docs: publish verified navigation source and portable evidence

.gitattributes

@@ -1,4 +1,5 @@
 * text=auto eol=lf
+
 *.rs text eol=lf
 *.toml text eol=lf
 *.lock text eol=lf
@@ -89,3 +90,7 @@ harness/experiments/analysis-source-s2a-windows-20260913/** -text whitespace=-bl
 
 # Preserve the pinned Iced dependency bytes and upstream manifest.
 crates/vendor/iced_widget/** -text whitespace=cr-at-eol
+
+# Final overrides preserve original validation bytes after generic text rules.
+harness/experiments/navigation-validation-20261002/** -text whitespace=-blank-at-eol,-blank-at-eof,cr-at-eol
+harness/reviews/navigation-validation-packet-20261002/** -text whitespace=-blank-at-eol,-blank-at-eof,cr-at-eol

crates/oa-core/src/language.rs

@@ -340,6 +340,18 @@ pub(crate) fn diagnostic(source: &str, error: Error) -> Diagnostic {
         },
     }
 }
+pub(crate) fn diagnostic_with_issue(
+    source: &str,
+    error: Error,
+    issue: Option<validation::Issue>,
+) -> Diagnostic {
+    let mut result = diagnostic(source, error);
+    if let Some(issue) = issue {
+        result.object_id = issue.element;
+        result.field = issue.field;
+    }
+    result
+}
 fn reserved(word: &str) -> bool {
     crate::reserved_alias(word)
         || declaration_kind(word).is_some()
@@ -622,6 +634,7 @@ fn parse_document(source: &str, limits: ParseLimits) -> Result<ParsedDocument, V
     if tokens.get(1).is_some_and(|t| t.text(source) == "2") {
         return v2_source::parse(source, tokens, limits);
     }
+    let mut migration_issue = None;
     Parser {
         source,
         tokens,
@@ -629,8 +642,8 @@ fn parse_document(source: &str, limits: ParseLimits) -> Result<ParsedDocument, V
         value_depth: 0,
         limits,
     }
-    .document()
+    .document(&mut migration_issue)
-    .map_err(|e| vec![diagnostic(source, e)])
+    .map_err(|e| vec![diagnostic_with_issue(source, e, migration_issue)])
 }
 fn offset_for(source: &str, line: usize, column: usize) -> usize {
     let mut offset = 0;
@@ -1449,7 +1462,10 @@ impl Parser<'_> {
             },
         }
     }
-    fn document(&mut self) -> Result<ParsedDocument, Error> {
+    fn document(
+        &mut self,
+        migration_issue: &mut Option<validation::Issue>,
+    ) -> Result<ParsedDocument, Error> {
         let unit = self.unit(true, false)?;
         let header = unit.header.expect("entry header");
         let mut aliases = BTreeMap::from([(header.project.alias.clone(), header.project.id)]);
@@ -1476,9 +1492,14 @@ impl Parser<'_> {
                     .map(|(key, span)| ((d.id, key.clone()), span.start)),
             );
         }
-        let decoded =
+        let decoded = resolve_declarations(
-            resolve_declarations(header.project, &unit.declarations, &aliases, self.limits)
+            header.project,
-                .map_err(|(_, error)| error)?;
+            &unit.declarations,
+            &aliases,
+            self.limits,
+            migration_issue,
+        )
+        .map_err(|(_, error)| error)?;
         Ok(ParsedDocument {
             project: decoded.project,
             migration: decoded.migration,
@@ -1682,6 +1703,7 @@ pub(crate) fn resolve_declarations(
     declarations: &[Declaration],
     aliases: &BTreeMap<String, Id>,
     limits: ParseLimits,
+    migration_issue: &mut Option<validation::Issue>,
 ) -> Result<crate::persistence::DecodeResult, (usize, Error)> {
     let legacy = project.schema_version == 3;
     let mut legacy_elements = serde_json::Map::new();
@@ -1989,6 +2011,38 @@ pub(crate) fn resolve_declarations(
             crate::persistence::migrate_v6(project, limits)
         })
         .map_err(|error| {
+            // These frozen admission checks formerly ran in final validation.
+            // Keep their diagnostic code and reference location after moving
+            // them before schema normalization.
+            if let crate::persistence::FileError::Model { issues, .. } = &error
+                && let Some(issue) = issues.first()
+                && let Some(code) = match issue.code.as_str() {
+                    "diagram_layer" => Some("diagram_layer"),
+                    "view_options" => Some("view_options"),
+                    _ => None,
+                }
+            {
+                let index = issue
+                    .element
+                    .and_then(|id| declarations.iter().position(|d| d.id == id))
+                    .unwrap_or(usize::MAX);
+                let offset = declarations.get(index).map_or(0, |d| {
+                    issue
+                        .field
+                        .as_ref()
+                        .and_then(|field| d.field_spans.get(field))
+                        .map_or(d.offset, |span| span.start)
+                });
+                *migration_issue = Some(issue.clone());
+                return (
+                    index,
+                    Error {
+                        code,
+                        offset,
+                        message: issue.message.clone(),
+                    },
+                );
+            }
             (
                 usize::MAX,
                 Error {

crates/oa-core/src/migration_v4.rs

@@ -69,8 +69,8 @@ impl Project4 {
         }
         crate::persistence::check_pre6_relations(self.relations.values())?;
         crate::persistence::check_pre6_elements(self.elements.values())?;
-        Ok(Project {
+        let mut project = Project {
-            schema_version: SCHEMA_VERSION,
+            schema_version: self.schema_version,
             id: self.id,
             alias: self.alias,
             name: self.name,
@@ -84,7 +84,11 @@ impl Project4 {
                 .into_iter()
                 .map(|(id, trace)| (id, trace.into()))
                 .collect(),
-        })
+        };
+        // Schema3's adapter also enters here, without calling `finish`.
+        crate::persistence::check_pre7_diagram_admission(&project)?;
+        project.schema_version = SCHEMA_VERSION;
+        Ok(project)
     }
 }
 
@@ -104,6 +108,8 @@ pub(crate) fn review_defaults(project: &Project, report: &mut MigrationReport) {
 }
 
 pub(crate) fn finish(mut project: Project, limits: ParseLimits) -> Result<DecodeResult, FileError> {
+    // Source4 enters here directly rather than through `Project4`.
+    crate::persistence::check_pre7_diagram_admission(&project)?;
     crate::persistence::check_pre6_relations(project.relations.values())?;
     crate::persistence::check_pre6_elements(project.elements.values())?;
     project.schema_version = SCHEMA_VERSION;

crates/oa-core/src/persistence.rs

@@ -341,6 +341,50 @@ pub(crate) fn check_pre6_baseline(baseline: &SemanticBaseline) -> Result<(), Fil
     }
     Ok(())
 }
+/// Frozen sources 3–6 admit opposite-layer placements and visibility references
+/// only in Traceability. Check before migration discards the advertised version;
+/// current ordinary projections may retain these records as latent presentation.
+pub(crate) fn check_pre7_diagram_admission(project: &Project) -> Result<(), FileError> {
+    let mut issues = Vec::new();
+    for diagram in project.diagrams.values() {
+        let option_issues = if diagram.projection == ProjectionKind::Traceability {
+            crate::view_options::validate_options_cross_layer(project, &diagram.view_options)
+        } else {
+            crate::view_options::validate_options(project, diagram.layer, &diagram.view_options)
+        };
+        for issue in option_issues {
+            validation::error(
+                &mut issues,
+                diagram.id,
+                "view_options",
+                issue.field,
+                issue.message,
+            );
+        }
+        for node in diagram.nodes.values() {
+            if !project.elements.get(&node.element).is_some_and(|element| {
+                diagram.projection == ProjectionKind::Traceability
+                    || element.layer() == diagram.layer
+            }) {
+                validation::error(
+                    &mut issues,
+                    node.id,
+                    "diagram_layer",
+                    "element",
+                    "Diagram nodes reference existing elements in the selected layer.",
+                );
+            }
+        }
+    }
+    if let Some(issue) = issues.into_iter().next() {
+        return Err(FileError::Model {
+            message: issue.message.clone(),
+            issues: vec![issue],
+        });
+    }
+    Ok(())
+}
+
 pub(crate) fn migrate_v5(
     mut project: Project,
     limits: crate::language::ParseLimits,
@@ -348,6 +392,7 @@ pub(crate) fn migrate_v5(
     if project.schema_version != 5 {
         return Err(FileError::Invalid("Expected schema_version 5.".into()));
     }
+    check_pre7_diagram_admission(&project)?;
     check_pre6_relations(project.relations.values())?;
     check_pre6_elements(project.elements.values())?;
     for baseline in project
@@ -420,6 +465,7 @@ pub(crate) fn migrate_v6(
     if project.schema_version != 6 {
         return Err(FileError::Invalid("Expected schema_version 6.".into()));
     }
+    check_pre7_diagram_admission(&project)?;
     reject_source7_fields(&serde_json::to_value(&project)?).map_err(FileError::Invalid)?;
     limits.check_model(&project).map_err(FileError::Limit)?;
     project.schema_version = SCHEMA_VERSION;

crates/oa-core/src/projection.rs

@@ -85,6 +85,7 @@ pub(crate) fn parents(p: &Project, d: &Diagram) -> BTreeMap<Id, Option<Id>> {
         .filter(|n| {
             p.elements.get(&n.element).is_some_and(|e| {
                 e.kind() != Kind::Port
+                    && (d.projection == ProjectionKind::Traceability || e.layer() == d.layer)
                     && d.projection.includes(e.kind())
                     && d.projection
                         .state_machine()

crates/oa-core/src/session.rs

@@ -589,6 +589,17 @@ fn apply_command(
                 .map(|d| d.id)
                 .ok_or_else(missing)?;
             if source != *diagram {
+                let destination = &p.diagrams[diagram];
+                let element = p.diagrams[&source].nodes[node].element;
+                if destination.projection != ProjectionKind::Traceability
+                    && p.elements
+                        .get(&element)
+                        .is_none_or(|e| e.layer() != destination.layer)
+                {
+                    return Err(ModelError(
+                        "Move the placement to a view in its layer or a traceability view.".into(),
+                    ));
+                }
                 let placement = p
                     .diagrams
                     .get_mut(&source)

crates/oa-core/src/source_project.rs

@@ -573,16 +573,26 @@ fn compile_once(
             span,
         }),
     };
-    let decoded =
+    let mut migration_issue = None;
-        language::resolve_declarations(header.project, &declarations, &aliases, limits.model)
+    let decoded = language::resolve_declarations(
-            .map_err(|(index, error)| {
+        header.project,
-                let path = declaration_paths.get(index).unwrap_or(&bundle.entry);
+        &declarations,
-                vec![SourceDiagnostic {
+        &aliases,
-                    path: path.clone(),
+        limits.model,
-                    diagnostic: language::diagnostic(&bundle.files[path], error),
+        &mut migration_issue,
-                    related: Vec::new(),
+    )
-                }]
+    .map_err(|(index, error)| {
-            })?;
+        let path = declaration_paths.get(index).unwrap_or(&bundle.entry);
+        vec![SourceDiagnostic {
+            path: path.clone(),
+            diagnostic: language::diagnostic_with_issue(
+                &bundle.files[path],
+                error,
+                migration_issue,
+            ),
+            related: Vec::new(),
+        }]
+    })?;
     let diagnostics = model_diagnostics(bundle, &index, &decoded.project);
     let errors: Vec<_> = diagnostics
         .iter()

crates/oa-core/src/validation.rs

@@ -620,11 +620,14 @@ pub fn validate(p: &Project) -> Vec<Issue> {
         text(&mut out, d.id, "name", &d.name);
         text(&mut out, d.id, "description", &d.description);
         crate::scenario_layout::validate_diagram(p, d, &mut out);
-        let option_issues = if d.projection == ProjectionKind::Traceability {
+        // Ordinary projections are reversible filters over the same authored view.
-            crate::view_options::validate_options_cross_layer(p, &d.view_options)
+        // Retain opposite-layer visibility choices when leaving Traceability.
-        } else {
+        let option_issues =
-            crate::view_options::validate_options(p, d.layer, &d.view_options)
+            if d.projection.state_machine().is_none() && d.projection.scenario().is_none() {
-        };
+                crate::view_options::validate_options_cross_layer(p, &d.view_options)
+            } else {
+                crate::view_options::validate_options(p, d.layer, &d.view_options)
+            };
         for issue in option_issues {
             error(&mut out, d.id, "view_options", issue.field, issue.message);
         }
@@ -798,8 +801,10 @@ pub fn validate(p: &Project) -> Vec<Issue> {
                 );
             }
             match p.elements.get(&n.element) {
-                Some(e) if d.projection == ProjectionKind::Traceability || e.layer() == d.layer => {
+                Some(e)
-                }
+                    if (d.projection.state_machine().is_none()
+                        && d.projection.scenario().is_none())
+                        || e.layer() == d.layer => {}
                 _ => error(
                     &mut out,
                     n.id,

crates/oa-core/src/view_options.rs

@@ -218,7 +218,9 @@ pub fn validate_options(p: &Project, layer: Layer, options: &ViewOptions) -> Vec
     validate_options_in(p, Some(layer), options)
 }
 
-/// Traceability views admit references from either architecture layer.
+/// Ordinary saved views retain references from either architecture layer so
+/// projection changes preserve authored visibility choices. Projection decides
+/// which layer is visible; typed State/Scenario views use layer-scoped validation.
 pub fn validate_options_cross_layer(p: &Project, options: &ViewOptions) -> Vec<OptionError> {
     validate_options_in(p, None, options)
 }

crates/oa-core/tests/legacy_diagram_admission.rs

@@ -0,0 +1,205 @@
+//! Current latent presentation must not broaden frozen source/JSON admission.
+use oa_core::{view_options::*, *};
+
+fn legacy_json(project: &Project, version: u32) -> Vec<u8> {
+    let mut value = serde_json::to_value(project).unwrap();
+    value["schema_version"] = version.into();
+    for diagram in value["diagrams"].as_object_mut().unwrap().values_mut() {
+        let fields = diagram.as_object_mut().unwrap();
+        fields.remove("layout");
+        if version < 6 {
+            fields.remove("view_options");
+        }
+    }
+    serde_json::to_vec(&value).unwrap()
+}
+
+fn model_issue(error: persistence::FileError) -> validation::Issue {
+    match error {
+        persistence::FileError::Model { mut issues, .. } => issues.remove(0),
+        other => panic!("Expected a located model issue, got {other:?}"),
+    }
+}
+
+#[test]
+fn frozen_3_through_6_reject_cross_layer_nodes_but_keep_mixed_traceability() {
+    let node_id = Id::parse_str("00000000-0000-4000-8000-000000000004").unwrap();
+    for version in 3..=6 {
+        let source = format!(
+            "arcadia {version}; project compat \"Compatibility\" id \"00000000-0000-4000-8000-000000000001\" {{\n\
+             sa_function work \"Counterpart\" id \"00000000-0000-4000-8000-000000000002\" {{}}\n\
+             diagram view \"OA concern\" id \"00000000-0000-4000-8000-000000000003\" {{ layer Oa; projection Traceability; }}\n\
+             node occurrence id \"00000000-0000-4000-8000-000000000004\" {{ diagram @view; element @work; }}\n}}"
+        );
+        let mixed = language::parse(&source).unwrap();
+        assert_eq!(
+            persistence::decode(&legacy_json(&mixed, version)).unwrap(),
+            mixed
+        );
+
+        let ordinary = source.replace("projection Traceability", "projection Overview");
+        let same_layer = ordinary.replace("layer Oa", "layer Sa");
+        let ordinary_project = language::parse(&same_layer).unwrap();
+        assert_eq!(
+            persistence::decode(&legacy_json(&ordinary_project, version)).unwrap(),
+            ordinary_project
+        );
+        let errors = language::parse(&ordinary).unwrap_err();
+        // Source3 already reported migration errors with the offending location.
+        let code = if version == 3 {
+            "migration_error"
+        } else {
+            "diagram_layer"
+        };
+        assert!(
+            errors.iter().any(|error| error.code == code
+                && error.line == 4
+                && error.message.contains("selected layer")),
+            "{version}: {errors:?}"
+        );
+
+        let mut latent = mixed.clone();
+        let diagram = latent.diagrams.values_mut().next().unwrap();
+        diagram.projection = ProjectionKind::Overview;
+        let node = diagram.nodes.values().next().unwrap().id;
+        assert_eq!(node, node_id);
+        if version >= 4 {
+            let diagnostic = errors
+                .iter()
+                .find(|error| error.code == "diagram_layer")
+                .unwrap();
+            assert_eq!(diagnostic.object_id, Some(node_id));
+            assert_eq!(diagnostic.field.as_deref(), Some("element"));
+            let bundle = source_project::SourceBundle {
+                entry: "model.arcadia".into(),
+                files: std::collections::BTreeMap::from([("model.arcadia".into(), ordinary)]),
+            };
+            let errors =
+                source_project::compile_bundle(&bundle, source_project::ProjectLimits::default())
+                    .unwrap_err();
+            let diagnostic = &errors
+                .iter()
+                .find(|error| error.diagnostic.code == "diagram_layer")
+                .unwrap()
+                .diagnostic;
+            assert_eq!(diagnostic.object_id, Some(node_id));
+            assert_eq!(diagnostic.field.as_deref(), Some("element"));
+        }
+        let issue = model_issue(persistence::decode(&legacy_json(&latent, version)).unwrap_err());
+        assert_eq!(issue.code, "diagram_layer");
+        assert_eq!(issue.element, Some(node));
+        assert_eq!(issue.field.as_deref(), Some("element"));
+        // The exact same record is valid under the current presentation contract.
+        assert_eq!(language::parse(&language::format(&latent)).unwrap(), latent);
+        assert_eq!(
+            persistence::decode(&serde_json::to_vec(&latent).unwrap()).unwrap(),
+            latent
+        );
+        let mut dangling = mixed;
+        dangling
+            .diagrams
+            .values_mut()
+            .next()
+            .unwrap()
+            .nodes
+            .values_mut()
+            .next()
+            .unwrap()
+            .element = Id::parse_str("00000000-0000-4000-8000-000000000005").unwrap();
+        let issue = model_issue(persistence::decode(&legacy_json(&dangling, version)).unwrap_err());
+        assert_eq!(issue.code, "diagram_layer");
+        assert_eq!(issue.element, Some(node));
+        assert_eq!(issue.field.as_deref(), Some("element"));
+    }
+}
+
+#[test]
+fn frozen_6_checks_every_layer_sensitive_saved_selector_before_upgrade() {
+    let mut project = Project::empty();
+    let a = project
+        .add_element(Kind::Activity, Layer::Oa, "A", None)
+        .unwrap();
+    let b = project
+        .add_element(Kind::Activity, Layer::Oa, "B", None)
+        .unwrap();
+    let edge = project.relate(RelationKind::Interaction, "Interaction", a, b);
+    let category = project
+        .add_element(Kind::ExchangeCategory, Layer::Oa, "Work category", None)
+        .unwrap();
+    let participant_category = project
+        .add_element(
+            Kind::ExchangeCategory,
+            Layer::Oa,
+            "Participant category",
+            None,
+        )
+        .unwrap();
+    *project
+        .elements
+        .get_mut(&participant_category)
+        .unwrap()
+        .shared_mut()
+        .unwrap() = SharedBody::ExchangeCategory {
+        family: ExchangeFamily::Participant,
+        exchanges: vec![],
+    };
+    let context = project
+        .add_element(Kind::Process, Layer::Oa, "Process", None)
+        .unwrap();
+    let diagram = project.ensure_diagram(Layer::Sa);
+    for (field, options) in [
+        (
+            "hidden_edges",
+            ViewOptions {
+                hidden_edges: vec![edge],
+                ..Default::default()
+            },
+        ),
+        (
+            "work_categories",
+            ViewOptions {
+                work_categories: CategorySelection::Any(vec![category]),
+                ..Default::default()
+            },
+        ),
+        (
+            "participant_categories",
+            ViewOptions {
+                participant_categories: CategorySelection::Any(vec![participant_category]),
+                ..Default::default()
+            },
+        ),
+        (
+            "work_contexts",
+            ViewOptions {
+                work_contexts: ContextSelection::Any(vec![context]),
+                ..Default::default()
+            },
+        ),
+    ] {
+        project.diagrams.get_mut(&diagram).unwrap().view_options = options;
+        let issue = model_issue(persistence::decode(&legacy_json(&project, 6)).unwrap_err());
+        assert_eq!(issue.code, "view_options");
+        assert_eq!(issue.element, Some(diagram));
+        assert_eq!(issue.field.as_deref(), Some(field));
+        let current_source = language::format(&project);
+        assert_eq!(language::parse(&current_source).unwrap(), project);
+        let source6 = current_source.replacen("arcadia 7;", "arcadia 6;", 1);
+        let errors = language::parse(&source6).unwrap_err();
+        let diagnostic = errors
+            .iter()
+            .find(|error| error.code == "view_options")
+            .unwrap();
+        assert_eq!(diagnostic.object_id, Some(diagram));
+        assert_eq!(diagnostic.field.as_deref(), Some(field));
+
+        project.diagrams.get_mut(&diagram).unwrap().projection = ProjectionKind::Traceability;
+        assert_eq!(
+            persistence::decode(&legacy_json(&project, 6)).unwrap(),
+            project
+        );
+        let source6 = language::format(&project).replacen("arcadia 7;", "arcadia 6;", 1);
+        assert_eq!(language::parse(&source6).unwrap(), project);
+        project.diagrams.get_mut(&diagram).unwrap().projection = ProjectionKind::Overview;
+    }
+}

crates/oa-core/tests/populated_projection_switching.rs

@@ -0,0 +1,304 @@
+//! Populated presentation survives mixed-layer projection switches.
+//! Complements projection_switching.rs without external fixture dependencies.
+use oa_core::{
+    projection::*, routing::route_diagram, source_project::*, view_options::ViewIndex, *,
+};
+
+struct Populated {
+    project: Project,
+    diagram: Id,
+    groups: [Id; 2],
+    children: [[Id; 2]; 2],
+    edges: [Id; 2],
+    ports: [Id; 2],
+    trace: Id,
+}
+
+fn xy(x: f32, y: f32) -> Position {
+    Position { x, y }
+}
+
+fn apply(project: &mut Project, command: Command) {
+    *project = prepare_command(project, &command).unwrap().project;
+}
+
+fn fixture(layer: Layer, collapsed: bool) -> Populated {
+    let mut p = Project::empty();
+    let oa_group = p
+        .add_element(Kind::Activity, Layer::Oa, "Operational response", None)
+        .unwrap();
+    let oa_send = p
+        .add_element(Kind::Activity, Layer::Oa, "Request repair", Some(oa_group))
+        .unwrap();
+    let oa_receive = p
+        .add_element(Kind::Activity, Layer::Oa, "Perform repair", Some(oa_group))
+        .unwrap();
+    let sa_group = p
+        .add_element(Kind::Function, Layer::Sa, "System response", None)
+        .unwrap();
+    let sa_send = p
+        .add_element(Kind::Function, Layer::Sa, "Dispatch repair", Some(sa_group))
+        .unwrap();
+    let sa_receive = p
+        .add_element(Kind::Function, Layer::Sa, "Execute repair", Some(sa_group))
+        .unwrap();
+    let oa_edge = p.relate(
+        RelationKind::Interaction,
+        "Repair request",
+        oa_send,
+        oa_receive,
+    );
+    let sa_edge = p.relate(
+        RelationKind::FunctionalExchange,
+        "Repair dispatch",
+        sa_send,
+        sa_receive,
+    );
+    let RelationBody::FunctionalExchange {
+        source_port,
+        target_port,
+        ..
+    } = p.relations[&sa_edge].body
+    else {
+        unreachable!()
+    };
+    let trace = Id::new_v4();
+    let refinement = Trace {
+        id: trace,
+        alias: p.fresh_alias("dispatch_refinement", "trace", trace),
+        name: "Dispatch refines repair request".into(),
+        description: "Keep this cross-layer trace and its authored route.".into(),
+        oa: oa_send,
+        sa: sa_send,
+        kind: TraceKind::Refinement,
+        baseline: Some(TraceBaseline {
+            oa: p.properties(oa_send).unwrap(),
+            sa: p.properties(sa_send).unwrap(),
+            semantic: None,
+        }),
+    };
+    apply(&mut p, Command::CreateTrace(refinement));
+    let d = p.ensure_diagram(layer);
+    p.diagrams.get_mut(&d).unwrap().projection = ProjectionKind::Traceability;
+    let oa_group_node = p.place(d, oa_group, xy(0., 0.));
+    let oa_send_node = p.place(d, oa_send, xy(40., 120.));
+    let oa_receive_node = p.place(d, oa_receive, xy(360., 120.));
+    let sa_group_node = p.place(d, sa_group, xy(0., 500.));
+    let sa_send_node = p.place(d, sa_send, xy(40., 620.));
+    let sa_receive_node = p.place(d, sa_receive, xy(360., 620.));
+    for (node, port, side, offset) in [
+        (sa_send_node, source_port, PortAnchorSide::Bottom, 0.25),
+        (sa_receive_node, target_port, PortAnchorSide::Top, 0.75),
+    ] {
+        apply(
+            &mut p,
+            Command::SetPortAnchor {
+                diagram: d,
+                node,
+                anchor: PortAnchor { port, side, offset },
+            },
+        );
+    }
+    for (edge, y, port_backed) in [
+        (oa_edge, 260., false),
+        (sa_edge, 860., true),
+        (trace, 420., false),
+    ] {
+        apply(
+            &mut p,
+            Command::SetEdgeRoute {
+                diagram: d,
+                route: EdgeRoute {
+                    edge,
+                    source_attachment: (!port_backed).then_some(EdgeAttachment {
+                        side: PortAnchorSide::Right,
+                        offset: 0.3,
+                    }),
+                    target_attachment: (!port_backed).then_some(EdgeAttachment {
+                        side: PortAnchorSide::Left,
+                        offset: 0.7,
+                    }),
+                    waypoints: vec![xy(680., y), xy(740., y)],
+                    label: Some(EdgeLabel {
+                        fraction: 0.4,
+                        offset: xy(13., -27.),
+                    }),
+                },
+            },
+        );
+    }
+    for node in [oa_group_node, sa_group_node] {
+        let mut placement = p.diagrams[&d].nodes[&node].clone();
+        placement.collapsed = collapsed;
+        placement.size = Size {
+            width: 310.,
+            height: 170.,
+        };
+        apply(
+            &mut p,
+            Command::EditNode {
+                diagram: d,
+                original: node,
+                node: placement,
+            },
+        );
+    }
+    validate_candidate(&p).unwrap();
+    Populated {
+        project: p,
+        diagram: d,
+        groups: [oa_group_node, sa_group_node],
+        children: [
+            [oa_send_node, oa_receive_node],
+            [sa_send_node, sa_receive_node],
+        ],
+        edges: [oa_edge, sa_edge],
+        ports: [source_port, target_port],
+        trace,
+    }
+}
+
+fn assert_round_trips(p: &Project) {
+    assert_eq!(language::parse(&language::format(p)).unwrap(), *p);
+    assert_eq!(
+        persistence::decode(&serde_json::to_vec(p).unwrap()).unwrap(),
+        *p
+    );
+    assert_eq!(
+        compile_bundle(&format_bundle(p), ProjectLimits::default())
+            .unwrap()
+            .decoded
+            .project,
+        *p
+    );
+}
+
+fn assert_layer_only(p: &Project, d: Id, view: &ProjectedView) {
+    let layer = p.diagrams[&d].layer;
+    for node in &view.nodes {
+        assert_eq!(p.elements[&node.element].layer(), layer);
+        if let Some(parent) = node.visual_parent {
+            let parent = view.nodes.iter().find(|n| n.id == parent).unwrap();
+            assert_eq!(p.elements[&parent.element].layer(), layer);
+        }
+    }
+    for port in &view.ports {
+        assert_eq!(p.elements[&port.element].layer(), layer);
+        let owner = view.nodes.iter().find(|n| n.id == port.owner).unwrap();
+        assert_eq!(p.elements[&owner.element].layer(), layer);
+    }
+    for edge in &view.edges {
+        assert!(
+            !edge.trace,
+            "cross-layer trace leaked into ordinary projection"
+        );
+        assert_eq!(p.layer_of(edge.id), Some(layer));
+        for endpoint in [edge.source, edge.target] {
+            let owner = view.nodes.iter().find(|n| n.id == endpoint).unwrap();
+            assert_eq!(p.elements[&owner.element].layer(), layer);
+        }
+        for port in [edge.source_port, edge.target_port].into_iter().flatten() {
+            assert_eq!(p.elements[&port].layer(), layer);
+        }
+    }
+}
+
+#[test]
+fn populated_mixed_projection_switch_conserves_authorship_and_restores_geometry() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        for collapsed in [false, true] {
+            let f = fixture(layer, collapsed);
+            let baseline = &f.project;
+            let d = f.diagram;
+            let before_view = project_view(baseline, d);
+            let before_routes = route_diagram(baseline, &baseline.diagrams[&d], &before_view);
+            // Guard against a vacuous fixture: Traceability deliberately flattens parents.
+            assert_eq!(before_view.nodes.len(), 6);
+            assert!(before_view.nodes.iter().all(|n| n.visual_parent.is_none()));
+            for id in [f.edges[0], f.edges[1], f.trace] {
+                assert!(before_view.edges.iter().any(|e| e.id == id));
+                let route = baseline.diagrams[&d]
+                    .routes
+                    .iter()
+                    .find(|r| r.edge == id)
+                    .unwrap();
+                assert_eq!(route.waypoints.len(), 2);
+                assert!(route.label.is_some());
+            }
+            for port in f.ports {
+                assert!(before_view.ports.iter().any(|p| p.element == port));
+            }
+            assert_round_trips(baseline);
+            for projection in [
+                ProjectionKind::Overview,
+                ProjectionKind::Decomposition,
+                ProjectionKind::Allocation,
+                ProjectionKind::FunctionalDataflow,
+                ProjectionKind::Capabilities,
+            ] {
+                let mut expected = baseline.clone();
+                expected.diagrams.get_mut(&d).unwrap().projection = projection;
+                let mut session = Session::new(baseline.clone());
+                session
+                    .execute(Command::EditDiagram(d, expected.diagrams[&d].clone()))
+                    .unwrap();
+                assert_eq!(session.project(), &expected);
+                assert_round_trips(session.project());
+                let view = project_view(session.project(), d);
+                assert_eq!(
+                    view,
+                    project_view_with_index(&expected, d, &ViewIndex::new(&expected))
+                );
+                assert_layer_only(session.project(), d, &view);
+                if projection == ProjectionKind::Overview {
+                    let own = if layer == Layer::Oa { 0 } else { 1 };
+                    assert!(view.nodes.iter().any(|n| n.id == f.groups[own]));
+                    for child in f.children[own] {
+                        if collapsed {
+                            assert!(!view.nodes.iter().any(|n| n.id == child));
+                        } else {
+                            assert_eq!(
+                                view.nodes
+                                    .iter()
+                                    .find(|n| n.id == child)
+                                    .unwrap()
+                                    .visual_parent,
+                                Some(f.groups[own])
+                            );
+                        }
+                    }
+                    if !collapsed {
+                        assert!(view.edges.iter().any(|e| e.id == f.edges[own]));
+                        if layer == Layer::Sa {
+                            assert_eq!(view.ports.len(), 2);
+                        }
+                    }
+                }
+                session.undo();
+                assert_eq!(session.project(), baseline);
+                assert!(
+                    !session.can_undo(),
+                    "projection change must be one model history step"
+                );
+                assert_round_trips(session.project());
+                session.redo();
+                assert_eq!(session.project(), &expected);
+                session
+                    .execute(Command::EditDiagram(d, baseline.diagrams[&d].clone()))
+                    .unwrap();
+                assert_eq!(session.project(), baseline);
+                let restored = project_view(session.project(), d);
+                assert_eq!(restored, before_view);
+                assert_eq!(
+                    route_diagram(
+                        session.project(),
+                        &session.project().diagrams[&d],
+                        &restored
+                    ),
+                    before_routes
+                );
+                assert_round_trips(session.project());
+            }
+        }
+    }
+}

