf
new file mode 100644
index 0000000..538a18c
Binary files /dev/null and b/poster/assets/icons/memo.pdf differ
diff --git a/poster/assets/icons/memo.svg b/poster/assets/icons/memo.svg
new file mode 100644
index 0000000..7cd1b58
--- /dev/null
+++ b/poster/assets/icons/memo.svg
@@ -0,0 +1,24 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="16.4055" y="11.3783" width="39.5645" height="49.0659" fill="#fff"/>
+    <polyline fill="#f4aa41" points="39.9312 40.2224 51.2252 28.9284 56.8562 36.3591 46.3562 46.8706"/>
+    <polyline fill="#a57939" points="37.9415 46.8185 39.902 41.17 46.3562 47.624 40.7075 49.5846"/>
+    <polyline fill="#ea5a47" points="55.3215 25.5799 59.3001 21.6013 66.0352 28.1847 62.0904 32.1296"/>
+    <polyline fill="#d0cfce" points="50.4943 29.6593 55.1018 25.0519 61.7836 31.7907 57.2152 36.3591"/>
+  </g>
+  <g id="line">
+    <polygon points="38.0702 47.191 40.4564 49.5772 36.9921 50.8566 38.0702 47.191"/>
+    <line x1="22.3215" x2="49.3215" y1="19.875" y2="19.875" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="22.3215" x2="47.9215" y1="27.875" y2="27.875" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="22.3215" x2="39.4312" y1="35.875" y2="35.875" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="22.3215" x2="34.5284" y1="43.875" y2="43.875" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="22.3215" x2="32.4675" y1="51.875" y2="51.875" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polygon points="38.0702 47.191 40.4564 49.5772 36.9921 50.8566 38.0702 47.191"/>
+    <polygon fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="40.6919 49.591 46.3562 47.624 61.9461 32.034 55.492 25.5799 39.902 41.17 37.9282 46.841 40.6919 49.591"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="58.0856 22.9863 59.6411 21.4309 66.0952 27.885 64.4634 29.5168"/>
+    <line x1="40.2788" x2="46.7329" y1="40.7932" y2="47.2473" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="37.9323 46.8277 36.5493 50.9768 40.7075 49.5846"/>
+    <line x1="51.3023" x2="57.1946" y1="30.1572" y2="36.0495" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2.0206" points="55.3215 44.228 55.3215 59.875 16.3215 59.875 16.3215 11.875 55.3215 11.875 55.3215 20.3309"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/mobile.pdf b/poster/assets/icons/mobile.pdf
new file mode 100644
index 0000000..790d60f
Binary files /dev/null and b/poster/assets/icons/mobile.pdf differ
diff --git a/poster/assets/icons/mobile.svg b/poster/assets/icons/mobile.svg
new file mode 100644
index 0000000..56e5319
--- /dev/null
+++ b/poster/assets/icons/mobile.svg
@@ -0,0 +1,16 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#9B9B9A" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M52.5,64.7644h-33c-0.5523,0-1-0.4477-1-1v-56c0-0.5523,0.4477-1,1-1h33c0.5523,0,1,0.4477,1,1v56 C53.5,64.3167,53.0523,64.7644,52.5,64.7644z"/>
+    <path fill="#D0CFCE" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M48.0339,55H23.9661C23.4325,55,23,54.5675,23,54.0339V13.9661C23,13.4325,23.4325,13,23.9661,13h24.0678 C48.5675,13,49,13.4325,49,13.9661v40.0678C49,54.5675,48.5675,55,48.0339,55z"/>
+    <polygon fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="31,10 41,10 41,10 31,10"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M52.5,64.7644h-33c-0.5523,0-1-0.4477-1-1v-56c0-0.5523,0.4477-1,1-1h33c0.5523,0,1,0.4477,1,1v56 C53.5,64.3167,53.0523,64.7644,52.5,64.7644z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M48.0339,55H23.9661C23.4325,55,23,54.5675,23,54.0339V13.9661C23,13.4325,23.4325,13,23.9661,13h24.0678 C48.5675,13,49,13.4325,49,13.9661v40.0678C49,54.5675,48.5675,55,48.0339,55z"/>
+    <circle cx="36" cy="60" r="2" fill="#000000" stroke="#000000" stroke-miterlimit="10"/>
+    <polygon fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="31,10 41,10 41,10 31,10"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/people.pdf b/poster/assets/icons/people.pdf
new file mode 100644
index 0000000..70ddef7
Binary files /dev/null and b/poster/assets/icons/people.pdf differ
diff --git a/poster/assets/icons/people.svg b/poster/assets/icons/people.svg
new file mode 100644
index 0000000..324b268
--- /dev/null
+++ b/poster/assets/icons/people.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D0CFCE" stroke="none" d="M63,61c0,0,0-4,0-8c0-7-4-10-8-10c-5,0-5,0-12,0c-2.7842,0-5.5645,0.5059-7,3.75 c-1.125-3.3125-4.2158-4.7031-7-4.7031C24,42.0469,24,43,17,43c-4,0-8,3-8,10c0,1,0,8,0,8"/>
+    <path fill="#D0CFCE" stroke="none" d="M15,26c0,4,0.876,6.3145,2,8c1.4316,2.1484,3.7061,3,6,3c2.3809,0,4.5664-0.8516,6-3c1.123-1.6855,2-4,2-8 c0-2.1484-1.0771-9-8-9S15,22.4189,15,26z"/>
+    <path fill="#D0CFCE" stroke="none" d="M41,26c0,4,0.876,6.3145,2,8c1.4316,2.1484,3.7061,3,6,3c2.3809,0,4.5664-0.8516,6-3c1.123-1.6855,2-4,2-8 c0-2.1484-1.0771-9-8-9C42.0771,17,41,22.4189,41,26z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M35,60v-7c0-7,4-10,8-10 c7,0,7,0,12,0c4,0,8,3,8,10c0,4,0,7,0,7 M34,45.0977 M9,60c0,0,0-6,0-7c0-7,4-10,8-10c7,0,7,0,12,0 c1.5313,0,3.0605,0.5313,4.3672,1.5488"/>
+    <path fill="none" stroke="#000000" stroke-linejoin="round" stroke-width="2" d="M15,26c0,4,0.876,6.3145,2,8 c1.4316,2.1484,3.7061,3,6,3c2.3809,0,4.5664-0.8516,6-3c1.123-1.6855,2-4,2-8c0-2.1484-1.0771-9-8-9S15,22.4189,15,26z"/>
+    <path fill="none" stroke="#000000" stroke-linejoin="round" stroke-width="2" d="M41,26c0,4,0.876,6.3145,2,8 c1.4316,2.1484,3.7061,3,6,3c2.3809,0,4.5664-0.8516,6-3c1.123-1.6855,2-4,2-8c0-2.1484-1.0771-9-8-9C42.0771,17,41,22.4189,41,26z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/phone.pdf b/poster/assets/icons/phone.pdf
new file mode 100644
index 0000000..aa0947b
Binary files /dev/null and b/poster/assets/icons/phone.pdf differ
diff --git a/poster/assets/icons/phone.svg b/poster/assets/icons/phone.svg
new file mode 100644
index 0000000..c20c22c
--- /dev/null
+++ b/poster/assets/icons/phone.svg
@@ -0,0 +1,11 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#d0cfce" d="m13.6707,21.3098c1.4142,9.8995,26.8701,35.3553,36.7696,36.7696,0,0,5.6569,0,8.4853-5.6569l-9.1924-9.1924-3.5355,3.5355c-7.0711-1.4142-19.799-14.1421-21.2132-21.2132l3.5355-3.5355-9.1924-9.1924c-5.6569,2.8284-5.6569,8.4853-5.6569,8.4853Z"/>
+    <path fill="#9b9b9a" d="m25,26l-9.0844-8.9594,2.0831-2.729c.364-.4769,1.06-.5357,1.4989-.1267l8.2523,7.6901-2.75,4.125Z"/>
+    <polygon fill="#9b9b9a" points="54.8934 55.9074 46.4524 47.5733 49.68 44.3223 58.1993 52.8075 54.8934 55.9074"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m13.6707,21.3098c1.4142,9.8995,26.8701,35.3553,36.7696,36.7696,0,0,5.6569,0,8.4853-5.6569l-9.1924-9.1924-3.5355,3.5355c-7.0711-1.4142-19.799-14.1421-21.2132-21.2132l3.5355-3.5355-9.1924-9.1924c-5.6569,2.8284-5.6569,8.4853-5.6569,8.4853Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m13.6707,21.3098c1.4142,9.8995,26.8701,35.3553,36.7696,36.7696,0,0,5.6569,0,8.4853-5.6569l-9.1924-9.1924-3.5355,3.5355c-7.0711-1.4142-19.799-14.1421-21.2132-21.2132l3.5355-3.5355-9.1924-9.1924c-5.6569,2.8284-5.6569,8.4853-5.6569,8.4853Z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/pointup.pdf b/poster/assets/icons/pointup.pdf
new file mode 100644
index 0000000..d5c5ee1
Binary files /dev/null and b/poster/assets/icons/pointup.pdf differ
diff --git a/poster/assets/icons/pointup.svg b/poster/assets/icons/pointup.svg
new file mode 100644
index 0000000..6df3179
--- /dev/null
+++ b/poster/assets/icons/pointup.svg
@@ -0,0 +1,24 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color"/>
+  <g id="hair"/>
+  <g id="skin">
+    <path fill="#fcea2b" stroke="none" d="M20.2385,52.0665c1.0756,8.6001,8.0438,14.9847,16.215,14.857c9.106,0,16.8546-6.833,16.8546-16.878 l-0.0019,0.251l-0.6189-11.213c-0.1679-2.1944-1.9158-3.8708-3.9892-3.826h-9.4197c-5.6339-3.2226-18.8644,6.5869-18.8644,8.5099"/>
+    <path fill="#fcea2b" stroke="none" d="M23.6714,48.4689c-1.9056-0.1527-4.0021-1.6337-3.8889-3.6995l0.0538-14.7823 c-0.2381-1.933,3.3124-3.8158,5.0972-4.0736c1.7848-0.2578,2.473,2.9834,2.7111,4.9164c0.9887-5.0982,0.2472-0.932-0.7415,6.639v7 C27.0163,46.5347,25.577,48.3162,23.6714,48.4689z"/>
+    <path fill="#fcea2b" stroke="none" d="M31.5339,53.2379c-1.9056-0.1527-3.345-1.9342-3.2317-4l-0.029-19.7702 c-0.6874-1.8063-5.2848-1.2272,2.9078-3.2917c1.7538-0.4419,2.9939,0.7177,3.2319,2.6507 c0.0382,0.3099,0.3909,5.1012,0.3528,5.4111v15C34.8789,51.3037,33.4395,53.0852,31.5339,53.2379z"/>
+    <path fill="#fcea2b" stroke="none" d="M33.7593,37.9333v-7.3098c-0.0213-1.9167,2.1944-5.08,4.2141-5.3379 c2.0197-0.2578,6.9202,1.697,7.1896,3.63c0.0432,0.3099,0.0171,1.1216-0.0261,1.4314l-2.0281,5.8444"/>
+    <path fill="#fcea2b" stroke="none" d="M43.1089,37.6294l0.366-29.2067c0-6.175,9.417-5.3884,9.417,0.283l1.0547,30.9545"/>
+  </g>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M24.3121,40.8979 c-2.0638-0.1527-3.6226-1.9342-3.5-4v-7c-0.2578-1.933,1.1001-3.709,3.0331-3.9669c1.933-0.2578,3.709,1.1001,3.9669,3.0331 c0.0413,0.3099,0.0413,0.6239,0,0.9337v7C27.9347,38.9637,26.3759,40.7452,24.3121,40.8979z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M53.3092,51.072V40.7288 c-0.1631-2.228-1.7835-4.5373-4.8134-4.5373"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M48.4958,36.1982h-8.2889 c-1.7123-0.1206-3.189,1.4125-3.3155,3.4423c0.1509,2.0752,1.5455,3.7158,3.2957,3.877l0.8695,0.1151 c1.8128,0.238,3.2957,1.3199,3.2957,2.4018v1.967v0.4327c-1.7849,0.4502-3.4373,1.4541-4.7885,2.9093"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M20.7807,53.0597 c1.058,8.4584,7.9121,14.7378,15.9497,14.6122c8.957,0,16.5788-6.7204,16.5788-16.5999l-0.001-0.001"/>
+    <line x1="44.3083" x2="44.3083" y1="8.372" y2="23.3615" fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="52.6833" x2="52.6833" y1="8.5804" y2="33.3988" fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M44.3083,8.372 c0-5.875,8.375-5.1875,8.375,0.2083"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M32.7489,40.7605 c-3.322,1.2271-4.997-1.9342-4.8744-4v-7c-0.2578-1.933,1.1001-3.709,3.0331-3.9669c1.933-0.2578,3.709,1.1001,3.9669,3.0331 c0.0413,0.3099,0.0413,0.6239,0,0.9337"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M34.9369,34.1256v-5.3175 c-0.2578-1.933,1.1001-3.709,3.0331-3.9669c1.933-0.2578,3.709,1.1001,3.9669,3.0331c0.0413,0.3099,0.0413,0.6239,0,0.9337 l0.031,3.5043"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M20.7807,53.0597 c-0.08-1.5115,0-8.9394,0-8.9394"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/puzzle.pdf b/poster/assets/icons/puzzle.pdf
new file mode 100644
index 0000000..ff64841
Binary files /dev/null and b/poster/assets/icons/puzzle.pdf differ
diff --git a/poster/assets/icons/puzzle.svg b/poster/assets/icons/puzzle.svg
new file mode 100644
index 0000000..28bab85
--- /dev/null
+++ b/poster/assets/icons/puzzle.svg
@@ -0,0 +1,28 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#92d3f5" d="M39.7792,57.8819H52.77V44.851c5.2976,0,11.6314,1.4,11.6314-6.1934,0-6.7613-6.3338-5.8535-11.6314-5.8535V19.5133H39.7792c1.8239-5.8157,1.8239-11.6314-4.9774-11.6314s-6.73,6.3338-6.73,11.6314H14.4016V33.5239c4.2433-1.5715,11.6314-4.4184,11.6314,5.1737s-8.48,6.5814-11.6314,5.1737V57.8819H26.3729c0-5.2976,0-12.383,7.213-12.3112C40.3686,45.6382,39.7792,52.5843,39.7792,57.8819Z"/>
+    <path fill="#61b2e4" d="M39.0542,51.0992c1.7359,1.7359,1.11,4.1339,1.11,6.7827H52.77V43.8713c5.8157,1.0357,10.9968,3.6045,10.9968-5.2137,0-5.2976-4.9743-6.1934-10.2719-6.1934V19.8154H49.3788"/>
+  </g>
+  <g id="line">
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="14.402 33.524 14.402 19.513 29.628 19.513"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="28 57.882 14.402 57.882 14.402 43.871"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="52.77 43.871 52.77 57.882 38.348 57.882"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="39.976 19.513 52.77 19.513 52.77 33.524"/>
+    <g>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M14.4016,33.5239c2.6813-2.3413,11.6314-3.2873,11.6314,5.1737"/>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M14.4016,43.8713c2.6813,2.3413,11.6314,3.2873,11.6314-5.1737"/>
+    </g>
+    <g>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M28.0005,57.8819c-2.3414-2.6814-3.2873-11.6314,5.1737-11.6314"/>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M38.3479,57.8819c2.3413-2.6814,3.2873-11.6314-5.1737-11.6314"/>
+    </g>
+    <g>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M29.6281,19.5133c-2.3414-2.6814-3.2873-11.6314,5.1737-11.6314"/>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M39.9755,19.5133c2.3413-2.6814,3.2873-11.6314-5.1737-11.6314"/>
+    </g>
+    <g>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M52.77,43.8713c2.6813,2.3413,11.6314,3.2873,11.6314-5.1737"/>
+      <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M52.77,33.5239c2.6813-2.3413,11.6314-3.2873,11.6314,5.1737"/>
+    </g>
+  </g>
+</svg>
diff --git a/poster/assets/icons/qrcode.pdf b/poster/assets/icons/qrcode.pdf
new file mode 100644
index 0000000..b3927f9
Binary files /dev/null and b/poster/assets/icons/qrcode.pdf differ
diff --git a/poster/assets/icons/robot.pdf b/poster/assets/icons/robot.pdf
new file mode 100644
index 0000000..d859192
Binary files /dev/null and b/poster/assets/icons/robot.pdf differ
diff --git a/poster/assets/icons/robot.svg b/poster/assets/icons/robot.svg
new file mode 100644
index 0000000..7add1a0
--- /dev/null
+++ b/poster/assets/icons/robot.svg
@@ -0,0 +1,28 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D22F27" d="M34,16.1123v-2.5109c0-1.3807,1.1193-2.5,2.5-2.5l0,0c1.3807,0,2.5,1.1193,2.5,2.5v2.5"/>
+    <path fill="#D0CFCE" d="M13.5,41.1014L13.5,41.1014c-1.3807,0-2.5-1.1193-2.5-2.5v-8c0-1.3807,1.1193-2.5,2.5-2.5l0,0 c1.3807,0,2.5,1.1193,2.5,2.5v8C16,39.9821,14.8807,41.1014,13.5,41.1014z"/>
+    <path fill="#D0CFCE" d="M58.5,41.1014L58.5,41.1014c1.3807,0,2.5-1.1193,2.5-2.5v-8c0-1.3807-1.1193-2.5-2.5-2.5l0,0 c-1.3807,0-2.5,1.1193-2.5,2.5v8C56,39.9821,57.1193,41.1014,58.5,41.1014z"/>
+    <path fill="#D0CFCE" d="M47.4505,56.1123h-22.901c-4.7022,0-8.5495-3.8473-8.5495-8.5495v-22.901 c0-4.7022,3.8473-8.5495,8.5495-8.5495h22.901c4.7022,0,8.5495,3.8473,8.5495,8.5495v22.901 C56,52.2649,52.1527,56.1123,47.4505,56.1123z"/>
+    <path fill="#9B9B9A" d="M35.4977,56.1115h13.2865c3.9687,0,7.2158-3.8473,7.2158-8.5495V24.661 c0-4.7022-3.2471-8.5495-7.2158-8.5495h-2.3526"/>
+    <ellipse cx="44.8346" cy="29.0027" rx="2.8338" ry="2.8338" fill="#FFFFFF"/>
+    <ellipse cx="27.3342" cy="29.0022" rx="2.8338" ry="2.8338" fill="#FFFFFF"/>
+    <path fill="#FFFFFF" d="M44.5,47.5005h-17c-2.2,0-4-1.8-4-4l0,0c0-2.2,1.8-4,4-4h17c2.2,0,4,1.8,4,4l0,0 C48.5,45.7005,46.7,47.5005,44.5,47.5005z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2" d="M34,16.0109V13.5c0-1.3807,1.1193-2.5,2.5-2.5l0,0c1.3807,0,2.5,1.1193,2.5,2.5V16"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2" d="M47.4505,56h-22.901C19.8473,56,16,52.1527,16,47.4505v-22.901C16,19.8473,19.8473,16,24.5495,16h22.901 C52.1527,16,56,19.8473,56,24.5495v22.901C56,52.1527,52.1527,56,47.4505,56z"/>
+    <ellipse cx="44.8346" cy="29.0022" rx="2.8338" ry="2.8338" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2"/>
+    <ellipse cx="27.3342" cy="29.0017" rx="2.8338" ry="2.8338" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-miterlimit="2" stroke-width="2" d="M44.5,47.5h-17c-2.2,0-4-1.8-4-4l0,0 c0-2.2,1.8-4,4-4h17c2.2,0,4,1.8,4,4l0,0C48.5,45.7,46.7,47.5,44.5,47.5z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2" d="M13.5,41L13.5,41c-1.3807,0-2.5-1.1193-2.5-2.5v-8c0-1.3807,1.1193-2.5,2.5-2.5l0,0c1.3807,0,2.5,1.1193,2.5,2.5v8 C16,39.8807,14.8807,41,13.5,41z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2" d="M58.5,41L58.5,41c1.3807,0,2.5-1.1193,2.5-2.5v-8c0-1.3807-1.1193-2.5-2.5-2.5l0,0c-1.3807,0-2.5,1.1193-2.5,2.5v8 C56,39.8807,57.1193,41,58.5,41z"/>
+    <line x1="28" x2="28" y1="40" y2="47" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2"/>
+    <line x1="33" x2="33" y1="40" y2="47" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2"/>
+    <line x1="38" x2="38" y1="40" y2="47" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2"/>
+    <line x1="43" x2="43" y1="40" y2="47" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="2" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/rocket.pdf b/poster/assets/icons/rocket.pdf
new file mode 100644
index 0000000..bff8901
Binary files /dev/null and b/poster/assets/icons/rocket.pdf differ
diff --git a/poster/assets/icons/rocket.svg b/poster/assets/icons/rocket.svg
new file mode 100644
index 0000000..c57b9c9
--- /dev/null
+++ b/poster/assets/icons/rocket.svg
@@ -0,0 +1,20 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="48.4645" cy="23.7594" r="2.1014" fill="#fff"/>
+    <path fill="#fcea2b" d="m16.12,48.114c-3.1584,3.1634-4.6518,7.5601-3.97,11.688,4.128.6763,8.5223-.8196,11.683-3.977,3.1584-3.1634,4.6518-7.5601,3.97-11.688-4.128-.6763-8.5223.8196-11.683,3.977Z"/>
+    <path fill="#61b2e4" d="m31.973,45.839c-.1919.966-.6657,1.8536-1.3616,2.5507-.3389.3373-.7246.6241-1.1452.8516,2.1626,2.9716,3.7579,6.2847,4.6952,9.7506.7092-.6216,1.3906-1.2786,2.0417-1.9685,1.9136-2.0343,3.5491-4.3376,4.8516-6.8326,1.2507-2.4201,2.1751-4.9922,2.7442-7.6354-3.7285,1.9544-7.7719,3.0771-11.826,3.2837h0Z"/>