crates/oa-core/tests/projection_switching.rs

@@ -0,0 +1,156 @@
+use oa_core::{source_project::*, view_options::*, *};
+
+fn fixture(layer: Layer) -> (Project, Id, Id, Id, Id) {
+    let mut p = Project::empty();
+    let oa = p
+        .add_element(Kind::Activity, Layer::Oa, "Assess alarm", None)
+        .unwrap();
+    let oa2 = p
+        .add_element(Kind::Activity, Layer::Oa, "Respond", None)
+        .unwrap();
+    let sa = p
+        .add_element(Kind::Function, Layer::Sa, "Assess alarm", None)
+        .unwrap();
+    let edge = p.relate(RelationKind::Interaction, "Alarm", oa, oa2);
+    let category = p
+        .add_element(Kind::ExchangeCategory, Layer::Oa, "Alarm data", None)
+        .unwrap();
+    *p.elements.get_mut(&category).unwrap().shared_mut().unwrap() = SharedBody::ExchangeCategory {
+        family: ExchangeFamily::Work,
+        exchanges: vec![edge],
+    };
+    let context = p
+        .add_element(Kind::Process, Layer::Oa, "Alarm handling", None)
+        .unwrap();
+    let d = p.ensure_diagram(layer);
+    p.diagrams.get_mut(&d).unwrap().projection = ProjectionKind::Traceability;
+    for (i, element) in [oa, oa2, sa].into_iter().enumerate() {
+        p.place(
+            d,
+            element,
+            Position {
+                x: 300. * i as f32,
+                y: 40.,
+            },
+        );
+    }
+    p.diagrams.get_mut(&d).unwrap().view_options = ViewOptions {
+        hidden_edges: vec![edge],
+        work_categories: CategorySelection::Any(vec![category]),
+        work_contexts: ContextSelection::Any(vec![context]),
+        ..Default::default()
+    };
+    validate_candidate(&p).unwrap();
+    (p, d, oa, sa, category)
+}
+
+#[test]
+fn projection_switching_preserves_complete_model_history_and_all_serializations() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        let (baseline, diagram, _, _, _) = fixture(layer);
+        for projection in [
+            ProjectionKind::Overview,
+            ProjectionKind::Decomposition,
+            ProjectionKind::Allocation,
+            ProjectionKind::FunctionalDataflow,
+            ProjectionKind::Capabilities,
+        ] {
+            let mut expected = baseline.clone();
+            expected.diagrams.get_mut(&diagram).unwrap().projection = projection;
+            let mut session = Session::new(baseline.clone());
+            session
+                .execute(Command::EditDiagram(
+                    diagram,
+                    expected.diagrams[&diagram].clone(),
+                ))
+                .unwrap();
+            assert_eq!(session.project(), &expected);
+            let view = projection::project_view(session.project(), diagram);
+            assert!(
+                view.nodes
+                    .iter()
+                    .all(|n| expected.elements[&n.element].layer() == layer)
+            );
+            assert_eq!(
+                view,
+                projection::project_view_with_index(&expected, diagram, &ViewIndex::new(&expected))
+            );
+            let source = language::format(&expected);
+            assert_eq!(language::parse(&source).unwrap(), expected);
+            assert_eq!(
+                persistence::decode(&serde_json::to_vec(&expected).unwrap()).unwrap(),
+                expected
+            );
+            let bundle = format_bundle(&expected);
+            assert_eq!(
+                compile_bundle(&bundle, ProjectLimits::default())
+                    .unwrap()
+                    .decoded
+                    .project,
+                expected
+            );
+            session.undo();
+            assert_eq!(session.project(), &baseline);
+            assert!(!session.can_undo());
+            session.redo();
+            assert_eq!(session.project(), &expected);
+            session
+                .execute(Command::EditDiagram(
+                    diagram,
+                    baseline.diagrams[&diagram].clone(),
+                ))
+                .unwrap();
+            assert_eq!(session.project(), &baseline);
+            assert_eq!(
+                projection::project_view(session.project(), diagram),
+                projection::project_view(&baseline, diagram)
+            );
+        }
+    }
+}
+
+#[test]
+fn projection_switching_does_not_admit_missing_elements_or_invalid_filter_kinds() {
+    let (mut p, d, oa, _, category) = fixture(Layer::Sa);
+    p.diagrams.get_mut(&d).unwrap().projection = ProjectionKind::Allocation;
+    validate_candidate(&p).unwrap();
+    let valid = p.clone();
+    let node = p.diagrams[&d]
+        .nodes
+        .values()
+        .find(|n| n.element == oa)
+        .unwrap()
+        .id;
+    p.diagrams
+        .get_mut(&d)
+        .unwrap()
+        .nodes
+        .get_mut(&node)
+        .unwrap()
+        .element = Id::new_v4();
+    assert!(validate_candidate(&p).is_err());
+    p = valid.clone();
+    p.diagrams.get_mut(&d).unwrap().view_options.work_categories = CategorySelection::Any(vec![oa]);
+    assert!(validate_candidate(&p).is_err());
+    p = valid;
+    p.elements.remove(&category);
+    assert!(validate_candidate(&p).is_err());
+}
+
+#[test]
+fn projection_switching_keeps_typed_state_membership_strict() {
+    let (mut p, d, _, _, _) = fixture(Layer::Sa);
+    let system = p
+        .add_element(Kind::System, Layer::Sa, "System", None)
+        .unwrap();
+    let machine = p
+        .add_element(Kind::StateMachine, Layer::Sa, "Modes", Some(system))
+        .unwrap();
+    p.diagrams.get_mut(&d).unwrap().projection = ProjectionKind::StateMachine { machine };
+    assert!(
+        validation::validate(&p)
+            .iter()
+            .any(|i| i.code == "state_diagram_member")
+    );
+    assert!(validate_candidate(&p).is_err());
+}

crates/oa-core/tests/source6_view_contract.rs

@@ -67,7 +67,18 @@ fn source6_traceability_default_keeps_both_layers_and_indexed_projection_matches
             .any(|e| e.id == interaction)
     );
     p.diagrams.get_mut(&d).unwrap().projection = ProjectionKind::Overview;
-    assert!(validate_candidate(&p).is_err());
+    validate_candidate(&p).unwrap();
+    let ordinary = projection::project_view_with_index(&p, d, &index);
+    assert!(
+        ordinary
+            .nodes
+            .iter()
+            .all(|n| p.elements[&n.element].layer() == Layer::Oa)
+    );
+    assert!(ordinary.edges.iter().any(|e| e.id == interaction));
+    assert!(!ordinary.edges.iter().any(|e| e.id == fe));
+    assert_eq!(p.diagrams[&d].nodes.len(), 4);
+    assert_eq!(p.diagrams[&d].view_options.hidden_edges, vec![fe]);
     p.diagrams.get_mut(&d).unwrap().projection = ProjectionKind::Traceability;
     p.diagrams.get_mut(&d).unwrap().view_options.relation_kinds = RelationKinds::Only(vec![]);
     assert!(

crates/oa-desktop/src/app.rs

@@ -4,9 +4,11 @@ pub(crate) mod architecture_authoring;
 mod architecture_authoring_tests;
 #[cfg(test)]
 mod behavior_removal_tests;
+#[cfg(test)]
+mod canvas_selection_tests;
 mod checkpoints;
 #[cfg(test)]
-mod context_help_tests;
+mod connection_begin_regressions;
 #[cfg(test)]
 mod diagram_focus_tests;
 pub(crate) mod diagram_removal;
@@ -21,6 +23,8 @@ mod hosted;
 pub(crate) mod multiselect;
 #[cfg(test)]
 mod multiselect_tests;
+#[cfg(test)]
+mod placement_relocation_regressions;
 mod reference_authoring;
 #[cfg(test)]
 mod review_navigation_tests;
@@ -378,15 +382,12 @@ pub enum Message {
     ExactStrings(bool),
     Page(Page),
     Guide(crate::guide::Event),
-    ContextHelp(crate::guide::Topic),
-    CloseContextHelp,
-    ContextHelpScroll(crate::guide::ContextScroll),
-    Help,
     Traceability(crate::views::traceability::Event),
     ReviewLayerTraces,
     Behavior(crate::behavior::Event),
     Layer(Layer),
     Select(Id),
+    CanvasSelect(crate::route_edit::Context, Id),
     EditProperties(Id),
     SelectNode(Id),
     DiagramSelection(multiselect::Event),
@@ -527,7 +528,6 @@ pub struct App {
     /// Home resumes this page; explicit Architecture navigation remains separate.
     last_workspace_page: Page,
     pub guide: crate::guide::State,
-    pub context_help: bool,
     pub traceability: crate::views::traceability::State,
     pub behavior: crate::behavior::State,
     pub data_state: crate::data_view::State,
@@ -650,7 +650,6 @@ impl App {
             page: Page::Diagram,
             last_workspace_page: Page::Diagram,
             guide: crate::guide::State::default(),
-            context_help: false,
             traceability: Default::default(),
             behavior: Default::default(),
             data_state: Default::default(),
@@ -955,6 +954,16 @@ impl App {
             return true;
         }
         let original = self.selected;
+        let canvas_surface = self.architecture_surface();
+        let placement_owner = self.draft.as_ref().and_then(|draft| match draft.kind {
+            crate::forms::RecordKind::Node(owner) => self
+                .project()
+                .diagrams
+                .get(&owner)
+                .filter(|diagram| diagram.nodes.contains_key(&draft.original))
+                .map(|diagram| diagram.id),
+            _ => None,
+        });
         let result = self
             .draft
             .as_ref()
@@ -1009,13 +1018,16 @@ impl App {
                 if let Some(layer) = self.project().layer_of(id) {
                     self.layer = layer;
                 }
-                if let Some((diagram, layer, node)) = self
+                let selected_surface = self
                     .project()
                     .diagrams
                     .values()
                     .find(|d| d.id == id || d.nodes.contains_key(&id))
-                    .map(|d| (d.id, d.layer, d.nodes.contains_key(&id).then_some(id)))
+                    .map(|d| (d.id, d.layer, d.nodes.contains_key(&id).then_some(id)));
-                {
+                let relocated_placement = placement_owner
+                    .zip(selected_surface.and_then(|(diagram, _, node)| node.map(|_| diagram)))
+                    .is_some_and(|(before, after)| before != after);
+                if let Some((diagram, layer, node)) = selected_surface {
                     self.layer = layer;
                     if self.page == Page::Behavior
                         && let Some(machine) =
@@ -1029,6 +1041,20 @@ impl App {
                         self.selected_node = node;
                     }
                 }
+                // Ordinary Properties edits retain their saved architecture view.
+                // Follow an explicitly edited diagram identity/layer, never an
+                // inferred replacement for an unrelated queued canvas click.
+                // An accepted placement move explicitly chooses its new view.
+                // Same-owner edits (including a new UUID) still retain inspection.
+                if !relocated_placement && let Some((diagram, _, _)) = canvas_surface {
+                    let diagram = if diagram == original { id } else { diagram };
+                    if let Some(view) = self.project().diagrams.get(&diagram)
+                        && view.projection.is_architecture()
+                    {
+                        self.layer = view.layer;
+                        self.active_diagram = Some(diagram);
+                    }
+                }
                 self.sync();
                 self.status = "Properties applied".into();
                 true
@@ -1179,7 +1205,13 @@ impl App {
         if id != self.selected {
             self.selected_attachment = None;
         }
-        if self.selected == id && !process_preview {
+        if self.selected == id
+            && !process_preview
+            && self
+                .project()
+                .layer_of(id)
+                .is_none_or(|layer| layer == self.layer)
+        {
             return;
         }
         if !self.apply() {
@@ -1225,6 +1257,59 @@ impl App {
         }
         self.refresh_draft();
     }
+    /// The saved architecture surface, independent of the Inspector's object.
+    fn architecture_surface(&self) -> Option<(Id, Layer, ProjectionKind)> {
+        if self.page != Page::Diagram {
+            return None;
+        }
+        let diagram = self.project().diagrams.get(&self.active_diagram?)?;
+        diagram.projection.is_architecture().then_some((
+            diagram.id,
+            diagram.layer,
+            diagram.projection,
+        ))
+    }
+    fn canvas_target_visible(&self, diagram: Id, id: Id) -> bool {
+        let view = project_view(self.project(), diagram);
+        view.nodes
+            .iter()
+            .any(|node| node.id == id || node.element == id)
+            || view.ports.iter().any(|port| port.element == id)
+            || view.edges.iter().any(|edge| edge.id == id)
+    }
+    /// Inspect a contextual target without following its model layer. An edit
+    /// may invalidate a previously visible occurrence; accept the edit but
+    /// refuse that old hit. Invisible Show-in-view targets remain intentional.
+    fn inspect_canvas_target(&mut self, id: Id) -> bool {
+        if self.selected == id {
+            return true;
+        }
+        let surface = self.architecture_surface();
+        let accepted_draft = self.draft_dirty();
+        let was_visible = accepted_draft
+            && surface.is_some_and(|(diagram, _, _)| self.canvas_target_visible(diagram, id));
+        if !self.project().contains(id) || !self.apply() {
+            return false;
+        }
+        if !self.project().contains(id)
+            || (was_visible
+                && (self.architecture_surface() != surface
+                    || !surface
+                        .is_some_and(|(diagram, _, _)| self.canvas_target_visible(diagram, id))))
+        {
+            if accepted_draft {
+                self.status =
+                    "Properties applied. The view changed; select a visible target again.".into();
+            }
+            return false;
+        }
+        self.selected = id;
+        self.selected_node = None;
+        self.selected_attachment = None;
+        self.selected_bend = None;
+        self.refresh_draft();
+        true
+    }
     fn reveal_explorer_selection(&mut self) {
         if let Some(group) = self.explorer_index.group(self.selected) {
             self.explorer_groups_collapsed.remove(&group);
@@ -1302,11 +1387,6 @@ impl App {
             iced::time::every(std::time::Duration::from_secs(10)).map(|_| Message::CheckpointTick),
             window::close_requests().map(|id| Message::Request(Pending::Close(id))),
             window::resize_events().map(|(_, size)| Message::WindowResized(size)),
-            if self.context_help {
-                iced::event::listen_with(crate::guide::context_scroll_key)
-            } else {
-                Subscription::none()
-            },
             iced::event::listen_with(|event, _, _| {
                 matches!(
                     event,
@@ -1333,7 +1413,7 @@ impl App {
                     return Some(Message::Escape);
                 }
                 if key == keyboard::Key::Named(keyboard::key::Named::F1) {
-                    return Some(Message::Help);
+                    return Some(Message::Page(Page::Guide));
                 }
                 if key == keyboard::Key::Named(keyboard::key::Named::F3) {
                     return Some(Message::SourceNavigation(
@@ -1361,55 +1441,6 @@ impl App {
         ])
     }
     pub fn update(&mut self, message: Message) -> Task<Message> {
-        if let Message::ContextHelpScroll(scroll) = message {
-            return if self.context_help {
-                crate::guide::context_scroll_task(scroll)
-            } else {
-                Task::none()
-            };
-        }
-        // Help owns user input before any canvas/reference fast path can act.
-        // Passive results may finish; they retain their normal lifetime checks.
-        if self.context_help
-            && !matches!(
-                message,
-                Message::Guide(_)
-                    | Message::CloseContextHelp
-                    | Message::Escape
-                    | Message::Request(Pending::Close(_))
-                    | Message::CheckpointWritten(..)
-                    | Message::CheckpointTick
-                    | Message::CheckpointLoaded(..)
-                    | Message::WindowResized(_)
-                    | Message::CanvasResized(_)
-                    | Message::DiagramRevealViewport(..)
-                    | Message::SourceViewport(_)
-                    | Message::Lint(_)
-                    | Message::Linted(..)
-                    | Message::Saved(_)
-                    | Message::Hosted(crate::hosted::Event::Completed(..))
-                    | Message::Loaded(_)
-                    | Message::IncludesLoaded(..)
-                    | Message::SavePath(_)
-                    | Message::SourceRecovered(_)
-                    | Message::Exported(_)
-                    | Message::SourceSymbolsReady(_)
-                    | Message::SourceRenameReady(_)
-                    | Message::DiagramUsagesReady(_)
-                    | Message::ScenarioCanvas(
-                        behavior::scenario::CanvasEvent::Scrolled(..)
-                            | behavior::scenario::CanvasEvent::Restored(..)
-                            | behavior::scenario::CanvasEvent::Viewport(..)
-                    )
-                    | Message::TopologyCanvas(
-                        behavior::topology::CanvasEvent::Scrolled(..)
-                            | behavior::topology::CanvasEvent::Viewport(..)
-                    )
-                    | Message::StateDiagram(behavior::state_edit::Event::Viewport(..))
-            )
-        {
-            return Task::none();
-        }
         let preview_read_only = self.process_preview_primary().is_some();
         let selection_boundary = self.multiselect_boundary();
         // Reject delayed gestures before they can retire newer input ownership.
@@ -1425,6 +1456,11 @@ impl App {
         {
             return Task::none();
         }
+        if let Message::CanvasSelect(captured, _) = &message
+            && (self.page != Page::Diagram || self.route_context() != Some(*captured))
+        {
+            return Task::none();
+        }
         // Selection can change without advancing the captured canvas context.
         if let Message::Route(
             crate::route_edit::Event::Commit(captured, changed, ..)
@@ -1962,10 +1998,6 @@ impl App {
             message,
             Message::Escape | Message::Request(Pending::Close(_))
         ) {
-            if self.context_help {
-                self.context_help = false;
-                return Task::none();
-            }
             if self.hosted.visible {
                 self.hosted.visible = false;
                 return Task::none();
@@ -2157,7 +2189,6 @@ impl App {
     }
     pub(crate) fn scenario_focus_owner(&self) -> Option<crate::behavior::scenario::focus::Stamp> {
         if self.busy
-            || self.context_help
             || self.hosted.visible
             || self.workflow.is_some()
             || self.architecture.is_some()
@@ -2185,6 +2216,7 @@ impl App {
             Message::Command(Command::Layout(diagram)) => self.saved_scenario_diagram(*diagram),
             Message::Projection(projection) => active || projection.scenario().is_some(),
             Message::SelectNode(_)
+            | Message::CanvasSelect(..)
             | Message::PlaceSelected
             | Message::HideSelected
             | Message::ToggleCollapse
@@ -2785,10 +2817,26 @@ impl App {
                                         e.kind() != Kind::Port && d.projection.includes(e.kind())
                                     })
                         });
-                if show_in_mixed_view {
+                // Draw acts on the visible current view even when opened from
-                    self.selected = menu.request.object;
+                // Explorer; explicit Select/Open actions still navigate.
-                    self.selected_attachment = None;
+                let draw_in_current_view = match &*action {
-                    self.refresh_draft();
+                    Message::Connection(crate::connection_edit::Event::Begin(tool, source)) => {
+                        *source == menu.request.object
+                            && self.active_diagram.is_some_and(|diagram| {
+                                crate::connection_edit::can_begin(
+                                    self.project(),
+                                    diagram,
+                                    *tool,
+                                    *source,
+                                )
+                            })
+                    }
+                    _ => false,
+                };
+                if show_in_mixed_view || draw_in_current_view || menu.request.canvas.is_some() {
+                    if !self.inspect_canvas_target(menu.request.object) {
+                        return Task::none();
+                    }
                 } else {
                     self.select(menu.request.object);
                 }
@@ -2800,7 +2848,15 @@ impl App {
                 }
                 self.reconcile_multiselect();
                 self.selected_bend = menu.request.bend.map(|i| (menu.request.object, i));
-                return self.update(*action);
+                let action = match *action {
+                    Message::EditProperties(id)
+                        if menu.request.canvas.is_some() && id == menu.request.object =>
+                    {
+                        Message::InspectorTab(crate::navigation::InspectorTab::Properties)
+                    }
+                    action => action,
+                };
+                return self.update(action);
             }
             Message::CreateContextElement(kind, child) => {
                 self.create_kind = kind;
@@ -2854,35 +2910,6 @@ impl App {
                     );
                 }
             }
-            Message::ContextHelp(topic) => {
-                self.guide.update(crate::guide::Event::Topic(topic));
-                self.context_help = true;
-                return iced::widget::operation::snap_to(
-                    crate::guide::ARTICLE_SCROLL_ID,
-                    iced::widget::scrollable::RelativeOffset::START,
-                );
-            }
-            Message::CloseContextHelp => {
-                self.context_help = false;
-            }
-            Message::ContextHelpScroll(_) => {}
-            Message::Help => {
-                let topic = match self.page {
-                    Page::Diagram => Some(crate::guide::Topic::Nesting),
-                    Page::Behavior => self.behavior.active_owner.and_then(|id| {
-                        self.project()
-                            .elements
-                            .get(&id)
-                            .map(|element| match element.kind() {
-                                Kind::StateMachine => crate::guide::Topic::States,
-                                Kind::Scenario => crate::guide::Topic::Scenarios,
-                                _ => crate::guide::Topic::Chains,
-                            })
-                    }),
-                    _ => None,
-                };
-                return self.update(topic.map_or(Message::Page(Page::Guide), Message::ContextHelp));
-            }
             Message::ExactStrings(enabled) => {
                 if let Some(d) = &mut self.draft {
                     match d.set_exact(enabled) {
@@ -2985,6 +3012,14 @@ impl App {
                 self.status = "Property draft reverted".into();
             }
             Message::Select(id) => self.select(id),
+            Message::CanvasSelect(context, id) => {
+                let view = project_view(self.project(), context.diagram);
+                if view.ports.iter().any(|port| port.element == id)
+                    || view.edges.iter().any(|edge| edge.id == id)
+                {
+                    self.inspect_canvas_target(id);
+                }
+            }
             Message::DiagramSelection(event) => self.multiselect_event(event),
             Message::EditProperties(id) => {
                 self.select(id);
@@ -3004,10 +3039,23 @@ impl App {
                     return Task::none();
                 }
                 let original = self.selected;
+                let surface = self.architecture_surface();
+                let accepted_draft = self.draft_dirty();
                 if !self.apply() {
                     return Task::none();
                 }
                 let id = if id == original { self.selected } else { id };
+                if let Some((diagram, _, _)) = surface
+                    && (self.architecture_surface() != surface
+                        || !self.canvas_target_visible(diagram, id))
+                {
+                    if accepted_draft {
+                        self.status =
+                            "Properties applied. The view changed; select a visible target again."
+                                .into();
+                    }
+                    return Task::none();
+                }
                 if let Some(d) = self
                     .active_diagram
                     .and_then(|d| self.project().diagrams.get(&d))
@@ -3432,7 +3480,7 @@ impl App {
                     self.workflow = Some(crate::workflow::Workflow::relationship_kind(
                         self.project(),
                         self.selected,
-                        self.layer,
+                        self.project().layer_of(self.selected).unwrap_or(self.layer),
                         kind,
                         incoming,
                     ));
@@ -4458,13 +4506,18 @@ impl App {
             self.status = "Select an SA function or participant, then choose a typed port action in Properties.".into();
             return;
         }
+        let creation_layer = if child {
+            self.project().layer_of(self.selected).unwrap_or(self.layer)
+        } else {
+            self.layer
+        };
         let allocated = child
             && self.create_kind.is_work()
             && self
                 .project()
                 .elements
                 .get(&self.selected)
-                .is_some_and(|e| e.layer() == self.layer && e.kind().is_performer());
+                .is_some_and(|e| e.layer() == creation_layer && e.kind().is_performer());
         let parent = if child && !allocated {
             Some(self.selected)
         } else {
@@ -4472,7 +4525,7 @@ impl App {
         };
         let Some(e) = self.project().make_element(
             self.create_kind,
-            self.layer,
+            creation_layer,
             &format!("New {}", self.create_kind.label().to_lowercase()),
             parent,
         ) else {
@@ -4501,16 +4554,16 @@ impl App {
                 .project()
                 .diagrams
                 .values()
-                .find(|d| d.layer == self.layer && d.projection == preferred)
+                .find(|d| d.layer == creation_layer && d.projection == preferred)
                 .map(|d| d.id);
             if diagram_target.is_none() {
                 let view = Id::new_v4();
                 commands.push(Command::CreateDiagram(Diagram {
                     id: view,
                     alias: self.project().fresh_alias("engineering_view", "view", view),
-                    name: format!("{} {preferred}", self.layer),
+                    name: format!("{} {preferred}", creation_layer),
                     description: String::new(),
-                    layer: self.layer,
+                    layer: creation_layer,
                     projection: preferred,
                     layout: None,
                     routes: Vec::new(),
@@ -4643,7 +4696,13 @@ impl App {
             ));
         }
         if self.execute(Command::Batch(commands)) {
+            let changed_view = self.active_diagram != diagram_target;
             self.active_diagram = diagram_target;
+            if changed_view
+                && let Some(view) = diagram_target.and_then(|id| self.project().diagrams.get(&id))
+            {
+                self.layer = view.layer;
+            }
             self.selected = id;
             self.inspector_tab = crate::navigation::InspectorTab::Properties;
             self.refresh_draft();
@@ -4657,7 +4716,7 @@ impl App {
         self.workflow = Some(crate::workflow::Workflow::relationship(
             self.project(),
             self.selected,
-            self.layer,
+            self.project().layer_of(self.selected).unwrap_or(self.layer),
         ));
     }
     fn add_trace(&mut self) {
@@ -5078,8 +5137,30 @@ impl App {
             epoch: self.canvas_epoch,
         })
     }
+    // Admission belongs to the caller: palette choice, contextual source, or
+    // an already admitted session whose complete context is still current.
+    fn arm_connection(
+        &mut self,
+        context: crate::route_edit::Context,
+        tool: crate::connection_tool::Tool,
+    ) -> crate::route_edit::Context {
+        self.canvas_epoch = self.canvas_epoch.wrapping_add(1);
+        let context = crate::route_edit::Context {
+            epoch: self.canvas_epoch,
+            ..context
+        };
+        self.connection = Some(crate::connection_edit::Session::new(
+            self.project(),
+            &project_view(self.project(), context.diagram),
+            context,
+            tool,
+        ));
+        self.selected_bend = None;
+        self.status = tool.hint().into();
+        context
+    }
     fn edit_connection(&mut self, event: crate::connection_edit::Event) {
-        use crate::connection_edit::{Event, Session};
+        use crate::connection_edit::Event;
         let Some(context) = self.route_context() else {
             return;
         };
@@ -5095,10 +5176,13 @@ impl App {
         }
         match event {
             Event::Begin(tool, source) => {
-                self.edit_connection(Event::Choose(Some(tool)));
+                if !crate::connection_edit::can_begin(self.project(), context.diagram, tool, source)
-                if let Some(context) = self.route_context() {
+                {
-                    self.edit_connection(Event::Endpoint(context, source));
+                    self.status = "Choose a visible compatible source in this diagram.".into();
+                    return;
                 }
+                let context = self.arm_connection(context, tool);
+                self.edit_connection(Event::Endpoint(context, source));
             }
             Event::Choose(Some(tool)) => {
                 if !crate::connection_tool::Tool::for_layer(self.layer).contains(&tool) {
@@ -5112,16 +5196,7 @@ impl App {
                 {
                     return;
                 }
-                self.canvas_epoch = self.canvas_epoch.wrapping_add(1);
+                self.arm_connection(context, tool);
-                let context = self.route_context().unwrap();
-                self.connection = Some(Session::new(
-                    self.project(),
-                    &project_view(self.project(), context.diagram),
-                    context,
-                    tool,
-                ));
-                self.selected_bend = None;
-                self.status = tool.hint().into();
             }
             Event::Endpoint(captured, id) => {
                 if captured != context {
@@ -5182,17 +5257,9 @@ impl App {
                         &project_view(self.project(), context.diagram),
                         id,
                     );
-                    if session.tool == crate::connection_tool::Tool::Allocation
+                    if !self.inspect_canvas_target(id) {
-                        && self.project().diagrams[&context.diagram].projection
+                        self.connection = Some(session);
-                            == ProjectionKind::Traceability
+                        return;
-                    {
-                        // Mixed views can allocate either perspective. Choosing
-                        // a visible source must not navigate to its preferred view.
-                        self.selected = id;
-                        self.selected_attachment = None;
-                        self.refresh_draft();
-                    } else {
-                        self.select(id);
                     }
                     self.status = if session.candidates.is_empty() {
                         "No compatible targets are visible. Expand containers or show a compatible endpoint in this view; Esc cancels drawing.".into()
@@ -5208,8 +5275,11 @@ impl App {
             Event::Restart(captured) => {
                 if captured == context
                     && let Some(session) = &self.connection
+                    && session.context == context
                 {
-                    self.edit_connection(Event::Choose(Some(session.tool)));
+                    // A contextual mixed-layer tool need not be in this layer's
+                    // palette. Its unchanged session context retains admission.
+                    self.arm_connection(context, session.tool);
                 }
             }
             Event::Choose(None) => {}

crates/oa-desktop/src/app/allocation_drag.rs

@@ -16,7 +16,6 @@ use std::{
 
 pub const FINISH_EDIT: &str =
     "Finish or cancel the current edit before selecting or moving elements.";
-const ARRANGE_ARMED: &str = "Arrange next drag armed · presentation only · Esc cancels";
 
 #[derive(Debug, Clone, Copy, PartialEq)]
 pub struct Stamp {
@@ -636,7 +635,6 @@ impl App {
     }
     pub(crate) fn allocation_input_owner(&self) -> bool {
         self.page == Page::Diagram
-            && !self.context_help
             && self
                 .active_diagram
                 .and_then(|id| self.project().diagrams.get(&id))
@@ -701,12 +699,7 @@ impl App {
                 | Message::DiagramUsagesReady(_)
                 | Message::DiagramRevealViewport(..)
         ) {
-            let clear_armed_status =
-                self.allocation_drag.arrange_next && self.status == ARRANGE_ARMED;
             self.allocation_drag.retire();
-            if clear_armed_status {
-                self.status = "Arrange cancelled".into();
-            }
         }
     }
     pub(super) fn allocation_boundary(&self) -> impl PartialEq + use<> {
@@ -848,7 +841,8 @@ impl App {
                 self.allocation_drag.retire();
                 if self.allocation_drag_clean() {
                     self.allocation_drag.arrange_next = true;
-                    self.status = ARRANGE_ARMED.into();
+                    self.status =
+                        "Arrange next drag armed · presentation only · Esc cancels".into();
                 } else {
                     self.status = FINISH_EDIT.into();
                 }

crates/oa-desktop/src/app/allocation_drag_full_tree_tests.rs

@@ -89,7 +89,10 @@ async fn refused_click_keeps_field(mounted: &mut Mounted, f: &mut Fixture, field
     );
     assert!(!messages.iter().any(|m| matches!(
         m,
-        Message::Select(_) | Message::SelectNode(_) | Message::MoveNode(..)
+        Message::Select(_)
+            | Message::CanvasSelect(..)
+            | Message::SelectNode(_)
+            | Message::MoveNode(..)
     )));
     assert_eq!(f.app.document.bundle(), &before);
     assert_eq!((f.app.selected, f.app.selected_node), selected);
@@ -190,7 +193,6 @@ async fn actual_keyboard_arrange_shortcut_consumes_once_escape_cancels_and_dirty
         )
         .await;
     assert!(!f.app.allocation_drag.arrange_next);
-    assert_eq!(f.app.status, "Arrange cancelled");
     mounted
         .batch(
             &mut f.app,

crates/oa-desktop/src/app/allocation_drag_tests.rs

@@ -237,7 +237,10 @@ fn mounted_dirty_property_press_does_not_select_apply_or_destroy_draft() {
         ));
         assert!(!events.iter().any(|m| matches!(
             m,
-            Message::Select(_) | Message::SelectNode(_) | Message::MoveNode(..)
+            Message::Select(_)
+                | Message::CanvasSelect(..)
+                | Message::SelectNode(_)
+                | Message::MoveNode(..)
         )));
         send(&mut f.app, events);
         assert_eq!((f.app.selected, f.app.selected_node), selection);

crates/oa-desktop/src/app/architecture_authoring/palette.rs

@@ -1,5 +1,6 @@
 //! Compact neutral tool palette. Tool state never changes its allocated width.
 use super::*;
+use crate::connection_tool::Tool;
 use iced::{
     Point, Rectangle, Size, Theme, mouse,
     widget::{
@@ -11,7 +12,7 @@ use iced::{
 #[derive(Clone, Copy)]
 enum Icon {
     Element(Kind),
-    Arrow,
+    Connection(Tool),
     Existing,
     Select,
     Collapse(bool),
@@ -76,10 +77,59 @@ impl canvas::Program<Message> for Icon {
                     );
                 }
             }
-            Self::Arrow => {
+            Self::Connection(connection) => match connection {
-                f.stroke(&line(&[(1., 8.), (14., 8.), (10., 4.)]), stroke);
+                // The OA and SA work-flow tools share a visual family; they
-                f.stroke(&line(&[(14., 8.), (10., 12.)]), stroke);
+                // never coexist in a palette. Keep their small glyph legible.
-            }
+                Tool::Interaction | Tool::FunctionalExchange => {
+                    for x in [1., 11.] {
+                        f.stroke(
+                            &Path::rounded_rectangle(
+                                Point::new(x, 5.),
+                                Size::new(4., 6.),
+                                1.5.into(),
+                            ),
+                            stroke,
+                        );
+                    }
+                    f.stroke(&line(&[(5., 8.), (10., 8.)]), stroke);
+                    f.stroke(&line(&[(7.5, 5.5), (10., 8.), (7.5, 10.5)]), stroke);
+                }
+                Tool::CommunicationMean => {
+                    // Participant endpoints, without implying a fixed direction.
+                    for x in [1., 11.] {
+                        f.stroke(
+                            &Path::rectangle(Point::new(x, 4.), Size::new(4., 8.)),
+                            stroke,
+                        );
+                    }
+                    f.stroke(&line(&[(5., 8.), (11., 8.)]), stroke);
+                }
+                Tool::BoundaryExchange => {
+                    // Ports on facing participant boundaries. Standard exchanges
+                    // are unoriented, so the generic tool has no arrowhead.
+                    for x in [2., 14.] {
+                        f.stroke(&line(&[(x, 2.), (x, 14.)]), stroke);
+                    }
+                    for x in [1., 12.] {
+                        f.stroke(
+                            &Path::rectangle(Point::new(x, 6.), Size::new(3., 4.)),
+                            stroke,
+                        );
+                    }
+                    f.stroke(&line(&[(4., 8.), (12., 8.)]), stroke);
+                }
+                Tool::Allocation => {
+                    // Work enters a performer: allocation can appear as nesting
+                    // rather than a relationship line in allocated-work views.
+                    f.stroke(&line(&[(1., 2.), (1., 14.), (15., 14.), (15., 2.)]), stroke);
+                    f.stroke(
+                        &Path::rounded_rectangle(Point::new(5., 9.), Size::new(6., 3.), 1.into()),
+                        stroke,
+                    );
+                    f.stroke(&line(&[(8., 1.), (8., 7.)]), stroke);
+                    f.stroke(&line(&[(5., 4.), (8., 7.), (11., 4.)]), stroke);
+                }
+            },
             Self::Existing => {
                 f.stroke(
                     &Path::rectangle(Point::new(1., 1.), Size::new(10., 10.)),
@@ -234,7 +284,7 @@ pub fn view(app: &App) -> Element<'_, Message> {
         }
         content = content.push(tool(
             app,
-            Icon::Arrow,
+            Icon::Connection(*connection),
             connection.label(),
             Message::Connection(crate::connection_edit::Event::Choose(Some(*connection))),
             app.connection

crates/oa-desktop/src/app/canvas_selection_tests.rs

@@ -0,0 +1,904 @@
+//! Canvas inspection retains the displayed mixed-layer surface; navigation follows the model.
+use super::*;
+use crate::diagram_usage::Target;
+use crate::model_menu::{Event as MenuEvent, Request};
+
+struct Fixture {
+    app: App,
+    diagram: Id,
+    process: Id,
+    placement: Id,
+    edge: Id,
+}
+
+fn fixture() -> Fixture {
+    let mut p = Project::empty();
+    let process = p
+        .add_element(Kind::Process, Layer::Oa, "Operational process", None)
+        .unwrap();
+    let capability = p
+        .add_element(Kind::Capability, Layer::Oa, "Operational capability", None)
+        .unwrap();
+    let edge = p.relate(
+        RelationKind::ChainInvolvement,
+        "Enables",
+        process,
+        capability,
+    );
+    p.ensure_diagram(Layer::Oa);
+    let diagram = p.ensure_diagram(Layer::Sa);
+    p.diagrams.get_mut(&diagram).unwrap().projection = ProjectionKind::Traceability;
+    let placement = p.place(diagram, process, Position { x: 0., y: 0. });
+    p.place(diagram, capability, Position { x: 500., y: 0. });
+    let mut app = App::with_project(p);
+    app.page = Page::Diagram;
+    app.layer = Layer::Sa;
+    app.active_diagram = Some(diagram);
+    app.selected = diagram;
+    app.refresh_draft();
+    app.reconcile_multiselect();
+    assert!(
+        project_view(app.project(), diagram)
+            .edges
+            .iter()
+            .any(|e| e.id == edge)
+    );
+    Fixture {
+        app,
+        diagram,
+        process,
+        placement,
+        edge,
+    }
+}
+
+fn assert_surface(f: &Fixture) {
+    assert_eq!(f.app.page, Page::Diagram);
+    assert_eq!(f.app.layer, Layer::Sa);
+    assert_eq!(f.app.active_diagram, Some(f.diagram));
+}
+
+#[test]
+fn mixed_projection_switch_restores_all_authored_content_and_one_step_history() {
+    let mut f = fixture();
+    let before = f.app.document.snapshot();
+    let mut expected = before.decoded.project.clone();
+    expected.diagrams.get_mut(&f.diagram).unwrap().projection = ProjectionKind::Allocation;
+    let _ = f
+        .app
+        .update(Message::Projection(ProjectionKind::Allocation));
+    assert_surface(&f);
+    assert_eq!(f.app.project(), &expected);
+    assert!(project_view(f.app.project(), f.diagram).nodes.is_empty());
+    assert_eq!(f.app.project().diagrams[&f.diagram].nodes.len(), 2);
+    let switched = f.app.document.snapshot();
+    let _ = f.app.update(Message::Undo);
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+    assert!(!f.app.document.can_undo());
+    let _ = f.app.update(Message::Redo);
+    assert_eq!(f.app.project(), &switched.decoded.project);
+    assert_eq!(f.app.document.bundle(), &switched.bundle);
+    let _ = f
+        .app
+        .update(Message::Projection(ProjectionKind::Traceability));
+    assert_surface(&f);
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert!(
+        project_view(f.app.project(), f.diagram)
+            .edges
+            .iter()
+            .any(|e| e.id == f.edge)
+    );
+}
+
+#[test]
+fn mixed_canvas_edge_and_group_inspection_preserve_surface_and_history() {
+    for grouped in [false, true] {
+        let mut f = fixture();
+        let before = f.app.document.snapshot();
+        let revision = f.app.document.revision();
+        if grouped {
+            let _ = f
+                .app
+                .update(Message::DiagramSelection(multiselect::Event::Choose(
+                    f.app.multiselect_context().unwrap(),
+                    Target::Placement(f.placement),
+                    multiselect::Choice::Replace,
+                )));
+        }
+        let message = if grouped {
+            Message::DiagramSelection(multiselect::Event::Choose(
+                f.app.multiselect_context().unwrap(),
+                Target::Edge(f.edge),
+                multiselect::Choice::Add,
+            ))
+        } else {
+            Message::CanvasSelect(f.app.route_context().unwrap(), f.edge)
+        };
+        let _ = f.app.update(message);
+        assert_surface(&f);
+        assert_eq!(f.app.selected, f.edge);
+        assert_eq!(f.app.draft.as_ref().unwrap().original, f.edge);
+        assert_eq!(
+            f.app.multiselect_snapshot().unwrap().primary(),
+            Some(&Target::Edge(f.edge))
+        );
+        assert_eq!(
+            f.app.multiselect_snapshot().unwrap().targets().len(),
+            if grouped { 2 } else { 1 }
+        );
+        assert_eq!(f.app.project(), &before.decoded.project);
+        assert_eq!(f.app.document.bundle(), &before.bundle);
+        assert_eq!(f.app.document.revision(), revision);
+        assert!(!f.app.document.can_undo());
+    }
+}
+
+fn invoke(f: &mut Fixture, object: Id, placement: Option<Id>, action: Message) {
+    let mut request = Request::object(object, iced::Point::ORIGIN);
+    request.canvas = f.app.route_context();
+    request.placement = placement;
+    let _ = f.app.update(Message::Menu(MenuEvent::Open(request)));
+    let token = f.app.model_menu.as_ref().unwrap().token;
+    let _ = f
+        .app
+        .update(Message::Menu(MenuEvent::Invoke(token, Box::new(action))));
+}
+
+#[test]
+fn mixed_canvas_context_properties_and_hide_keep_the_captured_surface() {
+    let mut f = fixture();
+    let edge = f.edge;
+    invoke(&mut f, edge, None, Message::EditProperties(edge));
+    assert_surface(&f);
+    assert_eq!(f.app.selected, edge);
+    assert!(!f.app.document.can_undo());
+    let before = f.app.document.snapshot();
+    let process = f.process;
+    let placement = f.placement;
+    invoke(&mut f, process, Some(placement), Message::HideSelected);
+    assert_surface(&f);
+    assert!(
+        !f.app.project().diagrams[&f.diagram]
+            .nodes
+            .contains_key(&placement)
+    );
+    assert!(f.app.project().elements.contains_key(&process));
+    let _ = f.app.update(Message::Undo);
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+}
+
+#[test]
+fn mixed_canvas_explicit_navigation_still_follows_the_target_layer() {
+    let mut f = fixture();
+    let process = f.process;
+    let edge = f.edge;
+    invoke(&mut f, edge, None, Message::Select(process));
+    assert_eq!(f.app.selected, process);
+    assert_eq!(f.app.layer, Layer::Oa);
+    assert_ne!(f.app.active_diagram, Some(f.diagram));
+}
+
+#[test]
+fn explicit_navigation_to_the_inspected_cross_layer_object_follows_its_layer() {
+    let mut f = fixture();
+    let _ = f.app.update(Message::CanvasSelect(
+        f.app.route_context().unwrap(),
+        f.edge,
+    ));
+    assert_surface(&f);
+    assert_eq!(f.app.selected, f.edge);
+    let before = f.app.document.snapshot();
+    let _ = f.app.update(Message::Select(f.edge));
+    assert_eq!(f.app.selected, f.edge);
+    assert_eq!(f.app.layer, Layer::Oa);
+    assert_ne!(f.app.active_diagram, Some(f.diagram));
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+    assert!(!f.app.document.can_undo());
+}
+
+#[test]
+fn mixed_canvas_invalid_draft_and_stale_packets_preserve_selection() {
+    let mut f = fixture();
+    let context = f.app.route_context().unwrap();
+    let _ = f.app.update(Message::Field("/id".into(), "-".into()));
+    let draft = serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap();
+    let _ = f.app.update(Message::CanvasSelect(context, f.edge));
+    assert_eq!(f.app.selected, f.diagram);
+    assert_surface(&f);
+    assert_eq!(
+        serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
+        draft
+    );
+    let _ = f
+        .app
+        .update(Message::DiagramSelection(multiselect::Event::Choose(
+            f.app.multiselect_context().unwrap(),
+            Target::Edge(f.edge),
+            multiselect::Choice::Replace,
+        )));
+    assert_eq!(f.app.selected, f.diagram);
+    assert_eq!(
+        serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
+        draft
+    );
+    let _ = f.app.update(Message::RevertProperties);
+    f.app.canvas_epoch += 1;
+    let _ = f.app.update(Message::CanvasSelect(context, f.edge));
+    assert_eq!(f.app.selected, f.diagram);
+    assert!(!f.app.document.can_undo());
+}
+
+#[test]
+fn cross_layer_port_inspection_and_connection_start_retain_the_view() {
+    let mut p = Project::empty();
+    let owner = p
+        .add_element(Kind::Function, Layer::Sa, "Send", None)
+        .unwrap();
+    let port = Id::new_v4();
+    let element = make_port(
+        &p,
+        port,
+        owner,
+        "Output",
+        PortContract::FunctionOutput {
+            outgoing_items: vec![],
+        },
+    )
+    .unwrap();
+    p.elements.insert(port, element);
+    p.ensure_diagram(Layer::Sa);
+    let diagram = p.ensure_diagram(Layer::Oa);
+    p.diagrams.get_mut(&diagram).unwrap().projection = ProjectionKind::Traceability;
+    let placement = p.place(diagram, owner, Position { x: 0., y: 0. });
+    let mut app = App::with_project(p);
+    app.page = Page::Diagram;
+    app.layer = Layer::Oa;
+    app.active_diagram = Some(diagram);
+    app.selected = diagram;
+    app.refresh_draft();
+    app.reconcile_multiselect();
+    assert!(
+        project_view(app.project(), diagram)
+            .ports
+            .iter()
+            .any(|p| p.element == port)
+    );
+    let _ = app.update(Message::CanvasSelect(app.route_context().unwrap(), port));
+    assert_eq!(app.selected, port);
+    assert_eq!(app.active_diagram, Some(diagram));
+    assert_eq!(app.layer, Layer::Oa);
+    assert_eq!(
+        app.multiselect_snapshot().unwrap().primary(),
+        Some(&Target::Port { port, placement })
+    );
+    // Reset inspection so the endpoint path cannot pass by selecting the same ID.
+    app.selected = diagram;
+    app.refresh_draft();
+    let context = app.route_context().unwrap();
+    // Mixed canvases can retain a tool from either perspective.
+    app.connection = Some(crate::connection_edit::Session::new(
+        app.project(),
+        &project_view(app.project(), diagram),
+        context,
+        crate::connection_tool::Tool::FunctionalExchange,
+    ));
+    let _ = app.update(Message::Connection(
+        crate::connection_edit::Event::Endpoint(context, port),
+    ));
+    assert_eq!(app.selected, port);
+    assert_eq!(app.layer, Layer::Oa);
+    assert_eq!(app.active_diagram, Some(diagram));
+    assert_eq!(app.connection.as_ref().unwrap().source, Some(port));
+    assert!(!app.document.can_undo());
+}
+
+fn authoring_fixture(performer: bool) -> (Fixture, Id) {
+    let mut f = fixture();
+    let mut project = f.app.project().clone();
+    let owner = project
+        .add_element(
+            if performer {
+                Kind::Entity
+            } else {
+                Kind::Activity
+            },
+            Layer::Oa,
+            "Operational owner",
+            None,
+        )
+        .unwrap();
+    let target = project
+        .add_element(Kind::Activity, Layer::Oa, "Operational target", None)
+        .unwrap();
+    let placement = project.place(f.diagram, owner, Position { x: 0., y: 400. });
+    project.place(f.diagram, target, Position { x: 500., y: 400. });
+    f.app = App::with_project(project);
+    f.app.page = Page::Diagram;
+    f.app.layer = Layer::Sa;
+    f.app.active_diagram = Some(f.diagram);
+    f.app.selected = f.diagram;
+    f.app.refresh_draft();
+    f.app.reconcile_multiselect();
+    f.process = owner;
+    f.placement = placement;
+    (f, target)
+}
+
+fn assert_source_pair(app: &App) {
+    let compiled = oa_core::source_project::compile_bundle(
+        app.document.bundle(),
+        oa_core::source_project::ProjectLimits::default(),
+    )
+    .unwrap();
+    assert_eq!(&compiled.decoded.project, app.project());
+    assert_eq!(&compiled.bundle, app.document.bundle());
+}
+
+#[test]
+fn mixed_canvas_relationship_actions_keep_operational_source_and_commit_one_step() {
+    for context_action in [false, true] {
+        let (mut f, target) = authoring_fixture(false);
+        let before = f.app.document.snapshot();
+        let owner = f.process;
+        let placement = f.placement;
+        if context_action {
+            invoke(
+                &mut f,
+                owner,
+                Some(placement),
+                Message::AddRelationKind(RelationKind::Interaction, false),
+            );
+        } else {
+            let _ = f.app.update(Message::SelectNode(placement));
+            let _ = f.app.update(Message::AddRelation);
+        }
+        assert_surface(&f);
+        let Some(crate::workflow::Workflow::Relation(relation)) = &f.app.workflow else {
+            panic!("relationship form did not open: {}", f.app.status);
+        };
+        assert_eq!(
+            relation.source.as_ref().map(|source| source.id),
+            Some(owner)
+        );
+        assert_eq!(relation.kind, RelationKind::Interaction);
+        let saved = f
+            .app
+            .workflow
+            .as_ref()
+            .unwrap()
+            .recovery_snapshot()
+            .unwrap();
+        assert_eq!(saved["Relation"]["layer"], "Oa");
+        let _ = f
+            .app
+            .update(Message::Workflow(crate::workflow::Event::Target(Choice {
+                id: target,
+                label: "Operational target".into(),
+            })));
+        let _ = f
+            .app
+            .update(Message::Workflow(crate::workflow::Event::Apply));
+        assert!(f.app.workflow.is_none(), "{}", f.app.status);
+        let created: Vec<_> = f
+            .app
+            .project()
+            .relations
+            .values()
+            .filter(|relation| !before.decoded.project.relations.contains_key(&relation.id))
+            .collect();
+        assert_eq!(created.len(), 1);
+        assert_eq!(
+            (created[0].kind(), created[0].source(), created[0].target()),
+            (RelationKind::Interaction, owner, target)
+        );
+        assert_source_pair(&f.app);
+        let _ = f.app.update(Message::Undo);
+        assert_eq!(f.app.project(), &before.decoded.project);
+        assert_eq!(f.app.document.bundle(), &before.bundle);
+        assert!(!f.app.document.can_undo());
+    }
+}
+
+#[test]
+fn mixed_canvas_add_child_command_uses_parent_layer_for_containment_and_allocation() {
+    for performer in [false, true] {
+        let (mut f, _) = authoring_fixture(performer);
+        let before = f.app.document.snapshot();
+        let owner = f.process;
+        let placement = f.placement;
+        invoke(
+            &mut f,
+            owner,
+            Some(placement),
+            Message::CreateContextElement(Kind::Activity, true),
+        );
+        assert_surface(&f);
+        let created: Vec<_> = f
+            .app
+            .project()
+            .elements
+            .values()
+            .filter(|element| !before.decoded.project.elements.contains_key(&element.id))
+            .collect();
+        assert_eq!(created.len(), 1, "{}", f.app.status);
+        let child = created[0].id;
+        assert_eq!(created[0].kind(), Kind::Activity);
+        assert_eq!(created[0].layer(), Layer::Oa);
+        assert_eq!(
+            created[0].parent,
+            if performer { None } else { Some(owner) }
+        );
+        let allocations: Vec<_> = f
+            .app
+            .project()
+            .relations
+            .values()
+            .filter(|relation| !before.decoded.project.relations.contains_key(&relation.id))
+            .collect();
+        assert_eq!(allocations.len(), usize::from(performer));
+        if performer {
+            assert_eq!(
+                (
+                    allocations[0].kind(),
+                    allocations[0].source(),
+                    allocations[0].target()
+                ),
+                (RelationKind::Allocation, owner, child)
+            );
+        }
+        assert!(
+            f.app.project().diagrams[&f.diagram]
+                .nodes
+                .values()
+                .any(|node| node.element == child)
+        );
+        assert_source_pair(&f.app);
+        let _ = f.app.update(Message::Undo);
+        assert_eq!(f.app.project(), &before.decoded.project);
+        assert_eq!(f.app.document.bundle(), &before.bundle);
+        assert!(!f.app.document.can_undo());
+    }
+}
+
+#[test]
+fn mixed_canvas_root_creation_still_uses_the_active_perspective() {
+    let (mut f, _) = authoring_fixture(false);
+    let _ = f.app.update(Message::SelectNode(f.placement));
+    let before = f.app.document.snapshot();
+    let _ = f
+        .app
+        .update(Message::CreateContextElement(Kind::Function, false));
+    assert_surface(&f);
+    let created: Vec<_> = f
+        .app
+        .project()
+        .elements
+        .values()
+        .filter(|element| !before.decoded.project.elements.contains_key(&element.id))
+        .collect();
+    assert_eq!(created.len(), 1, "{}", f.app.status);
+    assert_eq!(created[0].kind(), Kind::Function);
+    assert_eq!(created[0].layer(), Layer::Sa);
+    assert_eq!(created[0].parent, None);
+    assert_source_pair(&f.app);
+    let _ = f.app.update(Message::Undo);
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+}
+
+#[test]
+fn child_creation_navigates_to_a_parent_layer_preferred_view_only_when_needed() {
+    for existing_preferred in [false, true] {
+        let (mut f, _) = authoring_fixture(false);
+        let mut project = f.app.project().clone();
+        for diagram in project
+            .diagrams
+            .values_mut()
+            .filter(|d| d.layer == Layer::Oa)
+        {
+            diagram.projection = if existing_preferred {
+                ProjectionKind::Allocation
+            } else {
+                ProjectionKind::Overview
+            };
+        }
+        project.diagrams.get_mut(&f.diagram).unwrap().projection = ProjectionKind::Capabilities;
+        f.app = App::with_project(project);
+        let _ = f.app.update(Message::Select(f.process));
+        let _ = f.app.update(Message::Diagram(Choice {
+            id: f.diagram,
+            label: "System capabilities".into(),
+        }));
+        assert_eq!(f.app.selected, f.process);
+        assert_eq!(f.app.layer, Layer::Sa);
+        assert_eq!(f.app.active_diagram, Some(f.diagram));
+        let before = f.app.document.snapshot();
+        let _ = f
+            .app
+            .update(Message::CreateContextElement(Kind::Activity, true));
+        assert_eq!(f.app.layer, Layer::Oa, "{}", f.app.status);
+        let diagram = f.app.active_diagram.unwrap();
+        assert_ne!(diagram, f.diagram);
+        assert_eq!(f.app.project().diagrams[&diagram].layer, Layer::Oa);
+        assert_eq!(
+            f.app.project().diagrams[&diagram].projection,
+            ProjectionKind::Allocation
+        );
+        assert_eq!(
+            f.app.project().diagrams.len(),
+            before.decoded.project.diagrams.len() + usize::from(!existing_preferred)
+        );
+        assert_eq!(
+            f.app.project().elements[&f.app.selected].parent,
+            Some(f.process)
+        );
+        assert_source_pair(&f.app);
+        let _ = f.app.update(Message::Undo);
+        assert_eq!(f.app.project(), &before.decoded.project);
+        assert_eq!(f.app.document.bundle(), &before.bundle);
+    }
+}
+
+// Regression scope: a contextual click may accept a valid property draft, but
+// must not inherit the draft object's semantic-layer navigation. If acceptance
+// changes the originating diagram identity or hides the clicked target, retain
+// that one accepted edit and refuse the old click. Do not infer a new target or
+// reinterpret an old surface packet on a replacement diagram.
+fn draft_click_fixture() -> (Fixture, Id) {
+    let mut f = fixture();
+    let mut project = f.app.project().clone();
+    let capability = project
+        .add_element(Kind::Capability, Layer::Oa, "Second capability", None)
+        .unwrap();
+    let other_edge = project.relate(
+        RelationKind::ChainInvolvement,
+        "Also enables",
+        f.process,
+        capability,
+    );
+    project.place(f.diagram, capability, Position { x: 500., y: 300. });
+    f.app = App::with_project(project);
+    f.app.page = Page::Diagram;
+    f.app.layer = Layer::Sa;
+    f.app.active_diagram = Some(f.diagram);
+    f.app.selected = f.diagram;
+    f.app.refresh_draft();
+    f.app.reconcile_multiselect();
+    assert!(
+        project_view(f.app.project(), f.diagram)
+            .edges
+            .iter()
+            .any(|edge| edge.id == other_edge)
+    );
+    (f, other_edge)
+}
+
+fn expected_draft_commit(app: &App, command: Command) -> Document {
+    let mut expected = Document::from_bundle(
+        app.document.bundle().clone(),
+        oa_core::source_project::ProjectLimits::default(),
+    )
+    .unwrap();
+    expected.execute(command).unwrap();
+    expected
+}
+
+fn assert_accepted_draft(app: &App, expected: &Document, revision: u64) {
+    assert_eq!(app.project(), expected.project());
+    assert_eq!(app.document.bundle(), expected.bundle());
+    assert_eq!(app.document.revision(), revision + 1);
+    assert!(!app.draft_dirty());
+    assert!(app.document.can_undo());
+    assert!(!app.document.can_redo());
+    assert_source_pair(app);
+}
+
+fn assert_one_draft_history(
+    app: &mut App,
+    before: &oa_core::source_project::CompiledSourceProject,
+    expected: &Document,
+) {
+    let _ = app.update(Message::Undo);
+    assert_eq!(app.project(), &before.decoded.project);
+    assert_eq!(app.document.bundle(), &before.bundle);
+    assert!(
+        !app.document.can_undo(),
+        "the click must not add a second edit"
+    );
+    assert!(app.document.can_redo());
+    let _ = app.update(Message::Redo);
+    assert_eq!(app.project(), expected.project());
+    assert_eq!(app.document.bundle(), expected.bundle());
+    assert!(!app.document.can_redo());
+}
+
+fn pending_edge_name(f: &mut Fixture) {
+    let context = f.app.route_context().unwrap();
+    let _ = f.app.update(Message::CanvasSelect(context, f.edge));
+    assert_surface(f);
+    assert_eq!(f.app.selected, f.edge);
+    let _ = f
+        .app
+        .update(Message::Field("/name".into(), "Reviewed enables".into()));
+    assert!(f.app.draft_dirty());
+    assert!(f.app.draft.as_ref().unwrap().command().is_ok());
+}
+
+#[test]
+fn valid_cross_layer_draft_then_canvas_edge_retains_surface_and_one_edit() {
+    let (mut f, other_edge) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let expected =
+        expected_draft_commit(&f.app, Command::Rename(f.edge, "Reviewed enables".into()));
+    pending_edge_name(&mut f);
+    // Capture after drafting, so this exercises successful draft application,
+    // not refusal of a packet made stale by the property edit itself.
+    let context = f.app.route_context().unwrap();
+    let _ = f.app.update(Message::CanvasSelect(context, other_edge));
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_surface(&f);
+    assert_eq!(f.app.selected, other_edge);
+    assert_eq!(
+        f.app.multiselect_snapshot().unwrap().primary(),
+        Some(&Target::Edge(other_edge))
+    );
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn valid_cross_layer_draft_then_node_click_retains_surface_and_one_edit() {
+    let (mut f, _) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let expected =
+        expected_draft_commit(&f.app, Command::Rename(f.edge, "Reviewed enables".into()));
+    pending_edge_name(&mut f);
+    let _ = f.app.update(Message::SelectNode(f.placement));
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_surface(&f);
+    assert_eq!(f.app.selected, f.process);
+    assert_eq!(f.app.selected_node, Some(f.placement));
+    assert_eq!(
+        f.app.multiselect_snapshot().unwrap().primary(),
+        Some(&Target::Placement(f.placement))
+    );
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn diagram_reidentity_draft_commits_but_refuses_the_old_surface_click() {
+    let (mut f, other_edge) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let replacement = Id::new_v4();
+    let expected = expected_draft_commit(&f.app, Command::Reidentify(f.diagram, replacement));
+    let _ = f
+        .app
+        .update(Message::Field("/id".into(), replacement.to_string()));
+    assert!(f.app.draft_dirty());
+    let context = f.app.route_context().unwrap();
+    let _ = f.app.update(Message::CanvasSelect(context, other_edge));
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert!(!f.app.project().diagrams.contains_key(&context.diagram));
+    assert!(
+        f.app
+            .active_diagram
+            .is_some_and(|id| f.app.project().diagrams.contains_key(&id)),
+        "never restore a removed diagram identity"
+    );
+    assert_ne!(f.app.selected, other_edge, "refuse the old surface click");
+    assert!(
+        f.app
+            .multiselect_snapshot()
+            .is_none_or(|s| !s.targets().contains(&Target::Edge(other_edge)))
+    );
+    assert_eq!(
+        f.app.status,
+        "Properties applied. The view changed; select a visible target again."
+    );
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn projection_draft_commits_but_refuses_the_now_hidden_canvas_target() {
+    let (mut f, other_edge) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let mut diagram = f.app.project().diagrams[&f.diagram].clone();
+    diagram.projection = ProjectionKind::Allocation;
+    let expected = expected_draft_commit(&f.app, Command::EditDiagram(f.diagram, diagram));
+    let _ = f.app.update(Message::FieldShape(
+        "/projection".into(),
+        serde_json::to_value(ProjectionKind::Allocation).unwrap(),
+    ));
+    assert!(f.app.draft_dirty());
+    let context = f.app.route_context().unwrap();
+    let _ = f.app.update(Message::CanvasSelect(context, other_edge));
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_surface(&f);
+    assert!(
+        !project_view(f.app.project(), f.diagram)
+            .edges
+            .iter()
+            .any(|edge| edge.id == other_edge)
+    );
+    assert_ne!(
+        f.app.selected, other_edge,
+        "do not inspect a no-longer-visible hit"
+    );
+    assert!(
+        f.app
+            .multiselect_snapshot()
+            .is_none_or(|s| !s.targets().contains(&Target::Edge(other_edge)))
+    );
+    assert_eq!(
+        f.app.status,
+        "Properties applied. The view changed; select a visible target again."
+    );
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn invalid_cross_layer_draft_blocks_contextual_clicks_without_changing_history() {
+    for click in 0..3 {
+        let (mut f, other_edge) = draft_click_fixture();
+        let context = f.app.route_context().unwrap();
+        let _ = f.app.update(Message::CanvasSelect(context, f.edge));
+        let before = f.app.document.snapshot();
+        let revision = f.app.document.revision();
+        let _ = f
+            .app
+            .update(Message::Field("/id".into(), "not-a-uuid".into()));
+        assert!(f.app.draft_dirty());
+        let expected_error = f.app.draft.as_ref().unwrap().command().unwrap_err();
+        let draft =
+            serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap();
+        let selection = f.app.multiselect_snapshot().unwrap();
+        let message = match click {
+            0 => Message::CanvasSelect(f.app.route_context().unwrap(), other_edge),
+            1 => Message::SelectNode(f.placement),
+            _ => Message::DiagramSelection(multiselect::Event::Choose(
+                f.app.multiselect_context().unwrap(),
+                Target::Edge(other_edge),
+                multiselect::Choice::Add,
+            )),
+        };
+        let _ = f.app.update(message);
+        if click < 2 {
+            assert_eq!(f.app.status, expected_error);
+        } else {
+            assert_eq!(
+                f.app.status,
+                "Finish or cancel the active edit before changing the diagram selection."
+            );
+        }
+        assert_surface(&f);
+        assert_eq!(f.app.selected, f.edge);
+        assert_eq!(f.app.project(), &before.decoded.project);
+        assert_eq!(f.app.document.bundle(), &before.bundle);
+        assert_eq!(f.app.document.revision(), revision);
+        assert!(!f.app.document.can_undo());
+        assert!(!f.app.document.can_redo());
+        assert_eq!(
+            serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
+            draft
+        );
+        assert_eq!(
+            f.app.multiselect_snapshot().unwrap().targets(),
+            selection.targets()
+        );
+        assert_eq!(
+            f.app.multiselect_snapshot().unwrap().primary(),
+            selection.primary()
+        );
+        if click == 0 {
+            // Pre-dispatch stale rejection applies no draft and must not emit
+            // either success feedback or a new validation message.
+            let stale = f.app.route_context().unwrap();
+            f.app.canvas_epoch += 1;
+            f.app.status = "Keep previous feedback".into();
+            let _ = f.app.update(Message::CanvasSelect(stale, other_edge));
+            assert_eq!(f.app.status, "Keep previous feedback");
+            assert_eq!(f.app.project(), &before.decoded.project);
+            assert_eq!(f.app.document.bundle(), &before.bundle);
+            assert_eq!(f.app.document.revision(), revision);
+            assert_eq!(
+                serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
+                draft
+            );
+        }
+    }
+}
+
+#[test]
+fn explicit_select_after_valid_cross_layer_draft_still_navigates_and_commits_once() {
+    let (mut f, other_edge) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let expected =
+        expected_draft_commit(&f.app, Command::Rename(f.edge, "Reviewed enables".into()));
+    pending_edge_name(&mut f);
+    let _ = f.app.update(Message::Select(other_edge));
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_eq!(f.app.selected, other_edge);
+    assert_eq!(f.app.layer, Layer::Oa);
+    assert_ne!(f.app.active_diagram, Some(f.diagram));
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn properties_apply_on_cross_layer_edge_retains_surface_and_one_edit() {
+    let (mut f, _) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let expected =
+        expected_draft_commit(&f.app, Command::Rename(f.edge, "Reviewed enables".into()));
+    pending_edge_name(&mut f);
+    let _ = f.app.update(Message::Apply);
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_eq!(f.app.status, "Properties applied");
+    assert_surface(&f);
+    assert_eq!(f.app.selected, f.edge);
+    assert_eq!(f.app.draft.as_ref().unwrap().original, f.edge);
+    assert_eq!(
+        f.app.multiselect_snapshot().unwrap().primary(),
+        Some(&Target::Edge(f.edge))
+    );
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn properties_apply_honors_an_intentional_active_diagram_layer_edit() {
+    let (mut f, _) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let mut diagram = f.app.project().diagrams[&f.diagram].clone();
+    diagram.layer = Layer::Oa;
+    let expected = expected_draft_commit(&f.app, Command::EditDiagram(f.diagram, diagram));
+    let _ = f.app.update(Message::FieldShape(
+        "/layer".into(),
+        serde_json::to_value(Layer::Oa).unwrap(),
+    ));
+    assert!(f.app.draft_dirty());
+    let _ = f.app.update(Message::Apply);
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_eq!(f.app.page, Page::Diagram);
+    assert_eq!(
+        f.app.layer,
+        Layer::Oa,
+        "honor the edited diagram's own layer"
+    );
+    assert_eq!(f.app.active_diagram, Some(f.diagram));
+    assert_eq!(f.app.selected, f.diagram);
+    assert_eq!(f.app.draft.as_ref().unwrap().original, f.diagram);
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}
+
+#[test]
+fn properties_apply_follows_the_known_active_diagram_reidentity_once() {
+    let (mut f, _) = draft_click_fixture();
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let replacement = Id::new_v4();
+    let expected = expected_draft_commit(&f.app, Command::Reidentify(f.diagram, replacement));
+    let _ = f
+        .app
+        .update(Message::Field("/id".into(), replacement.to_string()));
+    assert!(f.app.draft_dirty());
+    let _ = f.app.update(Message::Apply);
+    assert_accepted_draft(&f.app, &expected, revision);
+    assert_eq!(f.app.page, Page::Diagram);
+    assert_eq!(f.app.layer, Layer::Sa);
+    // This identity was explicitly authored in the diagram's own draft. No
+    // queued click is being remapped or inferred from semantic similarity.
+    assert_eq!(f.app.active_diagram, Some(replacement));
+    assert_eq!(f.app.selected, replacement);
+    assert_eq!(f.app.draft.as_ref().unwrap().original, replacement);
+    assert!(!f.app.project().diagrams.contains_key(&f.diagram));
+    assert_one_draft_history(&mut f.app, &before, &expected);
+}