+    <path fill="#92d3f5" d="m14.923,35.749c-.69.65-1.3472,1.3303-1.9691,2.0383,3.4682.9313,6.7846,2.521,9.7604,4.6784.2264-.414.5104-.7939.8435-1.1281.6949-.6935,1.5791-1.1665,2.5417-1.3598.2106-4.0507,1.3364-8.0899,3.293-11.814.0019-.0037.0037-.0074.0056-.0112-2.645.5687-5.2188,1.4928-7.6405,2.7434-2.496,1.303-4.7999,2.9389-6.8346,4.853h0Z"/>
+    <path fill="#ea5a47" d="m34.821,20.747c-5.2314,5.2507-8.3665,12.1635-8.7228,19.233,1.6376-.3318,3.3326.1781,4.515,1.3584,1.186,1.1868,1.6956,2.8903,1.356,4.5332,7.0754-.3609,13.9919-3.5024,19.242-8.7398,6.7117-6.7229,9.8843-16.067,8.4337-24.839-1.7318-.2827-3.5044-.3879-5.2915-.3141-7.1741.2926-14.2097,3.4508-19.532,8.7677l-.0004.0006Zm10.249-.5291c1.8412-1.8413,4.8269-1.8418,6.6687-.0012.0004.0004.0008.0008.0012.0012,1.8418,1.8407,1.8424,4.8255.0012,6.6667-.0004.0004-.0008.0008-.0012.0012-1.8419,1.8404-4.8274,1.8398-6.6685-.0014-1.8417-1.8406-1.8424-4.8252-.0014-6.6665Z"/>
+    <path fill="#f1b31c" d="m26.538,52.037c-.8756.9831-1.8894,1.8467-3.0072,2.5617-3.4907,2.2228-7.7244,2.8345-11.441,1.653-.1495,1.1964-.1293,2.3916.06,3.5496,4.128.6763,8.5223-.8195,11.683-3.9769,1.1048-1.1131,2.0209-2.3956,2.7055-3.7874h-.0003Z"/>
+    <path fill="#d22f27" d="m26.204,38.687c-.033.4281-.0559.8558-.0684,1.283,1.6271-.316,3.305.1967,4.4773,1.3682,1.186,1.1868,1.6956,2.8903,1.356,4.5332,7.075-.3618,13.9907-3.5038,19.24-8.7412,1.4932-1.5067,2.8266-3.1619,3.9746-4.9339-1.3472,1.2267-2.8051,2.3344-4.353,3.3074-7.5574,4.7109-16.6938,5.8918-24.627,3.1832h.0005Z"/>
+    <path fill="#61b2e4" d="m24.039,48.551c.8703-.4372,1.7206-.9178,2.5501-1.438,2.4433-1.5323,4.6776-3.4046,6.6294-5.5552l.0028-.0028c1.8803-2.0911,3.4745-4.4187,4.7329-6.9122.061-.1204.0967-.252.1047-.3867-3.3985-.7533-14.846,10.251-14.0199,14.2949h0Z"/>
+  </g>
+  <g id="line">
+    <path d="m48.405,29.49c-3.2761,0-5.941-2.6641-5.941-5.9392s2.6649-5.9392,5.941-5.9392,5.941,2.6641,5.941,5.9392-2.6649,5.9392-5.941,5.9392Zm0-9.8987c-2.1839,0-3.9607,1.7757-3.9607,3.9595s1.7768,3.9595,3.9607,3.9595,3.9607-1.7758,3.9607-3.9595-1.7769-3.9595-3.9607-3.9595Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.949" d="m20.653,45.063c-1.678.7083-3.2222,1.7475-4.5331,3.0508-3.1581,3.1631-4.6517,7.5594-3.9703,11.687,4.128.6762,8.5221-.8196,11.683-3.9769,1.3043-1.3104,2.3446-2.8541,3.0537-4.5318"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.949" d="m14.923,35.749c-.69.65-1.3472,1.3303-1.9691,2.0383,3.4682.9313,6.7846,2.521,9.7604,4.6784.2264-.414.5104-.7939.8435-1.1281.6949-.6935,1.5791-1.1665,2.5417-1.3598.2106-4.0507,1.3364-8.0899,3.293-11.814.0019-.0037.0037-.0074.0056-.0112-2.645.5687-5.2188,1.4928-7.6405,2.7434-2.496,1.303-4.7999,2.9389-6.8346,4.853h0Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.949" d="m31.973,45.839c-.1919.966-.6657,1.8536-1.3616,2.5507-.3389.3373-.7246.6241-1.1452.8516,2.1626,2.9716,3.7579,6.2847,4.6952,9.7506.7092-.6216,1.3906-1.2786,2.0417-1.9685,1.9136-2.0343,3.5491-4.3376,4.8516-6.8326,1.2507-2.4201,2.1751-4.9922,2.7442-7.6354-3.7285,1.9544-7.7719,3.0771-11.826,3.2837h0Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.949" d="m31.83,43.345c.2696.8863.2506,1.6919.1371,2.5245,7.0759-.3611,13.993-3.5031,19.243-8.7412,6.7106-6.7215,9.8836-16.063,8.4351-24.834-8.7712-1.4365-18.108,1.742-24.823,8.4508-5.2322,5.2509-8.3679,12.164-8.7242,19.234.9413-.1907,1.8984-.0942,2.7693.2387"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.949" d="m37.072,34.196h-.0002c-2.4156,1.2183-4.6724,2.7626-6.6996,4.5844-2.0849,1.8911-3.9,4.0556-5.3844,6.4211-.5039.8031-.9684,1.6273-1.3917,2.4694"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/satellite.pdf b/poster/assets/icons/satellite.pdf
new file mode 100644
index 0000000..8ee826b
Binary files /dev/null and b/poster/assets/icons/satellite.pdf differ
diff --git a/poster/assets/icons/satellite.svg b/poster/assets/icons/satellite.svg
new file mode 100644
index 0000000..b3d34c9
--- /dev/null
+++ b/poster/assets/icons/satellite.svg
@@ -0,0 +1,20 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#d0cfce" d="m14.276,31.5192h3.2117l-.0234-1.1721-3.2401.0106c-.0434.3279.0085.8336.0519,1.1615Z"/>
+    <polygon fill="#9b9b9a" points="52.4477 59.999 54.9527 38.197 51.7041 38.197 48.8004 59.999 52.4477 59.999"/>
+    <path fill="#d0cfce" d="m47.6445,29.3771c.0569.5118.0938,1.0293.0938,1.556,0-.5267-.0369-1.0442-.0938-1.556Z"/>
+    <path fill="#d0cfce" d="m48.8004,29.3771c-.4111-3.6953-2.5001-7.7075-5.8095-10.2492-2.6571-2.0407-6.2527-2.9817-9.2531-3.1947l.2712,26.9989c.2486.6495-.3346,2.4231.6547,2.6473,2.0178.4572,6.3562-1.3102,8.0762-2.6473,1.7857-1.3882,3.8837-3.5192,4.9515-6.3317.9164-2.4136.9159-5.4874,1.109-7.2233Z"/>
+    <path fill="#9b9b9a" d="m34.7383,41.7864l-1.2595.1084.259,4.0384c2.2672-.1608,8.4311-2.5655,10.2455-4.0463,2.9667-2.4215,4.7545-5.8777,4.7545-10.9537,0-.5267,0-1.7478-1.0933-1.5561-.7412,6.6622-6.1689,11.9313-12.9062,12.4093Z"/>
+    <path fill="#3f3f3f" d="m52.7421,27.7526l-3.4453-.0401c-.499.189-.6415,5.5357-.0034,6.2814h3.0961s2.7955-.5886,2.4704-3.7291c-.3754-2.5138-1.5545-2.5138-2.1178-2.5122Z"/>
+  </g>
+  <g id="line">
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m33.7378,45.9332c8.2843,0,15-6.7157,15-15s-6.7157-15-15-15v30Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m52.6418,27.9625c1.6565.0351,2.9709,1.4064,2.9358,3.0629-.0351,1.6565-1.4064,2.9709-3.0629,2.9358"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m18.4115,32.4905h-4.3872s-.7404.0215-.7404-1.5303.7404-1.5305.7404-1.5305h4.3872v3.0608Z"/>
+    <line x1="24.1309" x2="33.7378" y1="30.9332" y2="30.9332" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="22.1212" x2="33.7378" y1="27.6488" y2="15.9332" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="22.1564" x2="33.7378" y1="34.2741" y2="45.9332" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="40.2378" x2="58.8314" y1="59.999" y2="59.999" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="48.8004 59.999 51.7041 38.197 54.9527 38.197 52.049 59.999"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/school.pdf b/poster/assets/icons/school.pdf
new file mode 100644
index 0000000..b860089
Binary files /dev/null and b/poster/assets/icons/school.pdf differ
diff --git a/poster/assets/icons/school.svg b/poster/assets/icons/school.svg
new file mode 100644
index 0000000..af9516c
--- /dev/null
+++ b/poster/assets/icons/school.svg
@@ -0,0 +1,53 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <polygon fill="#d0cfce" points="9.3563 56.5056 62.6437 56.5056 62.6437 23.5644 45.2823 23.5644 45.2823 20.6578 26.7177 20.6578 26.7177 23.5644 9.3563 23.5644 9.3563 56.5056"/>
+    <rect x="30.6247" y="39.9946" width="10.7507" height="12.7465" fill="#a57939"/>
+    <circle cx="36" cy="30.2423" r="6.2976" fill="#fff"/>
+    <rect x="20.4982" y="46.817" width="1.9377" height="4.0355" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="13.7162" y="46.817" width="1.9377" height="4.0355" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="20.4982" y="37.1284" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="13.7162" y="37.1284" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="20.4982" y="27.4398" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="13.7162" y="27.4398" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="56.3461" y="46.817" width="1.9377" height="4.0355" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="49.564" y="46.817" width="1.9377" height="4.0355" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="56.3461" y="37.1284" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="49.564" y="37.1284" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="56.3461" y="27.4398" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <rect x="49.564" y="27.4398" width="1.9377" height="4.8443" fill="none" stroke="#92d3f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polygon fill="#d22f27" points="24.8 20.49 26.72 20.49 26.72 23.56 9.36 23.56 13.21 17.42 28.4107 17.42 24.8 20.49"/>
+    <polygon fill="#d22f27" points="47.2 20.49 45.2837 20.49 45.2837 23.56 62.6437 23.56 58.7936 17.42 43.592 17.42 47.2 20.49"/>
+    <polygon fill="#ea5a47" points="47.2 20.49 24.8 20.49 26.72 18.8591 36 10.96 47.2 20.49"/>
+    <rect x="7.196" y="50.8525" width="19.5218" height="5.6531" fill="#b1cc33"/>
+    <rect x="45.2823" y="50.8525" width="19.5218" height="5.6531" fill="#b1cc33"/>
+  </g>
+  <g id="line">
+    <rect x="26.72" y="20.49" width="18.5601" height="36.02" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polygon fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="24.8 20.49 26.72 20.49 26.72 23.56 9.36 23.56 13.21 17.42 28.4107 17.42 24.8 20.49"/>
+    <polygon fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="47.2 20.49 45.2837 20.49 45.2837 23.56 62.6437 23.56 58.7936 17.42 43.592 17.42 47.2 20.49"/>
+    <polygon fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="47.2 20.49 24.8 20.49 26.72 18.8591 36 10.96 47.2 20.49"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9.7104,50.8525h14.493c1.3887,0,2.5144,1.1257,2.5144,2.5144v3.1387H7.196v-3.1387c0-1.3887,1.1257-2.5144,2.5144-2.5144Z"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M47.7967,50.8525h14.493c1.3887,0,2.5144,1.1257,2.5144,2.5144v3.1387h-19.5218v-3.1387c0-1.3887,1.1257-2.5144,2.5144-2.5144Z"/>
+    <line x1="26.7177" x2="45.2823" y1="52.7411" y2="52.7411" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="9.3563 50.8525 9.3563 23.5644 26.7177 23.5644"/>
+    <line x1="62.6437" x2="9.3563" y1="56.5056" y2="56.5056" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="45.2823 23.5644 62.6437 23.5644 62.6437 50.8525"/>
+    <rect x="30.6247" y="39.9946" width="10.7507" height="12.7465" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="36" x2="36" y1="52.7411" y2="39.9946" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <circle cx="36" cy="30.2423" r="6.2976" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="36" x2="36" y1="30.7267" y2="26.5497" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="36" x2="38.0885" y1="30.7267" y2="29.6825" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="20.4982" x2="20.4982" y1="50.8525" y2="46.817" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="13.7162" x2="13.7162" y1="50.8525" y2="46.817" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="22.436 41.9727 20.4982 41.9727 20.4982 37.1284"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="15.6539 41.9727 13.7162 41.9727 13.7162 37.1284"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="22.436 32.2841 20.4982 32.2841 20.4982 27.4398"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="15.6539 32.2841 13.7162 32.2841 13.7162 27.4398"/>
+    <line x1="56.3461" x2="56.3461" y1="50.8525" y2="46.817" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <line x1="49.564" x2="49.564" y1="50.8525" y2="46.817" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="58.2838 41.9727 56.3461 41.9727 56.3461 37.1284"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="51.5018 41.9727 49.564 41.9727 49.564 37.1284"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="58.2838 32.2841 56.3461 32.2841 56.3461 27.4398"/>
+    <polyline fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" points="51.5018 32.2841 49.564 32.2841 49.564 27.4398"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/scroll.pdf b/poster/assets/icons/scroll.pdf
new file mode 100644
index 0000000..b86c765
Binary files /dev/null and b/poster/assets/icons/scroll.pdf differ
diff --git a/poster/assets/icons/scroll.svg b/poster/assets/icons/scroll.svg
new file mode 100644
index 0000000..20e986e
--- /dev/null
+++ b/poster/assets/icons/scroll.svg
@@ -0,0 +1,23 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="15.0229" y="16.2834" width="41.9541" height="40.9771" fill="#F4AA41" stroke="none"/>
+    <polyline fill="#E27022" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="16,55.7479 11,55.9479 11,60.9896 61,60.9896 61,53.9479 56,54.1479"/>
+    <polyline fill="#E27022" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="56,16.2834 61,16.0834 61,11.0417 11,11.0417 11,18.0834 16,17.8834"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="16,55.7479 11,55.9479 11,60.9896 61,60.9896 61,53.9479 56,54.1479"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="56,16.2834 61,16.0834 61,11.0417 11,11.0417 11,18.0834 16,17.8834"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="56,16.2834 34.6258,17.1383 16,17.8834"/>
+    <line x1="16" x2="56" y1="55.7479" y2="54.1479" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="16" x2="16" y1="22.0023" y2="50.0603" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="56" x2="56" y1="22.0023" y2="50.0603" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="20.8523" x2="31.8614" y1="24.9034" y2="24.9034" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="20.8523" x2="52.019" y1="30.1515" y2="30.1515" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="20.8523" x2="52.019" y1="35.3997" y2="35.3997" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="20.8523" x2="52.019" y1="40.6479" y2="40.6479" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="20.8523" x2="52.019" y1="45.896" y2="45.896" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/shield.pdf b/poster/assets/icons/shield.pdf
new file mode 100644
index 0000000..d1e73b4
Binary files /dev/null and b/poster/assets/icons/shield.pdf differ
diff --git a/poster/assets/icons/shield.svg b/poster/assets/icons/shield.svg
new file mode 100644
index 0000000..7c31b3d
--- /dev/null
+++ b/poster/assets/icons/shield.svg
@@ -0,0 +1,14 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D0CFCE" stroke="none" d="M35.9899,10.9064c-11.0457,0-20,4.4773-20,10l0.0261,0.2749c2.9513,30.53,18.6744,39.0674,19.8983,39.6877 l0.0756,0.0374c0,0,17-8,20-40C56.5055,15.4078,47.0356,10.9064,35.9899,10.9064z M35.992,54.884l-0.0604-0.0299 c-0.978-0.4957-13.5423-7.318-15.9006-31.7145L20.01,22.9201c0-4.4133,7.1553-7.991,15.9819-7.991 c8.8265,0,16.3938,3.5969,15.9819,7.991C49.5766,48.4912,35.992,54.884,35.992,54.884z"/>
+    <path fill="#EA5A47" stroke="none" d="M35,17.9064l3,4l-3,4l3,4l-3,4l3,4l-3,4l3,4l-3,4l1,5.2597c0,0-15-11-16-32c0,0,0-8,16-8L35,17.9064z"/>
+    <path fill="#D22F27" stroke="none" d="M36,15.1661l-1,2.7403l3,4l-3,4l3,4l-3,4l3,4l-3,4l3,4l-3,4l1.002,4.9774 c0,0,13.8441-8.9583,15.9819-31.9638C51.9839,22.92,51.1505,15.9498,36,15.1661z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M35.9245,60.8691c-1.2239-0.6204-16.947-9.1579-19.8983-39.6878L16,20.9064c0-5.5228,8.9543-10,20-10s20.5155,4.5013,20,10 c-3,32-20,40-20,40L35.9245,60.8691z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M35.9417,54.854c-0.978-0.4958-13.5423-7.318-15.9006-31.7144L20.0201,22.92c0-4.4133,7.1553-7.991,15.9819-7.991 s16.3938,3.5969,15.9819,7.991C49.5866,48.4911,36.002,54.8838,36.002,54.8838L35.9417,54.854z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/sliders.pdf b/poster/assets/icons/sliders.pdf
new file mode 100644
index 0000000..bce6eb8
Binary files /dev/null and b/poster/assets/icons/sliders.pdf differ
diff --git a/poster/assets/icons/sliders.svg b/poster/assets/icons/sliders.svg
new file mode 100644
index 0000000..40a38d5
--- /dev/null
+++ b/poster/assets/icons/sliders.svg
@@ -0,0 +1,23 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D0CFCE" stroke="none" d="M13.8627,12.1552c-1.1508,0-2.0876,0.9362-2.0876,2.0876v43.5128c0,1.1508,0.9368,2.0876,2.0876,2.0876 h43.5139c1.1508,0,2.0876-0.9368,2.0876-2.0876V14.2428c0-1.1514-0.9368-2.0876-2.0876-2.0876H13.8627z"/>
+    <path fill="#9B9B9A" stroke="none" d="M18.3877,47.8604c0-0.5528,1.4504,2.0709,1.4504,2.0709s2.3432,2.9292,4.5493,2.9292s5-2.794,5-5 c0-2.2061-0.7639-4.5707-2.97-4.5707c-0.5527,0-2.5849-1.4257-2.0346-1.4285c-0.0067,0-0.0132-0.0009-0.0198-0.0009 c-1.5741,0-3.002,0.6109-4.0723,1.6024l-1.2249,1.5816c-0.4475,0.84-0.703,1.7979-0.703,2.8161"/>
+    <path fill="#9B9B9A" stroke="none" d="M50.8994,43.6182c0.3906,0.3906-1.0234,0.5113-1.414,0.1206c-1.5118-1.5117-4.1456-1.7685-5.6573-0.2568 c-0.7558,0.7559-2.3559,2.969-2.3559,4.0374c0,1.0683,0.8929,3.1207,1.6487,3.8766c1.5586,1.5585,4.7518,1.8046,6.3124,0.2461 c0.3906-0.3907,1.8563,0.0683,1.4677,0.459c0.8179-0.8186,1.3997-1.8728,1.6368-3.0517l0.0579-1.9982 c-0.2074-1.5344-0.9886-2.8865-2.128-3.8247C50.6166,43.3495,50.761,43.4797,50.8994,43.6182z"/>
+    <path fill="#9B9B9A" stroke="none" d="M30.302,24.7566c-0.1589-1.1738-0.6542-2.2388-1.3899-3.095c0.2868,0.4086-0.9581,0.4745-1.3262,0.0629 c-0.7139-0.7949-1.6947-1.0792-2.7611-1.1373c-1.0722-0.0499-2.9824,0.2682-3.7783,0.981 c-0.7949,0.7139-1.6015,2.4796-1.6591,3.5465c-0.0586,1.0674-0.1538,2.4763,0.5601,3.2713 c0.7138,0.7954,3.157,2.3541,4.2244,2.4117c1.0576,0.0508,4.6217-1.235,4.2928-0.8597c0.891-0.8364,1.5295-1.9377,1.7797-3.1826 L30.302,24.7566z"/>