crates/oa-desktop/src/app/connection_begin_regressions.rs

@@ -0,0 +1,366 @@
+// Test-only proposal pinned to peer 6520a89dc042dd433454f6cc63cb23b0e6df7911.
+// Independent App test module; real popup messages retain menu tokens.
+use super::*;
+use crate::model_menu::{Event as MenuEvent, Request};
+
+struct BeginFixture {
+    app: App,
+    diagram: Id,
+    surface_layer: Layer,
+    source: Id,
+    target: Id,
+    wrong_layer: Id,
+    hidden: Id,
+    tool: crate::connection_tool::Tool,
+}
+
+fn begin_fixture(source_layer: Layer, allocation: bool, mixed: bool) -> BeginFixture {
+    use crate::connection_tool::Tool;
+    let mut p = Project::empty();
+    let (work, performer, exchange) = match source_layer {
+        Layer::Oa => (Kind::Activity, Kind::Entity, Tool::Interaction),
+        Layer::Sa => (Kind::Function, Kind::System, Tool::FunctionalExchange),
+    };
+    let opposite = if source_layer == Layer::Oa {
+        Layer::Sa
+    } else {
+        Layer::Oa
+    };
+    let surface_layer = if mixed { opposite } else { source_layer };
+    let source = p
+        .add_element(
+            if allocation { performer } else { work },
+            source_layer,
+            "Source",
+            None,
+        )
+        .unwrap();
+    let target = p.add_element(work, source_layer, "Target", None).unwrap();
+    let hidden = p
+        .add_element(work, source_layer, "Hidden target", None)
+        .unwrap();
+    let other_work = if opposite == Layer::Oa {
+        Kind::Activity
+    } else {
+        Kind::Function
+    };
+    let wrong_layer = p
+        .add_element(other_work, opposite, "Wrong layer target", None)
+        .unwrap();
+    p.ensure_diagram(source_layer);
+    let diagram = p.ensure_diagram(surface_layer);
+    p.diagrams.get_mut(&diagram).unwrap().projection = if mixed {
+        ProjectionKind::Traceability
+    } else {
+        ProjectionKind::Capabilities
+    };
+    p.place(diagram, source, Position { x: 0., y: 0. });
+    p.place(diagram, target, Position { x: 400., y: 0. });
+    if mixed {
+        p.place(diagram, wrong_layer, Position { x: 800., y: 0. });
+    }
+    let mut app = App::with_project(p);
+    app.page = Page::Diagram;
+    app.layer = surface_layer;
+    app.active_diagram = Some(diagram);
+    app.selected = diagram;
+    app.refresh_draft();
+    app.reconcile_multiselect();
+    assert!(!app.document.can_undo());
+    BeginFixture {
+        app,
+        diagram,
+        surface_layer,
+        source,
+        target,
+        wrong_layer,
+        hidden,
+        tool: if allocation {
+            Tool::Allocation
+        } else {
+            exchange
+        },
+    }
+}
+
+fn begin_surface(f: &BeginFixture) {
+    assert_eq!(f.app.page, Page::Diagram);
+    assert_eq!(f.app.layer, f.surface_layer);
+    assert_eq!(f.app.active_diagram, Some(f.diagram));
+}
+
+fn begin_popup_action(f: &mut BeginFixture) -> Option<Message> {
+    begin_popup_action_from(f, true)
+}
+
+fn begin_popup_action_from(f: &mut BeginFixture, canvas: bool) -> Option<Message> {
+    let mut request = Request::object(f.source, iced::Point::ORIGIN);
+    if canvas {
+        request.canvas = f.app.route_context();
+        request.placement = f.app.project().diagrams[&f.diagram]
+            .nodes
+            .values()
+            .find(|node| node.element == f.source)
+            .map(|node| node.id);
+    }
+    let _ = f.app.update(Message::Menu(MenuEvent::Open(request)));
+    let popup = crate::model_menu::popup(&f.app).expect("real model popup");
+    let expected = format!("Draw {}", f.tool.label().to_lowercase());
+    for entry in popup.entries {
+        if let crate::context_menu::Entry::Action { label, message, .. } = entry
+            && label == expected
+        {
+            if let Some(Message::Menu(MenuEvent::Invoke(token, _))) = &message {
+                assert_eq!(*token, popup.token);
+            } else {
+                assert!(message.is_none(), "Draw must use the menu token envelope");
+            }
+            return message;
+        }
+    }
+    None // Omission is also a valid unavailable-action policy.
+}
+
+fn begin_from_popup(f: &mut BeginFixture) -> Message {
+    begin_from_popup_origin(f, true)
+}
+
+fn begin_from_popup_origin(f: &mut BeginFixture, canvas: bool) -> Message {
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let action =
+        begin_popup_action_from(f, canvas).expect("visible semantic source offers enabled Draw");
+    let _ = f.app.update(action.clone());
+    begin_surface(f);
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+    assert_eq!(f.app.document.revision(), revision);
+    assert!(!f.app.document.can_undo());
+    let session = f
+        .app
+        .connection
+        .as_ref()
+        .expect("menu Draw must arm its tool");
+    assert_eq!(session.tool, f.tool);
+    assert_eq!(session.source, Some(f.source));
+    assert_eq!(session.context, f.app.route_context().unwrap());
+    assert!(session.candidates.contains(&f.target));
+    assert!(!session.candidates.contains(&f.wrong_layer));
+    assert!(!session.candidates.contains(&f.hidden));
+    action
+}
+
+fn begin_complete_and_check_history(f: &mut BeginFixture) {
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    let context = f.app.route_context().unwrap();
+    let _ = f.app.update(Message::Connection(
+        crate::connection_edit::Event::Endpoint(context, f.target),
+    ));
+    begin_surface(f);
+    assert!(f.app.connection.is_none());
+    assert_eq!(f.app.document.revision(), revision + 1);
+    let relations: Vec<_> = f
+        .app
+        .project()
+        .relations
+        .values()
+        .filter(|r| !before.decoded.project.relations.contains_key(&r.id))
+        .collect();
+    assert_eq!(relations.len(), 1);
+    let expected = match f.tool {
+        crate::connection_tool::Tool::Interaction => RelationKind::Interaction,
+        crate::connection_tool::Tool::FunctionalExchange => RelationKind::FunctionalExchange,
+        crate::connection_tool::Tool::Allocation => RelationKind::Allocation,
+        _ => unreachable!(),
+    };
+    assert_eq!(relations[0].kind(), expected);
+    assert_eq!(
+        (relations[0].source(), relations[0].target()),
+        (f.source, f.target)
+    );
+    // Random identities are accepted only for the precise command delta.
+    // Everything else, including traces, metadata and view options, stays exact.
+    let mut expected_project = before.decoded.project.clone();
+    let created = relations[0];
+    assert!(
+        expected_project
+            .relations
+            .insert(created.id, created.clone())
+            .is_none()
+    );
+    if let RelationBody::FunctionalExchange {
+        source_port,
+        target_port,
+        items,
+        ..
+    } = &created.body
+    {
+        assert_eq!(f.tool, crate::connection_tool::Tool::FunctionalExchange);
+        assert!(items.is_empty());
+        assert_ne!(source_port, target_port);
+        let output = &f.app.project().elements[source_port];
+        let input = &f.app.project().elements[target_port];
+        assert_eq!(
+            (output.kind(), output.layer(), output.parent),
+            (Kind::Port, Layer::Sa, Some(f.source))
+        );
+        assert_eq!(
+            (input.kind(), input.layer(), input.parent),
+            (Kind::Port, Layer::Sa, Some(f.target))
+        );
+        assert!(
+            matches!(port_contract(output), Some(PortContract::FunctionOutput { outgoing_items }) if outgoing_items.is_empty())
+        );
+        assert!(
+            matches!(port_contract(input), Some(PortContract::FunctionInput { incoming_items }) if incoming_items.is_empty())
+        );
+        assert!(!before.decoded.project.elements.contains_key(source_port));
+        assert!(!before.decoded.project.elements.contains_key(target_port));
+        assert_eq!(output.id, *source_port);
+        assert_eq!(input.id, *target_port);
+        expected_project
+            .elements
+            .insert(*source_port, output.clone());
+        expected_project
+            .elements
+            .insert(*target_port, input.clone());
+        assert_eq!(
+            f.app.project().elements.len(),
+            before.decoded.project.elements.len() + 2
+        );
+    } else {
+        assert_ne!(f.tool, crate::connection_tool::Tool::FunctionalExchange);
+        assert_eq!(f.app.project().elements, before.decoded.project.elements);
+    }
+    assert_eq!(f.app.project(), &expected_project);
+    assert_eq!(f.app.project().diagrams, before.decoded.project.diagrams);
+    for (id, element) in &before.decoded.project.elements {
+        assert_eq!(&f.app.project().elements[id], element);
+    }
+    begin_assert_source_pair(&f.app);
+    let after = f.app.document.snapshot();
+    let _ = f.app.update(Message::Undo);
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+    assert!(
+        !f.app.document.can_undo(),
+        "creation is a single history step"
+    );
+    let _ = f.app.update(Message::Redo);
+    assert_eq!(f.app.project(), &after.decoded.project);
+    assert_eq!(f.app.document.bundle(), &after.bundle);
+    begin_assert_source_pair(&f.app);
+}
+
+#[test]
+fn contextual_begin_exchange_uses_actual_menu_in_both_mixed_directions() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        let mut f = begin_fixture(layer, false, true);
+        begin_from_popup(&mut f);
+        begin_complete_and_check_history(&mut f);
+    }
+}
+
+#[test]
+fn contextual_begin_cancel_restart_and_stale_menu_preserve_session_ownership() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        let mut f = begin_fixture(layer, false, true);
+        let original = f.app.document.snapshot();
+        let stale_menu = begin_from_popup(&mut f);
+        let first = f.app.route_context().unwrap();
+        let _ = f
+            .app
+            .update(Message::Connection(crate::connection_edit::Event::Restart(
+                first,
+            )));
+        begin_surface(&f);
+        let restarted = f
+            .app
+            .connection
+            .as_ref()
+            .expect("restart retains contextual tool");
+        assert_eq!(restarted.tool, f.tool);
+        assert_eq!(restarted.source, None);
+        assert!(restarted.candidates.contains(&f.source));
+        let current = restarted.context;
+        assert_ne!(current, first);
+        let _ = f.app.update(stale_menu);
+        let _ = f.app.update(Message::Connection(
+            crate::connection_edit::Event::Endpoint(first, f.target),
+        ));
+        assert_eq!(f.app.connection.as_ref().unwrap().context, current);
+        assert_eq!(f.app.connection.as_ref().unwrap().source, None);
+        let _ = f.app.update(Message::Connection(
+            crate::connection_edit::Event::Endpoint(current, f.source),
+        ));
+        assert_eq!(f.app.connection.as_ref().unwrap().source, Some(f.source));
+        let _ = f.app.update(Message::Escape);
+        let _ = f.app.update(Message::Connection(
+            crate::connection_edit::Event::Endpoint(current, f.target),
+        ));
+        assert!(f.app.connection.is_none());
+        begin_surface(&f);
+        assert_eq!(f.app.project(), &original.decoded.project);
+        assert_eq!(f.app.document.bundle(), &original.bundle);
+        assert!(!f.app.document.can_undo());
+    }
+}
+
+#[test]
+fn contextual_begin_allocation_uses_actual_menu_in_both_mixed_directions() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        let mut f = begin_fixture(layer, true, true);
+        begin_from_popup(&mut f);
+        begin_complete_and_check_history(&mut f);
+    }
+}
+
+#[test]
+fn contextual_begin_allocation_is_not_enabled_when_projection_hides_work() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        let mut f = begin_fixture(layer, true, false);
+        let view = project_view(f.app.project(), f.diagram);
+        assert!(view.nodes.iter().any(|n| n.element == f.source));
+        assert!(!view.nodes.iter().any(|n| n.element == f.target));
+        assert!(!f.tool.available_in(layer, ProjectionKind::Capabilities));
+        let before = f.app.document.snapshot();
+        assert!(
+            begin_popup_action(&mut f).is_none(),
+            "Draw allocation must be disabled or omitted when work is not projected"
+        );
+        let _ = f.app.update(Message::Menu(MenuEvent::Close));
+        // Defensive handler refusal complements actual-menu enabledness above.
+        let _ = f
+            .app
+            .update(Message::Connection(crate::connection_edit::Event::Begin(
+                f.tool, f.source,
+            )));
+        assert!(f.app.connection.is_none());
+        begin_surface(&f);
+        assert_eq!(f.app.project(), &before.decoded.project);
+        assert_eq!(f.app.document.bundle(), &before.bundle);
+        assert!(!f.app.document.can_undo());
+    }
+}
+
+fn begin_assert_source_pair(app: &App) {
+    let compiled = oa_core::source_project::compile_bundle(
+        app.document.bundle(),
+        oa_core::source_project::ProjectLimits::default(),
+    )
+    .unwrap();
+    assert_eq!(&compiled.decoded.project, app.project());
+    assert_eq!(&compiled.bundle, app.document.bundle());
+}
+
+#[test]
+fn contextual_begin_explorer_draw_retains_visible_mixed_diagram_in_both_directions() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        let mut f = begin_fixture(layer, false, true);
+        // A real Explorer Request::object has no canvas/placement envelope,
+        // but its generated Draw action still targets the visible current view.
+        begin_from_popup_origin(&mut f, false);
+        begin_complete_and_check_history(&mut f);
+    }
+}

crates/oa-desktop/src/app/context_help_tests.rs

@@ -1,723 +0,0 @@
-//! Context help is a reading overlay, not a workspace navigation or edit.
-use super::*;
-use crate::diagram_usage::Target;
-use crate::guide::Topic;
-
-fn send(app: &mut App, message: Message) {
-    // Do not poll I/O tasks: exercise the same admission boundary as the UI.
-    let _ = app.update(message);
-}
-
-fn architecture() -> (App, Id, Id, Id) {
-    let mut project = Project::empty();
-    let a = project
-        .add_element(Kind::Function, Layer::Sa, "Send", None)
-        .unwrap();
-    let b = project
-        .add_element(Kind::Function, Layer::Sa, "Receive", None)
-        .unwrap();
-    let diagram = project.ensure_diagram(Layer::Sa);
-    project.diagrams.get_mut(&diagram).unwrap().projection = ProjectionKind::FunctionalDataflow;
-    let a = project.place(diagram, a, Position { x: 20., y: 20. });
-    let b = project.place(diagram, b, Position { x: 400., y: 20. });
-    let mut app = App::with_project(project);
-    app.page = Page::Diagram;
-    app.layer = Layer::Sa;
-    app.active_diagram = Some(diagram);
-    app.selected = diagram;
-    app.refresh_draft();
-    app.reconcile_multiselect();
-    (app, diagram, a, b)
-}
-
-fn choose(app: &mut App, placement: Id, choice: multiselect::Choice) {
-    let context = app.multiselect_context().unwrap();
-    send(
-        app,
-        Message::DiagramSelection(multiselect::Event::Choose(
-            context,
-            Target::Placement(placement),
-            choice,
-        )),
-    );
-}
-
-#[test]
-fn context_help_preserves_group_property_draft_camera_and_model() {
-    let (mut app, diagram, a, b) = architecture();
-    choose(&mut app, a, multiselect::Choice::Replace);
-    choose(&mut app, b, multiselect::Choice::Toggle);
-    send(
-        &mut app,
-        Message::Field("/name".into(), "Uncommitted name 雨".into()),
-    );
-    assert!(app.draft_dirty());
-    app.zoom = 0.73;
-    app.pan = iced::Vector::new(31., -57.);
-    let selected = app.selected;
-    let selection = app.multiselect_snapshot().unwrap().targets().to_vec();
-    assert_eq!(selection.len(), 2);
-    let draft = serde_json::to_value(app.draft.as_ref().unwrap().recovery_snapshot()).unwrap();
-    let before = app.document.snapshot();
-    let camera = (app.zoom, app.pan);
-
-    send(&mut app, Message::ContextHelp(Topic::Nesting));
-    assert!(app.context_help);
-    for message in [
-        Message::Page(Page::Catalog),
-        Message::Select(diagram),
-        Message::Apply,
-        Message::RevertProperties,
-        Message::Undo,
-        Message::Delete,
-        Message::Field("/name".into(), "Background mutation".into()),
-    ] {
-        send(&mut app, message);
-    }
-    assert!(app.context_help);
-    send(
-        &mut app,
-        Message::Guide(crate::guide::Event::Topic(Topic::Exchanges)),
-    );
-    assert_eq!(app.guide.topic, Topic::Exchanges);
-    send(&mut app, Message::CloseContextHelp);
-
-    assert!(!app.context_help);
-    assert_eq!(app.page, Page::Diagram);
-    assert_eq!(app.active_diagram, Some(diagram));
-    assert_eq!(app.selected, selected);
-    assert_eq!(
-        app.multiselect_snapshot().unwrap().targets(),
-        selection.as_slice()
-    );
-    assert_eq!((app.zoom, app.pan), camera);
-    assert_eq!(
-        serde_json::to_value(app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
-        draft
-    );
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-    assert!(!app.document.can_undo());
-}
-
-#[test]
-fn context_help_escape_preserves_pending_behavior_form_and_blocks_submit() {
-    use crate::behavior::states;
-    let mut project = Project::empty();
-    let system = project
-        .add_element(Kind::System, Layer::Sa, "System", None)
-        .unwrap();
-    let machine = project
-        .add_element(Kind::StateMachine, Layer::Sa, "Modes", Some(system))
-        .unwrap();
-    let region = project
-        .add_element(Kind::Region, Layer::Sa, "Main", Some(machine))
-        .unwrap();
-    let state = project
-        .add_element(Kind::State, Layer::Sa, "Ready", Some(region))
-        .unwrap();
-    let mut app = App::with_project(project);
-    send(&mut app, Message::Select(state));
-    send(&mut app, Message::Page(Page::Behavior));
-    send(
-        &mut app,
-        Message::Behavior(behavior::Event::States(states::Event::Start(
-            machine,
-            states::Tool::Transition,
-            state,
-        ))),
-    );
-    send(
-        &mut app,
-        Message::Behavior(behavior::Event::States(states::Event::Name(
-            "Pending transition 雨".into(),
-        ))),
-    );
-    assert!(app.behavior.has_pending());
-    let draft = app.behavior.recovery_snapshot().unwrap();
-    let before = app.document.snapshot();
-    let selected = app.selected;
-    send(&mut app, Message::Help);
-    assert!(app.context_help);
-    assert_eq!(app.guide.topic, Topic::States);
-    for event in [
-        states::Event::Cancel,
-        states::Event::Submit,
-        states::Event::Name("Lost".into()),
-    ] {
-        send(&mut app, Message::Behavior(behavior::Event::States(event)));
-    }
-    send(&mut app, Message::Page(Page::Catalog));
-    send(&mut app, Message::Escape);
-    assert!(!app.context_help);
-    assert_eq!(app.page, Page::Behavior);
-    assert_eq!(app.selected, selected);
-    assert_eq!(app.behavior.active_owner, Some(machine));
-    assert!(app.behavior.has_pending());
-    assert_eq!(app.behavior.recovery_snapshot().unwrap(), draft);
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-}
-
-#[test]
-fn context_help_retains_source_draft_and_rejects_background_source_input() {
-    let (mut app, diagram, _, _) = architecture();
-    send(&mut app, Message::Page(Page::Text));
-    send(
-        &mut app,
-        Message::SourceEdit(text_editor::Action::SelectAll),
-    );
-    send(
-        &mut app,
-        Message::SourceEdit(text_editor::Action::Edit(text_editor::Edit::Paste(
-            Arc::new("invalid unfinished source 雨".into()),
-        ))),
-    );
-    assert!(app.source_dirty());
-    send(&mut app, Message::Page(Page::Diagram));
-    let source = app.source_editor.text();
-    let version = app.source_version;
-    let before = app.document.snapshot();
-    send(&mut app, Message::Help);
-    assert!(app.context_help);
-    assert_eq!(app.guide.topic, Topic::Nesting);
-    for message in [
-        Message::ApplySource,
-        Message::RevertSource,
-        Message::SourceEdit(text_editor::Action::Edit(text_editor::Edit::Paste(
-            Arc::new("overwrite".into()),
-        ))),
-    ] {
-        send(&mut app, message);
-    }
-    send(&mut app, Message::Escape);
-    assert_eq!(app.page, Page::Diagram);
-    assert_eq!(app.active_diagram, Some(diagram));
-    assert!(app.source_dirty());
-    assert_eq!(app.source_editor.text(), source);
-    assert_eq!(app.source_version, version);
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-}
-
-#[test]
-fn context_help_f1_selects_scenario_topic_without_leaving_the_workspace() {
-    let fixture = behavior::scenario::direct_tests::fixture();
-    let mut app = App::with_project(fixture.project);
-    send(&mut app, Message::Select(fixture.owner));
-    send(&mut app, Message::Page(Page::Behavior));
-    let before = app.document.snapshot();
-    send(&mut app, Message::Help);
-    assert!(app.context_help);
-    assert_eq!(app.guide.topic, Topic::Scenarios);
-    assert_eq!(app.page, Page::Behavior);
-    assert!(app.scenario_focus_owner().is_none());
-    assert!(!behavior::canvas_workspace::keyboard_owner_enabled(&app));
-    send(&mut app, Message::Escape);
-    assert!(!app.context_help);
-    assert_eq!(app.selected, fixture.owner);
-    assert_eq!(app.behavior.active_owner, Some(fixture.owner));
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-}
-
-#[test]
-fn context_help_disables_allocation_input_including_early_work_drag_dispatch() {
-    let mut project = Project::empty();
-    let diagram = project.ensure_diagram(Layer::Oa);
-    project.diagrams.get_mut(&diagram).unwrap().projection = ProjectionKind::Allocation;
-    let mut app = App::with_project(project);
-    assert!(app.allocation_input_owner());
-    send(
-        &mut app,
-        Message::WorkDrag(allocation_drag::Event::ArrangeNext),
-    );
-    assert!(app.allocation_drag.arrange_next);
-    send(&mut app, Message::Help);
-    assert!(app.context_help);
-    assert!(!app.allocation_input_owner());
-    assert!(!app.allocation_drag.arrange_next);
-    assert_eq!(app.status, "Arrange cancelled");
-    let before = app.document.snapshot();
-    send(
-        &mut app,
-        Message::WorkDrag(allocation_drag::Event::ArrangeNext),
-    );
-    assert!(!app.allocation_drag.arrange_next);
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-    send(&mut app, Message::Escape);
-    assert!(app.allocation_input_owner());
-}
-
-#[test]
-fn context_help_rejects_a_reference_picker_open_queued_from_the_inspector() {
-    let mut project = Project::empty();
-    let owner = project
-        .add_element(Kind::DataType, Layer::Oa, "Record", None)
-        .unwrap();
-    if let Some(SharedBody::DataType { definition, .. }) =
-        project.elements.get_mut(&owner).unwrap().shared_mut()
-    {
-        *definition = DataTypeDefinition::Record { supertype: None };
-    }
-    let mut app = App::with_project(project);
-    send(&mut app, Message::Select(owner));
-    let request = app.draft.as_ref().unwrap().reference_open(
-        app.project(),
-        "/body/Oa/Shared/DataType/definition/Record/supertype",
-        iced::Rectangle {
-            x: 790.,
-            y: 400.,
-            width: 278.,
-            height: 32.,
-        },
-    );
-    let before = serde_json::to_value(app.draft.as_ref().unwrap().recovery_snapshot()).unwrap();
-    send(&mut app, Message::ContextHelp(Topic::Nesting));
-    assert!(app.context_help);
-    send(&mut app, Message::FieldReferenceOpen(request));
-    assert!(!app.reference_input_active());
-    send(&mut app, Message::Escape);
-    assert!(!app.context_help);
-    assert_eq!(
-        serde_json::to_value(app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
-        before
-    );
-}
-
-#[test]
-fn context_help_accepts_live_process_viewport_and_rejects_stale_measurements() {
-    use crate::behavior::topology::CanvasEvent;
-    let mut project = Project::empty();
-    let owner = project
-        .add_element(Kind::Process, Layer::Oa, "Response process", None)
-        .unwrap();
-    let mut app = App::with_project(project);
-    send(&mut app, Message::Select(owner));
-    send(&mut app, Message::Page(Page::Behavior));
-    let context = app.topology_context().unwrap();
-    send(
-        &mut app,
-        Message::TopologyCanvas(CanvasEvent::Viewport(context, iced::Size::new(640., 480.))),
-    );
-    let initial = app.behavior.topology.camera_boundary();
-    let before = app.document.snapshot();
-    send(&mut app, Message::Help);
-    assert!(app.context_help);
-    assert_eq!(app.guide.topic, Topic::Chains);
-
-    let resized = iced::Size::new(420., 330.);
-    let context = app.topology_context().unwrap();
-    send(
-        &mut app,
-        Message::TopologyCanvas(CanvasEvent::Viewport(context, resized)),
-    );
-    let measured = app.behavior.topology.camera_boundary();
-    assert!(
-        measured != initial,
-        "Help must admit passive viewport measurements"
-    );
-    assert!(app.context_help);
-    let epoch = app.canvas_epoch;
-    for field in 0..3 {
-        let mut stale = app.topology_context().unwrap();
-        match field {
-            0 => stale.document = Id::new_v4(),
-            1 => stale.owner = Id::new_v4(),
-            _ => stale.revision += 1,
-        }
-        send(
-            &mut app,
-            Message::TopologyCanvas(CanvasEvent::Viewport(stale, iced::Size::new(999., 777.))),
-        );
-        assert!(app.behavior.topology.camera_boundary() == measured);
-        assert_eq!(app.canvas_epoch, epoch);
-    }
-
-    send(&mut app, Message::CloseContextHelp);
-    assert!(!app.context_help);
-    assert!(app.behavior.topology.camera_boundary() == measured);
-    let context = app.topology_context().unwrap();
-    let epoch = app.canvas_epoch;
-    send(
-        &mut app,
-        Message::TopologyCanvas(CanvasEvent::Viewport(context, resized)),
-    );
-    assert_eq!(
-        app.canvas_epoch, epoch,
-        "The size observed behind Help is already current"
-    );
-    let context = app.topology_context().unwrap();
-    send(
-        &mut app,
-        Message::TopologyCanvas(CanvasEvent::Viewport(context, iced::Size::new(700., 500.))),
-    );
-    assert!(app.behavior.topology.camera_boundary() != measured);
-    assert_eq!(app.page, Page::Behavior);
-    assert_eq!(app.selected, owner);
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-    assert!(!app.document.can_undo());
-}
-
-async fn help_key(
-    mounted: &mut crate::behavior::canvas_workspace::tests::Mounted,
-    app: &mut App,
-    event: iced::Event,
-) -> Vec<Message> {
-    let (mut messages, statuses) = mounted.input_with_status(
-        app,
-        std::slice::from_ref(&event),
-        iced::mouse::Cursor::Unavailable,
-    );
-    super::escape::tests::subscriptions(app, event, statuses[0], &mut messages);
-    for message in messages.iter().cloned() {
-        let task = app.update(message);
-        mounted.perform(app, task).await;
-    }
-    messages
-}
-
-#[tokio::test]
-async fn mounted_context_help_keyboard_scroll_preserves_inspector_focus_and_exact_caret() {
-    use crate::behavior::canvas_workspace::tests::{Mounted, character, key};
-    use iced::keyboard::key::Named;
-    let (mut app, diagram, a, _) = architecture();
-    let element = app.project().diagrams[&diagram].nodes[&a].element;
-    send(&mut app, Message::Select(element));
-    let before = app.document.snapshot();
-    let mut mounted = Mounted::new(&mut app).await;
-    let field = mounted
-        .geometry(&app)
-        .text_inputs
-        .into_iter()
-        .filter(|bounds| bounds.x > app.window_size.width - 320.)
-        .min_by(|a, b| a.y.total_cmp(&b.y))
-        .expect("visible Inspector Name input");
-    mounted.click(&mut app, field.center()).await;
-    help_key(&mut mounted, &mut app, key(Named::Home)).await;
-    for character_value in "DRAFT ".chars() {
-        help_key(
-            &mut mounted,
-            &mut app,
-            character(&character_value.to_string()),
-        )
-        .await;
-    }
-    help_key(&mut mounted, &mut app, key(Named::ArrowLeft)).await;
-    assert_eq!(
-        app.draft.as_ref().unwrap().inputs["/name"].raw,
-        "DRAFT Send"
-    );
-    let camera = (app.zoom, app.pan);
-    help_key(&mut mounted, &mut app, key(Named::F1)).await;
-    assert!(app.context_help);
-    let article = iced::advanced::widget::Id::new(crate::guide::ARTICLE_SCROLL_ID);
-    let geometry = mounted.geometry(&app);
-    let background_scrolls = geometry
-        .scrolls
-        .iter()
-        .filter(|(id, _)| **id != article)
-        .map(|(id, (_, offset))| (id.clone(), *offset))
-        .collect::<Vec<_>>();
-    assert_eq!(geometry.scrolls[&article].1.y, 0.);
-
-    help_key(&mut mounted, &mut app, key(Named::PageDown)).await;
-    let down = mounted.geometry(&app).scrolls[&article].1.y;
-    assert!(down > 0., "PageDown scrolls the mounted Help article");
-    help_key(&mut mounted, &mut app, key(Named::End)).await;
-    let end = mounted.geometry(&app).scrolls[&article].1.y;
-    assert!(end > down);
-    help_key(&mut mounted, &mut app, key(Named::PageDown)).await;
-    assert_eq!(mounted.geometry(&app).scrolls[&article].1.y, end);
-    help_key(&mut mounted, &mut app, key(Named::PageUp)).await;
-    assert!(mounted.geometry(&app).scrolls[&article].1.y < end);
-    help_key(&mut mounted, &mut app, key(Named::Home)).await;
-    assert_eq!(mounted.geometry(&app).scrolls[&article].1.y, 0.);
-    help_key(&mut mounted, &mut app, key(Named::ArrowDown)).await;
-    assert_eq!(mounted.geometry(&app).scrolls[&article].1.y, 40.);
-    help_key(&mut mounted, &mut app, key(Named::ArrowUp)).await;
-    help_key(&mut mounted, &mut app, key(Named::PageUp)).await;
-    let geometry = mounted.geometry(&app);
-    assert_eq!(geometry.scrolls[&article].1.y, 0.);
-    for (id, offset) in background_scrolls {
-        assert_eq!(
-            geometry.scrolls[&id].1, offset,
-            "Help only scrolls its own article"
-        );
-    }
-    for character_value in "IGNORED".chars() {
-        help_key(
-            &mut mounted,
-            &mut app,
-            character(&character_value.to_string()),
-        )
-        .await;
-    }
-    let messages = mounted
-        .batch(
-            &mut app,
-            &[
-                iced::Event::InputMethod(iced::advanced::input_method::Event::Preedit(
-                    "雨".into(),
-                    None,
-                )),
-                iced::Event::InputMethod(iced::advanced::input_method::Event::Commit("雨".into())),
-            ],
-            iced::mouse::Cursor::Unavailable,
-        )
-        .await;
-    assert!(!messages.iter().any(|m| matches!(m, Message::Field(..))));
-    assert_eq!(
-        app.draft.as_ref().unwrap().inputs["/name"].raw,
-        "DRAFT Send"
-    );
-    help_key(&mut mounted, &mut app, key(Named::Escape)).await;
-    assert!(!app.context_help);
-    help_key(&mut mounted, &mut app, character("X")).await;
-    assert_eq!(
-        app.draft.as_ref().unwrap().inputs["/name"].raw,
-        "DRAFTX Send",
-        "Return keeps the actual mid-string caret without refocusing a guessed field"
-    );
-    assert_eq!((app.zoom, app.pan), camera);
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-    let messages = help_key(&mut mounted, &mut app, key(Named::PageDown)).await;
-    assert!(
-        !messages
-            .iter()
-            .any(|m| matches!(m, Message::ContextHelpScroll(_)))
-    );
-    assert!(
-        iced_runtime::task::into_stream(
-            app.update(Message::ContextHelpScroll(crate::guide::ContextScroll::End,))
-        )
-        .is_none(),
-        "A late Help scroll cannot operate after closing"
-    );
-}
-
-#[tokio::test]
-async fn mounted_context_help_observes_modifier_release_before_plain_canvas_click() {
-    use crate::behavior::canvas_workspace::tests::{Mounted, key};
-    use iced::{
-        keyboard::{Event, Modifiers, key::Named},
-        mouse,
-    };
-    let (mut app, diagram, a, b) = architecture();
-    choose(&mut app, a, multiselect::Choice::Replace);
-    app.window_size = iced::Size::new(2000., 1400.);
-    let mut mounted = Mounted::new(&mut app).await;
-    app.zoom = 1.;
-    app.pan = iced::Vector::ZERO;
-    app.fit_to_view = false;
-    mounted.settle(&mut app).await;
-    mounted
-        .batch(
-            &mut app,
-            &[iced::Event::Keyboard(Event::ModifiersChanged(
-                Modifiers::SHIFT,
-            ))],
-            mouse::Cursor::Unavailable,
-        )
-        .await;
-    help_key(&mut mounted, &mut app, key(Named::F1)).await;
-    assert!(app.context_help);
-    mounted
-        .batch(
-            &mut app,
-            &[iced::Event::Keyboard(Event::ModifiersChanged(
-                Modifiers::empty(),
-            ))],
-            mouse::Cursor::Unavailable,
-        )
-        .await;
-    help_key(&mut mounted, &mut app, key(Named::Escape)).await;
-    let bounds = mounted
-        .geometry(&app)
-        .bounds(crate::allocation_input::CANVAS_ID);
-    let node = projection::project_view(app.project(), diagram)
-        .nodes
-        .into_iter()
-        .find(|node| node.id == b)
-        .unwrap();
-    let at = iced::Point::new(
-        bounds.x + node.position.x + 40.,
-        bounds.y + node.position.y + 35.,
-    );
-    mounted.click(&mut app, at).await;
-    assert_eq!(
-        app.multiselect_snapshot().unwrap().targets(),
-        &[Target::Placement(b)],
-        "Shift released during Help must not add the next card to the previous selection"
-    );
-}
-
-#[tokio::test]
-async fn mounted_context_help_retires_held_pan_without_replaying_its_release() {
-    use crate::behavior::canvas_workspace::tests::{Mounted, key};
-    use iced::{keyboard::key::Named, mouse};
-    let (mut app, _, _, _) = architecture();
-    let mut mounted = Mounted::new(&mut app).await;
-    let canvas = mounted
-        .geometry(&app)
-        .bounds(crate::allocation_input::CANVAS_ID);
-    let start = canvas.center();
-    let moved = start + iced::Vector::new(20., 10.);
-    mounted
-        .batch(
-            &mut app,
-            &[
-                iced::Event::Mouse(mouse::Event::CursorMoved { position: start }),
-                iced::Event::Mouse(mouse::Event::ButtonPressed(mouse::Button::Middle)),
-                iced::Event::Mouse(mouse::Event::CursorMoved { position: moved }),
-            ],
-            mouse::Cursor::Available(moved),
-        )
-        .await;
-    let camera = (app.zoom, app.pan);
-    let before = app.document.snapshot();
-    help_key(&mut mounted, &mut app, key(Named::F1)).await;
-    assert!(app.context_help);
-    mounted
-        .batch(
-            &mut app,
-            &[iced::Event::Mouse(mouse::Event::ButtonReleased(
-                mouse::Button::Middle,
-            ))],
-            mouse::Cursor::Unavailable,
-        )
-        .await;
-    help_key(&mut mounted, &mut app, key(Named::Escape)).await;
-    let next = moved + iced::Vector::new(90., 50.);
-    let messages = mounted
-        .batch(
-            &mut app,
-            &[iced::Event::Mouse(mouse::Event::CursorMoved {
-                position: next,
-            })],
-            mouse::Cursor::Available(next),
-        )
-        .await;
-    assert!(!messages.iter().any(|m| matches!(m, Message::Pan(_))));
-    assert_eq!(
-        (app.zoom, app.pan),
-        camera,
-        "Moving without a held button cannot resume the pre-Help pan"
-    );
-    assert!(Arc::ptr_eq(&before, &app.document.snapshot()));
-}
-
-#[tokio::test]
-async fn context_help_barrier_retires_text_selection_drag_without_changing_the_caret() {
-    use iced::advanced::{Layout, layout, widget};
-    use iced::{Element, Event, Rectangle, mouse};
-    type InputState = iced::widget::text_input::State<
-        <iced::Renderer as iced::advanced::text::Renderer>::Paragraph,
-    >;
-    fn input(open: bool) -> Element<'static, Message> {
-        crate::guide::protect_workspace(
-            open,
-            iced::widget::text_input("Name", "A long retained property name")
-                .on_input(|value| Message::Field("/name".into(), value))
-                .width(400)
-                .padding(8)
-                .into(),
-        )
-    }
-    fn dispatch(
-        root: &mut Element<'_, Message>,
-        tree: &mut widget::Tree,
-        node: &layout::Node,
-        renderer: &iced::Renderer,
-        event: Event,
-        cursor: mouse::Cursor,
-    ) -> Vec<Message> {
-        let mut messages = Vec::new();
-        root.as_widget_mut().update(
-            tree,
-            &event,
-            Layout::new(node),
-            cursor,
-            renderer,
-            &mut iced::advanced::clipboard::Null,
-            &mut iced::advanced::Shell::new(&mut messages),
-            &Rectangle::new(iced::Point::ORIGIN, iced::Size::new(400., 60.)),
-        );
-        messages
-    }
-    let mounted = crate::behavior::canvas_workspace::tests::Mounted::unshown().await;
-    let renderer = &mounted.renderer;
-    let mut root = input(false);
-    let mut tree = widget::Tree::new(root.as_widget());
-    let node = root.as_widget_mut().layout(
-        &mut tree,
-        renderer,
-        &layout::Limits::new(iced::Size::ZERO, iced::Size::new(400., 60.)),
-    );
-    let start = iced::Point::new(20., 18.);
-    let end = iced::Point::new(110., 18.);
-    for event in [
-        mouse::Event::CursorMoved { position: start },
-        mouse::Event::ButtonPressed(mouse::Button::Left),
-        mouse::Event::CursorMoved { position: end },
-    ] {
-        let cursor = if matches!(event, mouse::Event::CursorMoved { position } if position == end) {
-            mouse::Cursor::Available(end)
-        } else {
-            mouse::Cursor::Available(start)
-        };
-        dispatch(
-            &mut root,
-            &mut tree,
-            &node,
-            renderer,
-            Event::Mouse(event),
-            cursor,
-        );
-    }
-    let caret = tree.children[0].state.downcast_ref::<InputState>().cursor();
-    assert!(
-        tree.children[0]
-            .state
-            .downcast_ref::<InputState>()
-            .is_focused()
-    );
-    root = input(true);
-    tree.diff(root.as_widget());
-    let messages = dispatch(
-        &mut root,
-        &mut tree,
-        &node,
-        renderer,
-        Event::Window(iced::window::Event::RedrawRequested(
-            std::time::Instant::now(),
-        )),
-        mouse::Cursor::Unavailable,
-    );
-    assert!(
-        messages.is_empty(),
-        "Gesture retirement discards release actions"
-    );
-    dispatch(
-        &mut root,
-        &mut tree,
-        &node,
-        renderer,
-        Event::Mouse(mouse::Event::ButtonReleased(mouse::Button::Left)),
-        mouse::Cursor::Unavailable,
-    );
-    root = input(false);
-    tree.diff(root.as_widget());
-    let later = iced::Point::new(300., 18.);
-    dispatch(
-        &mut root,
-        &mut tree,
-        &node,
-        renderer,
-        Event::Mouse(mouse::Event::CursorMoved { position: later }),
-        mouse::Cursor::Available(later),
-    );
-    let state = tree.children[0].state.downcast_ref::<InputState>();
-    assert!(state.is_focused());
-    assert_eq!(
-        state.cursor(),
-        caret,
-        "An unheld pointer no longer extends the pre-Help text selection"
-    );
-}

crates/oa-desktop/src/app/escape.rs

@@ -14,8 +14,7 @@ pub(crate) fn root<'a, R: renderer::Renderer + 'a>(
     content: Element<'a, Message, Theme, R>,
 ) -> Element<'a, Message, Theme, R> {
     let modal = app.text_workspace.menu().is_none()
-        && (app.context_help
+        && (app.behavior.creation.has_pending()
-            || app.behavior.creation.has_pending()
             || app.diagram_usages.is_some()
             || app.behavior.source_active()
             || (app.page == Page::Text

crates/oa-desktop/src/app/placement_relocation_regressions.rs

@@ -0,0 +1,339 @@
+// Proposed tests against c7065db76ecca3faa733ccb5f09b87fd0a0958be.
+use super::*;
+
+struct RelocationFixture {
+    app: App,
+    source: Id,
+    target: Id,
+    node: Id,
+    other_node: Id,
+    edge: Id,
+}
+
+fn relocation_fixture(source_layer: Layer, target_layer: Layer) -> RelocationFixture {
+    let mut p = Project::empty();
+    let work = p
+        .add_element(Kind::Activity, Layer::Oa, "Observed work", None)
+        .unwrap();
+    let other = p
+        .add_element(Kind::Activity, Layer::Oa, "Other work", None)
+        .unwrap();
+    let edge = p.relate(RelationKind::Interaction, "Observed exchange", work, other);
+    let source = p.ensure_diagram(source_layer);
+    p.diagrams.get_mut(&source).unwrap().projection = ProjectionKind::Traceability;
+    let node = p.place(source, work, Position { x: 20., y: 20. });
+    let other_node = p.place(source, other, Position { x: 500., y: 20. });
+    let mut destination = p.diagrams[&source].clone();
+    destination.id = Id::new_v4();
+    destination.alias = "relocation_destination".into();
+    destination.name = "Relocation destination".into();
+    destination.layer = target_layer;
+    destination.nodes.clear();
+    let target = destination.id;
+    p.diagrams.insert(target, destination);
+    let mut app = App::with_project(p);
+    app.page = Page::Diagram;
+    app.layer = source_layer;
+    app.active_diagram = Some(source);
+    app.selected = node;
+    app.refresh_draft();
+    app.reconcile_multiselect();
+    assert!(
+        matches!(app.draft.as_ref().unwrap().kind, crate::forms::RecordKind::Node(d) if d == source)
+    );
+    assert!(!app.document.can_undo());
+    RelocationFixture {
+        app,
+        source,
+        target,
+        node,
+        other_node,
+        edge,
+    }
+}
+
+fn relocation_field(app: &mut App, path: &str, value: impl ToString) {
+    let _ = app.update(Message::Field(path.into(), value.to_string()));
+}
+
+fn relocation_source_pair(app: &App) {
+    let compiled = oa_core::source_project::compile_bundle(
+        app.document.bundle(),
+        oa_core::source_project::ProjectLimits::default(),
+    )
+    .unwrap();
+    assert_eq!(&compiled.decoded.project, app.project());
+    assert_eq!(&compiled.bundle, app.document.bundle());
+}
+
+fn relocation_selection(app: &App, diagram: Id, placement: Id) {
+    assert_eq!(app.page, Page::Diagram);
+    assert_eq!(app.active_diagram, Some(diagram));
+    assert_eq!(app.layer, app.project().diagrams[&diagram].layer);
+    assert_eq!(app.selected, placement);
+    assert_eq!(app.selected_node, Some(placement));
+    let draft = app.draft.as_ref().unwrap();
+    assert_eq!(draft.original, placement);
+    assert!(matches!(draft.kind, crate::forms::RecordKind::Node(d) if d == diagram));
+}
+
+fn relocation_expected(app: &App, command: Command) -> Document {
+    let mut expected = Document::from_bundle(
+        app.document.bundle().clone(),
+        oa_core::source_project::ProjectLimits::default(),
+    )
+    .unwrap();
+    expected.execute(command).unwrap();
+    expected
+}
+
+fn relocation_history(
+    app: &mut App,
+    before: &oa_core::source_project::CompiledSourceProject,
+    expected: &Document,
+) {
+    assert_eq!(app.project(), expected.project());
+    assert_eq!(app.document.bundle(), expected.bundle());
+    assert!(app.document.can_undo());
+    assert!(!app.document.can_redo());
+    let _ = app.update(Message::Undo);
+    assert_eq!(app.project(), &before.decoded.project);
+    assert_eq!(app.document.bundle(), &before.bundle);
+    assert!(!app.document.can_undo());
+    assert!(app.document.can_redo());
+    let _ = app.update(Message::Redo);
+    assert_eq!(app.project(), expected.project());
+    assert_eq!(app.document.bundle(), expected.bundle());
+    assert!(!app.document.can_redo());
+    relocation_source_pair(app);
+}
+
+#[test]
+fn explicit_placement_relocation_follows_actual_owner_with_optional_new_identity() {
+    for layer in [Layer::Oa, Layer::Sa] {
+        for reidentify in [false, true] {
+            let mut f = relocation_fixture(Layer::Oa, layer);
+            let before = f.app.document.snapshot();
+            let before_project = before.decoded.project.clone();
+            let revision = f.app.document.revision();
+            let id = if reidentify { Id::new_v4() } else { f.node };
+            let mut expected = before_project.clone();
+            let mut placement = expected
+                .diagrams
+                .get_mut(&f.source)
+                .unwrap()
+                .nodes
+                .remove(&f.node)
+                .unwrap();
+            placement.id = id;
+            expected
+                .diagrams
+                .get_mut(&f.target)
+                .unwrap()
+                .nodes
+                .insert(id, placement);
+            let expected_document = relocation_expected(
+                &f.app,
+                Command::Batch(vec![
+                    Command::EditNode {
+                        diagram: f.source,
+                        original: f.node,
+                        node: expected.diagrams[&f.target].nodes[&id].clone(),
+                    },
+                    Command::RelocateNode {
+                        node: id,
+                        diagram: f.target,
+                    },
+                ]),
+            );
+            assert_eq!(expected_document.project(), &expected);
+            relocation_field(&mut f.app, "/diagram", f.target);
+            if reidentify {
+                relocation_field(&mut f.app, "/id", id);
+            }
+            assert!(f.app.apply(), "{}", f.app.status);
+            assert_eq!(f.app.project(), &expected);
+            assert_eq!(f.app.document.revision(), revision + 1);
+            relocation_selection(&f.app, f.target, id);
+            relocation_source_pair(&f.app);
+            assert_eq!(f.app.document.bundle(), expected_document.bundle());
+            relocation_history(&mut f.app, &before, &expected_document);
+        }
+    }
+}
+
+#[test]
+fn same_owner_placement_position_alias_and_identity_keep_mixed_surface() {
+    for different_current_view in [false, true] {
+        for field in ["/position/x", "/alias", "/id"] {
+            let mut f = relocation_fixture(Layer::Sa, Layer::Oa);
+            // Ordinary Select plus the diagram picker can retain an independent
+            // placement Inspector while showing a different saved view. This is
+            // an App-handler workflow, not a claim of native menu execution.
+            let _ = f.app.update(Message::Select(f.app.project().id));
+            let _ = f.app.update(Message::Select(f.node));
+            let current = if different_current_view {
+                f.target
+            } else {
+                f.source
+            };
+            if different_current_view {
+                let _ = f.app.update(Message::Diagram(Choice {
+                    id: current,
+                    label: "Other current view".into(),
+                }));
+            }
+            assert_eq!(f.app.selected, f.node);
+            assert_eq!(f.app.active_diagram, Some(current));
+            assert!(
+                matches!(f.app.draft.as_ref().unwrap().kind, crate::forms::RecordKind::Node(d) if d == f.source)
+            );
+            let before = f.app.document.snapshot();
+            let revision = f.app.document.revision();
+            let mut expected = before.decoded.project.clone();
+            let mut placement = expected
+                .diagrams
+                .get_mut(&f.source)
+                .unwrap()
+                .nodes
+                .remove(&f.node)
+                .unwrap();
+            let value = match field {
+                "/position/x" => {
+                    placement.position.x = 123.;
+                    "123".to_owned()
+                }
+                "/alias" => {
+                    placement.alias = "renamed_placement".into();
+                    placement.alias.clone()
+                }
+                _ => {
+                    placement.id = Id::new_v4();
+                    placement.id.to_string()
+                }
+            };
+            let id = placement.id;
+            let expected_document = relocation_expected(
+                &f.app,
+                Command::EditNode {
+                    diagram: f.source,
+                    original: f.node,
+                    node: placement.clone(),
+                },
+            );
+            expected
+                .diagrams
+                .get_mut(&f.source)
+                .unwrap()
+                .nodes
+                .insert(id, placement);
+            assert_eq!(expected_document.project(), &expected);
+            relocation_field(&mut f.app, field, value);
+            assert!(f.app.apply(), "{}", f.app.status);
+            assert_eq!(f.app.project(), &expected);
+            assert_eq!(f.app.document.bundle(), expected_document.bundle());
+            assert_eq!(f.app.document.revision(), revision + 1);
+            assert_eq!(f.app.page, Page::Diagram);
+            assert_eq!(f.app.active_diagram, Some(current));
+            assert_eq!(f.app.layer, f.app.project().diagrams[&current].layer);
+            assert_eq!(f.app.selected, id);
+            assert_eq!(
+                f.app.selected_node,
+                if different_current_view {
+                    None
+                } else {
+                    Some(id)
+                }
+            );
+            let draft = f.app.draft.as_ref().unwrap();
+            assert_eq!(draft.original, id);
+            assert!(matches!(draft.kind, crate::forms::RecordKind::Node(d) if d == f.source));
+            relocation_source_pair(&f.app);
+            relocation_history(&mut f.app, &before, &expected_document);
+        }
+    }
+}
+
+#[test]
+fn accepted_relocation_refuses_queued_old_canvas_target_with_feedback() {
+    for edge_hit in [false, true] {
+        let mut f = relocation_fixture(Layer::Oa, Layer::Sa);
+        let before = f.app.document.snapshot();
+        let expected_document = relocation_expected(
+            &f.app,
+            Command::Batch(vec![
+                Command::EditNode {
+                    diagram: f.source,
+                    original: f.node,
+                    node: f.app.project().diagrams[&f.source].nodes[&f.node].clone(),
+                },
+                Command::RelocateNode {
+                    node: f.node,
+                    diagram: f.target,
+                },
+            ]),
+        );
+        let mut expected = before.decoded.project.clone();
+        let placement = expected
+            .diagrams
+            .get_mut(&f.source)
+            .unwrap()
+            .nodes
+            .remove(&f.node)
+            .unwrap();
+        expected
+            .diagrams
+            .get_mut(&f.target)
+            .unwrap()
+            .nodes
+            .insert(f.node, placement);
+        let revision = f.app.document.revision();
+        let captured = f.app.route_context().unwrap();
+        relocation_field(&mut f.app, "/diagram", f.target);
+        let message = if edge_hit {
+            Message::CanvasSelect(captured, f.edge)
+        } else {
+            Message::SelectNode(f.other_node)
+        };
+        let _ = f.app.update(message);
+        assert_eq!(f.app.project(), &expected);
+        assert_eq!(f.app.document.revision(), revision + 1);
+        relocation_selection(&f.app, f.target, f.node);
+        assert_eq!(
+            f.app.status,
+            "Properties applied. The view changed; select a visible target again."
+        );
+        assert!(
+            f.app.multiselect_snapshot().is_none_or(|snapshot| {
+                !snapshot.targets().iter().any(|target| {
+                matches!(target, crate::diagram_usage::Target::Placement(id) if *id == f.other_node)
+                    || matches!(target, crate::diagram_usage::Target::Edge(id) if *id == f.edge)
+            })
+            }),
+            "the rejected old hit must not enter the destination selection"
+        );
+        assert_eq!(expected_document.project(), &expected);
+        assert_eq!(f.app.document.bundle(), expected_document.bundle());
+        relocation_source_pair(&f.app);
+        relocation_history(&mut f.app, &before, &expected_document);
+    }
+}
+
+#[test]
+fn rejected_placement_destination_preserves_owner_model_source_and_draft() {
+    let mut f = relocation_fixture(Layer::Oa, Layer::Sa);
+    let before = f.app.document.snapshot();
+    let revision = f.app.document.revision();
+    relocation_field(&mut f.app, "/diagram", Id::new_v4());
+    let draft = serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap();
+    assert!(!f.app.apply());
+    assert_eq!(f.app.project(), &before.decoded.project);
+    assert_eq!(f.app.document.bundle(), &before.bundle);
+    assert_eq!(f.app.document.revision(), revision);
+    assert!(!f.app.document.can_undo());
+    relocation_selection(&f.app, f.source, f.node);
+    assert_eq!(
+        serde_json::to_value(f.app.draft.as_ref().unwrap().recovery_snapshot()).unwrap(),
+        draft
+    );
+}

crates/oa-desktop/src/behavior/canvas_workspace.rs

@@ -16,7 +16,6 @@ pub fn keyboard_enabled(app: &crate::app::App) -> bool {
 /// Passive I/O suspends commands without changing the logical input owner.
 pub(crate) fn keyboard_owner_enabled(app: &crate::app::App) -> bool {
     !app.hosted.visible
-        && !app.context_help
         && app.workflow.is_none()
         && app.file_prompt.is_none()
         && !app.delete_pending

crates/oa-desktop/src/behavior/state_canvas.rs

@@ -1497,9 +1497,7 @@ impl StateCanvas<'_> {
                         format!("{} · {} · right-click to edit", r.name, routing::state_transition_summary(self.project, r))
                     }
                 }).unwrap_or_default(),
-                // General gestures are available in Help; keep this stable slot
+                _ => "Select / move · drag a vertex · drag selected transition endpoints to reconnect · middle-drag to pan".into(),
-                // for the active operation or the item under the pointer.
-                _ => String::new(),
             },
         }
     }

crates/oa-desktop/src/behavior/state_view.rs

@@ -225,13 +225,13 @@ fn selection_controls(app: &App) -> Element<'_, Message> {
         }
         controls = controls
             .push(action(
-                "Clear",
+                "Clear selection",
                 Message::DiagramSelection(SelectionEvent::Clear(snapshot.context())),
             ))
             .push(
                 label(format!(
-                    "Properties: {} only",
+                    "Properties edit only {}",
-                    crate::views::short(app.project().named(app.selected), 10)
+                    crate::views::short(app.project().named(app.selected), 18)
                 ))
                 .wrapping(iced::widget::text::Wrapping::None),
             );
@@ -241,12 +241,12 @@ fn selection_controls(app: &App) -> Element<'_, Message> {
     } else {
         "Use Select / move to select multiple elements"
     };
-    controls
+    column![
-        .push(crate::views::diagram_help(
+        controls,
-            crate::guide::Topic::States,
+        label(hint).wrapping(iced::widget::text::Wrapping::None)
-            hint,
+    ]
-        ))
+    .height(56)
-        .into()
+    .into()
 }
 
 fn transition_details(machine: Id, selected: Id) -> Element<'static, Message> {

crates/oa-desktop/src/behavior/topology/view.rs

@@ -585,13 +585,15 @@ fn selection_controls(app: &App) -> Element<'_, Message> {
             .wrapping(iced::widget::text::Wrapping::None),
         );
     }
-    // Keep the row even with an empty set so selection never moves the canvas.
+    // These two rows exist even with an empty set so selection never moves the
-    controls
+    // canvas viewport or changes the camera's interpretation of the pointer.
-        .push(crate::views::diagram_help(
+    column![
-            crate::guide::Topic::Chains,
+        controls,
-            "Shift-click toggles selection. Drag selected local cards to reorder; reused previews are read-only.",
+        label("Shift+click toggles · drag selected cards to reorder · previews are read-only")
-        ))
+            .wrapping(iced::widget::text::Wrapping::None)
-        .into()
+    ]
+    .height(56)
+    .into()
 }
 
 fn editor_panel<'a, R: iced::advanced::text::Renderer + 'a>(

crates/oa-desktop/src/connection_edit.rs

@@ -39,6 +39,24 @@ impl Session {
     }
 }
 
+/// Contextual drawing follows the visible semantic source, not the palette layer.
+/// The caller separately validates the menu/context lifetime and pending drafts.
+pub fn can_begin(project: &Project, diagram: Id, tool: Tool, source: Id) -> bool {
+    let Some(diagram) = project.diagrams.get(&diagram) else {
+        return false;
+    };
+    let Some(element) = project.elements.get(&source) else {
+        return false;
+    };
+    diagram.projection.is_architecture()
+        && (element.layer() == diagram.layer
+            || diagram.projection == oa_core::ProjectionKind::Traceability)
+        && Tool::for_layer(element.layer()).contains(&tool)
+        && tool.can_start(project, source)
+        && (tool != Tool::Allocation || tool.available_in(element.layer(), diagram.projection))
+        && visible(&oa_core::projection::project_view(project, diagram.id)).any(|id| id == source)
+}
+
 pub fn visible(view: &ProjectedView) -> impl Iterator<Item = Id> + '_ {
     view.nodes
         .iter()

crates/oa-desktop/src/diagram.rs

@@ -37,8 +37,6 @@ mod port_hit_tests;
 #[path = "diagram/view_options_tests.rs"]
 mod view_options_tests;
 