+    <path fill="#9B9B9A" stroke="none" d="M51.7237,22.3636l-1.3348-1.4893c-0.9584-0.7633-2.1552-1.235-3.4612-1.2935 c0.5337,0.0405-1.3506,1.1086-1.3506,1.1086s-3.8299,2.4771-3.9168,4.6807c-0.086,2.2031,2.6346,5.145,4.8387,5.2329 c2.2002,0.0898,4.958-1.7837,5.0449-3.9873c0.0215-0.5522,1.1056-1.3812,1.1023-0.8443c0.0024-0.0684,0.0104-0.1352,0.0104-0.2042 C52.6566,24.3878,52.3115,23.2913,51.7237,22.3636z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M56.4636,59.8432h-41.688c-1.6569,0-3-1.3431-3-3v-41.688c0-1.6569,1.3431-3,3-3h41.688c1.6569,0,3,1.3431,3,3v41.688 C59.4636,58.5001,58.1205,59.8432,56.4636,59.8432z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M51.6525,25.7643c-0.1089,2.7593-2.434,4.9079-5.1932,4.799c-2.7594-0.1089-4.9079-2.434-4.799-5.1932 c0.1089-2.7593,2.4339-4.9079,5.1932-4.799"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M27.7268,29.2886c-2.0552,1.8442-5.2165,1.6732-7.0608-0.382c-1.8442-2.0552-1.6732-5.2165,0.382-7.0608 c2.0552-1.8442,5.2165-1.6732,7.0608,0.382"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M50.1919,51.396c-1.9526,1.9527-5.1184,1.9526-7.071,0c-1.9527-1.9526-1.9527-5.1184,0-7.071c1.9526-1.9526,5.1184-1.9527,7.071,0"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M24.3874,42.8605c2.7614,0,5,2.2386,5,5c0,2.7615-2.2386,5-5,5c-2.7614,0-5-2.2385-5-5"/>
+    <line x1="24.3874" x2="18.7823" y1="47.8605" y2="43.5674" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="53.492" x2="46.6564" y1="48.0799" y2="47.8605" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="31.3463" x2="24.1665" y1="25.7985" y2="25.5152" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="51.6564" x2="46.6564" y1="21.0804" y2="25.5672" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/smile.pdf b/poster/assets/icons/smile.pdf
new file mode 100644
index 0000000..b362d87
Binary files /dev/null and b/poster/assets/icons/smile.pdf differ
diff --git a/poster/assets/icons/smile.svg b/poster/assets/icons/smile.svg
new file mode 100644
index 0000000..ebc4f14
--- /dev/null
+++ b/poster/assets/icons/smile.svg
@@ -0,0 +1,14 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36.0001" cy="36" r="22.9999" fill="#fcea2b"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <circle cx="36" cy="36" r="23" fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M45.8147,45.2268a15.4294,15.4294,0,0,1-19.6294,0"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M31.6941,33.4036a4.7262,4.7262,0,0,0-8.6382,0"/>
+    <path fill="none" stroke="#000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M48.9441,33.4036a4.7262,4.7262,0,0,0-8.6382,0"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/speaker.pdf b/poster/assets/icons/speaker.pdf
new file mode 100644
index 0000000..f6cff9e
Binary files /dev/null and b/poster/assets/icons/speaker.pdf differ
diff --git a/poster/assets/icons/speaker.svg b/poster/assets/icons/speaker.svg
new file mode 100644
index 0000000..f9644db
--- /dev/null
+++ b/poster/assets/icons/speaker.svg
@@ -0,0 +1,16 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#9b9b9a" stroke="none" d="M12.0791,44.4113v-16.694c0-1.1046,0.8955-2,2-2h11.712v20.692h-11.712 C12.9754,46.4093,12.0803,45.5151,12.0791,44.4113z"/>
+    <path fill="#d0cfce" stroke="none" d="M42.2681,58.4333l-14.5-11.579c0.036-0.0961,0.0566-0.1974,0.061-0.3v-21.25 c-0.0054-0.0394-0.0135-0.0785-0.024-0.117l14.459-11.74L42.2681,58.4333z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M43.2188,11.3752 l-16.435,13.346h-12.712c-1.6548,0.005-2.995,1.3452-3,3v16.692c0.005,1.6548,1.3452,2.995,3,3h12.712l16.436,13.128 L43.2188,11.3752z"/>
+    <line x1="26.7838" x2="26.7838" y1="25.3332" y2="46.5832" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M54.6738,24.6122 c5.0427,6.7235,5.0427,15.9684,0,22.692"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M50.3689,28.7825 c3.1892,4.2523,3.1892,10.0991,0,14.3514"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M58.8689,19.7825 c7.1892,9.5856,7.1892,22.7658,0,32.3514"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/stopwatch.pdf b/poster/assets/icons/stopwatch.pdf
new file mode 100644
index 0000000..cc710b1
Binary files /dev/null and b/poster/assets/icons/stopwatch.pdf differ
diff --git a/poster/assets/icons/stopwatch.svg b/poster/assets/icons/stopwatch.svg
new file mode 100644
index 0000000..ea322d4
--- /dev/null
+++ b/poster/assets/icons/stopwatch.svg
@@ -0,0 +1,25 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <polyline fill="#d0cfce" stroke="#d0cfce" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="53.7559,19.7366 58.3424,16.187 61.4023,20.1407 57.1493,23.4322"/>
+    <rect x="31.3126" y="7" width="11.0083" height="6.2941" fill="#d0cfce" stroke="none"/>
+    <circle cx="36.8214" cy="36.2941" r="23" fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <circle cx="36.8214" cy="36.2941" r="23" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="56.366,17.7166 58.3424,16.187 61.4023,20.1407 59.5696,21.5591"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="32.3214,9.7271 32.3214,7 41.3214,7 41.3214,9.8931"/>
+    <circle cx="36.3475" cy="16.9817" r="1" fill="#000000" stroke="none"/>
+    <circle cx="36.3475" cy="55.0239" r="1" fill="#000000" stroke="none"/>
+    <ellipse cx="49.7975" cy="22.5528" rx="0.9878" ry="1.0121" transform="matrix(0.7071 -0.7071 0.7071 0.7071 -1.3619 41.8177)" fill="#000000" stroke="none"/>
+    <ellipse cx="22.8975" cy="49.4528" rx="0.9878" ry="1.0121" transform="matrix(0.7071 -0.7071 0.7071 0.7071 -28.2619 30.6754)" fill="#000000" stroke="none"/>
+    <circle cx="55.3686" cy="36.0028" r="1" fill="#000000" stroke="none"/>
+    <circle cx="17.3264" cy="36.0028" r="1" fill="#000000" stroke="none"/>
+    <line x1="36.8399" x2="21.4399" y1="35.91" y2="35.91" fill="#000000" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="36.8846" x2="25.9952" y1="35.9253" y2="46.8147" fill="#000000" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <ellipse cx="49.7975" cy="49.4528" rx="1.0121" ry="0.9878" transform="matrix(0.7071 -0.7071 0.7071 0.7071 -20.3831 49.6965)" fill="#000000" stroke="none"/>
+    <ellipse cx="22.8975" cy="22.5528" rx="1.0121" ry="0.9878" transform="matrix(0.7071 -0.7071 0.7071 0.7071 -9.2407 22.7965)" fill="#000000" stroke="none"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/store.pdf b/poster/assets/icons/store.pdf
new file mode 100644
index 0000000..d70ec31
Binary files /dev/null and b/poster/assets/icons/store.pdf differ
diff --git a/poster/assets/icons/store.svg b/poster/assets/icons/store.svg
new file mode 100644
index 0000000..71baefa
--- /dev/null
+++ b/poster/assets/icons/store.svg
@@ -0,0 +1,41 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <rect x="16" y="12" width="40" height="48" fill="#D0CFCE" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="20" y="50" width="8" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="44" y="50" width="8" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="32" y="50" width="8" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="16" y="36" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="26" y="36" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="36" y="36" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="46" y="36" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="16" y="26" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="26" y="26" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="36" y="26" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="46" y="26" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="16" y="16" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="26" y="16" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="36" y="16" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="46" y="16" width="10" height="10" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <rect x="16" y="12" width="40" height="48" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="20" y="50" width="8" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="44" y="50" width="8" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="32" y="50" width="8" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="16" y="36" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="26" y="36" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="36" y="36" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="46" y="36" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="16" y="26" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="26" y="26" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="36" y="26" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="46" y="26" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="16" y="16" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="26" y="16" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="36" y="16" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="46" y="16" width="10" height="10" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/target.pdf b/poster/assets/icons/target.pdf
new file mode 100644
index 0000000..cfc20b0
Binary files /dev/null and b/poster/assets/icons/target.pdf differ
diff --git a/poster/assets/icons/target.svg b/poster/assets/icons/target.svg
new file mode 100644
index 0000000..7adb076
--- /dev/null
+++ b/poster/assets/icons/target.svg
@@ -0,0 +1,24 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="39.4882" cy="39.4552" r="29.85" fill="#EA5A47" stroke="none"/>
+    <circle cx="39.4882" cy="39.4552" r="23.85" fill="#FFFFFF" stroke="none"/>
+    <circle cx="39.4882" cy="39.4552" r="15.85" fill="#EA5A47" stroke="none"/>
+    <circle cx="39.4882" cy="39.4552" r="10.9" fill="#FFFFFF" stroke="none"/>
+    <circle cx="39.4882" cy="39.4552" r="5.9" fill="#EA5A47" stroke="none"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <line x1="11.4659" x2="2.5131" y1="11.4989" y2="11.4989" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="11.4662" x2="11.4663" y1="11.4989" y2="2.546" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="15.5067" x2="6.5538" y1="15.5473" y2="15.5473" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="15.5086" x2="15.5086" y1="15.5454" y2="6.5925" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="39.4865" x2="7.4778" y1="39.4644" y2="7.5188" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M21.9689,16.3467c4.8593-3.674,10.9579-5.8915,17.5193-5.8915c16.0163,0,29,12.9837,29,29s-12.9837,29-29,29s-29-12.9837-29-29 c0-6.5467,2.1693-12.5867,5.8283-17.4404"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M26.2567,20.6399c3.7421-2.6364,8.306-4.1847,13.2315-4.1847c12.7025,0,23,10.2975,23,23s-10.2975,23-23,23s-23-10.2975-23-23 c0-4.8704,1.5138-9.3872,4.0966-13.1056"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M32.04,26.4321c2.1945-1.2578,4.7374-1.9769,7.4482-1.9769c8.2843,0,15,6.7157,15,15s-6.7157,15-15,15s-15-6.7157-15-15 c0-2.6162,0.7305-5.1268,1.9079-7.268"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M40.0779,34.4744c2.4674,0.3067,4.3769,2.4111,4.3769,4.9616c0,2.7614-2.2386,5-5,5c-2.4824,0-4.5422-1.809-4.9332-4.1806"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M35.7775,30.1663c1.1474-0.4587,2.3996-0.7111,3.7107-0.7111c5.5228,0,10,4.4772,10,10s-4.4772,10-10,10s-10-4.4771-10-10 c0-1.2548,0.252-2.4731,0.6858-3.5895"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/tb_fingerprint.svg b/poster/assets/icons/tb_fingerprint.svg
new file mode 100644
index 0000000..7af4978
--- /dev/null
+++ b/poster/assets/icons/tb_fingerprint.svg
@@ -0,0 +1,23 @@
+<!--
+tags: [indentify, mark, surface, security, access, fingerprint, control, operation, function, interface]
+category: System
+version: "1.6"
+unicode: "ebd1"
+-->
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M18.9 7a8 8 0 0 1 1.1 5v1a6 6 0 0 0 .8 3" />
+  <path d="M8 11a4 4 0 0 1 8 0v1a10 10 0 0 0 2 6" />
+  <path d="M12 11v2a14 14 0 0 0 2.5 8" />
+  <path d="M8 15a18 18 0 0 0 1.8 6" />
+  <path d="M4.9 19a22 22 0 0 1 -.9 -7v-1a8 8 0 0 1 12 -6.95" />
+</svg>
diff --git a/poster/assets/icons/tb_qrcode.svg b/poster/assets/icons/tb_qrcode.svg
new file mode 100644
index 0000000..6b18739
--- /dev/null
+++ b/poster/assets/icons/tb_qrcode.svg
@@ -0,0 +1,30 @@
+<!--
+tags: [scan, data, qrcode, hardware, technology, electronic, gadget, equipment]
+category: Devices
+version: "1.0"
+unicode: "eb11"
+-->
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M4 5a1 1 0 0 1 1 -1h4a1 1 0 0 1 1 1v4a1 1 0 0 1 -1 1h-4a1 1 0 0 1 -1 -1l0 -4" />
+  <path d="M7 17l0 .01" />
+  <path d="M14 5a1 1 0 0 1 1 -1h4a1 1 0 0 1 1 1v4a1 1 0 0 1 -1 1h-4a1 1 0 0 1 -1 -1l0 -4" />
+  <path d="M7 7l0 .01" />
+  <path d="M4 15a1 1 0 0 1 1 -1h4a1 1 0 0 1 1 1v4a1 1 0 0 1 -1 1h-4a1 1 0 0 1 -1 -1l0 -4" />
+  <path d="M17 7l0 .01" />
+  <path d="M14 14l3 0" />
+  <path d="M20 14l0 .01" />
+  <path d="M14 14l0 3" />
+  <path d="M14 20l3 0" />
+  <path d="M17 17l3 0" />
+  <path d="M20 17l0 3" />
+</svg>
diff --git a/poster/assets/icons/tb_usb.svg b/poster/assets/icons/tb_usb.svg
new file mode 100644
index 0000000..fc0489e
--- /dev/null
+++ b/poster/assets/icons/tb_usb.svg
@@ -0,0 +1,25 @@
+<!--
+category: System
+tags: [drive, cable, plug, device, technology, connect, usb]
+version: "1.53"
+unicode: "f00c"
+-->
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M10 19a2 2 0 1 0 4 0a2 2 0 1 0 -4 0" />
+  <path d="M12 17v-11.5" />
+  <path d="M7 10v3l5 3" />
+  <path d="M12 14.5l5 -2v-2.5" />
+  <path d="M16 10h2v-2h-2l0 2" />
+  <path d="M6 9a1 1 0 1 0 2 0a1 1 0 1 0 -2 0" />
+  <path d="M10 5.5h4l-2 -2.5l-2 2.5" />
+</svg>
diff --git a/poster/assets/icons/thumbsup.pdf b/poster/assets/icons/thumbsup.pdf
new file mode 100644
index 0000000..28ac997
Binary files /dev/null and b/poster/assets/icons/thumbsup.pdf differ
diff --git a/poster/assets/icons/thumbsup.svg b/poster/assets/icons/thumbsup.svg
new file mode 100644
index 0000000..b0f4276
--- /dev/null
+++ b/poster/assets/icons/thumbsup.svg
@@ -0,0 +1,17 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color"/>
+  <g id="hair"/>
+  <g id="skin">
+    <polygon fill="#fcea2b" stroke="none" points="37.088,11.2316 34.166,11.8766 19,29.2096 11.667,42.2686 13.666,53.5426 26.604,60.6126 36.229,60.5716 50.271,60.7796 52.666,59.2096 53.416,55.3766 52.666,53.7926 56.25,53.7096 57.583,52.0426 58.416,49.7096 56.833,46.7096 58.416,46.0426 60.333,43.3766 59.416,40.6266 56.916,39.4596 58.083,37.2926 58.25,33.8766 55.666,32.3766 42.5,31.8766 41.666,31.2096 40.812,30.6126 31.687,30.6126 31.75,28.8766 35.666,19.2926 37.333,14.7096"/>
+  </g>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M35.236,59.6006h-9 c-8.321,0-14-6.681-14-15c0.0204-4.7991,1.7993-9.4241,5-13"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M34.625,31.6006h-4.389 l7-18c0.811-2.084-2.79-3.8-5-1l-15,19"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M37.448,35.1006 c0.1527,2.0638,1.9342,3.6226,4,3.5h13c1.933,0.2578,3.709-1.1001,3.9669-3.0331s-1.1001-3.709-3.0331-3.9669 c-0.3099-0.0413-0.6238-0.0413-0.9337,0h-13C39.3822,31.478,37.6007,33.0368,37.448,35.1006z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M38.305,56.4366 c0.1527,2.0638,1.9342,3.6226,4,3.5h7c1.933,0.2578,3.709-1.1001,3.9669-3.0331s-1.1001-3.709-3.0331-3.9669 c-0.3099-0.0413-0.6238-0.0413-0.9337,0h-7C40.2392,52.814,38.4577,54.3728,38.305,56.4366z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M33.236,42.4366 c0.1527,2.0638,1.9342,3.6226,4,3.5h19c1.933,0.2578,3.709-1.1001,3.9669-3.0331s-1.1001-3.709-3.0331-3.9669 c-0.3099-0.0413-0.6238-0.0413-0.9337,0h-19C35.1702,38.814,33.3887,40.3728,33.236,42.4366z"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M35.236,49.4366 c0.1527,2.0638,1.9342,3.6226,4,3.5h15c1.933,0.2578,3.709-1.1001,3.9669-3.0331s-1.1001-3.709-3.0331-3.9669 c-0.3099-0.0413-0.6238-0.0413-0.9337,0h-15C37.1702,45.814,35.3887,47.3728,35.236,49.4366z"/>
+    <path fill="none" stroke="#000000" stroke-miterlimit="10" stroke-width="2" d="M14.136,36.2626 c-1.176,2.4511-1.8253,5.1215-1.906,7.839c0,8.56,4.625,15.5,15.125,15.5"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/unlock.pdf b/poster/assets/icons/unlock.pdf
new file mode 100644
index 0000000..a81179f
Binary files /dev/null and b/poster/assets/icons/unlock.pdf differ
diff --git a/poster/assets/icons/unlock.svg b/poster/assets/icons/unlock.svg
new file mode 100644
index 0000000..1634bd9
--- /dev/null
+++ b/poster/assets/icons/unlock.svg
@@ -0,0 +1,14 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <polygon fill="#FCEA2B" stroke="none" points="53,32.2969 54.875,32.2969 54.875,59.1719 16.875,59.1719 16.875,32.2969 18.75,32.2969"/>
+    <polygon fill="#F1B31C" stroke="none" points="54.4302,32.493 35.66,58.9944 54.9675,58.9944"/>
+    <path fill="#D0CFCE" stroke="#D0CFCE" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M46.0641,31.8167 l0.2102-2.902c0.4766-6.9852-4.8299-12.6829-10.5142-12.4934c-4.6725,0.1558-8.6157,4.2846-9.8282,9.301l-4.0503-0.9026 c1.6615-6.6916,7.2189-12.2207,13.8118-12.4281c7.9697-0.2507,15.4098,7.2847,14.7416,16.523l-0.2425,2.902"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <polygon fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="53,32.25 54.875,32.25 54.875,59.125 16.875,59.125 16.875,32.25 18.75,32.25"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M46.2743,28.9146c0.4766-6.9852-4.8299-12.6829-10.5142-12.4934c-4.6725,0.1558-8.6157,4.2846-9.8282,9.301l-4.0503-0.9026 c1.6615-6.6916,7.2189-12.2207,13.8118-12.4281c7.9697-0.2507,15.4098,7.2847,14.7416,16.523"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/usb.pdf b/poster/assets/icons/usb.pdf
new file mode 100644
index 0000000..582085c
Binary files /dev/null and b/poster/assets/icons/usb.pdf differ
diff --git a/poster/assets/icons/user.pdf b/poster/assets/icons/user.pdf
new file mode 100644
index 0000000..28aafc9
Binary files /dev/null and b/poster/assets/icons/user.pdf differ
diff --git a/poster/assets/icons/user.svg b/poster/assets/icons/user.svg
new file mode 100644
index 0000000..c4f43a9
--- /dev/null
+++ b/poster/assets/icons/user.svg
@@ -0,0 +1,13 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#D0CFCE" stroke="none" d="M58,61c0,0,0-3-1-7c-1.2109-4.8457-4-8-10-8c-5,0-15,0-22,0c-6,0-8.7891,3.1543-10,8c-1,4-1,7-1,7H58z"/>
+    <path fill="#D0CFCE" stroke="none" d="M26,26c0,3.7246,0.5391,7.8086,2,10c1.8613,2.793,5.0176,4,8,4c3.0957,0,6.1367-1.207,8-4 c1.46-2.1914,2-6.2754,2-10c0-2.7935-1-12-10-12S26,21.3442,26,26z"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M58,60c0,0,0-2-1-6 c-1.2109-4.8457-4-8-10-8c-5,0-15,0-22,0c-6,0-8.7891,3.1543-10,8c-1,4-1,6-1,6"/>
+    <path fill="none" stroke="#000000" stroke-linejoin="round" stroke-width="2" d="M26,26c0,3.7246,0.5391,7.8086,2,10 c1.8613,2.793,5.0176,4,8,4c3.0957,0,6.1367-1.207,8-4c1.46-2.1914,2-6.2754,2-10c0-2.7935-1-12-10-12S26,21.3442,26,26z"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/video.pdf b/poster/assets/icons/video.pdf
new file mode 100644
index 0000000..bf73c77
Binary files /dev/null and b/poster/assets/icons/video.pdf differ
diff --git a/poster/assets/icons/video.svg b/poster/assets/icons/video.svg
new file mode 100644
index 0000000..12437df
--- /dev/null
+++ b/poster/assets/icons/video.svg
@@ -0,0 +1,23 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <polygon fill="#D0CFCE" stroke="none" points="55.2808,53.1841 56.8424,53.1827 56.8424,53.1797"/>
+    <path fill="#D0CFCE" stroke="none" d="M56.9266,51.1826L56.8398,32.207c0.0006,0-3.5428,0.002-6.0229,0.0034l0.0839-9.2465 c0,0-11.988,0.852-11.988,0.2998l-0.3192-2.7549L15.2914,20.71l-0.1605,35.4266l35.4702-0.1364l0.0255-2.8145l5.7991-0.006 C55.8772,53.1769,56.9266,51.1826,56.9266,51.1826z"/>
+    <polygon fill="#3F3F3F" stroke="none" points="62.5882,24.3129 54.3197,11.4424 51.3992,16.8445 42.8797,23.2636 50.137,23.7636 51.0027,30.3178 56.7998,25.7422 56.7998,25.7422"/>
+    <path fill="#9B9B9A" stroke="none" d="M45.3017,49.7968V32.5206c0-1.2146-0.9887-2.2032-2.2032-2.2032H23.7052V52h19.3933 C44.313,52,45.3017,51.0113,45.3017,49.7968z"/>
+    <circle cx="34.2588" cy="43.3369" r="4.9996" fill="#D0CFCE" stroke="none"/>
+    <rect x="11.8384" y="20.5967" width="3.453" height="18.7402" fill="#3F3F3F" stroke="none"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <line x1="57.5768" x2="51.0027" y1="25.1289" y2="30.3178" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <line x1="43.8978" x2="51.0114" y1="22.9639" y2="17.5618" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <polygon fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="51.0114,17.5731 57.5917,25.1289 62.5882,24.3129 54.3197,11.4424"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="15.2914,39.4247 15.2914,55.9761 50.6011,55.9761 50.6011,23.2636 38.5936,23.2636 38.5936,20.5088 15.521,20.5088"/>
+    <polyline fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" points="54.7787,33.2126 56.8424,33.2067 56.8424,52.1795 54.7787,52.1854"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M42.3054,52H23.7011V30.3178h18.6043c1.6569,0,3,1.3431,3,3V49C45.3054,50.6569,43.9623,52,42.3054,52z"/>
+    <circle cx="34.2585" cy="43.3366" r="5" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <rect x="11.6659" y="20.5088" width="3.6255" height="18.9159" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/warning.pdf b/poster/assets/icons/warning.pdf
new file mode 100644
index 0000000..3ab2522
Binary files /dev/null and b/poster/assets/icons/warning.pdf differ
diff --git a/poster/assets/icons/warning.svg b/poster/assets/icons/warning.svg
new file mode 100644
index 0000000..ae314e9
--- /dev/null
+++ b/poster/assets/icons/warning.svg
@@ -0,0 +1,15 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <path fill="#fcea2b" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M32.5222,13.005c0.6977-1.2046,1.9862-2.0244,3.4778-2.0244c1.4916,0,2.7801,0.8198,3.4778,2.0244l20.9678,41.9351 C60.7889,55.5339,61,56.2136,61,56.9483c0,2.2272-1.8051,4.0323-4.0323,4.0323l-41.9354,0.0173 C12.8051,60.9979,11,59.192,11,56.9657c0-0.7356,0.211-1.4145,0.5544-2.0083L32.5222,13.005"/>
+    <path fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M37.6129,47.2709c0,0.8907-0.7222,1.6129-1.6129,1.6129c-0.8907,0-1.6129-0.7222-1.6129-1.6129V23.8925 c0-0.8907,0.7222-1.6129,1.6129-1.6129c0.8907,0,1.6129,0.7222,1.6129,1.6129V47.2709z"/>
+    <circle cx="36" cy="54.529" r="1.6129" fill="#FFFFFF" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M32.5222,13.005c0.6977-1.2046,1.9862-2.0244,3.4778-2.0244c1.4916,0,2.7801,0.8198,3.4778,2.0244l20.9678,41.9351 C60.7889,55.5339,61,56.2136,61,56.9483c0,2.2272-1.8051,4.0323-4.0323,4.0323l-41.9354,0.0173 C12.8051,60.9979,11,59.192,11,56.9657c0-0.7356,0.211-1.4145,0.5544-2.0083L32.5222,13.005"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M37.6129,47.2709c0,0.8907-0.7222,1.6129-1.6129,1.6129c-0.8907,0-1.6129-0.7222-1.6129-1.6129V23.8925 c0-0.8907,0.7222-1.6129,1.6129-1.6129c0.8907,0,1.6129,0.7222,1.6129,1.6129V47.2709z"/>
+    <circle cx="36" cy="54.529" r="1.6129" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+  </g>
+</svg>
diff --git a/poster/assets/icons/world.pdf b/poster/assets/icons/world.pdf
new file mode 100644
index 0000000..b1640b5
Binary files /dev/null and b/poster/assets/icons/world.pdf differ
diff --git a/poster/assets/icons/world.svg b/poster/assets/icons/world.svg
new file mode 100644
index 0000000..d94e98a
--- /dev/null
+++ b/poster/assets/icons/world.svg
@@ -0,0 +1,13 @@
+<svg id="emoji" viewBox="0 0 72 72" xmlns="http://www.w3.org/2000/svg">
+  <g id="color">
+    <circle cx="36" cy="36" r="28" fill="#92D3F5" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="#B1CC33" stroke="none" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M49.4394,11.4301C48.9012,12.3361,47.7952,13.5726,47,14c-1.2452,0.6692-1.904,0.2672-3,1c-1.2689,0.8484-1.2095,1.9379-2,2 c-0.8018,0.063-0.6879-1.993-1-3c-0.4521-1.4585-0.2307-1.5267-1-2c-1.0834-0.6665-3.2121-1.0502-5,0 c-0.7094,0.4167-0.7506,0.682-3,4c-1.7096,2.5218-2.188,3.1093-2,4c0.1989,0.9419,0.0427,1.7474,1,2 c1.1873,0.3132,1.3661-0.2722,2-1c1.3282-1.525,2.3581-3.7828,3-4c0.5713-0.1933,2.0656,1.3495,2,3c-0.0463,1.1654-0.852,1.922-2,3 c-0.7417,0.6965-2.875,1.5-6,2c-1.719,0.275-1.4083,0.8524-2.0625,1.5938c-0.8427,0.955-0.4615,2.1691-1.2812,3.3125 c-1.0252,1.43-3.4727,1.7917-3.6564,2.7188C22.8432,33.4154,24.9604,33.9845,26,34c0.8505,0.0127,1.0644-0.7721,3-2 c0.7408-0.47,1.75-1.2812,2.6875-1.25c0.5041,0.0168,1.8289,0.2852,2.3438,0.7188c0.5938,0.5-0.1562,1.8438-0.4062,3.1562 s-2.8976,1.8646-3.8542,2.0208c-1.5737,0.257-4.1439-0.5228-5.6042,0.9375c-1,1-1.1155,1.766-1.1667,3.4167 c-0.0129,0.4172,0.937,3.0323,2,4c1.1442,1.0416,2.2939-0.8356,4,0c1.7456,0.8549,2.493,2.7288,3,4 c0.5078,1.2731,0.1756,1.1679,1,5c0.4146,1.9271,0.3191,1.1194,1,4c0.5632,2.3826,0.5889,2.7678,1,3 c1.1732,0.6628,3.8997-0.8162,5-3c0.6895-1.3683,0.2111-1.9625,1-5c0.3928-1.5123,0.5892-2.2685,1-3 c1.7332-3.0861,4.8828-3.1256,5-5c0.0802-1.2824-1.3573-1.8515-1-3c0.3421-1.0997,1.8099-1.0603,2-2 c0.2579-1.2752-2.2492-2.316-2-3c0.2822-0.7746,4.0696-1.0098,6,1c0.6397,0.666,0.4982,0.9775,2,4c1.3839,2.7851,1.7637,3.0431,2,3 c0.4287-0.0782,0.3223-1.1355,1-3c0.3243-0.8922,1.0927-3.0062,2-3c0.6247,0.0043,0.7386,1.0097,2,2 c0.7103,0.5576,1.7908,0.8806,2.3474,1.0378C63.7747,40.0932,64,38.0729,64,36c0-10.6315-5.9252-19.8791-14.6535-24.6206"/>
+  </g>
+  <g id="hair"/>
+  <g id="skin"/>
+  <g id="skin-shadow"/>
+  <g id="line">
+    <circle cx="36" cy="36" r="28" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/>
+    <path fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2" d="M49.4394,11.4301C48.9012,12.3361,47.7952,13.5726,47,14c-1.2452,0.6692-1.904,0.2672-3,1c-1.2689,0.8484-1.2095,1.9379-2,2 c-0.8018,0.063-0.6879-1.993-1-3c-0.4521-1.4585-0.2307-1.5267-1-2c-1.0834-0.6665-3.2121-1.0502-5,0 c-0.7094,0.4167-0.7506,0.682-3,4c-1.7096,2.5218-2.188,3.1093-2,4c0.1989,0.9419,0.0427,1.7474,1,2 c1.1873,0.3132,1.3661-0.2722,2-1c1.3282-1.525,2.3581-3.7828,3-4c0.5713-0.1933,2.0656,1.3495,2,3c-0.0463,1.1654-0.852,1.922-2,3 c-0.7417,0.6965-2.875,1.5-6,2c-1.719,0.275-1.4083,0.8524-2.0625,1.5938c-0.8427,0.955-0.4615,2.1691-1.2812,3.3125 c-1.0252,1.43-3.4727,1.7917-3.6564,2.7188C22.8432,33.4154,24.9604,33.9845,26,34c0.8505,0.0127,1.0644-0.7721,3-2 c0.7408-0.47,1.75-1.2812,2.6875-1.25c0.5041,0.0168,1.8289,0.2852,2.3438,0.7188c0.5938,0.5-0.1562,1.8438-0.4062,3.1562 s-2.8976,1.8646-3.8542,2.0208c-1.5737,0.257-4.1439-0.5228-5.6042,0.9375c-1,1-1.1155,1.766-1.1667,3.4167 c-0.0129,0.4172,0.937,3.0323,2,4c1.1442,1.0416,2.2939-0.8356,4,0c1.7456,0.8549,2.493,2.7288,3,4 c0.5078,1.2731,0.1756,1.1679,1,5c0.4146,1.9271,0.3191,1.1194,1,4c0.5632,2.3826,0.5889,2.7678,1,3 c1.1732,0.6628,3.8997-0.8162,5-3c0.6895-1.3683,0.2111-1.9625,1-5c0.3928-1.5123,0.5892-2.2685,1-3 c1.7332-3.0861,4.8828-3.1256,5-5c0.0802-1.2824-1.3573-1.8515-1-3c0.3421-1.0997,1.8099-1.0603,2-2 c0.2579-1.2752-2.2492-2.316-2-3c0.2822-0.7746,4.0696-1.0098,6,1c0.6397,0.666,0.4982,0.9775,2,4c1.3839,2.7851,1.7637,3.0431,2,3 c0.4287-0.0782,0.3223-1.1355,1-3c0.3243-0.8922,1.0927-3.0062,2-3c0.6247,0.0043,0.7386,1.0097,2,2 c0.7103,0.5576,1.7908,0.8806,2.3474,1.0378C63.7747,40.0932,64,38.0729,64,36c0-10.6315-5.9252-19.8791-14.6535-24.6206 z"/>
+  </g>
+</svg>
diff --git a/poster/assets/logos/docker.pdf b/poster/assets/logos/docker.pdf
new file mode 100644
index 0000000..cffefdf
Binary files /dev/null and b/poster/assets/logos/docker.pdf differ
diff --git a/poster/assets/logos/docker.svg b/poster/assets/logos/docker.svg
new file mode 100644
index 0000000..e68a661
--- /dev/null
+++ b/poster/assets/logos/docker.svg
@@ -0,0 +1 @@
+<svg fill="#2496ED" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Docker</title><path d="M13.983 11.078h2.119a.186.186 0 00.186-.185V9.006a.186.186 0 00-.186-.186h-2.119a.185.185 0 00-.185.185v1.888c0 .102.083.185.185.185m-2.954-5.43h2.118a.186.186 0 00.186-.186V3.574a.186.186 0 00-.186-.185h-2.118a.185.185 0 00-.185.185v1.888c0 .102.082.185.185.185m0 2.716h2.118a.187.187 0 00.186-.186V6.29a.186.186 0 00-.186-.185h-2.118a.185.185 0 00-.185.185v1.887c0 .102.082.185.185.186m-2.93 0h2.12a.186.186 0 00.184-.186V6.29a.185.185 0 00-.185-.185H8.1a.185.185 0 00-.185.185v1.887c0 .102.083.185.185.186m-2.964 0h2.119a.186.186 0 00.185-.186V6.29a.185.185 0 00-.185-.185H5.136a.186.186 0 00-.186.185v1.887c0 .102.084.185.186.186m5.893 2.715h2.118a.186.186 0 00.186-.185V9.006a.186.186 0 00-.186-.186h-2.118a.185.185 0 00-.185.185v1.888c0 .102.082.185.185.185m-2.93 0h2.12a.185.185 0 00.184-.185V9.006a.185.185 0 00-.184-.186h-2.12a.185.185 0 00-.184.185v1.888c0 .102.083.185.185.185m-2.964 0h2.119a.185.185 0 00.185-.185V9.006a.185.185 0 00-.184-.186h-2.12a.186.186 0 00-.186.186v1.887c0 .102.084.185.186.185m-2.92 0h2.12a.185.185 0 00.184-.185V9.006a.185.185 0 00-.184-.186h-2.12a.185.185 0 00-.184.185v1.888c0 .102.082.185.185.185M23.763 9.89c-.065-.051-.672-.51-1.954-.51-.338.001-.676.03-1.01.087-.248-1.7-1.653-2.53-1.716-2.566l-.344-.199-.226.327c-.284.438-.49.922-.612 1.43-.23.97-.09 1.882.403 2.661-.595.332-1.55.413-1.744.42H.751a.751.751 0 00-.75.748 11.376 11.376 0 00.692 4.062c.545 1.428 1.355 2.48 2.41 3.124 1.18.723 3.1 1.137 5.275 1.137.983.003 1.963-.086 2.93-.266a12.248 12.248 0 003.823-1.389c.98-.567 1.86-1.288 2.61-2.136 1.252-1.418 1.998-2.997 2.553-4.4h.221c1.372 0 2.215-.549 2.68-1.009.309-.293.55-.65.707-1.046l.098-.288Z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/fastapi.pdf b/poster/assets/logos/fastapi.pdf
new file mode 100644
index 0000000..46719e6
Binary files /dev/null and b/poster/assets/logos/fastapi.pdf differ
diff --git a/poster/assets/logos/fastapi.svg b/poster/assets/logos/fastapi.svg
new file mode 100644
index 0000000..6bab9e1
--- /dev/null
+++ b/poster/assets/logos/fastapi.svg
@@ -0,0 +1 @@
+<svg fill="#009688" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>FastAPI</title><path d="M12 .0387C5.3729.0384.0003 5.3931 0 11.9988c-.001 6.6066 5.372 11.9628 12 11.9625 6.628.0003 12.001-5.3559 12-11.9625-.0003-6.6057-5.3729-11.9604-12-11.96m-.829 5.4153h7.55l-7.5805 5.3284h5.1828L5.279 18.5436q2.9466-6.5444 5.892-13.0896"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/githubactions.pdf b/poster/assets/logos/githubactions.pdf
new file mode 100644
index 0000000..0ba14a2
Binary files /dev/null and b/poster/assets/logos/githubactions.pdf differ
diff --git a/poster/assets/logos/githubactions.svg b/poster/assets/logos/githubactions.svg
new file mode 100644
index 0000000..b3d91c1
--- /dev/null
+++ b/poster/assets/logos/githubactions.svg
@@ -0,0 +1 @@
+<svg fill="#2088FF" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>GitHub Actions</title><path d="M10.984 13.836a.5.5 0 0 1-.353-.146l-.745-.743a.5.5 0 1 1 .706-.708l.392.391 1.181-1.18a.5.5 0 0 1 .708.707l-1.535 1.533a.504.504 0 0 1-.354.146zm9.353-.147l1.534-1.532a.5.5 0 0 0-.707-.707l-1.181 1.18-.392-.391a.5.5 0 1 0-.706.708l.746.743a.497.497 0 0 0 .706-.001zM4.527 7.452l2.557-1.585A1 1 0 0 0 7.09 4.17L4.533 2.56A1 1 0 0 0 3 3.406v3.196a1.001 1.001 0 0 0 1.527.85zm2.03-2.436L4 6.602V3.406l2.557 1.61zM24 12.5c0 1.93-1.57 3.5-3.5 3.5a3.503 3.503 0 0 1-3.46-3h-2.08a3.503 3.503 0 0 1-3.46 3 3.502 3.502 0 0 1-3.46-3h-.558c-.972 0-1.85-.399-2.482-1.042V17c0 1.654 1.346 3 3 3h.04c.244-1.693 1.7-3 3.46-3 1.93 0 3.5 1.57 3.5 3.5S13.43 24 11.5 24a3.502 3.502 0 0 1-3.46-3H8c-2.206 0-4-1.794-4-4V9.899A5.008 5.008 0 0 1 0 5c0-2.757 2.243-5 5-5s5 2.243 5 5a5.005 5.005 0 0 1-4.952 4.998A2.482 2.482 0 0 0 7.482 12h.558c.244-1.693 1.7-3 3.46-3a3.502 3.502 0 0 1 3.46 3h2.08a3.503 3.503 0 0 1 3.46-3c1.93 0 3.5 1.57 3.5 3.5zm-15 8c0 1.378 1.122 2.5 2.5 2.5s2.5-1.122 2.5-2.5-1.122-2.5-2.5-2.5S9 19.122 9 20.5zM5 9c2.206 0 4-1.794 4-4S7.206 1 5 1 1 2.794 1 5s1.794 4 4 4zm9 3.5c0-1.378-1.122-2.5-2.5-2.5S9 11.122 9 12.5s1.122 2.5 2.5 2.5 2.5-1.122 2.5-2.5zm9 0c0-1.378-1.122-2.5-2.5-2.5S18 11.122 18 12.5s1.122 2.5 2.5 2.5 2.5-1.122 2.5-2.5zm-13 8a.5.5 0 1 0 1 0 .5.5 0 0 0-1 0zm2 0a.5.5 0 1 0 1 0 .5.5 0 0 0-1 0zm12 0c0 1.93-1.57 3.5-3.5 3.5a3.503 3.503 0 0 1-3.46-3.002c-.007.001-.013.005-.021.005l-.506.017h-.017a.5.5 0 0 1-.016-.999l.506-.017c.018-.002.035.006.052.007A3.503 3.503 0 0 1 20.5 17c1.93 0 3.5 1.57 3.5 3.5zm-1 0c0-1.378-1.122-2.5-2.5-2.5S18 19.122 18 20.5s1.122 2.5 2.5 2.5 2.5-1.122 2.5-2.5z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/kotlin.pdf b/poster/assets/logos/kotlin.pdf
new file mode 100644
index 0000000..3b4a531
Binary files /dev/null and b/poster/assets/logos/kotlin.pdf differ
diff --git a/poster/assets/logos/kotlin.svg b/poster/assets/logos/kotlin.svg
new file mode 100644
index 0000000..075391d
--- /dev/null
+++ b/poster/assets/logos/kotlin.svg
@@ -0,0 +1 @@
+<svg fill="#7F52FF" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Kotlin</title><path d="M24 24H0V0h24L12 12Z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/mediapipe.pdf b/poster/assets/logos/mediapipe.pdf
new file mode 100644
index 0000000..99671ef
Binary files /dev/null and b/poster/assets/logos/mediapipe.pdf differ
diff --git a/poster/assets/logos/mediapipe.svg b/poster/assets/logos/mediapipe.svg
new file mode 100644
index 0000000..18a3cd4
--- /dev/null
+++ b/poster/assets/logos/mediapipe.svg
@@ -0,0 +1 @@
+<svg fill="#0097A7" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>MediaPipe</title><path d="M2.182 0C1 0 .037.94.002 2.114L0 2.182v6.545a2.182 2.182 0 0 0 4.364 0V2.182A2.182 2.182 0 0 0 2.182 0Zm6.545 0c-1.182 0-2.145.94-2.18 2.114l-.002.068v13.09a2.182 2.182 0 0 0 4.364 0V2.183A2.182 2.182 0 0 0 8.727 0Zm6.546 0a2.182 2.182 0 0 0-2.182 2.182 2.182 2.182 0 0 0 2.182 2.182 2.182 2.182 0 0 0 2.182-2.182A2.182 2.182 0 0 0 15.273 0Zm6.545 0c-1.182 0-2.145.94-2.18 2.114l-.002.068v19.636a2.182 2.182 0 0 0 4.364 0V2.182A2.182 2.182 0 0 0 21.818 0Zm-6.545 6.545c-1.183 0-2.145.94-2.181 2.114l-.001.068v13.091a2.182 2.182 0 0 0 4.364 0V8.728a2.182 2.182 0 0 0-2.182-2.183zM2.182 13.091c-1.182 0-2.145.94-2.18 2.114L0 15.273v6.545a2.182 2.182 0 0 0 4.364 0v-6.545a2.182 2.182 0 0 0-2.182-2.182zm6.545 6.545a2.182 2.182 0 0 0-2.182 2.182A2.182 2.182 0 0 0 8.727 24a2.182 2.182 0 0 0 2.182-2.182 2.182 2.182 0 0 0-2.182-2.182Z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/openjdk.pdf b/poster/assets/logos/openjdk.pdf
new file mode 100644
index 0000000..a40d851
Binary files /dev/null and b/poster/assets/logos/openjdk.pdf differ
diff --git a/poster/assets/logos/openjdk.svg b/poster/assets/logos/openjdk.svg
new file mode 100644
index 0000000..2a591dc
--- /dev/null
+++ b/poster/assets/logos/openjdk.svg
@@ -0,0 +1 @@