-#[path = "diagram/label_cues.rs"]
-mod label_cues;
 #[path = "diagram/port_labels.rs"]
 mod port_labels;
 pub use port_labels::PortLabels;
@@ -93,7 +91,6 @@ struct Scene {
     work: Option<Arc<crate::app::allocation_drag::Preview>>,
     view: ProjectedView,
     routed: Arc<RoutedView>,
-    label_cues: BTreeMap<Id, label_cues::Cue>,
 }
 struct CachedScene {
     context: Context,
@@ -532,11 +529,6 @@ impl DiagramCanvas<'_> {
                 work: Some(preview.clone()),
                 view: preview.placement.view.clone(),
                 routed: preview.routed.clone(),
-                label_cues: label_cues::derive(
-                    preview.project(),
-                    &preview.placement.view,
-                    &preview.routed,
-                ),
             });
             *state.work_cache.borrow_mut() = Some(scene.clone());
             return scene;
@@ -590,7 +582,6 @@ impl DiagramCanvas<'_> {
         );
         let scene = Arc::new(Scene {
             work: None,
-            label_cues: label_cues::derive(self.project, &view, &routed),
             view,
             routed,
         });
@@ -1002,7 +993,10 @@ impl canvas::Program<Message> for DiagramCanvas<'_> {
                             world,
                         ));
                     }
-                    return Some(Action::publish(Message::Select(port.element)).and_capture());
+                    return Some(
+                        Action::publish(Message::CanvasSelect(self.context, port.element))
+                            .and_capture(),
+                    );
                 }
                 if let Some(id) = self.hit(view, p) {
                     let position = self
@@ -1019,7 +1013,7 @@ impl canvas::Program<Message> for DiagramCanvas<'_> {
                     .hit_label(&scene.routed, p)
                     .or_else(|| self.hit_association_label(&scene.routed, p))
                 {
-                    Some(Action::publish(Message::Select(id)).and_capture())
+                    Some(Action::publish(Message::CanvasSelect(self.context, id)).and_capture())
                 } else if let Some((id, segment)) = self.hit_edge(&scene.routed, p) {
                     if id == self.selected
                         && self.editable
@@ -1035,7 +1029,7 @@ impl canvas::Program<Message> for DiagramCanvas<'_> {
                         self.begin_route(state, world, Handle::Bend(index), route);
                         Some(Action::capture())
                     } else {
-                        Some(Action::publish(Message::Select(id)).and_capture())
+                        Some(Action::publish(Message::CanvasSelect(self.context, id)).and_capture())
                     }
                 } else {
                     state.pan_start = Some((mouse::Button::Left, p));
@@ -1359,20 +1353,6 @@ impl canvas::Program<Message> for DiagramCanvas<'_> {
             }
             if !routed.label.text.is_empty() {
                 let label = &routed.label;
-                if let Some(cue) = scene.label_cues.get(&edge.id) {
-                    f.stroke(
-                        &Path::line(point(cue.boundary), point(cue.anchor)),
-                        Stroke {
-                            line_dash: canvas::LineDash {
-                                segments: label_cues::DASH,
-                                offset: 0,
-                            },
-                            ..Stroke::default()
-                                .with_color(style::MUTED)
-                                .with_width(label_cues::WIDTH)
-                        },
-                    );
-                }
                 f.fill_rectangle(
                     point(label.bounds.position),
                     Size::new(label.bounds.size.width, label.bounds.size.height),
@@ -1976,7 +1956,6 @@ pub fn export_svg(p: &Project, diagram: Id) -> Result<String, ExportError> {
     }
     let view = project_view(p, diagram);
     let routed = route_diagram(p, d, &view);
-    let label_cues = label_cues::derive(p, &view, &routed);
     let left = routed.bounds.position.x - 30.;
     let top = routed.bounds.position.y - 30.;
     let right = routed.bounds.position.x + routed.bounds.size.width + 30.;
@@ -2054,9 +2033,6 @@ pub fn export_svg(p: &Project, diagram: Id) -> Result<String, ExportError> {
         svg.push_str(&format!("<path data-edge=\"{}\" d=\"{path}\" fill=\"none\" stroke=\"#8999a9\" stroke-width=\"1.5\"{dashed}{arrow}><title>{}</title></path>",edge.id,escape(p.named(edge.id))));
         let label = &route.label;
         if !label.text.is_empty() {
-            if let Some(cue) = label_cues.get(&edge.id) {
-                svg.push_str(&label_cues::svg(edge.id, *cue));
-            }
             svg.push_str(&format!("<rect x=\"{}\" y=\"{}\" width=\"{}\" height=\"{}\" fill=\"white\"/><text x=\"{}\" y=\"{}\" text-anchor=\"middle\" dominant-baseline=\"central\" font-family=\"sans-serif\" font-size=\"13\" fill=\"#637487\">{}</text>",label.bounds.position.x,label.bounds.position.y,label.bounds.size.width,label.bounds.size.height,label.center.x,label.center.y,escape(&label.text)));
         }
         if let Some(relation) = p.relations.get(&edge.id) {
@@ -2468,7 +2444,7 @@ mod tests {
         .unwrap()
         .into_inner()
         .0;
-        assert!(matches!(selected,Some(Message::Select(id)) if id==port.element));
+        assert!(matches!(selected,Some(Message::CanvasSelect(_, id)) if id==port.element));
         let request = canvas.context_request(
             &state,
             click,
@@ -3081,7 +3057,7 @@ mod tests {
                 let mut state = State::default();
                 assert_eq!(canvas.hit_association_label(&routed, at), Some(edge));
                 assert!(
-                    matches!(pointer(&canvas,&mut state,mouse::Event::ButtonPressed(mouse::Button::Left),at),Some(Message::Select(id)) if id==edge)
+                    matches!(pointer(&canvas,&mut state,mouse::Event::ButtonPressed(mouse::Button::Left),at),Some(Message::CanvasSelect(_, id)) if id==edge)
                 );
                 assert!(
                     state.route_drag.is_none(),
@@ -3131,7 +3107,7 @@ mod tests {
         let center = scene.routed.edges[&edge].label.center;
         let screen = point(center) + canvas.pan;
         assert!(
-            matches!(pointer(&canvas,&mut state,mouse::Event::ButtonPressed(mouse::Button::Left),screen),Some(Message::Select(id)) if id==edge)
+            matches!(pointer(&canvas,&mut state,mouse::Event::ButtonPressed(mouse::Button::Left),screen),Some(Message::CanvasSelect(_, id)) if id==edge)
         );
         canvas.selected = edge;
         pointer(

crates/oa-desktop/src/diagram/attachment_tests.rs

@@ -423,7 +423,6 @@ fn coincident_attachment_handles_honor_explicit_end_choice() {
     let c = canvas(&app, 1.);
     let mut scene = Scene {
         work: None,
-        label_cues: BTreeMap::new(),
         view: projection::project_view(c.project, c.diagram),
         routed: Arc::new(route_diagram(
             c.project,

crates/oa-desktop/src/diagram/label_cues.rs

@@ -1,403 +0,0 @@
-//! Experimental, presentation-only label association. Never used for picking.
-use oa_core::{
-    Id, Position, Project,
-    projection::ProjectedView,
-    routing::{self, RoutedView, RoutingBounds},
-};
-use std::collections::BTreeMap;
-
-#[derive(Debug, Clone, Copy, PartialEq)]
-pub(super) struct Cue {
-    pub boundary: Position,
-    pub anchor: Position,
-}
-
-const MIN_GAP: f32 = 12.;
-const LANDING_CLEARANCE: f32 = 7.;
-pub(super) const DASH: &[f32] = &[2., 3.];
-pub(super) const WIDTH: f32 = 1.;
-
-pub(super) fn derive(
-    project: &Project,
-    view: &ProjectedView,
-    routed: &RoutedView,
-) -> BTreeMap<Id, Cue> {
-    let association_labels: Vec<_> = routed
-        .edges
-        .values()
-        .flat_map(|edge| {
-            project
-                .relations
-                .get(&edge.id)
-                .into_iter()
-                .flat_map(move |relation| {
-                    routing::association_end_geometry(relation, edge)
-                        .into_iter()
-                        .map(|end| end.label.bounds)
-                })
-        })
-        .collect();
-    routed
-        .edges
-        .values()
-        .filter_map(|edge| {
-            if edge.label.text.is_empty() {
-                return None;
-            }
-            let bounds = edge.label.bounds;
-            let anchor = edge.label.anchor;
-            // Nearest rectangle boundary, not center displacement (which inflates
-            // apparent separation for long labels).
-            let boundary = Position {
-                x: anchor
-                    .x
-                    .clamp(bounds.position.x, bounds.position.x + bounds.size.width),
-                y: anchor
-                    .y
-                    .clamp(bounds.position.y, bounds.position.y + bounds.size.height),
-            };
-            if (anchor.x - boundary.x).hypot(anchor.y - boundary.y) <= MIN_GAP {
-                return None;
-            }
-            let cue = Cue { boundary, anchor };
-            for other in routed.edges.values().filter(|other| other.id != edge.id) {
-                if other.points.windows(2).any(|pair| {
-                    point_distance(anchor, pair[0], pair[1]) <= LANDING_CLEARANCE
-                        || intersects(cue.boundary, cue.anchor, pair[0], pair[1])
-                }) {
-                    return None;
-                }
-                if !other.label.text.is_empty() && crosses_box(cue, other.label.bounds) {
-                    return None;
-                }
-            }
-            if view.nodes.iter().any(|node| {
-                crosses_box(
-                    cue,
-                    RoutingBounds {
-                        position: node.position,
-                        size: node.size,
-                    },
-                )
-            }) || association_labels
-                .iter()
-                .any(|bounds| crosses_box(cue, *bounds))
-            {
-                return None;
-            }
-            Some((edge.id, cue))
-        })
-        .collect()
-}
-
-fn point_distance(p: Position, a: Position, b: Position) -> f32 {
-    let dx = b.x - a.x;
-    let dy = b.y - a.y;
-    let length = dx * dx + dy * dy;
-    let t = if length == 0. {
-        0.
-    } else {
-        (((p.x - a.x) * dx + (p.y - a.y) * dy) / length).clamp(0., 1.)
-    };
-    (p.x - a.x - t * dx).hypot(p.y - a.y - t * dy)
-}
-
-fn cross(a: Position, b: Position, c: Position) -> f32 {
-    (b.x - a.x) * (c.y - a.y) - (b.y - a.y) * (c.x - a.x)
-}
-
-fn intersects(a: Position, b: Position, c: Position, d: Position) -> bool {
-    // Closed segments: touching an unrelated path is also ambiguous.
-    if a.x.max(b.x) < c.x.min(d.x)
-        || c.x.max(d.x) < a.x.min(b.x)
-        || a.y.max(b.y) < c.y.min(d.y)
-        || c.y.max(d.y) < a.y.min(b.y)
-    {
-        return false;
-    }
-    cross(a, b, c) * cross(a, b, d) <= 0. && cross(c, d, a) * cross(c, d, b) <= 0.
-}
-
-fn crosses_box(cue: Cue, bounds: RoutingBounds) -> bool {
-    let x = bounds.position.x;
-    let y = bounds.position.y;
-    let right = x + bounds.size.width;
-    let bottom = y + bounds.size.height;
-    let inside = |p: Position| p.x >= x && p.x <= right && p.y >= y && p.y <= bottom;
-    let corners = [
-        Position { x, y },
-        Position { x: right, y },
-        Position {
-            x: right,
-            y: bottom,
-        },
-        Position { x, y: bottom },
-    ];
-    inside(cue.boundary)
-        || inside(cue.anchor)
-        || (0..4).any(|i| intersects(cue.boundary, cue.anchor, corners[i], corners[(i + 1) % 4]))
-}
-
-pub(super) fn svg(edge: Id, cue: Cue) -> String {
-    format!(
-        "<path data-label-cue=\"{edge}\" d=\"M {} {} L {} {}\" fill=\"none\" stroke=\"#4b5968\" stroke-width=\"1\" stroke-dasharray=\"2 3\" pointer-events=\"none\"/>",
-        cue.boundary.x, cue.boundary.y, cue.anchor.x, cue.anchor.y
-    )
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use oa_core::{Diagram, Size};
-    use serde_json::json;
-
-    fn representative() -> (Project, Id, Id) {
-        let mut project = oa_core::persistence::decode(include_bytes!(
-            "../../../../examples/release1/model.json"
-        ))
-        .unwrap();
-        let id: Id = "00000000-0038-4000-8000-000000000001".parse().unwrap();
-        let mut nodes = serde_json::Map::new();
-        for (i, (alias, x, y, width, height)) in [
-            ("oa_assessment_procedure", 314, 40, 243, 101),
-            ("sa_technician", 1180, 18, 265, 143),
-            ("sa_assess", 54, 245, 265, 143),
-            ("sa_control", 736, 245, 265, 143),
-            ("sa_repair", 1083, 343, 266, 143),
-            ("sa_reset", 227, 516, 266, 119),
-            ("oa_triage", 1317, 581, 243, 103),
-            ("sa_confirm", 227, 689, 266, 143),
-        ]
-        .into_iter()
-        .enumerate()
-        {
-            let element = project
-                .elements
-                .values()
-                .find(|e| e.alias == alias)
-                .unwrap()
-                .id;
-            let node = format!("00000000-0038-4000-8000-{:012}", 101 + i);
-            nodes.insert(
-                node.clone(),
-                json!({"id":node,"alias":format!("issue38_{alias}"),"element":element,
-                "position":{"x":x,"y":y},"size":{"width":width,"height":height},"collapsed":false}),
-            );
-        }
-        let diagram: Diagram =
-            serde_json::from_value(json!({"id":id,"alias":"issue38_representative_mixed",
-            "name":"Representative eight-card view","description":"Not recovered user source",
-            "layer":"Sa","projection":"Traceability","nodes":nodes,"routes":[]}))
-            .unwrap();
-        project.diagrams.insert(id, diagram);
-        assert!(
-            !oa_core::validation::validate(&project)
-                .iter()
-                .any(|issue| issue.severity == oa_core::validation::Severity::Error)
-        );
-        (
-            project,
-            id,
-            "63009b5f-539e-5914-b630-ec6b7fefb4d5".parse().unwrap(),
-        )
-    }
-
-    #[test]
-    fn representative_cue_and_svg_preserve_complete_project_and_geometry() {
-        let (project, diagram, edge) = representative();
-        let before = project.clone();
-        let view = oa_core::projection::project_view(&project, diagram);
-        let routed = routing::route_diagram(&project, &project.diagrams[&diagram], &view);
-        let geometry = routed.clone();
-        assert_eq!(view.edges.len(), 12);
-        let cues = derive(&project, &view, &routed);
-        assert_eq!(
-            cues[&edge],
-            Cue {
-                boundary: Position { x: 1180., y: 274.5 },
-                anchor: Position { x: 1162., y: 274.5 }
-            }
-        );
-        assert_eq!(project, before);
-        assert_eq!(routed, geometry);
-        let output = super::super::export_svg(&project, diagram).unwrap();
-        let cue = output
-            .split('<')
-            .find(|part| part.contains(&format!("data-label-cue=\"{edge}\"")))
-            .unwrap();
-        assert!(cue.contains("stroke-dasharray=\"2 3\""));
-        assert!(!cue.contains("marker") && !cue.contains("data-edge="));
-        assert_eq!(project, before);
-        assert_eq!(
-            routing::route_diagram(&project, &project.diagrams[&diagram], &view),
-            geometry
-        );
-    }
-
-    #[test]
-    fn default_gap_and_anchor_inside_label_do_not_add_cues() {
-        let (project, diagram, edge) = representative();
-        let view = oa_core::projection::project_view(&project, diagram);
-        let mut routed = routing::route_diagram(&project, &project.diagrams[&diagram], &view);
-        // Geometry controls: center 18 above anchor with a 24-high label leaves
-        // only a six-unit boundary gap. Large text width must not trigger a cue.
-        let label = &mut routed.edges.get_mut(&edge).unwrap().label;
-        label.bounds = RoutingBounds {
-            position: Position {
-                x: label.anchor.x - 116.5,
-                y: label.anchor.y - 30.,
-            },
-            size: Size {
-                width: 233.,
-                height: 24.,
-            },
-        };
-        assert!(!derive(&project, &view, &routed).contains_key(&edge));
-        // Same clear horizontal corridor as the representative cue: only the
-        // boundary gap changes, so these controls isolate the strict threshold.
-        for (gap, admitted) in [(12., false), (12.25, true)] {
-            let label = &mut routed.edges.get_mut(&edge).unwrap().label;
-            label.bounds = RoutingBounds {
-                position: Position {
-                    x: label.anchor.x + gap,
-                    y: label.anchor.y - 12.,
-                },
-                size: Size {
-                    width: 233.,
-                    height: 24.,
-                },
-            };
-            assert_eq!(
-                derive(&project, &view, &routed).contains_key(&edge),
-                admitted
-            );
-        }
-        let mut authored = project.clone();
-        authored
-            .diagrams
-            .get_mut(&diagram)
-            .unwrap()
-            .routes
-            .push(oa_core::EdgeRoute {
-                edge,
-                source_attachment: None,
-                target_attachment: None,
-                waypoints: vec![],
-                label: Some(oa_core::EdgeLabel {
-                    fraction: 0.5,
-                    offset: Position { x: 0., y: 0. },
-                }),
-            });
-        let authored_before = authored.clone();
-        let authored_routed =
-            routing::route_diagram(&authored, &authored.diagrams[&diagram], &view);
-        assert!(!derive(&authored, &view, &authored_routed).contains_key(&edge));
-        assert_eq!(authored, authored_before);
-    }
-
-    #[test]
-    fn shared_or_near_landing_and_route_card_label_obstructions_suppress_cue() {
-        let (project, diagram, edge) = representative();
-        let view = oa_core::projection::project_view(&project, diagram);
-        let routed = routing::route_diagram(&project, &project.diagrams[&diagram], &view);
-        let other = *routed.edges.keys().find(|id| **id != edge).unwrap();
-        for x in [1162., 1168., 1171.] {
-            let mut changed = routed.clone();
-            changed.edges.get_mut(&other).unwrap().points =
-                vec![Position { x, y: 260. }, Position { x, y: 290. }];
-            // x1162 shares the landing, x1168 is too near, x1171 crosses the cue.
-            assert!(!derive(&project, &view, &changed).contains_key(&edge));
-        }
-        // These segments lie LEFT of the cue and cannot intersect it. They
-        // independently exercise landing clearance, including its boundary.
-        for (x, admitted) in [(1156., false), (1155., false), (1154., true)] {
-            let mut changed = routed.clone();
-            changed.edges.get_mut(&other).unwrap().points =
-                vec![Position { x, y: 260. }, Position { x, y: 290. }];
-            assert_eq!(
-                derive(&project, &view, &changed).contains_key(&edge),
-                admitted
-            );
-        }
-        let mut cards = view.clone();
-        cards.nodes[0].position = Position { x: 1169., y: 270. };
-        cards.nodes[0].size = Size {
-            width: 4.,
-            height: 10.,
-        };
-        assert!(!derive(&project, &cards, &routed).contains_key(&edge));
-        let mut labels = routed.clone();
-        let label = &mut labels.edges.get_mut(&other).unwrap().label;
-        label.text = "Obstruction".into();
-        label.bounds = RoutingBounds {
-            position: Position { x: 1169., y: 270. },
-            size: Size {
-                width: 4.,
-                height: 10.,
-            },
-        };
-        assert!(!derive(&project, &view, &labels).contains_key(&edge));
-    }
-
-    #[test]
-    fn selection_hover_and_camera_reuse_cached_scene_cues() {
-        let (project, diagram, edge) = representative();
-        let mut canvas = super::super::DiagramCanvas {
-            selection: None,
-            allocation: None,
-            project: &project,
-            view_index: None,
-            diagram,
-            selected: Id::nil(),
-            navigation_focus: None,
-            zoom: 1.,
-            pan: iced::Vector::ZERO,
-            context: crate::route_edit::Context {
-                document: project.id,
-                diagram,
-                revision: 0,
-                epoch: 0,
-            },
-            selected_bend: None,
-            selected_attachment: None,
-            editable: true,
-            placing: false,
-            connection: None,
-        };
-        let mut state = super::super::State::default();
-        let before = canvas.scene(&state);
-        assert!(before.label_cues.contains_key(&edge));
-        canvas.selected = edge;
-        canvas.zoom = 0.52;
-        canvas.pan = iced::Vector::new(25., 30.);
-        state.pointer = Some(iced::Point::new(60., 70.));
-        let after = canvas.scene(&state);
-        assert!(std::sync::Arc::ptr_eq(&before, &after));
-        assert_eq!(before.label_cues, after.label_cues);
-        let mut changed = project.clone();
-        changed
-            .diagrams
-            .get_mut(&diagram)
-            .unwrap()
-            .routes
-            .push(oa_core::EdgeRoute {
-                edge,
-                source_attachment: None,
-                target_attachment: None,
-                waypoints: vec![],
-                label: Some(oa_core::EdgeLabel {
-                    fraction: 0.5,
-                    offset: Position { x: 0., y: 0. },
-                }),
-            });
-        canvas.project = &changed;
-        canvas.context.revision += 1;
-        let rebuilt = canvas.scene(&state);
-        assert!(!std::sync::Arc::ptr_eq(&after, &rebuilt));
-        assert!(!rebuilt.label_cues.contains_key(&edge));
-        assert_eq!(
-            rebuilt.routed.edges[&edge].label.center,
-            rebuilt.routed.edges[&edge].label.anchor
-        );
-    }
-}

crates/oa-desktop/src/diagram/pointer_tests.rs

@@ -179,7 +179,7 @@ fn coalesced_port_drag_commits_once_through_app_and_source_history() {
             zoom,
         );
         assert_eq!(messages.len(), 2);
-        assert!(matches!(&messages[0],Message::Select(id)if *id==output));
+        assert!(matches!(&messages[0],Message::CanvasSelect(_, id)if *id==output));
         assert!(
             matches!(&messages[1],Message::PortAnchor(port_edit::Event::Commit(_,_,anchor))if anchor.port==output&&anchor.side==PortAnchorSide::Top)
         );
@@ -251,7 +251,7 @@ fn menu_captured_motion_must_not_turn_following_click_into_old_port_drag() {
         b,
     );
     let picked = match &press {
-        Message::Select(id) => Some(*id),
+        Message::CanvasSelect(_, id) => Some(*id),
         _ => None,
     };
     let release_debug = format!("{release:?}");
@@ -300,7 +300,7 @@ fn drag_from_already_selected_stationary_port_keeps_source_between_batches() {
     .filter_map(|e| event(&c, &mut state, e, b))
     .collect();
     assert!(
-        matches!(messages.first(),Some(Message::Select(id)) if *id==output),
+        matches!(messages.first(),Some(Message::CanvasSelect(_, id)) if *id==output),
         "Stationary source was lost between batches: {messages:?}"
     );
     assert!(

crates/oa-desktop/src/diagram/port_hit_tests.rs

@@ -165,7 +165,7 @@ fn nested_owner_palette_selection_drag_and_context_menu_pick_the_same_port() {
         .unwrap()
         .into_inner()
         .0;
-        assert!(matches!(press, Some(Message::Select(id)) if id == port.element));
+        assert!(matches!(press, Some(Message::CanvasSelect(_, id)) if id == port.element));
         assert_eq!(state.port_drag.as_ref().unwrap().anchor.port, port.element);
         let menu = canvas.context_request(&state, at, bounds);
         assert_eq!(menu.object, port.element);

crates/oa-desktop/src/diagram/port_labels.rs

@@ -375,7 +375,7 @@ mod tests {
                 messages.extend(message);
             }
         }
-        assert!(matches!(messages.first(), Some(Message::Select(id)) if *id == port));
+        assert!(matches!(messages.first(), Some(Message::CanvasSelect(_, id)) if *id == port));
         assert!(
             matches!(messages.last(), Some(Message::PortAnchor(crate::port_edit::Event::Commit(_, _, anchor))) if anchor.port == port && anchor.side == PortAnchorSide::Top)
         );

crates/oa-desktop/src/guide.rs

@@ -48,11 +48,6 @@ pub enum Event {
 
 pub(crate) const ARTICLE_SCROLL_ID: &str = "engineering-guide-article";
 
-mod context_help;
-pub(crate) use context_help::{
-    ContextScroll, context_scroll_key, context_scroll_task, protect_workspace,
-};
-
 impl State {
     /// Returns whether navigation selected a different article.
     pub fn update(&mut self, event: Event) -> bool {
@@ -315,7 +310,7 @@ fn article(topic: Topic) -> Article {
                                 "Use the diagram selector or + View to work with a focused diagram. View properties edits its name, perspective, projection and Saved view visibility. Apply changes commits the view settings.",
                                 "Choose Containment for semantic children, Architecture · allocated work for responsibilities, Functional dataflow for work and exchanges, or Missions & capabilities for outcomes. All relationships explores one layer; OA ↔ SA traceability can show placed elements from both layers and their correspondence lines alongside ordinary relationships.",
                                 "Select an element and edit Semantic parent to change ownership. Use the Allocation palette tool to connect a performer to existing unallocated leaf work in Containment. The relationship can appear as a line there; Architecture · allocated work shows responsibility through nesting instead. Saved visibility filters can hide a line without removing the relationship.",
-                                "Scroll to zoom and use Fit to frame the current view. In allocated-work views, dragging work changes its assignment and placement together. Choose Arrange or press Alt+A to move work without changing responsibility for that one drag; Escape cancels the armed action. Auto-layout arranges the whole view. Export SVG produces a shareable view.",
+                                "Scroll to zoom and use Fit to frame the current view. In allocated-work views, dragging work changes its assignment and placement together. Choose Arrange next drag or press Alt+A to move work without changing responsibility for that one drag; Escape cancels the armed action. Auto-layout arranges the whole view. Export SVG produces a shareable view.",
                                 "Select a diagram node to access Placement, Fold / unfold and Hide. With the canvas focused, Delete hides its placement; Shift+Delete asks to remove the model element. Other views retain a hidden element. Undo restores either change.",
                             ],
                         ),
@@ -327,6 +322,8 @@ fn article(topic: Topic) -> Article {
                             "Show a correspondence between OA and SA",
                             &[
                                 "Choose OA ↔ SA traceability in View content. Changing this setting does not create counterparts or add their placements, so an existing single-layer diagram can initially look unchanged.",
+                                "Switching back to Architecture or another single-layer projection shows only that view's layer. The other layer's placements, routing and saved visibility remain stored; return to OA ↔ SA traceability to show them again, subject to the view's filters. Selecting a displayed card, port or line and opening its Properties keeps the current view and perspective. Applying ordinary Properties edits keeps that saved architecture view open. Changing a placement's Diagram explicitly moves it and follows its destination. Changes you make to the view's own perspective or identity still take effect. If the app asks you to select again, choose a visible target.",
+                                "In a mixed traceability view, use Draw from a visible source's canvas menu or the Model explorer sidebar on the Architecture page to connect from that source's OA or SA layer without leaving the view. Choose a highlighted compatible visible target; Escape cancels. The palette offers tools for the view's perspective. Opening an endpoint or selecting a record in the Model explorer sidebar follows that record's perspective. Contextual relationship forms keep the view while opening; applying the reviewed relationship can navigate to its result.",
                                 "Use Review layer traces to inspect named Operational and System endpoints and the meaning of their link. This opens the model's layer-trace list with no search restriction; traces between relationships are reviewed here rather than drawn between element cards.",
                                 "In the chosen architecture view, use Add existing elements. The chooser offers compatible elements from both layers. Select an existing endpoint and click its position in the canvas; repeat for the other end if needed. This adds a placement, not a new semantic element or trace. For port correspondences, place the ports' owners.",
                                 "The view shows correspondence lines alongside ordinary relationships. The shown-line count reflects the current projection and visibility settings, not trace coverage. If a line is hidden, use View visibility and inspect Saved view visibility; placing an endpoint does not remove explicit hides or filters.",
@@ -339,7 +336,7 @@ fn article(topic: Topic) -> Article {
                                 "Finish or cancel property and source edits, then drag an Activity or Function body in Architecture · allocated work. Aim at exposed performer space, including a collapsed performer's header. Read Destination above the canvas and the outlined target before releasing; release outside the canvas or press Escape to cancel.",
                                 "Use Shift-click to add or remove cards from the selection, or right-click a card and choose Add to selection. Drag any selected work card to assign the whole work selection to one performer. Independent work can start on different performers. The inspector keeps its primary element during the drag; right-click a selected card and choose Inspect this element to change that primary without losing the group.",
                                 "The move preserves work ownership and identities. A composite work card moves its leaves together when they have one coherent responsibility; if its own leaves are distributed across performers, choose specific leaves instead. Role responsibilities remain explicit: an outward drag that would leave a role-derived performer explains why it cannot remove that responsibility.",
-                                "To move work and performers together without changing responsibility, select their cards and choose Arrange or press Alt+A. This moves the selected work subtrees and each selected performer's contained cards together, if the complete layout stays readable and clear. Ports and connections cannot join a placement move. Dragging only performer cards normally moves them and their contained cards without changing assignments.",
+                                "To move work and performers together without changing responsibility, select their cards and choose Arrange next drag or press Alt+A. This moves the selected work subtrees and each selected performer's contained cards together, if the complete layout stays readable and clear. Ports and connections cannot join a placement move. Dragging only performer cards normally moves them and their contained cards without changing assignments.",
                                 "Make room when work cards would overlap, and move the view or zoom in if the moving work is not readable. The destination name stays above the canvas while the target outline stays fixed during the drag. Hover Destination to inspect a long name: outside the canvas, the tooltip explicitly identifies the last target, and releasing cancels. Return to the canvas to choose the drop. A refused drop keeps the model and history unchanged. One Undo reverses an accepted assignment and placement together; Save all writes the corresponding source changes.",
                             ],
                         ),
@@ -468,10 +465,6 @@ fn article(topic: Topic) -> Article {
                     summary: "An operational Process or system Functional chain connects contributions of existing work and exchanges, including alternatives and reusable procedures. It explains how work contributes to an outcome.",
                     keywords: "process functional chain ordered occurrence sequence path involvement dataflow exchange repeated steps caller contextual qualified assembly common work focus reuse",
                     sections: &[
-                        explain(
-                            "Select a group",
-                            "Use Select, then Shift-click to add or remove contributions from the selection. Drag selected local cards to reorder them in the same column. Reused previews are read-only; open their referenced definition to edit. Properties affect only the primary selected item. Help or F1 opens this guide without leaving the diagram; Close or Escape returns to editing.",
-                        ),
                         walkthrough(
                             "Describe a path through exchanges",
                             &[
@@ -578,10 +571,6 @@ fn article(topic: Topic) -> Article {
                     summary: "Describe the conditions in which the operation or system behaves differently. States and modes belong to regions within a state machine.",
                     keywords: "state machine mode region initial final transition trigger guard effect entry exit do availability degraded nominal diagram draw reconnect local internal timed fold unfold placement pan zoom undo",
                     sections: &[
-                        explain(
-                            "Select a group",
-                            "Choose Select / move, then Shift-click to add or remove elements from the selection. Properties affect only the primary selected item; Hide selected removes placements from this view. Help or F1 opens this guide without leaving the diagram; Close or Escape returns to editing.",
-                        ),
                         walkthrough(
                             "Build a state machine",
                             &[
@@ -1169,14 +1158,6 @@ fn topic_button(topic: Topic, selected: bool) -> iced::widget::Button<'static, M
 }
 
 fn article_view(topic: Topic) -> Element<'static, Message> {
-    article_content(topic, true)
-}
-
-pub(crate) fn context_view(state: &State) -> Element<'static, Message> {
-    article_content(state.topic, false)
-}
-
-fn article_content(topic: Topic, navigation: bool) -> Element<'static, Message> {
     let article = article(topic);
     let mut content = column![
         text(topic.category()).size(11).color(style::MUTED),
@@ -1215,14 +1196,14 @@ fn article_content(topic: Topic, navigation: bool) -> Element<'static, Message>
         }
         content = content.push(container(body).padding(20).width(Fill).style(style::card));
     }
-    if navigation && let Some((page, label)) = article.destination {
+    if let Some((page, label)) = article.destination {
         content = content.push(
             button(text(label).size(13))
                 .padding([11, 15])
                 .on_press(Message::Page(page)),
         );
     }
-    if navigation && topic == Topic::FirstProject {
+    if topic == Topic::FirstProject {
         content = content.push(text("For a worked model, open the water-pressure walkthrough. Copy the whole examples/release1 folder and open the copied project.arcadia before editing; read its README.md. If you use Save as, also copy evidence/ beside the new entry: Save as copies model source, not external artifact targets.").size(13));
         content = content.push(
             button(text("Open water-pressure walkthrough").size(13))