+<svg fill="#F89820" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>OpenJDK</title><path d="M11.915 0 11.7.215C9.515 2.4 7.47 6.39 6.046 10.483c-1.064 1.024-3.633 2.81-3.711 3.551-.093.87 1.746 2.611 1.55 3.235-.198.625-1.304 1.408-1.014 1.939.1.188.823.011 1.277-.491a13.389 13.389 0 0 0-.017 2.14c.076.906.27 1.668.643 2.232.372.563.956.911 1.667.911.397 0 .727-.114 1.024-.264.298-.149.571-.33.91-.5.68-.34 1.634-.666 3.53-.604 1.903.062 2.872.39 3.559.704.687.314 1.15.664 1.925.664.767 0 1.395-.336 1.807-.9.412-.563.631-1.33.72-2.24.06-.623.055-1.32 0-2.066.454.45 1.117.604 1.213.424.29-.53-.816-1.314-1.013-1.937-.198-.624 1.642-2.366 1.549-3.236-.08-.748-2.707-2.568-3.748-3.586C16.428 6.374 14.308 2.394 12.13.215zm.175 6.038a2.95 2.95 0 0 1 2.943 2.942 2.95 2.95 0 0 1-2.943 2.943A2.95 2.95 0 0 1 9.148 8.98a2.95 2.95 0 0 1 2.942-2.942zM8.685 7.983a3.515 3.515 0 0 0-.145.997c0 1.951 1.6 3.55 3.55 3.55 1.95 0 3.55-1.598 3.55-3.55 0-.329-.046-.648-.132-.951.334.095.64.208.915.336a42.699 42.699 0 0 1 2.042 5.829c.678 2.545 1.01 4.92.846 6.607-.082.844-.29 1.51-.606 1.94-.315.431-.713.651-1.315.651-.593 0-.932-.27-1.673-.61-.741-.338-1.825-.694-3.792-.758-1.974-.064-3.073.293-3.821.669-.375.188-.659.373-.911.5s-.466.2-.752.2c-.53 0-.876-.209-1.16-.64-.285-.43-.474-1.101-.545-1.948-.141-1.693.176-4.069.823-6.614a43.155 43.155 0 0 1 1.934-5.783c.348-.167.749-.31 1.192-.425zm-3.382 4.362a.216.216 0 0 1 .13.031c-.166.56-.323 1.116-.463 1.665a33.849 33.849 0 0 0-.547 2.555 3.9 3.9 0 0 0-.2-.39c-.58-1.012-.914-1.642-1.16-2.08.315-.24 1.679-1.755 2.24-1.781zm13.394.01c.562.027 1.926 1.543 2.24 1.783-.246.438-.58 1.068-1.16 2.08a4.428 4.428 0 0 0-.163.309 32.354 32.354 0 0 0-.562-2.49 40.579 40.579 0 0 0-.482-1.652.216.216 0 0 1 .127-.03z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/postgresql.pdf b/poster/assets/logos/postgresql.pdf
new file mode 100644
index 0000000..da5372f
Binary files /dev/null and b/poster/assets/logos/postgresql.pdf differ
diff --git a/poster/assets/logos/postgresql.svg b/poster/assets/logos/postgresql.svg
new file mode 100644
index 0000000..559c263
--- /dev/null
+++ b/poster/assets/logos/postgresql.svg
@@ -0,0 +1 @@
+<svg fill="#336791" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>PostgreSQL</title><path d="M23.5594 14.7228a.5269.5269 0 0 0-.0563-.1191c-.139-.2632-.4768-.3418-1.0074-.2321-1.6533.3411-2.2935.1312-2.5256-.0191 1.342-2.0482 2.445-4.522 3.0411-6.8297.2714-1.0507.7982-3.5237.1222-4.7316a1.5641 1.5641 0 0 0-.1509-.235C21.6931.9086 19.8007.0248 17.5099.0005c-1.4947-.0158-2.7705.3461-3.1161.4794a9.449 9.449 0 0 0-.5159-.0816 8.044 8.044 0 0 0-1.3114-.1278c-1.1822-.0184-2.2038.2642-3.0498.8406-.8573-.3211-4.7888-1.645-7.2219.0788C.9359 2.1526.3086 3.8733.4302 6.3043c.0409.818.5069 3.334 1.2423 5.7436.4598 1.5065.9387 2.7019 1.4334 3.582.553.9942 1.1259 1.5933 1.7143 1.7895.4474.1491 1.1327.1441 1.8581-.7279.8012-.9635 1.5903-1.8258 1.9446-2.2069.4351.2355.9064.3625 1.39.3772a.0569.0569 0 0 0 .0004.0041 11.0312 11.0312 0 0 0-.2472.3054c-.3389.4302-.4094.5197-1.5002.7443-.3102.064-1.1344.2339-1.1464.8115-.0025.1224.0329.2309.0919.3268.2269.4231.9216.6097 1.015.6331 1.3345.3335 2.5044.092 3.3714-.6787-.017 2.231.0775 4.4174.3454 5.0874.2212.5529.7618 1.9045 2.4692 1.9043.2505 0 .5263-.0291.8296-.0941 1.7819-.3821 2.5557-1.1696 2.855-2.9059.1503-.8707.4016-2.8753.5388-4.1012.0169-.0703.0357-.1207.057-.1362.0007-.0005.0697-.0471.4272.0307a.3673.3673 0 0 0 .0443.0068l.2539.0223.0149.001c.8468.0384 1.9114-.1426 2.5312-.4308.6438-.2988 1.8057-1.0323 1.5951-1.6698zM2.371 11.8765c-.7435-2.4358-1.1779-4.8851-1.2123-5.5719-.1086-2.1714.4171-3.6829 1.5623-4.4927 1.8367-1.2986 4.8398-.5408 6.108-.13-.0032.0032-.0066.0061-.0098.0094-2.0238 2.044-1.9758 5.536-1.9708 5.7495-.0002.0823.0066.1989.0162.3593.0348.5873.0996 1.6804-.0735 2.9184-.1609 1.1504.1937 2.2764.9728 3.0892.0806.0841.1648.1631.2518.2374-.3468.3714-1.1004 1.1926-1.9025 2.1576-.5677.6825-.9597.5517-1.0886.5087-.3919-.1307-.813-.5871-1.2381-1.3223-.4796-.839-.9635-2.0317-1.4155-3.5126zm6.0072 5.0871c-.1711-.0428-.3271-.1132-.4322-.1772.0889-.0394.2374-.0902.4833-.1409 1.2833-.2641 1.4815-.4506 1.9143-1.0002.0992-.126.2116-.2687.3673-.4426a.3549.3549 0 0 0 .0737-.1298c.1708-.1513.2724-.1099.4369-.0417.156.0646.3078.26.3695.4752.0291.1016.0619.2945-.0452.4444-.9043 1.2658-2.2216 1.2494-3.1676 1.0128zm2.094-3.988-.0525.141c-.133.3566-.2567.6881-.3334 1.003-.6674-.0021-1.3168-.2872-1.8105-.8024-.6279-.6551-.9131-1.5664-.7825-2.5004.1828-1.3079.1153-2.4468.079-3.0586-.005-.0857-.0095-.1607-.0122-.2199.2957-.2621 1.6659-.9962 2.6429-.7724.4459.1022.7176.4057.8305.928.5846 2.7038.0774 3.8307-.3302 4.7363-.084.1866-.1633.3629-.2311.5454zm7.3637 4.5725c-.0169.1768-.0358.376-.0618.5959l-.146.4383a.3547.3547 0 0 0-.0182.1077c-.0059.4747-.054.6489-.115.8693-.0634.2292-.1353.4891-.1794 1.0575-.11 1.4143-.8782 2.2267-2.4172 2.5565-1.5155.3251-1.7843-.4968-2.0212-1.2217a6.5824 6.5824 0 0 0-.0769-.2266c-.2154-.5858-.1911-1.4119-.1574-2.5551.0165-.5612-.0249-1.9013-.3302-2.6462.0044-.2932.0106-.5909.019-.8918a.3529.3529 0 0 0-.0153-.1126 1.4927 1.4927 0 0 0-.0439-.208c-.1226-.4283-.4213-.7866-.7797-.9351-.1424-.059-.4038-.1672-.7178-.0869.067-.276.1831-.5875.309-.9249l.0529-.142c.0595-.16.134-.3257.213-.5012.4265-.9476 1.0106-2.2453.3766-5.1772-.2374-1.0981-1.0304-1.6343-2.2324-1.5098-.7207.0746-1.3799.3654-1.7088.5321a5.6716 5.6716 0 0 0-.1958.1041c.0918-1.1064.4386-3.1741 1.7357-4.4823a4.0306 4.0306 0 0 1 .3033-.276.3532.3532 0 0 0 .1447-.0644c.7524-.5706 1.6945-.8506 2.802-.8325.4091.0067.8017.0339 1.1742.081 1.939.3544 3.2439 1.4468 4.0359 2.3827.8143.9623 1.2552 1.9315 1.4312 2.4543-1.3232-.1346-2.2234.1268-2.6797.779-.9926 1.4189.543 4.1729 1.2811 5.4964.1353.2426.2522.4522.2889.5413.2403.5825.5515.9713.7787 1.2552.0696.087.1372.1714.1885.245-.4008.1155-1.1208.3825-1.0552 1.717-.0123.1563-.0423.4469-.0834.8148-.0461.2077-.0702.4603-.0994.7662zm.8905-1.6211c-.0405-.8316.2691-.9185.5967-1.0105a2.8566 2.8566 0 0 0 .135-.0406 1.202 1.202 0 0 0 .1342.103c.5703.3765 1.5823.4213 3.0068.1344-.2016.1769-.5189.3994-.9533.6011-.4098.1903-1.0957.333-1.7473.3636-.7197.0336-1.0859-.0807-1.1721-.151zm.5695-9.2712c-.0059.3508-.0542.6692-.1054 1.0017-.055.3576-.112.7274-.1264 1.1762-.0142.4368.0404.8909.0932 1.3301.1066.887.216 1.8003-.2075 2.7014a3.5272 3.5272 0 0 1-.1876-.3856c-.0527-.1276-.1669-.3326-.3251-.6162-.6156-1.1041-2.0574-3.6896-1.3193-4.7446.3795-.5427 1.3408-.5661 2.1781-.463zm.2284 7.0137a12.3762 12.3762 0 0 0-.0853-.1074l-.0355-.0444c.7262-1.1995.5842-2.3862.4578-3.4385-.0519-.4318-.1009-.8396-.0885-1.2226.0129-.4061.0666-.7543.1185-1.0911.0639-.415.1288-.8443.1109-1.3505.0134-.0531.0188-.1158.0118-.1902-.0457-.4855-.5999-1.938-1.7294-3.253-.6076-.7073-1.4896-1.4972-2.6889-2.0395.5251-.1066 1.2328-.2035 2.0244-.1859 2.0515.0456 3.6746.8135 4.8242 2.2824a.908.908 0 0 1 .0667.1002c.7231 1.3556-.2762 6.2751-2.9867 10.5405zm-8.8166-6.1162c-.025.1794-.3089.4225-.6211.4225a.5821.5821 0 0 1-.0809-.0056c-.1873-.026-.3765-.144-.5059-.3156-.0458-.0605-.1203-.178-.1055-.2844.0055-.0401.0261-.0985.0925-.1488.1182-.0894.3518-.1226.6096-.0867.3163.0441.6426.1938.6113.4186zm7.9305-.4114c.0111.0792-.049.201-.1531.3102-.0683.0717-.212.1961-.4079.2232a.5456.5456 0 0 1-.075.0052c-.2935 0-.5414-.2344-.5607-.3717-.024-.1765.2641-.3106.5611-.352.297-.0414.6111.0088.6356.1851z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/python.pdf b/poster/assets/logos/python.pdf
new file mode 100644
index 0000000..2d9f9d7
Binary files /dev/null and b/poster/assets/logos/python.pdf differ
diff --git a/poster/assets/logos/python.svg b/poster/assets/logos/python.svg
new file mode 100644
index 0000000..e1b14ec
--- /dev/null
+++ b/poster/assets/logos/python.svg
@@ -0,0 +1 @@
+<svg fill="#3776AB" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Python</title><path d="M14.25.18l.9.2.73.26.59.3.45.32.34.34.25.34.16.33.1.3.04.26.02.2-.01.13V8.5l-.05.63-.13.55-.21.46-.26.38-.3.31-.33.25-.35.19-.35.14-.33.1-.3.07-.26.04-.21.02H8.77l-.69.05-.59.14-.5.22-.41.27-.33.32-.27.35-.2.36-.15.37-.1.35-.07.32-.04.27-.02.21v3.06H3.17l-.21-.03-.28-.07-.32-.12-.35-.18-.36-.26-.36-.36-.35-.46-.32-.59-.28-.73-.21-.88-.14-1.05-.05-1.23.06-1.22.16-1.04.24-.87.32-.71.36-.57.4-.44.42-.33.42-.24.4-.16.36-.1.32-.05.24-.01h.16l.06.01h8.16v-.83H6.18l-.01-2.75-.02-.37.05-.34.11-.31.17-.28.25-.26.31-.23.38-.2.44-.18.51-.15.58-.12.64-.1.71-.06.77-.04.84-.02 1.27.05zm-6.3 1.98l-.23.33-.08.41.08.41.23.34.33.22.41.09.41-.09.33-.22.23-.34.08-.41-.08-.41-.23-.33-.33-.22-.41-.09-.41.09zm13.09 3.95l.28.06.32.12.35.18.36.27.36.35.35.47.32.59.28.73.21.88.14 1.04.05 1.23-.06 1.23-.16 1.04-.24.86-.32.71-.36.57-.4.45-.42.33-.42.24-.4.16-.36.09-.32.05-.24.02-.16-.01h-8.22v.82h5.84l.01 2.76.02.36-.05.34-.11.31-.17.29-.25.25-.31.24-.38.2-.44.17-.51.15-.58.13-.64.09-.71.07-.77.04-.84.01-1.27-.04-1.07-.14-.9-.2-.73-.25-.59-.3-.45-.33-.34-.34-.25-.34-.16-.33-.1-.3-.04-.25-.02-.2.01-.13v-5.34l.05-.64.13-.54.21-.46.26-.38.3-.32.33-.24.35-.2.35-.14.33-.1.3-.06.26-.04.21-.02.13-.01h5.84l.69-.05.59-.14.5-.21.41-.28.33-.32.27-.35.2-.36.15-.36.1-.35.07-.32.04-.28.02-.21V6.07h2.09l.14.01zm-6.47 14.25l-.23.33-.08.41.08.41.23.33.33.23.41.08.41-.08.33-.23.23-.33.08-.41-.08-.41-.23-.33-.33-.23-.41-.08-.41.08z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/react.pdf b/poster/assets/logos/react.pdf
new file mode 100644
index 0000000..3fb0ec6
Binary files /dev/null and b/poster/assets/logos/react.pdf differ
diff --git a/poster/assets/logos/react.svg b/poster/assets/logos/react.svg
new file mode 100644
index 0000000..88b9c77
--- /dev/null
+++ b/poster/assets/logos/react.svg
@@ -0,0 +1 @@
+<svg fill="#61DAFB" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>React</title><path d="M14.23 12.004a2.236 2.236 0 0 1-2.235 2.236 2.236 2.236 0 0 1-2.236-2.236 2.236 2.236 0 0 1 2.235-2.236 2.236 2.236 0 0 1 2.236 2.236zm2.648-10.69c-1.346 0-3.107.96-4.888 2.622-1.78-1.653-3.542-2.602-4.887-2.602-.41 0-.783.093-1.106.278-1.375.793-1.683 3.264-.973 6.365C1.98 8.917 0 10.42 0 12.004c0 1.59 1.99 3.097 5.043 4.03-.704 3.113-.39 5.588.988 6.38.32.187.69.275 1.102.275 1.345 0 3.107-.96 4.888-2.624 1.78 1.654 3.542 2.603 4.887 2.603.41 0 .783-.09 1.106-.275 1.374-.792 1.683-3.263.973-6.365C22.02 15.096 24 13.59 24 12.004c0-1.59-1.99-3.097-5.043-4.032.704-3.11.39-5.587-.988-6.38-.318-.184-.688-.277-1.092-.278zm-.005 1.09v.006c.225 0 .406.044.558.127.666.382.955 1.835.73 3.704-.054.46-.142.945-.25 1.44-.96-.236-2.006-.417-3.107-.534-.66-.905-1.345-1.727-2.035-2.447 1.592-1.48 3.087-2.292 4.105-2.295zm-9.77.02c1.012 0 2.514.808 4.11 2.28-.686.72-1.37 1.537-2.02 2.442-1.107.117-2.154.298-3.113.538-.112-.49-.195-.964-.254-1.42-.23-1.868.054-3.32.714-3.707.19-.09.4-.127.563-.132zm4.882 3.05c.455.468.91.992 1.36 1.564-.44-.02-.89-.034-1.345-.034-.46 0-.915.01-1.36.034.44-.572.895-1.096 1.345-1.565zM12 8.1c.74 0 1.477.034 2.202.093.406.582.802 1.203 1.183 1.86.372.64.71 1.29 1.018 1.946-.308.655-.646 1.31-1.013 1.95-.38.66-.773 1.288-1.18 1.87-.728.063-1.466.098-2.21.098-.74 0-1.477-.035-2.202-.093-.406-.582-.802-1.204-1.183-1.86-.372-.64-.71-1.29-1.018-1.946.303-.657.646-1.313 1.013-1.954.38-.66.773-1.286 1.18-1.868.728-.064 1.466-.098 2.21-.098zm-3.635.254c-.24.377-.48.763-.704 1.16-.225.39-.435.782-.635 1.174-.265-.656-.49-1.31-.676-1.947.64-.15 1.315-.283 2.015-.386zm7.26 0c.695.103 1.365.23 2.006.387-.18.632-.405 1.282-.66 1.933-.2-.39-.41-.783-.64-1.174-.225-.392-.465-.774-.705-1.146zm3.063.675c.484.15.944.317 1.375.498 1.732.74 2.852 1.708 2.852 2.476-.005.768-1.125 1.74-2.857 2.475-.42.18-.88.342-1.355.493-.28-.958-.646-1.956-1.1-2.98.45-1.017.81-2.01 1.085-2.964zm-13.395.004c.278.96.645 1.957 1.1 2.98-.45 1.017-.812 2.01-1.086 2.964-.484-.15-.944-.318-1.37-.5-1.732-.737-2.852-1.706-2.852-2.474 0-.768 1.12-1.742 2.852-2.476.42-.18.88-.342 1.356-.494zm11.678 4.28c.265.657.49 1.312.676 1.948-.64.157-1.316.29-2.016.39.24-.375.48-.762.705-1.158.225-.39.435-.788.636-1.18zm-9.945.02c.2.392.41.783.64 1.175.23.39.465.772.705 1.143-.695-.102-1.365-.23-2.006-.386.18-.63.406-1.282.66-1.933zM17.92 16.32c.112.493.2.968.254 1.423.23 1.868-.054 3.32-.714 3.708-.147.09-.338.128-.563.128-1.012 0-2.514-.807-4.11-2.28.686-.72 1.37-1.536 2.02-2.44 1.107-.118 2.154-.3 3.113-.54zm-11.83.01c.96.234 2.006.415 3.107.532.66.905 1.345 1.727 2.035 2.446-1.595 1.483-3.092 2.295-4.11 2.295-.22-.005-.406-.05-.553-.132-.666-.38-.955-1.834-.73-3.703.054-.46.142-.944.25-1.438zm4.56.64c.44.02.89.034 1.345.034.46 0 .915-.01 1.36-.034-.44.572-.895 1.095-1.345 1.565-.455-.47-.91-.993-1.36-1.565z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/redis.pdf b/poster/assets/logos/redis.pdf
new file mode 100644
index 0000000..32e1da5
Binary files /dev/null and b/poster/assets/logos/redis.pdf differ
diff --git a/poster/assets/logos/redis.svg b/poster/assets/logos/redis.svg
new file mode 100644
index 0000000..efd0e11
--- /dev/null
+++ b/poster/assets/logos/redis.svg
@@ -0,0 +1 @@
+<svg fill="#DC382D" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Redis</title><path d="M22.71 13.145c-1.66 2.092-3.452 4.483-7.038 4.483-3.203 0-4.397-2.825-4.48-5.12.701 1.484 2.073 2.685 4.214 2.63 4.117-.133 6.94-3.852 6.94-7.239 0-4.05-3.022-6.972-8.268-6.972-3.752 0-8.4 1.428-11.455 3.685C2.59 6.937 3.885 9.958 4.35 9.626c2.648-1.904 4.748-3.13 6.784-3.744C8.12 9.244.886 17.05 0 18.425c.1 1.261 1.66 4.648 2.424 4.648.232 0 .431-.133.664-.365a100.49 100.49 0 0 0 5.54-6.765c.222 3.104 1.748 6.898 6.014 6.898 3.819 0 7.604-2.756 9.33-8.965.2-.764-.73-1.361-1.261-.73zm-4.349-5.013c0 1.959-1.926 2.922-3.685 2.922-.941 0-1.664-.247-2.235-.568 1.051-1.592 2.092-3.225 3.21-4.973 1.972.334 2.71 1.43 2.71 2.619z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/springboot.pdf b/poster/assets/logos/springboot.pdf
new file mode 100644
index 0000000..75f159d
Binary files /dev/null and b/poster/assets/logos/springboot.pdf differ
diff --git a/poster/assets/logos/springboot.svg b/poster/assets/logos/springboot.svg
new file mode 100644
index 0000000..e4317c0
--- /dev/null
+++ b/poster/assets/logos/springboot.svg
@@ -0,0 +1 @@
+<svg fill="#6DB33F" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Spring Boot</title><path d="m23.693 10.7058-4.73-8.1844c-.4094-.7106-1.4166-1.2942-2.2402-1.2942H7.2725c-.819 0-1.8308.5836-2.2402 1.2942L.307 10.7058c-.4095.7106-.4095 1.873 0 2.5837l4.7252 8.189c.4094.7107 1.4166 1.2943 2.2402 1.2943h9.455c.819 0 1.826-.5836 2.2402-1.2942l4.7252-8.189c.4095-.7107.4095-1.8732 0-2.5838zM10.9763 5.7547c0-.5365.4377-.9742.9742-.9742s.9742.4377.9742.9742v5.8217c0 .5366-.4377.9742-.9742.9742s-.9742-.4376-.9742-.9742zm.9742 12.4294c-3.6427 0-6.6077-2.965-6.6077-6.6077.0047-2.0896.993-4.0521 2.6685-5.304a.8657.8657 0 0 1 1.2142.1788.8657.8657 0 0 1-.1788 1.2143c-2.1602 1.6048-2.612 4.6592-1.0072 6.8194 1.6049 2.1603 4.6593 2.612 6.8195 1.0072 1.2378-.9177 1.9673-2.372 1.9673-3.9157a4.8972 4.8972 0 0 0-1.9861-3.925c-.386-.2824-.466-.8284-.1836-1.2143.2824-.386.8283-.466 1.2143-.1835 1.6895 1.2471 2.6826 3.2238 2.6873 5.3228 0 3.6474-2.965 6.6077-6.6077 6.6077z"/></svg>
\ No newline at end of file
diff --git a/poster/assets/logos/traefikproxy.pdf b/poster/assets/logos/traefikproxy.pdf
new file mode 100644
index 0000000..63f71f9
Binary files /dev/null and b/poster/assets/logos/traefikproxy.pdf differ
diff --git a/poster/assets/logos/traefikproxy.svg b/poster/assets/logos/traefikproxy.svg
new file mode 100644
index 0000000..0135fda
--- /dev/null
+++ b/poster/assets/logos/traefikproxy.svg
@@ -0,0 +1 @@
+<svg fill="#24A1C1" role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Traefik Proxy</title><path d="M12 1.19c1.088 0 2.056.768 2.056 1.714 0 .947-.921 1.715-2.056 1.715-.13 0-.3-.022-.509-.064a.685.685 0 0 0-.475.076l-7.37 4.195a.344.344 0 0 0 .001.597l7.99 4.49c.208.116.461.116.669 0l8.034-4.468a.343.343 0 0 0 .003-.598l-2.507-1.424a.683.683 0 0 0-.67-.003l-2.647 1.468a.234.234 0 0 0-.119.18l-.001.025c0 .946-.921 1.714-2.056 1.714s-2.056-.768-2.056-1.714c0-.947.921-1.715 2.056-1.715.042 0 .09.002.145.007l.087.008.096.013a.685.685 0 0 0 .425-.08l3.913-2.173c.3-.166.662-.171.965-.017l.04.023 5.465 3.104c.686.39.693 1.368.03 1.773l-.037.021-3.656 2.033a.343.343 0 0 0 .007.604l3.62 1.906c.72.378.736 1.402.03 1.804l-10.995 6.272a1.03 1.03 0 0 1-1.019 0L.526 16.43a1.03 1.03 0 0 1 .034-1.806l3.66-1.911a.343.343 0 0 0 .01-.603L.524 10.029a1.03 1.03 0 0 1-.041-1.77l.036-.021L9.618 3.06a.688.688 0 0 0 .308-.369l.011-.036c.32-.952 1.046-1.466 2.063-1.466Zm5.076 12.63-4.492 2.586-.041.022c-.306.158-.671.152-.973-.018l-4.478-2.527a.682.682 0 0 0-.65-.01L3.86 15.224a.343.343 0 0 0-.012.602l7.887 4.515c.21.12.467.121.677 0l7.956-4.547a.343.343 0 0 0-.01-.602l-2.623-1.384a.683.683 0 0 0-.659.012z"/></svg>
\ No newline at end of file
diff --git a/poster/variants/showcase/poster.pdf b/poster/variants/showcase/poster.pdf
new file mode 100644
index 0000000..f86b56f
Binary files /dev/null and b/poster/variants/showcase/poster.pdf differ
diff --git a/poster/variants/showcase/poster.tex b/poster/variants/showcase/poster.tex
new file mode 100644
index 0000000..3a68a21
--- /dev/null
+++ b/poster/variants/showcase/poster.tex
@@ -0,0 +1,273 @@
+% =============================================================================
+%  FIVUCSAS  —  CSE4198 Engineering Project Poster  —  SHOWCASE variant
+%  Marmara University, Department of Computer Engineering — Spring 2025-2026
+%
+%  Design goal: a product-showcase poster. Leads with a slogan, answers the
+%  questions a visitor actually asks, and presents the value proposition,
+%  the Top-10 feature set and the proof points — icon-driven, low text.