crates/oa-desktop/src/guide/context_help.rs

@@ -1,282 +0,0 @@
-//! Modal reading input and preservation of the mounted editing workspace.
-use super::ARTICLE_SCROLL_ID;
-use crate::app::Message;
-use iced::Element;
-
-#[derive(Debug, Clone, Copy)]
-pub(crate) enum ContextScroll {
-    LineUp,
-    LineDown,
-    PageUp,
-    PageDown,
-    Home,
-    End,
-}
-
-pub(crate) fn context_scroll_key(
-    event: iced::Event,
-    status: iced::event::Status,
-    _: iced::window::Id,
-) -> Option<Message> {
-    use iced::keyboard::{Event, Key, key::Named};
-    let iced::Event::Keyboard(Event::KeyPressed { key, modifiers, .. }) = event else {
-        return None;
-    };
-    if status == iced::event::Status::Captured || !modifiers.is_empty() {
-        return None;
-    }
-    let scroll = match key {
-        Key::Named(Named::ArrowUp) => ContextScroll::LineUp,
-        Key::Named(Named::ArrowDown) => ContextScroll::LineDown,
-        Key::Named(Named::PageUp) => ContextScroll::PageUp,
-        Key::Named(Named::PageDown) => ContextScroll::PageDown,
-        Key::Named(Named::Home) => ContextScroll::Home,
-        Key::Named(Named::End) => ContextScroll::End,
-        _ => return None,
-    };
-    Some(Message::ContextHelpScroll(scroll))
-}
-
-pub(crate) fn context_scroll_task(scroll: ContextScroll) -> iced::Task<Message> {
-    struct Scroll(ContextScroll);
-    impl<T> iced::advanced::widget::Operation<T> for Scroll {
-        fn traverse(
-            &mut self,
-            visit: &mut dyn FnMut(&mut dyn iced::advanced::widget::Operation<T>),
-        ) {
-            visit(self);
-        }
-        fn scrollable(
-            &mut self,
-            id: Option<&iced::advanced::widget::Id>,
-            bounds: iced::Rectangle,
-            content_bounds: iced::Rectangle,
-            _: iced::Vector,
-            state: &mut dyn iced::advanced::widget::operation::Scrollable,
-        ) {
-            use iced::advanced::widget::operation::scrollable::{AbsoluteOffset, RelativeOffset};
-            if id != Some(&iced::advanced::widget::Id::new(ARTICLE_SCROLL_ID)) {
-                return;
-            }
-            match self.0 {
-                ContextScroll::Home | ContextScroll::End => state.snap_to(RelativeOffset {
-                    x: None,
-                    y: Some(if matches!(self.0, ContextScroll::End) {
-                        1.
-                    } else {
-                        0.
-                    }),
-                }),
-                scroll => {
-                    let y = match scroll {
-                        ContextScroll::LineUp => -40.,
-                        ContextScroll::LineDown => 40.,
-                        ContextScroll::PageUp => -bounds.height * 0.9,
-                        ContextScroll::PageDown => bounds.height * 0.9,
-                        _ => unreachable!(),
-                    };
-                    // Iced clamps this movement to the actual content bounds.
-                    state.scroll_by(AbsoluteOffset { x: 0., y }, bounds, content_bounds);
-                }
-            }
-        }
-    }
-    iced::advanced::widget::operate(Scroll(scroll))
-}
-
-/// Keep the mounted editor and its caret, but prevent modal input from reaching
-/// widget-internal state before the App message guard can reject edits.
-pub(crate) fn protect_workspace<'a, R: iced::advanced::renderer::Renderer + 'a>(
-    help_open: bool,
-    content: Element<'a, Message, iced::Theme, R>,
-) -> Element<'a, Message, iced::Theme, R> {
-    Element::new(WorkspaceInput { help_open, content })
-}
-
-struct WorkspaceInput<'a, R> {
-    help_open: bool,
-    content: Element<'a, Message, iced::Theme, R>,
-}
-
-#[derive(Default)]
-struct WorkspaceInputState {
-    help_open: bool,
-}
-
-impl<R: iced::advanced::renderer::Renderer> iced::advanced::Widget<Message, iced::Theme, R>
-    for WorkspaceInput<'_, R>
-{
-    fn tag(&self) -> iced::advanced::widget::tree::Tag {
-        iced::advanced::widget::tree::Tag::of::<WorkspaceInputState>()
-    }
-    fn state(&self) -> iced::advanced::widget::tree::State {
-        iced::advanced::widget::tree::State::new(WorkspaceInputState::default())
-    }
-    fn children(&self) -> Vec<iced::advanced::widget::Tree> {
-        vec![iced::advanced::widget::Tree::new(self.content.as_widget())]
-    }
-    fn diff(&self, tree: &mut iced::advanced::widget::Tree) {
-        tree.diff_children(std::slice::from_ref(&self.content));
-    }
-    fn size(&self) -> iced::Size<iced::Length> {
-        self.content.as_widget().size()
-    }
-    fn size_hint(&self) -> iced::Size<iced::Length> {
-        self.content.as_widget().size_hint()
-    }
-    fn layout(
-        &mut self,
-        tree: &mut iced::advanced::widget::Tree,
-        renderer: &R,
-        limits: &iced::advanced::layout::Limits,
-    ) -> iced::advanced::layout::Node {
-        self.content
-            .as_widget_mut()
-            .layout(&mut tree.children[0], renderer, limits)
-    }
-    fn operate(
-        &mut self,
-        tree: &mut iced::advanced::widget::Tree,
-        layout: iced::advanced::Layout<'_>,
-        renderer: &R,
-        operation: &mut dyn iced::advanced::widget::Operation,
-    ) {
-        self.content
-            .as_widget_mut()
-            .operate(&mut tree.children[0], layout, renderer, operation);
-    }
-    fn update(
-        &mut self,
-        tree: &mut iced::advanced::widget::Tree,
-        event: &iced::Event,
-        layout: iced::advanced::Layout<'_>,
-        cursor: iced::mouse::Cursor,
-        renderer: &R,
-        clipboard: &mut dyn iced::advanced::Clipboard,
-        shell: &mut iced::advanced::Shell<'_, Message>,
-        viewport: &iced::Rectangle,
-    ) {
-        let entering = {
-            let state = tree.state.downcast_mut::<WorkspaceInputState>();
-            let entering = self.help_open && !state.help_open;
-            state.help_open = self.help_open;
-            entering
-        };
-        if entering {
-            // Retire held gestures without executing their release actions.
-            // Text controls keep their real caret/focus; drawing tools remain
-            // selected, but an old drag cannot resume when Help is dismissed.
-            for event in [
-                iced::mouse::Event::CursorLeft,
-                iced::mouse::Event::ButtonReleased(iced::mouse::Button::Left),
-                iced::mouse::Event::ButtonReleased(iced::mouse::Button::Middle),
-                iced::mouse::Event::ButtonReleased(iced::mouse::Button::Right),
-            ] {
-                let mut discarded = Vec::new();
-                let mut cancellation = iced::advanced::Shell::new(&mut discarded);
-                self.content.as_widget_mut().update(
-                    &mut tree.children[0],
-                    &iced::Event::Mouse(event),
-                    layout,
-                    iced::mouse::Cursor::Unavailable,
-                    renderer,
-                    clipboard,
-                    &mut cancellation,
-                    viewport,
-                );
-                shell.request_redraw_at(cancellation.redraw_request());
-                if cancellation.is_layout_invalid() {
-                    shell.invalidate_layout();
-                }
-                if cancellation.are_widgets_invalid() {
-                    shell.invalidate_widgets();
-                }
-            }
-        }
-        if self.help_open
-            && matches!(
-                event,
-                iced::Event::Keyboard(
-                    iced::keyboard::Event::KeyPressed { .. }
-                        | iced::keyboard::Event::KeyReleased { .. }
-                ) | iced::Event::Mouse(_)
-                    | iced::Event::Touch(_)
-                    | iced::Event::InputMethod(_)
-            )
-        {
-            return;
-        }
-        // ModifiersChanged and passive window/redraw events still reach the
-        // editor, so releasing Shift during Help cannot stick on return.
-        self.content.as_widget_mut().update(
-            &mut tree.children[0],
-            event,
-            layout,
-            cursor,
-            renderer,
-            clipboard,
-            shell,
-            viewport,
-        );
-    }
-    fn draw(
-        &self,
-        tree: &iced::advanced::widget::Tree,
-        renderer: &mut R,
-        theme: &iced::Theme,
-        style: &iced::advanced::renderer::Style,
-        layout: iced::advanced::Layout<'_>,
-        cursor: iced::mouse::Cursor,
-        viewport: &iced::Rectangle,
-    ) {
-        self.content.as_widget().draw(
-            &tree.children[0],
-            renderer,
-            theme,
-            style,
-            layout,
-            cursor,
-            viewport,
-        );
-    }
-    fn mouse_interaction(
-        &self,
-        tree: &iced::advanced::widget::Tree,
-        layout: iced::advanced::Layout<'_>,
-        cursor: iced::mouse::Cursor,
-        viewport: &iced::Rectangle,
-        renderer: &R,
-    ) -> iced::mouse::Interaction {
-        if self.help_open {
-            iced::mouse::Interaction::None
-        } else {
-            self.content.as_widget().mouse_interaction(
-                &tree.children[0],
-                layout,
-                cursor,
-                viewport,
-                renderer,
-            )
-        }
-    }
-    fn overlay<'b>(
-        &'b mut self,
-        tree: &'b mut iced::advanced::widget::Tree,
-        layout: iced::advanced::Layout<'b>,
-        renderer: &R,
-        viewport: &iced::Rectangle,
-        translation: iced::Vector,
-    ) -> Option<iced::advanced::overlay::Element<'b, Message, iced::Theme, R>> {
-        if self.help_open {
-            None
-        } else {
-            self.content.as_widget_mut().overlay(
-                &mut tree.children[0],
-                layout,
-                renderer,
-                viewport,
-                translation,
-            )
-        }
-    }
-}

crates/oa-desktop/src/model_menu.rs

@@ -557,10 +557,7 @@ pub fn popup(app: &App) -> Option<Menu<Message>> {
                             &format!("Draw {}", tool.label().to_lowercase()),
                             Message::Connection(crate::connection_edit::Event::Begin(*tool, id)),
                             app.active_diagram.is_some_and(|diagram| {
-                                crate::connection_edit::visible(&projection::project_view(
+                                crate::connection_edit::can_begin(p, diagram, *tool, id)
-                                    p, diagram,
-                                ))
-                                .any(|element| element == id)
                             }),
                         ));
                     }

crates/oa-desktop/src/views.rs

@@ -25,23 +25,6 @@ pub fn action<'a>(s: &str, m: Message) -> widget::Button<'a, Message> {
         .on_press(m)
         .style(style::nav)
 }
-
-/// Optional instructions belong beside the work, without taking a canvas row.
-/// The button also opens keyboard-accessible help; the tooltip is only a preview.
-pub(crate) fn diagram_help<'a>(
-    topic: crate::guide::Topic,
-    hint: impl Into<String>,
-) -> View<'a, Message> {
-    tooltip(
-        action("Help · F1", Message::ContextHelp(topic)),
-        container(text(hint.into()).size(12))
-            .padding(10)
-            .max_width(360)
-            .style(style::card),
-        tooltip::Position::Bottom,
-    )
-    .into()
-}
 pub fn short(s: &str, limit: usize) -> String {
     let s = s.split_whitespace().collect::<Vec<_>>().join(" ");
     if s.graphemes(true).count() > limit {
@@ -257,23 +240,11 @@ pub fn view(app: &App) -> View<'_, Message> {
     if !matches!(app.page, Page::Home | Page::Text | Page::Guide) {
         body = body.push(inspector(app));
     }
-    let diagram_feedback = diagram_feedback(app);
-    // Keep operation outcomes visible even while a drawing hint is active.
-    let (status, status_detail) = if app.busy {
-        ("Working…".into(), "Working…".into())
-    } else if let Some(feedback) = diagram_feedback.filter(|feedback| *feedback != app.status) {
-        (
-            format!("{} · {}", short(&app.status, 60), short(&feedback, 80)),
-            format!("{}\n{}", app.status, feedback),
-        )
-    } else {
-        (short(&app.status, 145), app.status.clone())
-    };
     let footer = container(
         row![
             container(tooltip(
-                text(status).size(11).wrapping(widget::text::Wrapping::None),
+                text(short(if app.busy { "Working…" } else { &app.status }, 145)).size(11),
-                container(text(status_detail).size(12))
+                container(text(if app.busy { "Working…" } else { &app.status }).size(12))
                     .padding(10)
                     .max_width(600)
                     .style(style::card),
@@ -296,25 +267,6 @@ pub fn view(app: &App) -> View<'_, Message> {
     .padding([4, 16])
     .style(style::panel);
     let root = crate::allocation_input::root(app, column![header, task_nav, body, footer]);
-    let root = crate::guide::protect_workspace(app.context_help, root);
-    if app.context_help {
-        return modal_width(
-            root,
-            column![
-                row![
-                    text("Diagram help").size(18),
-                    Space::new().width(Fill),
-                    action("Close · Esc", Message::CloseContextHelp),
-                ]
-                .align_y(iced::Center),
-                crate::guide::context_view(&app.guide),
-            ]
-            .spacing(12)
-            .height((app.window_size.height - 140.).max(300.))
-            .into(),
-            (app.window_size.width - 80.).min(900.),
-        );
-    }
     if app.architecture.as_ref().is_some_and(|s| s.modal()) {
         return modal_width(
             root,
@@ -410,8 +362,7 @@ pub fn view(app: &App) -> View<'_, Message> {
             (app.window_size.width - 32.).clamp(120., 760.),
         );
     }
-    // Match modal_width's first child so help does not recreate the editor tree.
+    root
-    widget::stack![root].into()
 }
 fn modal<'a>(base: View<'a, Message>, content: View<'a, Message>) -> View<'a, Message> {
     modal_width(base, content, 800.)
@@ -496,7 +447,7 @@ fn diagram(app: &App) -> View<'_, Message> {
         .active_diagram
         .and_then(|id| app.project().diagrams.get(&id))
         .map(|d| d.projection);
-    let mut modes = row![
+    let modes = row![
         label("View content"),
         pick_list(
             [
@@ -511,15 +462,7 @@ fn diagram(app: &App) -> View<'_, Message> {
             Message::Projection
         )
         .padding(8)
-        .text_size(12),
+        .text_size(12)
-        diagram_help(
-            crate::guide::Topic::Nesting,
-            if projection == Some(ProjectionKind::Traceability) {
-                "Shows OA and SA elements with correspondence lines. Place both ends of a trace to show it; port traces use their owner cards. Open Help for trace visibility and editing controls."
-            } else {
-                "Shift-click to add or remove selection. Right-click for actions; drag to arrange; scroll to zoom. Drag a connection line, bend or label to move it; Insert adds a bend and Escape cancels. Open Help for full editing controls."
-            },
-        )
     ]
     .spacing(10)
     .align_y(iced::Center);
@@ -612,26 +555,6 @@ fn diagram(app: &App) -> View<'_, Message> {
         .center(Fill)
         .into()
     };
-    if projection == Some(ProjectionKind::Allocation) {
-        modes = modes.push(tooltip(
-            action(
-                if app.allocation_drag.arrange_next {
-                    "Arrange ✓"
-                } else {
-                    "Arrange"
-                },
-                Message::WorkDrag(crate::app::allocation_drag::Event::ArrangeNext),
-            ),
-            container(text(format!(
-                "Arrange next drag · {}. Move work within its current allocation; Escape cancels.",
-                crate::allocation_input::ARRANGE_SHORTCUT
-            )))
-            .padding(10)
-            .max_width(420)
-            .style(style::card),
-            tooltip::Position::Bottom,
-        ));
-    }
     let mut tools = column![toolbar].spacing(8);
     if app.active_diagram.is_some() {
         tools = tools.push(modes);
@@ -645,50 +568,82 @@ fn diagram(app: &App) -> View<'_, Message> {
             .feedback
             .as_ref()
             .map(|feedback| feedback.destination_identity())
-            .unwrap_or_else(|| "—".into());
+            .unwrap_or_else(|| "None · drag work to choose".into());
         let inspection = app
             .allocation_drag
             .feedback
             .as_ref()
             .map(|feedback| feedback.inspection_identity())
             .unwrap_or_else(|| destination.clone());
-        let destination_control = container(tooltip(
+        tools = tools.push(
-            text(format!("Destination: {}", short(&destination, 28)))
+            container(tooltip(
-                .size(13)
+                text(format!("Destination: {}", short(&destination, 28)))
-                .wrapping(widget::text::Wrapping::None),
+                    .size(13)
-            container(text(inspection).size(13))
+                    .wrapping(widget::text::Wrapping::None),
-                .padding(10)
+                container(text(inspection).size(13))
-                .max_width(420)
+                    .padding(10)
-                .style(style::card),
+                    .max_width(420)
-            tooltip::Position::Top,
+                    .style(style::card),
-        ))
+                tooltip::Position::Top,
-        .id("allocation-destination")
+            ))
-        .height(26)
+            .id("allocation-destination")
-        .width(Fill)
+            .height(26)
-        .clip(true);
+            .width(Fill)
-        tools = tools.push(destination_control);
+            .clip(true),
+        );
+        tools = tools.push(
+            row![
+                action(
+                    &format!(
+                        "{} · {}",
+                        if app.allocation_drag.arrange_next {
+                            "Arrange next drag: armed"
+                        } else {
+                            "Arrange next drag"
+                        },
+                        crate::allocation_input::ARRANGE_SHORTCUT
+                    ),
+                    Message::WorkDrag(crate::app::allocation_drag::Event::ArrangeNext)
+                ),
+                label("Drag work into a performer to assign · out to remove assignment")
+            ]
+            .spacing(8)
+            .align_y(iced::Center),
+        );
     }
     if let Some(diagram) = app.active_diagram {
         let view = oa_core::projection::project_view(app.project(), diagram);
         if projection == Some(ProjectionKind::Traceability) {
             let correspondence_lines = view.edges.iter().filter(|edge| edge.trace).count();
             tools = tools.push(
-                row![
+                column![
-                    label(format!("{correspondence_lines} trace lines")),
+                    label("Shows OA and SA elements together, with correspondence lines alongside ordinary relationships."),
-                    action(
+                    label("Place both ends of a trace to show its line. Port traces use their owner cards; traces between relationships are reviewed on the Traceability page."),
-                        "Add existing elements…",
+                    row![
-                        Message::Architecture(crate::app::architecture_authoring::Event::Existing(
+                        label(format!("{correspondence_lines} correspondence lines in this view")),
-                            None
+                        action(
-                        ))
+                            "Add existing elements…",
-                    ),
+                            Message::Architecture(crate::app::architecture_authoring::Event::Existing(None))
-                    action("Review layer traces", Message::ReviewLayerTraces),
+                        ),
-                    action("View visibility…", Message::Select(diagram)),
+                        action("Review layer traces", Message::ReviewLayerTraces),
+                        action("View visibility…", Message::Select(diagram)),
+                    ]
+                    .spacing(7)
+                    .align_y(iced::Center)
+                    .wrap(),
                 ]
-                .spacing(7)
+                .spacing(4),
-                .align_y(iced::Center)
-                .wrap(),
             );
         }
+        let edge = view.edges.iter().find(|edge| edge.id == app.selected);
+        let promoted = edge.is_some_and(|edge| {
+            oa_core::projection::edge_endpoint_placements(
+                app.project(),
+                &app.project().diagrams[&diagram],
+                edge.id,
+            )
+            .is_some_and(|(source, target)| source != edge.source || target != edge.target)
+        });
         let selection = app.multiselect_snapshot();
         let count = selection.as_ref().map_or(0, |s| s.targets().len());
         let mut selection_controls =
@@ -707,62 +662,66 @@ fn diagram(app: &App) -> View<'_, Message> {
             }
             selection_controls = selection_controls
                 .push(action(
-                    "Clear",
+                    "Clear selection",
                     Message::DiagramSelection(crate::app::multiselect::Event::Clear(
                         snapshot.context(),
                     )),
                 ))
                 .push(
                     label(format!(
-                        "Properties: {} only",
+                        "Properties edit only {}",
-                        short(app.project().named(app.selected), 14)
+                        short(app.project().named(app.selected), 36)
                     ))
                     .wrapping(widget::text::Wrapping::None),
                 );
         }
-        // Selection never moves the canvas. General controls live in Help;
+        let hint = if let Some(feedback) = &app.allocation_drag.feedback {
-        // active gesture feedback uses the persistent application status bar.
+            feedback.text.as_str()
+        } else if let Some(session) = &app.connection {
+            if session.source.is_some() {
+                if session.candidates.is_empty() {
+                    "No compatible targets are visible. Expand containers or show an endpoint · Esc cancels"
+                } else {
+                    "Choose a highlighted target · middle-drag or arrow keys pan · Esc cancels"
+                }
+            } else {
+                session.tool.hint()
+            }
+        } else if count > 1 {
+            if selection
+                .as_ref()
+                .is_some_and(|s| crate::app::multiselect::placements(s).is_some())
+                && projection != Some(ProjectionKind::Allocation)
+            {
+                "Shift-click to add/remove · drag selected to move · right-click for actions · scroll to zoom"
+            } else {
+                "Shift-click to add/remove · right-click for selection actions · Esc clears selection"
+            }
+        } else if promoted {
+            "Expand endpoint containers to edit this connection route"
+        } else if edge.is_some() {
+            "Right-click for routing · drag line / bend / label · Insert adds a bend · Esc cancels"
+        } else {
+            "Shift-click to add/remove · right-click for actions · drag to arrange · scroll to zoom"
+        };
+        // Selection changes must not resize the measured canvas or refit its
+        // camera. Reserve both rows even when no group actions are available.
         tools = tools.push(
-            container(selection_controls)
+            container(
-                .height(32)
+                column![
-                .width(Fill)
+                    selection_controls,
-                .clip(true),
+                    label(hint).wrapping(widget::text::Wrapping::None)
+                ]
+                .spacing(3),
+            )
+            .height(56)
+            .width(Fill)
+            .clip(true),
         );
     }
     column![container(tools).padding(14), canvas].into()
 }
 
-fn diagram_feedback(app: &App) -> Option<String> {
-    if app.page != Page::Diagram {
-        return None;
-    }
-    if let Some(feedback) = &app.allocation_drag.feedback {
-        return Some(feedback.text.clone());
-    }
-    if let Some(session) = &app.connection {
-        return Some(
-            if session.source.is_none() {
-                session.tool.hint()
-            } else if session.candidates.is_empty() {
-                "No compatible targets visible. Expand containers or show an endpoint · Esc cancels"
-            } else {
-                "Choose a highlighted target · Esc cancels"
-            }
-            .into(),
-        );
-    }
-    let diagram = app.active_diagram?;
-    let view = oa_core::projection::project_view(app.project(), diagram);
-    let edge = view.edges.iter().find(|edge| edge.id == app.selected)?;
-    let (source, target) = oa_core::projection::edge_endpoint_placements(
-        app.project(),
-        &app.project().diagrams[&diagram],
-        edge.id,
-    )?;
-    (source != edge.source || target != edge.target)
-        .then(|| "Expand endpoint containers to edit this connection route".into())
-}
-
 fn inspector(app: &App) -> View<'_, Message> {
     let p = app.project();
     if let Some(target) = app.process_preview_primary() {

crates/oa-server/tests/http/source6_views.rs

@@ -372,3 +372,150 @@ async fn source6_http_explicit_communication_ports_preview_apply_and_restart_pre
     assert_pair(&reopened);
     server.stop().await;
 }
+
+#[tokio::test]
+async fn mixed_traceability_projection_roundtrip_preserves_dormant_http_state() {
+    let f = fixture();
+    let mut model = compile_bundle(&f.bundle, ProjectLimits::default())
+        .unwrap()
+        .decoded
+        .project;
+    let view = model.diagrams.get_mut(&f.diagram).unwrap();
+    view.layer = Layer::Sa;
+    view.projection = ProjectionKind::Traceability;
+    // The OA placements and category are intentionally opposite the view's layer.
+    view.view_options.hidden_edges = vec![f.mean];
+    for (index, element) in f.sa.into_iter().enumerate() {
+        model.place(
+            f.diagram,
+            element,
+            Position {
+                x: index as f32 * 400.,
+                y: 300.,
+            },
+        );
+    }
+    let mut bundle = f.bundle.clone();
+    bundle.files.insert(
+        bundle.entry.clone(),
+        format!(
+            "// Authored source-6 engineering rationale\n{}",
+            oa_core::language::format(&model).replacen(
+                "{\n",
+                "{\n    include \"notes.arcadia\";\n",
+                1
+            )
+        ),
+    );
+    let directory = tempfile::tempdir().unwrap();
+    let server = TestServer::start(directory.path(), None).await;
+    let original = import(&server, &bundle).await;
+    assert_pair(&original);
+    let resource = original.resource_id;
+    let mixed = oa_core::projection::project_view(&original.model, f.diagram);
+    assert!(
+        f.oa.iter()
+            .chain(&f.sa)
+            .all(|id| mixed.nodes.iter().any(|n| n.element == *id))
+    );
+
+    let mut ordinary = original.model.diagrams[&f.diagram].clone();
+    ordinary.projection = ProjectionKind::Allocation;
+    let response = transact(
+        &server,
+        &original,
+        vec![Command::EditDiagram(f.diagram, ordinary.clone())],
+    )
+    .await;
+    let status = response.status();
+    let etag = response
+        .headers()
+        .get("etag")
+        .map(|v| v.to_str().unwrap().to_owned());
+    let result: Value = response.json().await.unwrap();
+    assert_eq!(status, StatusCode::OK, "{result}");
+    assert_eq!(result["changed"], true);
+    assert_eq!(result["dry_run"], false);
+    assert_eq!(result["revision"], original.revision + 1);
+    let changed = server.get(resource).await;
+    assert_eq!(etag.as_deref(), Some(changed.etag().as_str()));
+    let mut expected = original.model.clone();
+    expected.diagrams.insert(f.diagram, ordinary.clone());
+    assert_eq!(
+        changed.model, expected,
+        "only the projection changes; dormant state is retained"
+    );
+    assert_pair(&changed);
+    assert_eq!(
+        changed.source_project.files["notes.arcadia"],
+        bundle.files["notes.arcadia"]
+    );
+    assert!(
+        changed.source_project.files[&bundle.entry]
+            .starts_with("// Authored source-6 engineering rationale\n")
+    );
+    let projected = oa_core::projection::project_view(&changed.model, f.diagram);
+    assert!(projected.nodes.iter().all(|n| !f.oa.contains(&n.element)));
+    assert!(
+        f.sa.iter()
+            .all(|id| projected.nodes.iter().any(|n| n.element == *id))
+    );
+
+    // A dormant option still must name an existing category. Rejection must not
+    // advance the ETag or rewrite either side of the persisted model/source pair.
+    let disk = directory.path().join(format!("{resource}.json"));
+    let accepted_bytes = std::fs::read(&disk).unwrap();
+    ordinary.view_options.participant_categories = CategorySelection::Any(vec![Id::new_v4()]);
+    let rejected = transact(
+        &server,
+        &changed,
+        vec![Command::EditDiagram(f.diagram, ordinary)],
+    )
+    .await;
+    assert_eq!(rejected.status(), StatusCode::UNPROCESSABLE_ENTITY);
+    let retained = server.get(resource).await;
+    assert_eq!(retained.etag(), changed.etag());
+    assert_eq!(
+        serde_json::to_value(&retained).unwrap(),
+        serde_json::to_value(&changed).unwrap()
+    );
+    assert_eq!(std::fs::read(&disk).unwrap(), accepted_bytes);
+    server.stop().await;
+
+    let server = TestServer::start(directory.path(), None).await;
+    let reopened = server.get(resource).await;
+    assert_eq!(
+        serde_json::to_value(&reopened).unwrap(),
+        serde_json::to_value(&changed).unwrap()
+    );
+    assert_pair(&reopened);
+    let response = transact(
+        &server,
+        &reopened,
+        vec![Command::EditDiagram(
+            f.diagram,
+            original.model.diagrams[&f.diagram].clone(),
+        )],
+    )
+    .await;
+    let status = response.status();
+    let result: Value = response.json().await.unwrap();
+    assert_eq!(status, StatusCode::OK, "{result}");
+    assert_eq!(result["changed"], true);
+    assert_eq!(result["revision"], changed.revision + 1);
+    let restored = server.get(resource).await;
+    assert_eq!(restored.model, original.model);
+    assert_pair(&restored);
+    assert_eq!(
+        restored.source_project.files["notes.arcadia"],
+        bundle.files["notes.arcadia"]
+    );
+    let projected = oa_core::projection::project_view(&restored.model, f.diagram);
+    assert!(
+        f.oa.iter()
+            .chain(&f.sa)
+            .all(|id| projected.nodes.iter().any(|n| n.element == *id))
+    );
+    assert!(!projected.edges.iter().any(|edge| edge.id == f.mean));
+    server.stop().await;
+}

crates/oa-server/tests/semantic_schema.py

@@ -147,7 +147,7 @@ schemas["ViewOptions"] = obj({
     "coverage": {**ref("Coverage"), "default": "All"},
     "work_contexts": {**ref("ContextSelection"), "default": "All"},
     "exchange_labels": {**ref("ExchangeLabels"), "default": "Name"}}, [])
-schemas["ViewOptions"]["description"] = "Presentation only. Independent predicates intersect; category members union within a family. Only([]) hides all relations and traces. Any([]) remains an explicit empty selection. Traceability permits both-layer hidden/category/context references; ordinary projections require the diagram layer. Filtering preserves unfiltered automatic port positions."
+schemas["ViewOptions"]["description"] = "Presentation only. Independent predicates intersect; category members union within a family. Only([]) hides all relations and traces. Any([]) remains an explicit empty selection. String projections preserve both-layer hidden/category/context references and latent placements; only Traceability renders both layers. Typed StateMachine/Scenario views retain layer-scoped admission. Filtering preserves unfiltered automatic port positions."
 schemas["Diagram"]["properties"]["view_options"] = {**ref("ViewOptions"), "default": {}}
 
 def upsert_variant(variants, name, value):

docs/api.rst

@@ -570,8 +570,15 @@ retain their identities and contracts; migration does not silently replace them.
 ``coverage`` and ``work_contexts``, and ``Name`` for ``exchange_labels``.
 ``{"Only":[]}`` hides all relation and trace lines; ``{"Any":[]}`` preserves
 an explicit empty category/context selection. Category members union within
-each family, and independent filters intersect. ``Traceability`` permits
+each family, and independent filters intersect. String projections permit saved
-references from both layers; ordinary projections require the diagram's layer.
+references and placements from both layers. Only ``Traceability`` renders both;
+other string projections filter to the diagram's declared layer. ``EditDiagram``
+may change between these projections without deleting latent placements, routes
+or visibility choices. Returning to Traceability restores their applicability.
+Typed StateMachine/Scenario views retain their strict membership and layer checks.
+Missing objects, wrong reference kinds/families and duplicate selections remain
+invalid. Frozen versions 1–6 keep their prior layer admission before migration;
+older version-7 implementations may reject these newly accepted ordinary views.
 These presentation choices preserve semantic records, routes, placements and
 the automatic port positions derived from unfiltered eligible exchanges.
 

docs/architecture.md

@@ -2,8 +2,6 @@
 
 The normative contract is [language.rst](language.rst); [scope.md](scope.md) explains deliberate differences from the complete Arcadia/Capella ecosystem. V2 uses one typed model and one validated mutation boundary across the desktop, text editor and REST service.
 
-Desktop changes follow the [editing workspace UX review criteria](ui-review.md) for concise persistent content, contextual help, visible actionable feedback and native interaction review.
-
 ## Crate boundaries
 
 | Crate | Responsibility | Does not depend on |

docs/language.rst

@@ -409,8 +409,12 @@ filters rather than widening them to All.
 