+%
+%  Visual assets:
+%    assets/icons/*.pdf  — OpenMoji colour glyphs (CC BY-SA 4.0, hfg-gmuend/openmoji)
+%                          + Tabler line icons (MIT) for fingerprint / qrcode / usb
+%    assets/logos/*.pdf  — Simple Icons brand marks, brand-coloured
+%    assets/*.{png,jpg}  — official Marmara University + Faculty crests
+%
+%  Compile:  pdflatex poster.tex && pdflatex poster.tex
+% =============================================================================
+\pdfminorversion=7  % allow inclusion of rsvg-convert PDF/1.7 assets
+\documentclass[a0paper,portrait]{tikzposter}
+\tikzposterlatexaffectionproofoff
+\geometry{paperwidth=841mm,paperheight=1189mm}
+
+% ---------- Packages ---------------------------------------------------------
+\usepackage[utf8]{inputenc}
+\usepackage[T1]{fontenc}
+\usepackage{lmodern}
+\usepackage{microtype}
+\usepackage{graphicx}
+\graphicspath{{./}{../../assets/}{../../assets/icons/}{../../assets/logos/}}
+\usepackage{xcolor}
+\usepackage{amsmath,amssymb}
+\usepackage{fontawesome5}
+\usepackage{qrcode}
+\usepackage{tikz}
+\usetikzlibrary{shapes.geometric,shapes.misc,arrows.meta,positioning,calc,fit,backgrounds}
+
+% ---------- Marmara palette --------------------------------------------------
+\definecolor{MarmaraNavy}{HTML}{0B2545}
+\definecolor{MarmaraBlue}{HTML}{13315C}
+\definecolor{MarmaraTeal}{HTML}{1E96A8}
+\definecolor{MarmaraGold}{HTML}{F4B400}
+\definecolor{MarmaraGray}{HTML}{E9ECEF}
+\definecolor{MarmaraInk}{HTML}{1B1F23}
+\definecolor{MarmaraSubtle}{HTML}{F6F8FB}
+\definecolor{Spoof}{HTML}{C0392B}
+\definecolor{Live}{HTML}{27AE60}
+
+% ---------- Theme ------------------------------------------------------------
+\definelayouttheme{MarmaraCSE}{
+  \usecolorstyle[colorPalette=MarmaraStyle]{Default}
+  \usebackgroundstyle{Default}
+  \usetitlestyle{Filled}
+  \useblockstyle{Default}
+  \useinnerblockstyle{Default}
+  \usenotestyle{Default}
+}
+\definecolorpalette{MarmaraStyle}{
+  \definecolor{colorOne}{named}{MarmaraNavy}
+  \definecolor{colorTwo}{named}{MarmaraBlue}
+  \definecolor{colorThree}{named}{MarmaraTeal}
+}
+\usetheme{MarmaraCSE}
+\colorlet{backgroundcolor}{MarmaraSubtle}
+\colorlet{framecolor}{MarmaraNavy}
+\colorlet{titlefgcolor}{white}
+\colorlet{titlebgcolor}{MarmaraNavy}
+\colorlet{blocktitlebgcolor}{MarmaraBlue}
+\colorlet{blocktitlefgcolor}{white}
+\colorlet{blockbodybgcolor}{white}
+\colorlet{blockbodyfgcolor}{MarmaraInk}
+\colorlet{innerblocktitlebgcolor}{MarmaraTeal}
+\colorlet{innerblocktitlefgcolor}{white}
+
+% ---------- Asset helpers ----------------------------------------------------
+\newcommand{\ic}[2][3.2cm]{\raisebox{-0.15\height}{\includegraphics[height=#1,keepaspectratio]{#2}}}
+\newcommand{\logo}[2][3cm]{\raisebox{-0.15\height}{\includegraphics[height=#1,keepaspectratio]{#2}}}
+\newcommand{\unicrest}[1][3cm]{\includegraphics[height=#1,keepaspectratio]{marmara-university.png}}
+\newcommand{\faccrest}[1][3cm]{\includegraphics[height=#1,keepaspectratio]{muhendislik-fakultesi.jpg}}
+
+% ---------- Header info ------------------------------------------------------
+\title{\parbox{0.97\linewidth}{\centering
+  \begin{minipage}[c]{0.13\linewidth}\centering\unicrest[5.4cm]\end{minipage}\hfill
+  \begin{minipage}[c]{0.70\linewidth}\centering
+    {\fontsize{96}{100}\selectfont\bfseries FIVUCSAS}\\[0.18em]
+    {\LARGE Face and Identity Verification Using Cloud-based SaaS}\\[0.30em]
+    {\Large\textsl{A multi-tenant biometric identity platform\,---\,production-deployed}}
+  \end{minipage}\hfill
+  \begin{minipage}[c]{0.13\linewidth}\centering\faccrest[5.6cm]\end{minipage}
+}}
+
+\author{%
+  \large \textbf{Ahmet Abdullah Gültekin} \quad
+  \textbf{Ayşe Gülsüm Eren} \quad
+  \textbf{Ayşenur Arıcı}\\[0.20em]
+  \large \textbf{Advisor:} Assoc.\ Prof.\ Dr.\ Mustafa Ağaoğlu \, $\cdot$ \,
+  CSE4197 / CSE4198 \, $\cdot$ \, Spring 2025--2026}
+\institute{Marmara University \, $\cdot$ \, Faculty of Engineering \, $\cdot$ \, Department of Computer Engineering}
+
+% =============================================================================
+\begin{document}
+\maketitle[width=\paperwidth, titletotopverticalspace=6mm]
+
+% =================== SLOGAN HERO BAND ========================================
+\block[bodyoffsety=-15mm, bodyinnersep=0mm]{}{%
+\centering
+\begin{tikzpicture}
+  \node[fill=MarmaraNavy, rounded corners=16pt, minimum width=76cm, minimum height=12cm, inner sep=0pt] (s) {};
+  \node[text=white, font=\fontsize{70}{76}\selectfont\bfseries] at ([yshift=22mm]s.center)
+    {Register once.\ \ Verify everywhere.\ \ Every time.};
+  \node[text=MarmaraGold, font=\fontsize{30}{34}\selectfont] at ([yshift=-26mm]s.center)
+    {Ten authentication factors, one hosted login\,---\,protected by a liveness check a recorded video cannot fake.};
+  \node at ([xshift=-330mm]s.center) {\ic[6.4cm]{user}};
+  \node at ([xshift= 330mm]s.center) {\ic[6.4cm]{globe}};
+\end{tikzpicture}}
+
+% =================== WHAT FIVUCSAS SOLVES (full-width band) ==================
+\block[titleoffsety=-10mm, bodyinnersep=6mm]{\faBullseye~~What FIVUCSAS solves}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  \foreach \px/\fx/\pain/\fix/\cx in {%
+      key/puzzle/{Passwords leak,\\SIM-OTPs get swapped}/{10 composable factors\\in one MFA flow}/-28.5,
+      video/shield/{Photos, clips \& deepfakes\\replay a face}/{Active randomised\\liveness challenge}/-9.5,
+      scroll/check/{GDPR \& KVKK bolted on\\as an afterthought}/{Consent, export \&\\erasure built in}/9.5,
+      gear2/link/{Re-integrating auth\\for every new app}/{One hosted OIDC\\for every platform}/28.5}{
+    \node[font=\large\bfseries, text=Spoof, text width=15cm] at (\cx,3.0) {\pain};
+    \node at (\cx-3.6,0.0) {\ic[3.0cm]{\px}};
+    \node at (\cx-2.0,1.4) {\ic[1.3cm]{cross}};
+    \draw[-Latex, line width=2.4pt, MarmaraNavy] (\cx-1.7,0) -- (\cx+1.7,0);
+    \node at (\cx+3.6,0.0) {\ic[3.0cm]{\fx}};
+    \node at (\cx+2.0,1.4) {\ic[1.3cm]{check}};
+    \node[font=\large\bfseries, text=Live, text width=15cm] at (\cx,-2.9) {\fix};
+  }
+  \draw[MarmaraGray, line width=1.2pt] (-19,-3.6) -- (-19,3.8);
+  \draw[MarmaraGray, line width=1.2pt] (  0,-3.6) -- (  0,3.8);
+  \draw[MarmaraGray, line width=1.2pt] ( 19,-3.6) -- ( 19,3.8);
+\end{tikzpicture}}
+
+% ============================ COLUMNS ROW ====================================
+\begin{columns}
+
+% --------------------------- LEFT COLUMN -------------------------------------
+\column{0.34}
+
+\block{\faQuestionCircle~~Questions FIVUCSAS answers}{%
+\begin{tikzpicture}[every node/.style={align=left}]
+  \foreach \q/\a [count=\i] in {%
+      {Is this a real person\\---\,or a replay?}/{Active liveness\,---\,0\,\% replay false-accept (n=120)},
+      {Can one identity work\\across many apps?}/{Hosted OAuth2 / OIDC, tenant-scoped\,---\,redirect once},
+      {Is my biometric\\data safe?}/{Facenet512 embeddings encrypted at rest\,---\,AES-128 Fernet},
+      {Can I delete\\my data?}/{GDPR Art.\,17 erasure $+$ scheduled purge\,---\,KVKK aligned},
+      {Do you verify real-world\\identity\,---\,not just login?}/{9-step pipeline: document $+$ NFC chip $+$ face $+$ liveness}}{
+    \node[anchor=west] at (-11.0, {-(\i-1)*4.55}) {\ic[2.1cm]{check}};
+    \node[anchor=west, font=\large\bfseries, text=MarmaraNavy] at (-8.6, {-(\i-1)*4.55+0.85}) {\q};
+    \node[anchor=west, font=\normalsize, text=MarmaraInk, text width=18.8cm]
+          at (-8.6, {-(\i-1)*4.55-1.15}) {\a};
+    \ifnum\i<5 \draw[MarmaraGray, line width=1pt] (-11.0,{-(\i-1)*4.55-2.3}) -- (10.8,{-(\i-1)*4.55-2.3}); \fi
+  }
+\end{tikzpicture}}
+
+\block{\faIndustry~~Built for nine industries}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  \foreach \i/\lbl/\x/\y in {%
+      bank/Banking KYC/-9.0/1.9, hospital/Healthcare/-3.0/1.9,
+      school/Education/3.0/1.9, govbuilding/Government/9.0/1.9,
+      store/Retail age/-9.0/-2.4, briefcase/Corporate/-3.0/-2.4,
+      airplane/Travel \& border/3.0/-2.4, creditcard/Fintech/9.0/-2.4}{
+    \node at (\x,\y) {\ic[2.6cm]{\i}};
+    \node[font=\normalsize\bfseries, text=MarmaraInk] at (\x,\y-1.9) {\lbl};
+  }
+\end{tikzpicture}\\[0.3em]
+{\large Each industry ships as a ready \textbf{verification template}\,---\,steps, thresholds and regulators pre-wired.}
+}
+
+% --------------------------- MIDDLE COLUMN -----------------------------------
+\column{0.32}
+
+\block{\faStar~~Top 10 features}{%
+\begin{tikzpicture}[every node/.style={align=left}]
+  \foreach \icon/\title/\sub [count=\i] in {%
+      key/{Ten composable auth factors}/{password $\cdot$ OTP $\cdot$ TOTP $\cdot$ QR $\cdot$ face $\cdot$ voice $\cdot$ NFC $\cdot$ WebAuthn},
+      shield/{Active-liveness anti-spoofing}/{random facial-action challenge $+$ passive MiniFASNet},
+      link/{Hosted OAuth2 / OIDC $+$ PKCE}/{redirective login, JWKS, discovery, RFC 8252 loopback},
+      sliders/{Multi-tenant, tenant-controlled flows}/{each tenant composes its own MFA flow, no backend code},
+      lock/{RBAC \& fine-grained permissions}/{roles, user-roles and permissions, row-level security},
+      idcard/{9-step identity-verification pipeline}/{document scan $\to$ NFC chip $\to$ face match $\to$ liveness},
+      briefcase/{7+ industry verification templates}/{Banking KYC, Healthcare, Gov e-KYC, Fintech\,\ldots},
+      database/{Embedding encryption at rest}/{Fernet AES-128 wrap before pgvector write},
+      scroll/{GDPR / KVKK compliance built in}/{consent, data export, right-to-erasure $+$ purge},
+      mobile/{Every platform}/{web $\cdot$ Android $\cdot$ iOS $\cdot$ desktop $\cdot$ CLI}}{
+    \node[circle, fill=MarmaraGold, text=MarmaraNavy, font=\Large\bfseries,
+          minimum size=1.9cm, inner sep=0pt] at (-9.4, {-(\i-1)*3.05}) {\i};
+    \node at (-6.7, {-(\i-1)*3.05}) {\ic[2.1cm]{\icon}};
+    \node[anchor=west, font=\large\bfseries, text=MarmaraNavy]
+          at (-5.2, {-(\i-1)*3.05+0.55}) {\title};
+    \node[anchor=west, font=\small, text=MarmaraInk, text width=16cm]
+          at (-5.2, {-(\i-1)*3.05-0.75}) {\sub};
+    \ifnum\i<10 \draw[MarmaraGray, line width=0.8pt]
+          (-10.4,{-(\i-1)*3.05-1.5}) -- (10.2,{-(\i-1)*3.05-1.5}); \fi
+  }
+\end{tikzpicture}}
+
+% --------------------------- RIGHT COLUMN ------------------------------------
+\column{0.34}
+
+\block{\faChartBar~~By the numbers}{%
+\centering
+\begin{tikzpicture}[
+  stat/.style={fill=MarmaraSubtle, draw=MarmaraGray, line width=1.5pt,
+               rounded corners=8pt, minimum width=10.6cm, minimum height=4.7cm, inner sep=0pt},
+  every node/.style={align=center}]
+  \foreach \num/\lbl/\x/\y in {%
+      {1820+}/automated tests/-5.6/7.05,
+      {<\,1\,s}/face verification (P95)/5.6/7.05,
+      {0\,\%}/replay false-accept/-5.6/2.05,
+      {10}/auth factors/5.6/2.05,
+      {9}/verification steps/-5.6/-2.95,
+      {7+}/industry templates/5.6/-2.95,
+      {8}/live production services/-5.6/-7.95,
+      {717}/commits shipped/5.6/-7.95}{
+    \node[stat] at (\x,\y) {};
+    \node[font=\fontsize{50}{50}\selectfont\bfseries, text=MarmaraTeal] at (\x,\y+0.75) {\num};
+    \node[font=\large\bfseries, text=MarmaraInk] at (\x,\y-1.35) {\lbl};
+  }
+\end{tikzpicture}}
+
+\block{\faSitemap~~Architecture at a glance}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center, font=\normalsize}]
+  \node[draw=MarmaraBlue, fill=white, rounded corners=6pt, line width=1.2pt,
+        minimum width=10.4cm, minimum height=3.4cm] (api) at (-5.6,0)
+        {\logo[2.0cm]{springboot}\\[2pt]\textbf{Identity Core}\\[-1pt]\small frozen OIDC contract};
+  \node[draw=MarmaraTeal, fill=MarmaraTeal!8, rounded corners=6pt, line width=1.2pt,
+        minimum width=10.4cm, minimum height=3.4cm] (bio) at (5.6,0)
+        {\logo[2.0cm]{fastapi}\\[2pt]\textbf{Biometric ML}\\[-1pt]\small weekly-changing models};
+  \draw[-Latex, line width=1.6pt, MarmaraNavy] (api) -- node[above,font=\small]{API-key} (bio);
+  \node[font=\small, text=gray] at (0,-2.6) {split along the OIDC-contract vs.\ ML-iteration boundary};
+\end{tikzpicture}\\[0.5em]
+\logo[2.1cm]{react}\hfill\logo[2.1cm]{kotlin}\hfill\logo[2.1cm]{python}\hfill%
+\logo[2.1cm]{postgresql}\hfill\logo[2.1cm]{redis}\hfill\logo[2.1cm]{docker}\hfill%
+\logo[2.1cm]{traefikproxy}\\[0.3em]
+{\normalsize Spring Boot 3.4 $\cdot$ Java 21 $\cdot$ FastAPI / Python 3.12 $\cdot$ React 18 $\cdot$ Kotlin MPP $\cdot$ Postgres 17 $+$ pgvector}
+}
+
+\block{\faRocket~~See it live}{%
+\centering
+\begin{minipage}[c]{0.38\linewidth}\centering
+  \qrcode[height=6.0cm,version=4,level=H]{https://verify.fivucsas.com}\\[0.2em]
+  {\small\faCamera~~scan to try it}
+\end{minipage}\hfill
+\begin{minipage}[c]{0.58\linewidth}
+  {\large
+  \faGlobe~~\texttt{fivucsas.com}\\[3pt]
+  \faUserShield~~\texttt{verify.fivucsas.com}\\[3pt]
+  \faThLarge~~\texttt{app.fivucsas.com}\\[3pt]
+  \faCode~~\texttt{api.fivucsas.com}}
+\end{minipage}
+}
+
+\end{columns}
+
+% =============================== FOOTER STRIP ================================
+\block[bodyinnersep=2mm, bodyverticalshift=0mm]{}{%
+\colorbox{MarmaraNavy}{\parbox{0.985\linewidth}{\centering\color{MarmaraGold}%
+\vspace{2mm}\bfseries\large
+\faGithub~~\texttt{github.com/Rollingcat-Software/FIVUCSAS}
+\quad$\cdot$\quad
+\faGlobe~~\texttt{fivucsas.com}
+\quad$\cdot$\quad
+\faEnvelope~~\texttt{ahmetabdullahgultekin@gmail.com}
+\quad$\cdot$\quad
+Marmara University \, \textbf{2026}\vspace{2mm}}}}
+
+\end{document}
diff --git a/poster/variants/showcase/preview-1.png b/poster/variants/showcase/preview-1.png
new file mode 100644
index 0000000..9387cf6
Binary files /dev/null and b/poster/variants/showcase/preview-1.png differ
diff --git a/poster/variants/visual/poster.pdf b/poster/variants/visual/poster.pdf
new file mode 100644
index 0000000..c421601
Binary files /dev/null and b/poster/variants/visual/poster.pdf differ
diff --git a/poster/variants/visual/poster.tex b/poster/variants/visual/poster.tex
new file mode 100644
index 0000000..0ec29c4
--- /dev/null
+++ b/poster/variants/visual/poster.tex
@@ -0,0 +1,397 @@
+% =============================================================================
+%  FIVUCSAS  —  CSE4198 Engineering Project Poster  —  VISUAL variant
+%  Marmara University, Department of Computer Engineering — Spring 2025-2026
+%
+%  Design goal: image / icon driven, minimum text. Every block leads with a
+%  picture; words are reduced to short captions.
+%
+%  Visual assets:
+%    assets/icons/*.pdf  — OpenMoji colour glyphs (CC BY-SA 4.0, hfg-gmuend/openmoji)
+%                          + Tabler line icons (MIT) for fingerprint / qrcode / usb
+%    assets/logos/*.pdf  — Simple Icons brand marks, brand-coloured
+%    assets/*.{png,jpg}  — official Marmara University + Faculty crests
+%
+%  Compile:  pdflatex poster.tex && pdflatex poster.tex
+% =============================================================================
+\pdfminorversion=7  % allow inclusion of rsvg-convert PDF/1.7 assets
+\documentclass[a0paper,portrait]{tikzposter}
+\tikzposterlatexaffectionproofoff
+\geometry{paperwidth=841mm,paperheight=1189mm}
+
+% ---------- Packages ---------------------------------------------------------
+\usepackage[utf8]{inputenc}
+\usepackage[T1]{fontenc}
+\usepackage{lmodern}
+\usepackage{microtype}
+\usepackage{graphicx}
+\graphicspath{{./}{../../assets/}{../../assets/icons/}{../../assets/logos/}}
+\usepackage{xcolor}
+\usepackage{amsmath,amssymb}
+\usepackage{fontawesome5}
+\usepackage{qrcode}
+\usepackage{tikz}
+\usetikzlibrary{shapes.geometric,shapes.misc,arrows.meta,positioning,calc,fit,backgrounds,decorations.pathreplacing,patterns}
+
+% ---------- Marmara palette --------------------------------------------------
+\definecolor{MarmaraNavy}{HTML}{0B2545}
+\definecolor{MarmaraBlue}{HTML}{13315C}
+\definecolor{MarmaraTeal}{HTML}{1E96A8}
+\definecolor{MarmaraGold}{HTML}{F4B400}
+\definecolor{MarmaraGray}{HTML}{E9ECEF}
+\definecolor{MarmaraInk}{HTML}{1B1F23}
+\definecolor{MarmaraSubtle}{HTML}{F6F8FB}
+\definecolor{Spoof}{HTML}{C0392B}
+\definecolor{Live}{HTML}{27AE60}
+
+% ---------- Theme ------------------------------------------------------------
+\definelayouttheme{MarmaraCSE}{
+  \usecolorstyle[colorPalette=MarmaraStyle]{Default}
+  \usebackgroundstyle{Default}
+  \usetitlestyle{Filled}
+  \useblockstyle{Default}
+  \useinnerblockstyle{Default}
+  \usenotestyle{Default}
+}
+\definecolorpalette{MarmaraStyle}{
+  \definecolor{colorOne}{named}{MarmaraNavy}
+  \definecolor{colorTwo}{named}{MarmaraBlue}
+  \definecolor{colorThree}{named}{MarmaraTeal}
+}
+\usetheme{MarmaraCSE}
+\colorlet{backgroundcolor}{MarmaraSubtle}
+\colorlet{framecolor}{MarmaraNavy}
+\colorlet{titlefgcolor}{white}
+\colorlet{titlebgcolor}{MarmaraNavy}
+\colorlet{blocktitlebgcolor}{MarmaraBlue}
+\colorlet{blocktitlefgcolor}{white}
+\colorlet{blockbodybgcolor}{white}
+\colorlet{blockbodyfgcolor}{MarmaraInk}
+\colorlet{innerblocktitlebgcolor}{MarmaraTeal}
+\colorlet{innerblocktitlefgcolor}{white}
+
+% ---------- Asset helpers ----------------------------------------------------
+\newcommand{\ic}[2][3.2cm]{\raisebox{-0.15\height}{\includegraphics[height=#1,keepaspectratio]{#2}}}
+\newcommand{\logo}[2][3cm]{\raisebox{-0.15\height}{\includegraphics[height=#1,keepaspectratio]{#2}}}
+\newcommand{\unicrest}[1][3cm]{\includegraphics[height=#1,keepaspectratio]{marmara-university.png}}
+\newcommand{\faccrest}[1][3cm]{\includegraphics[height=#1,keepaspectratio]{muhendislik-fakultesi.jpg}}
+
+% Icon tile: glyph above, short label below
+\newcommand{\icontile}[4][MarmaraGray]{% [framecolor] {icon}{label}{fill}
+  \begin{tikzpicture}
+    \node[fill=#4, draw=#1, line width=2.5pt, rounded corners=10pt,
+          minimum width=6.6cm, minimum height=6.6cm, inner sep=0pt] (t) {};
+    \node at ([yshift=8mm]t.center) {\includegraphics[height=3.2cm,keepaspectratio]{#2}};
+    \node[font=\large\bfseries, text=MarmaraInk] at ([yshift=-21mm]t.center) {#3};
+  \end{tikzpicture}}
+
+% ---------- Header info ------------------------------------------------------
+\title{\parbox{0.97\linewidth}{\centering
+  \begin{minipage}[c]{0.13\linewidth}\centering\unicrest[5.4cm]\end{minipage}\hfill
+  \begin{minipage}[c]{0.70\linewidth}\centering
+    {\fontsize{96}{100}\selectfont\bfseries FIVUCSAS}\\[0.18em]
+    {\LARGE Biometric identity verification, as a cloud service}\\[0.30em]
+    {\Large\textsl{Active-liveness anti-spoofing\ \ $\cdot$\ \ ten composable auth factors\ \ $\cdot$\ \ multi-tenant SaaS}}
+  \end{minipage}\hfill
+  \begin{minipage}[c]{0.13\linewidth}\centering\faccrest[5.6cm]\end{minipage}
+}}
+
+\author{%
+  \large \textbf{Ahmet Abdullah Gültekin} \quad
+  \textbf{Ayşe Gülsüm Eren} \quad
+  \textbf{Ayşenur Arıcı}\\[0.20em]
+  \large \textbf{Advisor:} Assoc.\ Prof.\ Dr.\ Mustafa Ağaoğlu \, $\cdot$ \,
+  CSE4197 / CSE4198 \, $\cdot$ \, Spring 2025--2026}
+\institute{Marmara University \, $\cdot$ \, Faculty of Engineering \, $\cdot$ \, Department of Computer Engineering}
+
+% =============================================================================
+\begin{document}
+\maketitle[width=\paperwidth, titletotopverticalspace=6mm]
+
+% =================== KPI STRIP — three icons, three numbers ==================
+\block[bodyoffsety=-15mm, bodyinnersep=6mm]{}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  % --- group 1 : 0% ---
+  \node at (-32,0) {\ic[5.6cm]{shield}};
+  \node[font=\fontsize{80}{80}\selectfont\bfseries, text=Live, anchor=west]      at (-28.3,1.4) {0\,\%};
+  \node[font=\Large\bfseries, text=MarmaraInk, anchor=west]                      at (-28.3,-1.1) {replay attacks blocked};
+  \node[font=\large, text=gray, anchor=west]                                    at (-28.3,-2.7) {0 / 120 recorded-video attempts};
+  % --- group 2 : <1s ---
+  \node at (-7,0) {\ic[5.6cm]{stopwatch}};
+  \node[font=\fontsize{80}{80}\selectfont\bfseries, text=MarmaraTeal, anchor=west] at (-3.3,1.4) {<\,1\,s};
+  \node[font=\Large\bfseries, text=MarmaraInk, anchor=west]                        at (-3.3,-1.1) {end-to-end face verification};
+  \node[font=\large, text=gray, anchor=west]                                      at (-3.3,-2.7) {P95 = 950\,ms on a commodity CPU};
+  % --- group 3 : 10 ---
+  \node at (18,0) {\ic[5.6cm]{puzzle}};
+  \node[font=\fontsize{80}{80}\selectfont\bfseries, text=MarmaraGold, anchor=west] at (21.7,1.4) {10};
+  \node[font=\Large\bfseries, text=MarmaraInk, anchor=west]                        at (21.7,-1.1) {composable auth factors};
+  \node[font=\large, text=gray, anchor=west]                                      at (21.7,-2.7) {any subset $\to$ a tenant MFA flow};
+  % dividers
+  \draw[draw=MarmaraGray, line width=1.4pt] (-12.2,-3.4) -- (-12.2,3.0);
+  \draw[draw=MarmaraGray, line width=1.4pt] ( 13.2,-3.4) -- ( 13.2,3.0);
+\end{tikzpicture}}
+
+% =================== HERO — 3-step pipeline, picture driven ==================
+\block[titleoffsety=-12mm, bodyinnersep=7mm]
+{\faEye~~How it works\,---\,capture, challenge, verdict}{%
+\centering
+\begin{tikzpicture}[every node/.style={font=\large}]
+
+% ---- STEP 1 : capture ----
+\begin{scope}[shift={(-21,0)}]
+  \draw[fill=MarmaraNavy, draw=MarmaraNavy, rounded corners=10pt] (-6.6,-6.4) rectangle (6.6,6.4);
+  \draw[fill=white, draw=none, rounded corners=6pt] (-6.0,-4.6) rectangle (6.0,5.6);
+  \fill[MarmaraGray] (0,0.7) ellipse (3.2 and 4.1);
+  \foreach \x/\y in {-2.8/-1.6,-2.5/-2.6,-2.0/-3.4,-1.2/-3.9,-0.3/-4.0,0.3/-4.0,1.2/-3.9,2.0/-3.4,2.5/-2.6,2.8/-1.6,
+    -1.7/1.7,-1.3/1.9,-0.9/1.7, 0.9/1.7,1.3/1.9,1.7/1.7,
+    -1.9/2.5,-1.3/2.6, 1.3/2.6,1.9/2.5,
+    0/1.0,0/0.4,0/-0.2,-0.4/-0.6,0.4/-0.6,
+    -1.1/-1.7,-0.4/-1.9,0.4/-1.9,1.1/-1.7,0/-1.85,0/-2.3,
+    -2.5/0.4,2.5/0.4,-2.7/1.4,2.7/1.4,-1.2/3.4,0/3.6,1.2/3.4}
+    {\fill[MarmaraTeal] (\x,\y) circle (0.10);}
+  \draw[MarmaraGold,line width=2pt] (-1.7,1.7) .. controls (-1.3,2.1) and (-0.9,2.1) .. (-0.9,1.7)
+        .. controls (-1.3,1.4) and (-1.7,1.4) .. (-1.7,1.7);
+  \draw[MarmaraGold,line width=2pt] (0.9,1.7) .. controls (1.3,2.1) and (1.7,2.1) .. (1.7,1.7)
+        .. controls (1.3,1.4) and (0.9,1.4) .. (0.9,1.7);
+  \node[fill=MarmaraNavy, text=MarmaraGold, font=\Large\bfseries, rounded corners=4pt, inner sep=4pt] at (3.9,4.9) {\faClock~2.1\,s};
+  \node at (-3.9,4.8) {\ic[1.5cm]{camera}};
+  \node[fill=MarmaraGold, text=MarmaraNavy, font=\LARGE\bfseries, rounded corners=6pt, minimum width=9cm, minimum height=1.3cm] at (0,-5.2) {\faEye~~BLINK NOW};
+\end{scope}
+
+% ---- STEP 2 : random challenge ----
+\begin{scope}[shift={(0,0)}]
+  \node[font=\large\bfseries, text=MarmaraInk] at (0,5.5) {random 3--5 step action set};
+  \node[fill=Live, rounded corners=8pt, minimum width=2.9cm, minimum height=2.9cm] (c1) at (-4.7,3.6) {};
+  \node at (-4.7,3.6) {\ic[1.7cm]{grinface}};
+  \node[fill=Live, rounded corners=8pt, minimum width=2.9cm, minimum height=2.9cm] (c2) at (-1.55,3.6) {};
+  \node at (-1.55,3.6) {\ic[1.7cm]{eye}};
+  \node[fill=MarmaraGold, rounded corners=8pt, minimum width=2.9cm, minimum height=2.9cm] (c3) at (1.6,3.6) {};
+  \node at (1.6,3.6) {\ic[1.7cm]{pointup}};
+  \node[fill=MarmaraGray, rounded corners=8pt, minimum width=2.9cm, minimum height=2.9cm] (c4) at (4.75,3.6) {};
+  \node at (4.75,3.6) {\ic[1.7cm]{speaker}};
+  \foreach \a/\b in {c1/c2,c2/c3,c3/c4}{\draw[-Latex,line width=2pt,MarmaraNavy] (\a) -- (\b);}
+  % EAR sparkline — scaled tall so it anchors the panel at y=0
+  \node[font=\large\bfseries, text=MarmaraInk] at (0,1.7) {Eye-Aspect-Ratio over 60 frames};
+  \def\xo{-6}\def\yo{-4.6}\def\ys{1.5}
+  \draw[MarmaraNavy,line width=0.6pt] (\xo,\yo) -- (\xo+12,\yo) (\xo,\yo) -- (\xo,{\yo+3.4*\ys});
+  \draw[Spoof,dashed,line width=0.8pt] (\xo,{\yo+1.35*\ys}) -- (\xo+12,{\yo+1.35*\ys});
+  \node[font=\small,text=Spoof,anchor=west] at (\xo+0.2,{\yo+1.72*\ys}) {blink threshold};
+  \draw[MarmaraTeal,line width=2.4pt] plot coordinates {
+    (\xo+0,{\yo+2.6*\ys}) (\xo+0.8,{\yo+2.6*\ys}) (\xo+1.6,{\yo+2.5*\ys}) (\xo+2.4,{\yo+2.6*\ys})
+    (\xo+3.2,{\yo+2.6*\ys}) (\xo+4.0,{\yo+2.5*\ys}) (\xo+4.8,{\yo+2.4*\ys}) (\xo+5.6,{\yo+1.7*\ys})
+    (\xo+6.0,{\yo+0.7*\ys}) (\xo+6.4,{\yo+1.6*\ys}) (\xo+7.2,{\yo+2.5*\ys}) (\xo+8.0,{\yo+2.6*\ys})
+    (\xo+8.4,{\yo+1.6*\ys}) (\xo+8.8,{\yo+0.7*\ys}) (\xo+9.2,{\yo+1.7*\ys}) (\xo+10.0,{\yo+2.5*\ys})
+    (\xo+11.0,{\yo+2.6*\ys}) (\xo+12.0,{\yo+2.6*\ys})};
+  \node[font=\small,text=MarmaraInk] at (\xo+6.0,{\yo+0.2*\ys}) {blink 1};
+  \node[font=\small,text=MarmaraInk] at (\xo+8.8,{\yo+0.2*\ys}) {blink 2};
+\end{scope}
+
+% ---- STEP 3 : verdict ----
+\begin{scope}[shift={(21,0)}]
+  \draw[fill=Live!8, draw=Live, line width=3pt, rounded corners=12pt] (-6.4,-6.4) rectangle (6.4,6.4);
+  \node at (0,3.2) {\ic[5.0cm]{check}};
+  \node[font=\LARGE\bfseries, text=Live] at (0,0.0) {LIVE \& VERIFIED};
+  \node at (0,-1.9) {\ic[1.6cm]{lock}};
+  \node[font=\large\bfseries, text=MarmaraInk] at (0,-3.2) {AES-128 Fernet encryption};
+  \node[font=\normalsize, text=gray, align=center] at (0,-4.5) {embeddings encrypted at rest\\[-2pt]Postgres $+$ pgvector};
+\end{scope}
+
+% flow arrows + step captions
+\draw[-Latex,line width=3pt,MarmaraNavy] (-13.8,0) -- (-7.6,0);
+\draw[-Latex,line width=3pt,MarmaraNavy] (7.6,0)  -- (13.8,0);
+\node[font=\Large\bfseries, text=MarmaraInk] at (-21,-7.7)
+  {\textcolor{MarmaraGold}{\textbf{1}}\ \ Capture face mesh};
+\node[font=\Large\bfseries, text=MarmaraInk] at (0,-7.7)
+  {\textcolor{MarmaraGold}{\textbf{2}}\ \ Pass the random challenge};
+\node[font=\Large\bfseries, text=MarmaraInk] at (21,-7.7)
+  {\textcolor{MarmaraGold}{\textbf{3}}\ \ Encrypt \& return verdict};
+\end{tikzpicture}}
+
+% ============================ COLUMNS ROW ====================================
+\begin{columns}
+
+% --------------------------- LEFT COLUMN -------------------------------------
+\column{0.34}
+
+\block{\faExclamationTriangle~~The problem}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  \foreach \i/\lbl/\x in {key/passwords/-9.3, phone/SMS OTP/-3.1, masks/deepfake/3.1, video/replay clip/9.3}{
+    \node at (\x,1.7) {\ic[2.8cm]{\i}};
+    \node at (\x+1.0,3.1) {\ic[1.5cm]{cross}};
+    \node[font=\large\bfseries,text=MarmaraInk] at (\x,-0.7) {\lbl};
+  }
+\end{tikzpicture}\\[0.4em]
+{\large One passive signal\,---\,a selfie or a clip\,---\,is all a prepared attacker needs.}
+}
+
+\block{\faProjectDiagram~~Architecture}{%
+\centering
+\begin{tikzpicture}[
+  every node/.style={font=\normalsize, align=center},
+  box/.style={draw=MarmaraBlue, fill=white, rounded corners=6pt, line width=1pt,
+              minimum width=6.4cm, minimum height=3.2cm},
+  ml/.style ={draw=MarmaraTeal, fill=MarmaraTeal!8, rounded corners=6pt, line width=1pt,
+              minimum width=6.4cm, minimum height=3.2cm},
+  gw/.style ={draw=MarmaraGold, fill=MarmaraGold!18, rounded corners=6pt, line width=1.4pt,
+              minimum width=14.6cm, minimum height=2.6cm},
+  arr/.style={-Latex, draw=MarmaraNavy, line width=1.3pt}]
+  \node[box] (web)    at (-5,7)  {\logo[2.0cm]{react}\\[2pt]\textbf{Web}};
+  \node[box] (mob)    at ( 5,7)  {\logo[2.0cm]{kotlin}\\[2pt]\textbf{Mobile / Desktop}};
+  \node[gw]  (gw)     at ( 0,3.4){\logo[1.9cm]{traefikproxy}\quad\textbf{\large API Gateway}};
+  \node[box] (api)    at (-5,-0.6){\logo[2.0cm]{springboot}\\[2pt]\textbf{Identity Core}};
+  \node[ml]  (bio)    at ( 5,-0.6){\logo[2.0cm]{fastapi}\\[2pt]\textbf{Biometric ML}};
+  \node[box] (db)     at (-5,-5.0){\logo[2.0cm]{postgresql}\\[2pt]\textbf{Postgres $+$ pgvector}};
+  \node[box] (redis)  at ( 5,-5.0){\logo[2.0cm]{redis}\\[2pt]\textbf{Redis 7.4}};
+  \draw[arr] (web) -- (gw);  \draw[arr] (mob) -- (gw);
+  \draw[arr] (gw) -- (api);  \draw[arr] (gw) -- (bio);
+  \draw[arr] (api) -- (db);  \draw[arr] (bio) -- (redis);
+  \draw[arr,<->,dashed] (api) -- node[above,font=\small]{API-key} (bio);
+\end{tikzpicture}\\[0.2em]
+{\large Biometric ML has \textbf{no public route}\,---\,private Docker network only.}
+}
+
+\block{\faCogs~~Engineering at a glance}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  \foreach \i/\num/\lbl/\x in {%
+      database/60/Flyway migrations/-9.3,
+      check/1820+/automated tests/-3.1,
+      puzzle/5/Git submodules/3.1,
+      chart/8/architecture ADRs/9.3}{
+    \node at (\x,1.6) {\ic[2.4cm]{\i}};
+    \node[font=\fontsize{30}{30}\selectfont\bfseries, text=MarmaraTeal] at (\x,-0.6) {\num};
+    \node[font=\normalsize\bfseries, text=MarmaraInk] at (\x,-2.0) {\lbl};
+  }
+\end{tikzpicture}
+}
+
+% --------------------------- MIDDLE COLUMN -----------------------------------
+\column{0.32}
+
+\block{\faLayerGroup~~Ten composable auth factors}{%
+\centering
+\icontile{key}{Password}{white}\hfill
+\icontile{email}{Email OTP}{white}\hfill
+\icontile{phone}{SMS OTP}{white}\\[0.45em]
+\icontile{stopwatch}{TOTP}{white}\hfill
+\icontile{qrcode}{QR code}{white}\hfill
+\icontile{usb}{WebAuthn}{white}\\[0.45em]
+\icontile[MarmaraGold]{face}{Face}{MarmaraGold!15}\hfill
+\icontile[MarmaraGold]{speaker}{Voice}{MarmaraGold!15}\hfill
+\icontile[MarmaraGold]{fingerprint}{Fingerprint}{MarmaraGold!15}\\[0.45em]
+\icontile[MarmaraGold]{idcard}{NFC document}{MarmaraGold!15}\hfill
+\begin{tikzpicture}
+  \node[fill=MarmaraNavy, rounded corners=10pt, minimum width=13.7cm, minimum height=6.6cm, inner sep=0pt] (t){};
+  \node at ([xshift=-42mm]t.center) {\ic[3.4cm]{shield}};
+  \node[text=MarmaraGold, font=\Large\bfseries, align=center] at ([xshift=20mm]t.center)
+    {Gold tiles =\\[2pt]active liveness};
+\end{tikzpicture}
+}
+
+\block{\faBalanceScale~~Passive vs.\ active liveness}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  % passive card
+  \node[fill=Spoof!8, draw=Spoof, line width=2.5pt, rounded corners=10pt,
+        minimum width=10.2cm, minimum height=10cm] (p) at (-5.6,0) {};
+  \node[font=\Large\bfseries, text=Spoof] at (-5.6,4.2) {Passive only};
+  \node at (-7.6,2.2) {\ic[2.0cm]{camera}}; \node at (-5.6,2.2){\Large$\to$}; \node at (-3.6,2.2){\ic[1.7cm]{check}};
+  \node at (-7.6,-0.3){\ic[2.0cm]{video}};  \node at (-5.6,-0.3){\Large$\to$};\node at (-3.6,-0.3){\ic[1.7cm]{check}};
+  \node at (-7.6,-2.8){\ic[2.0cm]{masks}};  \node at (-5.6,-2.8){\Large$\to$};\node at (-3.6,-2.8){\ic[1.7cm]{check}};
+  \node[font=\small\bfseries,text=Spoof] at (-5.6,-4.4){photo, clip \& deepfake all \emph{pass}};
+  % active card
+  \node[fill=Live!8, draw=Live, line width=2.5pt, rounded corners=10pt,
+        minimum width=10.2cm, minimum height=10cm] (a) at (5.6,0) {};
+  \node[font=\Large\bfseries, text=Live] at (5.6,4.2) {Active challenge};
+  \node at (3.6,2.2) {\ic[2.0cm]{camera}};  \node at (5.6,2.2){\Large$\to$}; \node at (7.6,2.2){\ic[1.7cm]{cross}};
+  \node at (3.6,-0.3){\ic[2.0cm]{video}};   \node at (5.6,-0.3){\Large$\to$};\node at (7.6,-0.3){\ic[1.7cm]{cross}};
+  \node at (3.6,-2.8){\ic[2.0cm]{masks}};   \node at (5.6,-2.8){\Large$\to$};\node at (7.6,-2.8){\ic[1.7cm]{cross}};
+  \node[font=\small\bfseries,text=Live] at (5.6,-4.4){random sequence \emph{blocks} all three};
+\end{tikzpicture}
+}
+
+% --------------------------- RIGHT COLUMN ------------------------------------
+\column{0.34}
+
+\block{\faStopwatch~~Where the second goes}{%
+\centering
+\begin{tikzpicture}[x=1cm,y=1cm]
+  \node[font=\fontsize{46}{46}\selectfont\bfseries,text=Live] at (10,5.0) {950\,ms};
+  \node[font=\large,text=MarmaraInk] at (10,3.4) {end-to-end P95 face verification, single CPU server};
+  % segments: detection 120, mesh 180, embed 240, spoof 210, search 200 (sum 950)
+  \definecolor{s1}{HTML}{1E96A8}\definecolor{s2}{HTML}{13315C}
+  \definecolor{s3}{HTML}{F4B400}\definecolor{s4}{HTML}{C0392B}\definecolor{s5}{HTML}{27AE60}
+  \fill[s1] (0,0)      rectangle (2.526,2.4);
+  \fill[s2] (2.526,0)  rectangle (6.316,2.4);
+  \fill[s3] (6.316,0)  rectangle (11.368,2.4);
+  \fill[s4] (11.368,0) rectangle (15.789,2.4);
+  \fill[s5] (15.789,0) rectangle (20,2.4);
+  \draw[MarmaraNavy,line width=1pt] (0,0) rectangle (20,2.4);
+  \node[white,font=\small\bfseries]      at (1.26,1.2){120};
+  \node[white,font=\small\bfseries]      at (4.42,1.2){180};
+  \node[MarmaraInk,font=\small\bfseries] at (8.84,1.2){240};
+  \node[white,font=\small\bfseries]      at (13.58,1.2){210};
+  \node[white,font=\small\bfseries]      at (17.89,1.2){200};
+  % legend with icons
+  \node[anchor=west] at (0.2,-1.1)  {\ic[1.0cm]{magnify}};
+  \node[anchor=west,font=\normalsize] at (1.3,-1.1) {detection};
+  \node[anchor=west] at (7.0,-1.1)  {\ic[1.0cm]{face}};
+  \node[anchor=west,font=\normalsize] at (8.1,-1.1) {face mesh};
+  \node[anchor=west] at (14.0,-1.1) {\ic[1.0cm]{brain}};
+  \node[anchor=west,font=\normalsize] at (15.1,-1.1){embedding};
+  \node[anchor=west] at (0.2,-2.6)  {\ic[1.0cm]{shield}};
+  \node[anchor=west,font=\normalsize] at (1.3,-2.6) {anti-spoof};
+  \node[anchor=west] at (7.0,-2.6)  {\ic[1.0cm]{database}};
+  \node[anchor=west,font=\normalsize] at (8.1,-2.6) {vector search};
+\end{tikzpicture}
+}
+
+\block{\faCheckCircle~~Proven on the live deployment}{%
+\centering
+\begin{tikzpicture}[every node/.style={align=center}]
+  \foreach \i/\num/\lbl/\x in {%
+      check/{0 / 120}/{replay\\false-accepts}/-8.4,
+      check/0.97/{passive-spoof\\AUC}/0,
+      check/1820+/{tests gate\\every PR}/8.4}{
+    \node at (\x,2.0) {\ic[2.3cm]{\i}};
+    \node[font=\fontsize{32}{32}\selectfont\bfseries,text=MarmaraTeal] at (\x,-0.3) {\num};
+    \node[font=\normalsize\bfseries,text=MarmaraInk,align=center] at (\x,-2.0) {\lbl};
+  }
+\end{tikzpicture}
+}
+
+\block{\faMicrochip~~Built with}{%
+\centering
+\logo[2.6cm]{springboot}\hfill\logo[2.6cm]{openjdk}\hfill\logo[2.6cm]{python}\hfill\logo[2.6cm]{fastapi}\\[0.5em]
+\logo[2.6cm]{react}\hfill\logo[2.6cm]{kotlin}\hfill\logo[2.6cm]{mediapipe}\hfill\logo[2.6cm]{docker}\\[0.5em]
+\logo[2.6cm]{postgresql}\hfill\logo[2.6cm]{redis}\hfill\logo[2.6cm]{traefikproxy}\hfill\logo[2.6cm]{githubactions}
+}
+
+\block{\faQrcode~~See it live}{%
+\centering
+\begin{minipage}[c]{0.40\linewidth}\centering
+  \qrcode[height=6.2cm,version=4,level=H]{https://verify.fivucsas.com}
+\end{minipage}\hfill
+\begin{minipage}[c]{0.56\linewidth}\centering
+  \ic[3.4cm]{camera}\\[0.4em]
+  {\LARGE\bfseries Scan to try a verification}\\[0.25em]
+  {\large\texttt{verify.fivucsas.com}}
+\end{minipage}
+}
+
+\end{columns}
+
+% =============================== FOOTER STRIP ================================
+\block[bodyinnersep=2mm, bodyverticalshift=0mm]{}{%
+\colorbox{MarmaraNavy}{\parbox{0.985\linewidth}{\centering\color{MarmaraGold}%
+\vspace{2mm}\bfseries\large
+\faGithub~~\texttt{github.com/Rollingcat-Software/FIVUCSAS}
+\quad$\cdot$\quad
+\faGlobe~~\texttt{fivucsas.com}
+\quad$\cdot$\quad
+\faEnvelope~~\texttt{ahmetabdullahgultekin@gmail.com}
+\quad$\cdot$\quad
+Marmara University \, \textbf{2026}\vspace{2mm}}}}
+
+\end{document}
diff --git a/poster/variants/visual/preview-1.png b/poster/variants/visual/preview-1.png
new file mode 100644
index 0000000..ba38f13
Binary files /dev/null and b/poster/variants/visual/preview-1.png differ
diff --git a/practice-and-test b/practice-and-test
index 8fb3549..5f8a679 160000
--- a/practice-and-test
+++ b/practice-and-test
@@ -1 +1 @@
-Subproject commit 8fb3549274e2d71e9e50bbdf1d2d8b2de5e39cb6
+Subproject commit 5f8a67949fb8088123d51387d58810a91a4b320b
diff --git a/spoof-detector b/spoof-detector
index eb154e3..5049e6d 160000
--- a/spoof-detector
+++ b/spoof-detector
@@ -1 +1 @@
-Subproject commit eb154e30a436ff786654228c8968c84691e2a8e5
+Subproject commit 5049e6d049bd1f417a37831a086ae4d84334de58
diff --git a/verify-widget/html/index.html b/verify-widget/html/index.html
index 1ca6aff..0e2b0d0 100644
--- a/verify-widget/html/index.html
+++ b/verify-widget/html/index.html
@@ -1,36 +1,245 @@
 <!doctype html>
-<html lang="en">
+<html lang="en" data-lang="en">
 <head>
+<style>
+html[data-lang="tr"] [data-en]{ display:none !important; }
+html[data-lang="en"] [data-tr]{ display:none !important; }
+.lang-switch-fix{ position: fixed; top: 14px; right: 14px; z-index: 9999;
+  display:inline-flex; gap:0; border:1px solid rgba(255,255,255,.25); border-radius:99px; padding:2px;
+  background:rgba(15,15,35,.85); }
+.lang-switch-fix button{ background:transparent; border:none; color:rgba(255,255,255,.7); cursor:pointer;
+  font-family: ui-monospace,monospace; font-size:11px; font-weight:600; letter-spacing:.12em;
+  padding:4px 10px; border-radius:99px; }
+.lang-switch-fix button.active{ background:#6366f1; color:#fff; }
+</style>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
-    <meta name="robots" content="noindex, nofollow" />
+    <meta name="robots" content="index, follow" />
+    <meta name="description" content="FIVUCSAS Verify — hosted login page and embeddable auth widget. Face, voice, fingerprint, NFC ID, TOTP, WebAuthn passkeys, SMS/email OTP, OAuth 2.0 / OpenID Connect. Used by tenants to authenticate users without writing biometric or session code." />
+    <meta name="keywords" content="FIVUCSAS, hosted login, auth widget, OAuth 2.0, OpenID Connect, face authentication, biometric authentication, passkey, WebAuthn, NFC ID, MFA" />
+    <link rel="canonical" href="https://verify.fivucsas.com/" />
+
+    <meta property="og:type" content="website" />
+    <meta property="og:url" content="https://verify.fivucsas.com/" />
+    <meta property="og:title" content="FIVUCSAS Verify — hosted login + embeddable auth widget" />
+    <meta property="og:description" content="Hosted login and embeddable auth widget for FIVUCSAS. Face, voice, NFC, passkeys, OAuth 2.0 / OIDC. Multi-factor authentication as a service." />
+    <meta property="og:site_name" content="FIVUCSAS" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="tr_TR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:title" content="FIVUCSAS Verify — hosted login + embeddable auth widget" />
+    <meta name="twitter:description" content="Hosted login and embeddable auth widget for FIVUCSAS. Face, voice, NFC, passkeys, OAuth 2.0 / OIDC." />
+
     <meta http-equiv="Content-Security-Policy" content="
         default-src 'self';
         script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net;
         style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
         font-src 'self' https://fonts.gstatic.com;
         img-src 'self' data: blob: https:;
-        connect-src 'self' https://api.fivucsas.com https://bio.fivucsas.com https://cdn.jsdelivr.net https://storage.googleapis.com https://tfhub.dev https://www.kaggle.com;
+        connect-src 'self' https://api.fivucsas.com https://cdn.jsdelivr.net https://storage.googleapis.com;
         media-src 'self' blob:;
         worker-src 'self' blob:;
         base-uri 'self';
         form-action 'self';
     " />
     <meta http-equiv="Permissions-Policy" content="camera=(self), microphone=(self), geolocation=()" />
-    <title>FIVUCSAS Verify</title>
+    <title>FIVUCSAS Verify — hosted login + embeddable auth widget</title>
+
+    <script type="application/ld+json">
+    {
+      "@context": "https://schema.org",
+      "@type": "SoftwareApplication",
+      "name": "FIVUCSAS Verify",
+      "url": "https://verify.fivucsas.com/",
+      "description": "Hosted login page and embeddable auth widget for FIVUCSAS. Face, voice, NFC, passkeys, OAuth 2.0 / OpenID Connect — multi-factor authentication as a service.",
+      "applicationCategory": "SecurityApplication",
+      "operatingSystem": "Web",
+      "offers": { "@type": "Offer", "price": "0", "priceCurrency": "USD" },
+      "publisher": { "@type": "Organization", "name": "FIVUCSAS", "url": "https://fivucsas.com/" }
+    }
+    </script>
+
     <style>
         /* Minimal reset for iframe embedding */
         *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
         html, body { width: 100%; min-height: 100%; overflow-x: hidden; }
-        body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; }
+        body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: #0e1116; color: #e6edf3; }
+
+        /* Static landing — visible by default for direct visitors + crawlers.
+           Hidden once the React SPA mounts (main.tsx sets data-mounted="true"). */
+        #verify-root[data-mounted="true"] ~ #verify-landing { display: none; }
+
+        #verify-landing {
+            min-height: 100vh;
+            padding: 48px 24px 64px;
+            display: flex; flex-direction: column; align-items: center;
+            background:
+              radial-gradient(900px 540px at 70% 110%, rgba(63, 185, 80, 0.08), transparent 70%),
+              radial-gradient(700px 420px at 12% -10%, rgba(88, 166, 255, 0.10), transparent 70%),
+              #0e1116;
+        }
+        #verify-landing .wrap { width: 100%; max-width: 880px; }
+        #verify-landing .brand { display: flex; align-items: center; gap: 14px; margin-bottom: 32px; }
+        #verify-landing .brand-mark {
+            width: 44px; height: 44px; background: #161b22;
+            border: 1px solid #30363d; border-radius: 11px;
+            display: grid; place-items: center;
+            font-size: 22px; font-weight: 800; color: #58a6ff;
+        }
+        #verify-landing .brand-name { font-size: 22px; font-weight: 800; letter-spacing: -0.02em; }
+        #verify-landing .brand-name .accent { color: #58a6ff; }
+        #verify-landing h1 {
+            font-size: clamp(28px, 5vw, 44px);
+            font-weight: 800; letter-spacing: -0.025em; line-height: 1.1;
+            margin-bottom: 16px;
+        }
+        #verify-landing h1 .accent { color: #58a6ff; }
+        #verify-landing .lede {
+            font-size: 18px; line-height: 1.5; color: #8b949e; max-width: 660px;
+            margin-bottom: 28px;
+        }
+        #verify-landing .cta-row {
+            display: flex; flex-wrap: wrap; gap: 12px; margin-bottom: 40px;
+        }
+        #verify-landing .cta {
+            display: inline-block; padding: 12px 22px; border-radius: 10px;
+            font-size: 15px; font-weight: 600; text-decoration: none;
+            border: 1px solid transparent; transition: opacity 0.15s;
+        }
+        #verify-landing .cta:hover { opacity: 0.85; }
+        #verify-landing .cta-primary { background: #238636; color: #ffffff; border-color: #2ea043; }
+        #verify-landing .cta-secondary { background: #21262d; color: #c9d1d9; border-color: #30363d; }
+
+        #verify-landing .grid {
+            display: grid; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr));
+            gap: 16px; margin-bottom: 40px;
+        }
+        #verify-landing .card {
+            background: #161b22; border: 1px solid #30363d; border-radius: 12px;
+            padding: 20px;
+        }
+        #verify-landing .card h3 { font-size: 16px; margin-bottom: 8px; color: #e6edf3; }
+        #verify-landing .card p { font-size: 14px; line-height: 1.5; color: #8b949e; }
+
+        #verify-landing .methods {
+            display: flex; flex-wrap: wrap; gap: 8px; margin-bottom: 40px;
+        }
+        #verify-landing .pill {
+            font-size: 13px; font-weight: 500; padding: 6px 12px;
+            border-radius: 999px;
+            background: rgba(88,166,255,0.08); color: #58a6ff;
+            border: 1px solid rgba(88,166,255,0.25);
+        }
+        #verify-landing pre {
+            background: #0d1117; border: 1px solid #30363d; border-radius: 10px;
+            padding: 16px; overflow-x: auto;
+            font-family: "SF Mono", "JetBrains Mono", Consolas, monospace;
+            font-size: 13px; line-height: 1.6; color: #c9d1d9;
+            margin-bottom: 32px;
+        }
+        #verify-landing pre .k { color: #ff7b72; }
+        #verify-landing pre .s { color: #a5d6ff; }
+        #verify-landing pre .c { color: #8b949e; }
+        #verify-landing footer {
+            padding-top: 24px; border-top: 1px solid #30363d;
+            font-size: 13px; color: #8b949e; line-height: 1.6;
+        }
+        #verify-landing footer a { color: #58a6ff; text-decoration: none; }
+        #verify-landing footer a:hover { text-decoration: underline; }
     </style>
-  <script type="module" crossorigin src="/assets/index-DGYB7Ly1.js"></script>
+  <script type="module" crossorigin src="/assets/index-Byra9y2i.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-COnpUsM8.js">
-  <link rel="modulepreload" crossorigin href="/assets/mui-vendor-DkSS5YNQ.js">
-  <link rel="modulepreload" crossorigin href="/assets/react-vendor-BkVLglrX.js">
+  <link rel="modulepreload" crossorigin href="/assets/mui-vendor-DBcPUQKw.js">
+  <link rel="modulepreload" crossorigin href="/assets/react-vendor-CQvEWkwi.js">
   <link rel="stylesheet" crossorigin href="/assets/index-Ci_SIW9g.css">
 </head>
 <body>
+    <span class="lang-switch-fix" role="group" aria-label="Language">
+      <button type="button" data-set="tr">TR</button>
+      <button type="button" data-set="en" class="active">EN</button>
+    </span>
+    <script>
+    (function(){
+      var sw = document.querySelector('.lang-switch-fix');
+      var html = document.documentElement;
+      function apply(lang){
+        html.setAttribute('data-lang', lang); html.setAttribute('lang', lang);
+        sw.querySelectorAll('button').forEach(function(b){ b.classList.toggle('active', b.dataset.set === lang); });
+        try { history.replaceState(null,'', lang==='en' ? '#' : '#tr'); } catch(e){}
+      }
+      var initial = (location.hash === '#tr') ? 'tr' : 'en';
+      apply(initial);
+      sw.addEventListener('click', function(e){ var b = e.target.closest('button[data-set]'); if (b) apply(b.dataset.set); });
+    })();
+    </script>
     <div id="verify-root"></div>
+    <main id="verify-landing">
+      <div class="wrap">
+        <div class="brand">
+          <div class="brand-mark">F</div>
+          <div class="brand-name">FIVUCSAS<span class="accent"> Verify</span></div>
+        </div>
+
+        <h1><span data-en>Hosted login and embeddable <span class="accent">auth widget</span> for FIVUCSAS.</span><span data-tr>FIVUCSAS için hosted login ve gömülebilir <span class="accent">auth widget</span>.</span></h1>
+        <p class="lede">
+          Authenticate your users with face, voice, fingerprint, NFC ID, passkeys, TOTP, and OTP — without writing
+          biometric or session code. Drop-in OAuth 2.0 / OpenID Connect for web, mobile, and desktop apps.
+        </p>
+
+        <div class="cta-row">
+          <a class="cta cta-primary" href="/login">Try hosted login</a>
+          <a class="cta cta-secondary" href="https://fivucsas.com/" rel="noopener">Learn about FIVUCSAS</a>
+          <a class="cta cta-secondary" href="https://app.fivucsas.com/" rel="noopener">Dashboard sign-in</a>
+        </div>
+
+        <div class="grid">
+          <div class="card">
+            <h3><span data-en>Hosted login (recommended)</span><span data-tr>Hosted login (önerilen)</span></h3>
+            <p>Redirect users to <code>verify.fivucsas.com/login</code>, get a code back, exchange for tokens. Standard OAuth 2.0 + PKCE.</p>
+          </div>
+          <div class="card">
+            <h3><span data-en>Embeddable widget</span><span data-tr>Gömülebilir widget</span></h3>
+            <p>Iframe-friendly step-up MFA for sensitive actions. Camera, microphone, and WebAuthn delegated to the widget origin.</p>
+          </div>
+          <div class="card">
+            <h3><span data-en>Multi-factor by default</span><span data-tr>Varsayılan çok faktörlü</span></h3>
+            <p>Tenants configure which factors are required per flow. Backend enforces the policy — clients can't downgrade.</p>
+          </div>
+        </div>
+
+        <h2 style="font-size: 18px; margin-bottom: 12px; color: #e6edf3;"><span data-en>10 supported auth methods</span><span data-tr>10 desteklenen auth yöntemi</span></h2>
+        <div class="methods">
+          <span class="pill">PASSWORD</span>
+          <span class="pill">EMAIL_OTP</span>
+          <span class="pill">SMS_OTP</span>
+          <span class="pill">TOTP</span>
+          <span class="pill">FACE</span>
+          <span class="pill">VOICE</span>
+          <span class="pill">FINGERPRINT</span>
+          <span class="pill">HARDWARE_KEY</span>
+          <span class="pill">QR_CODE</span>
+          <span class="pill">NFC_DOCUMENT</span>
+        </div>
+
+        <h2 style="font-size: 18px; margin-bottom: 12px; color: #e6edf3;"><span data-en>Integrate in three lines</span><span data-tr>Üç satırda entegrasyon</span></h2>
+        <pre><span class="c">// Web (loadFivucsasAuth from https://verify.fivucsas.com/fivucsas-auth.esm.js)</span>
+<span class="k">const</span> auth = <span class="k">await</span> loadFivucsasAuth({ apiBaseUrl: <span class="s">"https://api.fivucsas.com"</span> });
+<span class="k">await</span> auth.loginRedirect({ clientId: <span class="s">"YOUR_CLIENT_ID"</span>, redirectUri: <span class="s">"https://your-app.com/callback"</span> });
+<span class="c">// User lands back at redirectUri with ?code=… — exchange at /oauth2/token.</span></pre>
+
+        <footer>
+          <p>
+            <strong style="color:#e6edf3;">Direct here without an auth flow?</strong>
+            You probably came from a tenant integration that hasn't started the flow yet, or you're a developer evaluating FIVUCSAS.
+            See <a href="https://fivucsas.com/" rel="noopener">fivucsas.com</a> for the product, or
+            <a href="https://amispoof.fivucsas.com/" rel="noopener">amispoof.fivucsas.com</a> for the browser-side anti-spoof tester.
+          </p>
+          <p style="margin-top: 12px;">
+            FIVUCSAS · multi-tenant biometric authentication platform · operated from Türkiye.
+            Operator: <a href="mailto:rollingcat.help@gmail.com">rollingcat.help@gmail.com</a>.
+          </p>
+        </footer>
+      </div>
+    </main>
 </body>
 </html>