 Traceability views retain their established two-layer projection: default options
 preserve eligible OA and SA lines. Their hidden-edge, category and context
-references may therefore select either layer. All ordinary projections require
+references may therefore select either layer. Ordinary string projections retain
-these references in the declared diagram layer. A filter never hides the other
+these references from either layer as saved presentation choices; they still
+render only their declared layer. Switching projections MUST preserve those
+choices, including explicit empty selections. Existing-object, reference-kind,
+family and uniqueness constraints still apply. Typed StateMachine and Scenario
+views retain layer-scoped reference admission. A filter never hides the other
 layer merely because the Traceability diagram has an OA or SA layer label.
 
 Versions 1–5 reject the new relation, category constructor, diagram field (even
@@ -1073,6 +1077,20 @@ capabilities with their involvement, exploitation, include, extend and
 generalization links. Decomposition and Overview retain general containment;
 Overview also exposes all relationships. These string projections hide
 inapplicable placements without deleting them or changing semantic records.
+This includes opposite-layer placements retained after leaving Traceability.
+Changing between string projections changes only the projection value; placement
+identities, positions, sizes, collapsed state, port anchors, routes and visibility
+choices remain authored. Returning to Traceability restores their applicability.
+Ordinary views MUST NOT render opposite-layer nodes, parents, ports or lines.
+This current-version admission correction does not broaden frozen source/JSON
+versions 1–6: their layer-scoped placement and visibility checks remain required
+before migration. Earlier version-7 implementations can reject ordinary views
+containing these retained opposite-layer records.
+
+The explicit RelocateNode operation moves a placement to a different diagram
+only when its element belongs to the destination layer or the destination is
+Traceability. Retaining an existing hidden placement through a projection change
+does not authorize a relocation that immediately hides it in another layer.
 
 A StateMachine projection MUST reference an existing StateMachine in the
 diagram's layer. Its placements MUST refer to that machine, its Regions, or

docs/openapi.json

@@ -12490,7 +12490,7 @@
         },
         "required": [],
         "additionalProperties": false,
-        "description": "Presentation only. Independent predicates intersect; category members union within a family. Only([]) hides all relations and traces. Any([]) remains an explicit empty selection. Traceability permits both-layer hidden/category/context references; ordinary projections require the diagram layer. Filtering preserves unfiltered automatic port positions."
+        "description": "Presentation only. Independent predicates intersect; category members union within a family. Only([]) hides all relations and traces. Any([]) remains an explicit empty selection. String projections preserve both-layer hidden/category/context references and latent placements; only Traceability renders both layers. Typed StateMachine/Scenario views retain layer-scoped admission. Filtering preserves unfiltered automatic port positions."
       },
       "CommunicationPortChoice": {
         "oneOf": [

docs/ui-review.md

@@ -1,27 +0,0 @@
-# Editing workspace UX review
-
-These development criteria implement the [project goal](../PROJECT_GOAL.md): reduce system engineers' cognitive load, keep graphical editing intuitive, and provide concise, navigable built-in help. They also address the user's request tracked in Gitea issue #39 to prevent persistent instructional text from consuming editing space. They are review criteria, not a claim that any particular build has passed them.
-
-## Persistent content and progressive disclosure
-
-Populated editing workspaces prioritize model content, controls, current state and actionable feedback. General explanations, gesture tutorials and repeated shortcut lists belong in contextual Help, tooltips or explicitly opened details. Do not add permanent instructional paragraphs above a populated canvas merely to explain a feature.
-
-Keep essential control labels and relevant status visible. Offer concise next-step guidance in empty states and while a user is performing a multi-step action. Put longer explanations behind a clearly labeled disclosure near the relevant control or context. Essential instructions must be accessible through an explicit keyboard-reachable route; a hover-only tooltip is insufficient. Reuse the built-in guide for broader modeling explanations.
-
-Distinguish instruction from information needed to act safely. Current errors, pending edits, failed operations, fallback rendering, unavailable actions and recovery steps must remain apparent. Preserve consequential distinctions such as editing a shared definition, changing semantic order rather than saved positions, or applying properties to only one member of a selection. Long diagnostic detail may be disclosed on demand, but its visible summary must identify the problem and a usable next step.
-
-## Stable editing context
-
-Selection changes and gesture feedback must not unexpectedly move or resize the canvas, reset its camera, or change the interpretation of the pointer. Compact existing stable layout slots instead of conditionally removing them when their content is absent. Opening and closing help must preserve the model, selection and pending drafts, and return the user to a usable editing context. Explicitly requested panel changes may resize the workspace; verify their effect on focus and navigation.
-
-## Native review
-
-Exercise the changed workspace in the actual built application at its configured minimum window size and a representative normal size. Include an independent reviewer for material interaction or layout changes, following [the working agreement](../AGENTS.md). Review representative populated models as well as relevant empty, pending, failure and recovery states.
-
-- Inspect whether instructional prose or unused space displaces useful model content. Compare before/after screenshots at the same window size, display scaling, model and panel state when assessing space savings.
-- Perform the affected workflow: select, edit, navigate, cancel and recover as applicable. Change between empty, single and multiple selections; exercise affected gestures and inspect camera and pointer stability.
-- Find and use the disclosed guidance by keyboard as well as pointer. Check focus, dismissal, return to editing, and preservation of drafts.
-- Trigger relevant disabled or rejected operations. Confirm their reason and recovery action remain visible, accurate and reachable.
-- Check text, controls, panels and warnings for clipping, overlap, excessive scrolling and lost actions at the minimum size. Do not trade recovered space for unreadable text or unexplained symbols.
-
-Record the tested code version, runtime environment, workflows, observations and representative screenshots in the change's review evidence. Screenshots support layout findings; they do not establish working interaction, accessibility or state preservation. Fix material findings and recheck affected behavior before treating the change as verified.

harness/DECISIONS.md

@@ -1,5 +1,31 @@
 # Architectural and product decisions
 
+## Canvas inspection, contextual drawing and explicit relocation — 2026-10-02
+
+An ordinary Properties Apply retains the current Architecture diagram, layer and
+projection. An accepted edit to the active Diagram itself uses its resulting
+identity, layer and projection. A queued canvas target is revalidated against that retained surface
+after Apply; an obsolete target is refused with feedback instead of navigating
+or selecting hidden content. Explicit Select/Open still follows the requested
+model target. An accepted change to a placement's actual owning diagram is also
+explicit navigation: it follows the committed destination and resulting UUID.
+Changing only geometry, alias or UUID in the same owning diagram retains the
+inspection surface. Invalid or missing ownership never grants this exception.
+
+Contextual Draw uses the invoked menu target as its semantic source and the current
+diagram as its editing surface. Shared admission checks the diagram projection,
+visibility, family and semantic endpoint roles before arming. Restart clears the
+pending source while retaining an admitted tool. Explicit model navigation and
+post-review creation navigation retain their separate behavior. This avoids
+silently conflating an opposite-layer inspection with a request to change views.
+
+The source repairs at c706 and 6018, the failed c706 workspace attempt, the
+full-model/source invariants and corrected Windows acceptance are attributed in
+[the navigation checkpoint](navigation-validation-20261002.md). The simpler
+blanket surface restoration was rejected when the unchanged relocation test
+showed that it hid successful explicit moves. This is bounded Architecture
+acceptance; diagram label readability and the complete OA/SA goal remain open.
+
 ## Private source composition decision — 2026-09-23
 
 Adopt the opaque validated original-span rename batch as the next private

harness/STATE.md

@@ -1,51 +1,63 @@
-# Isolated nonproduction label cue trial — 2026-10-01 PDT
+# Navigation contribution checkpoint — 2026-10-02 UTC
 
-This branch adds renderer experiment B at `3e5e094b` to the accepted foundation
+Verified production source **6018ae30b9296b9f6b37d7fc038175080d15fafb** preserves
-below. [Actual trial and preserved evidence](experiments/label-cue-20261001/README.md)
+ordinary opposite-layer Properties inspection and contextual drawing while
-pass code/conservation gates but fail reliable first-reading association. Do not
+following accepted explicit placement relocation. Windows full workspace tests
-promote its cue or treat this branch as an accepted integrated release. Published
+pass **2,236 / 0 failures / 8 existing ignores**; formatting, strict workspace
-preview binaries/tags remain unchanged. Live next work stays in Gitea issue38.
+all-targets Clippy and matching desktop/server/CLI builds pass. Native creation,
+projection/history, corrected relocation and saved-source reopen evidence retain
+their actual c706/6018 attribution and independent reviews.
+[Source, commands, portable evidence and limits](navigation-validation-20261002.md)
+are authoritative. The earlier c706 workspace failure remains recorded.
 
-## Accepted foundation checkpoint
+This is a contribution checkpoint, not the complete OA/SA application or an
+integrated Help/Save release. Label ellipsis/readability and broader usability
+remain open. **Linux/WSL is still excluded by the user's explicit pause.**
+[Issue48](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/48)
+coordinates the subsequent verified union with delivered Save/Help; ownership,
+live status and release decisions belong there. Existing released versions are
+unchanged. Earlier integrated and contribution checkpoints follow with their
+original source and acceptance boundaries.
 
-This branch combines the released integrated foundation
+# Integrated prerelease source checkpoint — 2026-09-24 UTC
-`715036e132677dd2bc2fb37ed316d93dc9987aec` with compact diagram controls and
-contextual Help production source `6e7c4ddaf0775198384a8c4882809ea8e14b2976`.
-[PROJECT_GOAL.md](../PROJECT_GOAL.md) remains authoritative; complete OA/SA
-acceptance is unfinished.
 
-**Linux/WSL builds remain excluded by the user's explicit request.**
+This branch assembles peer contributions for the Windows prerelease in issue37.
+[PROJECT_GOAL.md](../PROJECT_GOAL.md) remains authoritative. The complete OA/SA
+application is unfinished; published previews and finite prototypes are intermediate.
 
-## Verified capabilities and evidence
+**The current prerelease is Windows-only. Linux/WSL builds and checks remain
+excluded by the user's explicit request, including after networking recovers.**
 
-The [frozen integrated Windows preview](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/v0.2.0-preview.integrated.20260924)
+## Assembled source and acceptance boundary
-provides the accepted 715 foundation and its combined test/package evidence.
-It remains unchanged. The older pending-build description previously at the top
-of this file is superseded by that published result.
 
-The [compact Help contribution](compact-help-validation-20261001.md) removes
+Combined code through **4deced53b98cd4d7649ba7aa60fa4b9b30d2f3b8**, plus the
-permanent canvas tutorial prose, keeps stable concise selection rows and full
+test-only import correction from **7c2b06b63f8a0fe14b3f001996bdf965b36a4e85**, adds the reviewed
-allocation destinations, and supports contextual Help/F1 with keyboard reading,
+Connection/Route early-admission correction to the assembled Scenario/Text,
-exact caret/draft preservation and safe gesture retirement. Final focused gates
+ordinary/State/Process/Allocation selection, direct drawing, Traceability and
-pass 125 tests; the earlier full-suite result retains its separate source scope.
+picker changes. The [source handoff](prerelease-integrated-source-20260924.md)
-[Fresh package validation](release-compact-help-validation-20261001.md) verifies
+identifies the incorporated commits, exact new test paths and required gates.
-actual extracted desktop/server behavior, Save/Undo/Redo/reopen and complete
+The nine event regressions and existing completed-Text-Apply cases are retained.
-source/model oracles. This is a scoped development preview, not complete release
+Direct formatting and whitespace checks pass; this source checkpoint does not
-or acceptance of the separately owned follow-up union.
+claim combined Cargo, native, packaged or release acceptance. The independent
-The [scoped compact Help Windows preview](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/v0.2.0-preview.compact-help.20261001)
+[event-fix review](reviews/prerelease37-event-admission-20260924.md) found no
-is published from evidence checkpoint `f1fdca371394aec1148e67f33f4d8c6b53a0c350`.
+further material source defect in its stated scope. A subsequent peer compile
-Its ZIP, checksum and validation attachment were downloaded and matched after
+found a missing `projection::` qualification in the new Route test helper;
-publication; [publication receipts](experiments/compact-help-20261001/publication.md)
+the current code includes that one-line correction. The original compile failed
-retain the exact asset hashes and provenance.
+before running tests. The first combined compile at `897d9f04` subsequently
+found a missing `text_editor` import in the Allocation Text Apply regression;
+the current source includes that one-line correction too. Both failures remain
+recorded in the source handoff. The subsequent full test run at `8ddfadf4`
+failed the mounted State picker fixture: added selection controls invalidated
+its canvas-relative clicks. Source successor `a9cd364eacbbffa0693bab05b5a2b65f9d105535`
+measures an identified fixed-height picker slot and checks Escape capture,
+retaining the exact preservation/reopen/Place/Undo assertions. The source
+handoff links the preserved failed and interrupted attempts. Corrected combined
+Windows execution and package acceptance remain pending.
 
-Dense diagrams, remaining Scenario group adapters, quantities/calculations/
+Live build, final-source and publication results belong in
-constraints, maintained libraries, broad accessibility/DPI and full OA/SA
+[issue37](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/37).
-acceptance remain unfinished. The independent projection/navigation, outgoing-drag,
+Human workflows are described in [the preview checklist](../docs/preview-human-checks.md).
-icon, grid/performance and State-label contributions are outside this code.
+Private mixed-parser source is excluded from this application candidate.
-A protected Save As destination collision has misleading external-change wording;
-[issue 46](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/46)
-records it. Files remain protected and normal/fresh-destination recovery is
-verified. Live ownership, integration and release coordination remain in Gitea.
 
 ## Contribution-specific verification
 

harness/compact-context-help-20260925.md

@@ -1,34 +0,0 @@
-# Compact diagram controls and contextual help
-
-Branch-specific work for [issue 39](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/39), based on published preview source `715036e132677dd2bc2fb37ed316d93dc9987aec`.
-This record does not accept the complete first release or the other diagram defects.
-
-## Problem and choice
-
-The user's screenshot showed two permanent Traceability explanation paragraphs and a separate generic gesture-hint row. Direct Windows inspection of the released water-pressure example reproduced these. At a 1100×700 client size (1102×732 captured window), the Traceability canvas began around window y=470 and ended around y=692, leaving about 220 pixels for modeling. At the normal 1440×900 client size its top was around y=417. The release was opened from the existing downloaded package; only an in-memory projection switch was made and Undo restored the clean model before closure.
-
-The candidate moves general instructions into contextual Help, reusing the offline guide. Architecture, State and Process selection bars use a stable compact row. Allocation retains its full-width destination slot; a concise Arrange control sits beside the existing view-content and Help controls. Traceability retains its displayed-line count and existing actions. Active drawing/assignment feedback appears beside the operation outcome in the persistent status bar, with full text on hover. Operation errors must never be replaced by generic guidance.
-
-Help opens as an overlay and closes with Close or Escape. F1 opens the relevant diagram topic. The workspace, selected group, pending source/property/behavior drafts and camera remain owned by their existing state. Background user commands are rejected before specialized canvas/reference dispatch. Passive results retain their established validity checks. The editor remains the first child of a stable Stack while Help opens and closes.
-
-Rejected alternatives: ordinary navigation to the Guide page cleared selection and could reject Help while a behavior draft was pending; placing feedback beside the entire selection toolbar exhausted narrow-window width; unconditional status substitution hid operation failures. Independent source review identified these before acceptance. Hover-only help was rejected because the complete instructions need a keyboard-accessible route.
-
-[Editing workspace UX review](../docs/ui-review.md) is the development/review contract requested by the user. It covers persistent prose, actionable feedback, context preservation and independent native interaction checks.
-
-## Verification status
-
-Clean source `f83068757af885572f6b3f932d07233dd1b94b7e` passed `cargo build -p oa-desktop --locked` on Windows gnullvm. Its candidate executable SHA-256 is `c1a9b196ec03e86f049fa2aadb2b86bfcaa3f0fbae582a80ee39ee8adf0758e3e`. The [independent source review](compact-context-help-source-review-20260925.md) records the corrected source findings, including passive viewport updates while Help is open.
-
-Independent native review of that executable recovered approximately 61 pixels in normal Traceability, 114 pixels in minimum Traceability and 58 pixels in minimum Allocation. Help resizes, pointer-scrolls, selects the State topic, and closes through Close/Escape. The review also reproduced two acceptance failures: PageDown cannot scroll Help, and F1/Escape preserves a property or Process-creation draft but loses typing focus/caret continuation. These findings require correction and another native check; model-state unit tests alone do not cover internal widget focus. The idle State-canvas gesture sentence is also removed in the successor; active/pending and hovered-item feedback retain their stable slot.
-
-The initial focused test run passed nine and failed one: the allocation test fixture used the default Overview projection before asserting allocation ownership. A separate ten-case mounted geometry run passed nine and failed the destination's existing 400-pixel minimum-width check. Sharing its row with the verbose Arrange action reduced that slot to 328 pixels at minimum size. The successor fixes the fixture explicitly and restores the full destination row without weakening its width check. The original failed logs are preserved in the [native/test evidence](experiments/compact-help-20260925/README.md). These diagnostic runs began before the successor edits and are not frozen-source acceptance of those edits.
-
-Frozen successor `5657a996ed2cefb1fa84ef967b655eaf8f9f6817` passed formatting, strict all-target desktop Clippy and the Windows GUI build. The full desktop run passed 1,538 tests, ignored seven and failed one new mounted Help test before Help opened: its synthetic multi-character KeyPressed event inserted only the first character, as the actual Iced text input specifies. The final correction sends individual character events and retains the exact-caret, scrolling and IME assertions. The existing allocation width and ownership checks and new modifier/pointer cancellation checks passed. See the [preserved successor evidence](experiments/compact-help-20260925/candidate-5657/review.md) and logs; the failed run is not reported as a passing suite.
-
-Independent native review of that exact executable confirmed keyboard Help scrolling, precise Inspector and Process-draft caret continuation after Help, resize, retained State tool state and complete allocation-error tooltips. Minimum Allocation recovers approximately 64 pixels with the full destination slot; minimum Traceability recovers 114 pixels. The reviewer found no new blocker within that scope.
-
-Final source `6e7c4ddaf0775198384a8c4882809ea8e14b2976` passes formatting, strict desktop/all-target Clippy, GUI build and 125 focused Help/allocation/guide tests (zero failures/ignores). The corrected mounted caret test now executes its complete assertions. Unchanged evidence from the earlier full run is retained at its original source; the remaining 1,421 desktop cases were not rerun at the final source. The initial final GUI link failed when the disk filled; after the user expanded the disk, the same-source rebuild passed. The failed log remains preserved.
-
-The [final native report](experiments/compact-help-20260925/candidate-6e7c/review.md) directly verifies cancellation status, guide wording, native group selection through context menus, primary Inspector changes, long-name controls at minimum size, exact caret return after both Help dismissal routes, and Apply/Undo/Redo/Undo recovery. Independent source review found no blocker in the final small delta. The watcher records exit 0 and empty stdout/stderr; all 37 copied model files still match the original after closure. An early transient OSK/modifier obstruction occurred before model loading and is recorded separately from app behavior. No blocking defect was found within this contribution's review scope. Shared integration and release admission remain in issue 39; full product completion is not claimed.
-
-Required native checks: minimum and normal windows; Traceability and Allocation space comparison; multi-selection with long names; Help/F1/Close/Escape with property and behavior drafts; editor focus and canvas scroll/camera restoration; active feedback plus operation failure; State and Process controls; subsequent edit/Undo/Redo and source preservation. Linux remains deferred under the recorded user instruction.

harness/compact-context-help-source-review-20260925.md

@@ -1,44 +0,0 @@
-# Compact contextual help: independent source review
-
-Review date: 2026-09-25. Scope: Gitea issue #39 compact editing chrome and contextual Help, reviewed against base `715036e1` and the issue screenshot. Reviewed source includes `e0812b3932fbb36100516f0981dc9c646eeda56d` plus the subsequent local passive-geometry admission patch and regression test in this change. This is source-review evidence, not native acceptance or executed test evidence.
-
-Criteria: [editing workspace UX review](../docs/ui-review.md), especially preserving pending edits and selection, stable canvas geometry, accessible disclosure, and retaining actionable feedback.
-
-## Findings addressed in source
-
-- The initial Help action used ordinary page navigation, clearing multiselection and selected bends, including before a pending behavior form rejected navigation. Contextual Help now overlays the existing workspace. Close/Escape changes reading state without navigating or applying drafts.
-- App-level modal admission originally ran after allocation and reference-picker fast paths. Help now gates user messages at the beginning of `App::update`; allocation and behavior keyboard ownership are also disabled while Help is open.
-- Combining live gesture feedback with multiselection controls could leave no width for feedback at the configured minimum window size. Selection controls now keep a compact, fixed-height row; current drawing/allocation feedback uses the existing application footer.
-- Footer feedback initially replaced operation status, concealing errors while a promoted edge or drawing tool remained selected. The footer now retains operation status alongside feedback and exposes complete text in its tooltip.
-- Conditional modal wrapping could recreate the editor widget tree. Both closed and open states now use the same outer Stack with the workspace as its first child.
-- State/Process selection guidance removed from persistent chrome was missing from its target Help articles. The States and Chains articles now include group selection, primary-properties semantics and relevant tool/read-only guidance.
-- The new early modal gate initially rejected passive behavior viewport/scroll notifications. It now admits Process/Scenario geometry and State viewport notifications to their existing context-validated handlers, preventing resize observations from being lost while Help is open.
-
-## Regression coverage added
-
-[`context_help_tests.rs`](../crates/oa-desktop/src/app/context_help_tests.rs) covers property drafts and multiselection, source drafts, pending state-transition forms, blocked background actions, contextual Help topic dispatch, Close/Escape, allocation input ownership, queued inspector reference-picker admission, and valid/stale Process viewport measurements during Help and after closing. Assertions include accepted-model snapshot identity and absence of history changes where applicable. Passive geometry intentionally validates document/owner/revision; stale pointer epochs alone do not invalidate measurements.
-
-The reviewer did not compile or execute these tests. Suggested focused command: `cargo test -p oa-desktop context_help_tests`. The integration owner records actual execution and native results separately.
-
-## Follow-up from native review
-
-Native review of the subsequent candidate found that contextual Help did not respond to PageDown and that Escape reached a focused underlying text input, dropping its typing focus. The follow-up patch adds a Help-only keyboard subscription and article-ID-targeted scrolling (40-pixel arrows, 90% of the actual viewport for PageUp/Down, Home/End), using Iced's bounds-clamped scroll state. A stable workspace input barrier preserves the actual editor caret while suppressing key, pointer, touch and IME input behind Help; modifier changes and passive geometry continue. Opening Help retires held pointer gestures through cancellation releases with all authored actions discarded, while forwarding redraw/layout invalidation. This also prevents a held canvas pan or text selection from resuming after release behind Help.
-
-New mounted regressions exercise the production App tree and subscriptions for keyboard scrolling, unchanged background scroll positions, precise Inspector caret return, IME exclusion, Shift release, and held-pan retirement. A real text-input widget regression checks selection-drag retirement while preserving its caret. The allocation ownership fixture was corrected to explicitly request Allocation, because `ensure_diagram` creates Overview. These follow-up changes were formatted and source-reviewed here; compilation, execution and native acceptance remain the integration owner's checks.
-
-A second, read-only critic reviewed the follow-up independently of its implementation. It found and prompted corrections for stale modifiers, IME leakage and interrupted pointer gestures. Its final read found no further blocking source defect in the input barrier, cancellation, passive-event handling or relocated Arrange control. The separate native reviewer supplied the original keyboard/focus failures. Neither source review establishes executed or native acceptance of the successor.
-
-## Scope and remaining verification
-
-A final independent read-only source review covered the small post-`5657a996`
-delta. It confirmed that the mounted typing fixture must send one KeyPressed per
-character because Iced consumes the first scalar, with the original caret/IME
-assertions retained. Arrange cancellation now replaces only its own obsolete
-armed status, preserving unrelated errors; input epochs and model commands are
-unchanged. The guide names the actual Arrange control. No blocking finding was
-identified in that delta. Actual executed and native evidence remains separately
-identified by source in the design record and evidence index.
-
-Production changes reviewed: desktop App messages/admission, allocation input ownership, Escape bridging, behavior keyboard ownership, architecture/State/Process toolbar layout, guide article disclosure and footer feedback; supporting architecture/UI-review documentation. Regression tests and this record are review artifacts. No model schema, persistence format or authored-model transformation is introduced.
-
-No further concrete source blocker was identified after the fixes above. Native checks remain necessary at 1100×700 and a representative normal size: Help discovery and keyboard reading/dismissal, focus and caret return, preservation of canvas camera/selection and form drafts, resize while Help is open, multiselection control visibility, allocation refusal/destination feedback, current operation failures, and stable canvas bounds through selection/gesture changes. Source inspection and App tests do not establish layout quality, keyboard scrolling, pointer behavior or usability.

harness/compact-help-validation-20261001.md

@@ -1,41 +0,0 @@
-# Compact diagram Help: Windows validation
-
-The source contribution for [issue 39](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/39)
-is based on released `715036e132677dd2bc2fb37ed316d93dc9987aec`; final production/test
-source is `6e7c4ddaf0775198384a8c4882809ea8e14b2976`. It removes permanent canvas
-instructions, preserves compact stable controls and offers contextual Help/F1.
-Model schema, core, server, dependencies and persistence code are unchanged.
-
-[Decision and acceptance boundary](compact-context-help-20260925.md),
-[independent source review](compact-context-help-source-review-20260925.md),
-[native reports, screenshots and gate logs](experiments/compact-help-20260925/README.md)
-and [development UX criteria](../docs/ui-review.md) are authoritative for this change.
-
-Windows gnullvm / Rust 1.98.1: formatting, strict desktop/all-target Clippy and the
-GUI build pass. Final focused run: **125 passed, zero failed/ignored**. Earlier
-full desktop execution at `5657a996` passed 1,538, failed one new test's typing
-setup and ignored seven; the corrected test executes fully in the final passing
-run. This is not a claim of a full-suite run at the final commit. The initial
-final link failed with a full disk and is retained; the recovered build succeeds.
-
-Final Studio SHA256:
-`d55ecad4b0f75c0c9c26625e5441bef9c9360890b65bc13236c6ebfaf03d631e`.
-Matching runtime SHA256:
-`f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4`.
-
-Independent native checks pass group selection/primary properties, Help dismissal
-and exact caret continuation, long names at 1100×700, Arrange cancellation,
-guide consistency and Apply/Undo/Redo/Undo. Earlier versioned native checks cover
-Process drafts, State tools, Help resize and actual operation refusals. Minimum
-Allocation recovers about 64 pixels; minimum Traceability about 114 pixels.
-Final process exit is 0, both logs are empty, and all 37 copied example files
-remain unchanged. Native counts do not establish whole-Project equality; mounted
-regressions provide the separately scoped model/history checks.
-
-The application remains an unfinished development preview. The separate
-projection/navigation, outgoing-drag, icon, grid/performance and State-label
-contributions are outside this source. Dense routes/labels, remaining Scenario
-group adapters, quantities/calculations/constraints, maintained libraries,
-complete OA/SA acceptance and broad accessibility/DPI coverage remain unfinished.
-Linux/WSL checks remain excluded by the user's recorded instruction. This change
-does not accept the complete first release.

harness/connection-icons-20260925.md

@@ -0,0 +1,11 @@
+# Connection tool icons
+
+Branch candidate for [#41](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/41), based on published Windows preview source `715036e132677dd2bc2fb37ed316d93dc9987aec`. This is not integrated or native acceptance.
+
+The reported collapsed palette repeats one arrow for three different tools. Extend the existing Rust/Iced canvas glyphs at their actual 16×16 size: work endpoints plus an arrow for Interaction/Functional exchange, neutral participant endpoints for Communication means, facing component ports for Boundary exchange, and work entering a performer for Allocation. The first pair never coexist in one perspective. Unoriented generic tools must not imply a fixed direction.
+
+Letter badges were rejected as language-dependent and cramped. Different arrow/dash styles risk confusing tool identity with relation direction. Native endpoint/container shapes fit the existing icon system without font or asset dependencies. Preserve button dimensions, explicit labels/tooltips, ordering, messages, availability and selection rules.
+
+Independent source critique found no blocker and confirmed the tool semantics and Iced API use. Actual-size legibility remains unverified, particularly the exchange arrow, port details and possible download/import interpretation of Allocation. Verify enabled, disabled, hovered and selected palettes in both perspectives, expansion/collapse, tool activation, representative relation creation and cancellation. Existing keyboard/accessibility behavior must be checked, not inferred from hover labels. Reuse semantic connection tests; geometry hashes alone are not an identification or usability evaluator.
+
+Linux remains excluded by the existing user pause. Live ownership and integration status belong to the linked issue.

harness/experiments/compact-help-20260925/README.md

@@ -1,62 +0,0 @@
-# Compact Help native evidence
-
-Branch-specific evidence for [issue 39](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/issues/39).
-The [design record](../../compact-context-help-20260925.md) owns the decision and current acceptance boundary.
-
-`native/` contains the Windows baseline captures from published source
-`715036e132677dd2bc2fb37ed316d93dc9987aec`.
-`candidate-f830/` preserves the independent review of source
-`f83068757af885572f6b3f932d07233dd1b94b7e`, including its two failed Help workflows,
-original screenshots, exact executable/runtime hashes and successful build log.
-These observations must not be relabeled as acceptance of a successor executable.
-
-`candidate-5657/` preserves the next frozen source's build, strict all-target
-Clippy, full desktop test log and independent native review. Formatting, Clippy
-and build passed. Tests: 1,538 passed, one failed, seven ignored. The sole failure
-was the new caret test's synthetic typing setup before Help opened; `help-failure.log`
-records its exact rerun. The next correction uses one character per key event.
-The native report records corrected Help keyboard/caret behavior, minimum-window
-layout and real operation-refusal feedback, with explicit scope limitations.
-Copied text logs have normalized line endings and trailing blank lines removed;
-original local logs are retained. Image and fixture hashes are unchanged.
-
-`candidate-6e7c/` preserves final source
-`6e7c4ddaf0775198384a8c4882809ea8e14b2976`: formatting and strict desktop/all-target
-Clippy pass, the recovered GUI build passes, and 125 focused Help/allocation/guide
-tests pass with zero failures/ignores. `build-diskfull.log` preserves the first
-failed link; no code change was needed for the recovered build. Its native report
-and 15 screenshots cover cancellation, guide consistency, group/primary selection,
-minimum-window long names, exact caret return and Undo/Redo/Undo. The runtime
-receipt confirms exit 0 and empty logs. Post-close baseline comparison confirms
-all 37 copied fixture files unchanged. The transient OSK observation happened
-before loading the model and is explicitly retained. Prior source-specific
-workflows remain attributed to their actual binaries.
-
-Reproduce final code checks on the documented Windows gnullvm/Rust 1.98.1 toolchain:
-
-```powershell
-cargo fmt --all -- --check
-cargo clippy -p oa-desktop --all-targets --locked -- -D warnings
-cargo build -p oa-desktop --locked
-cargo test -p oa-desktop --locked -- context_help_tests allocation_drag guide::tests --test-threads=1
-```
-
-The initial test compilation began at that commit; successor work was edited
-while it ran. `tests.log` (nine passed, one failed fixture precondition) and
-`geometry-tests.log` (nine passed, one failed destination-width invariant) are
-diagnostic evidence from that cycle, not frozen-source acceptance. The geometry
-run reused its test executable without recompiling. The first command's
-`allocation_drag_full_tree_tests` filter matched no tests; the second used the
-actual `full_tree` filter plus the affected mounted State/Process checks.
-
-The review used a copy of `examples/release1/project.arcadia` from the published
-Windows package. All 37 fixture files matched the baseline before the trial and
-again after closing without saving. `baseline-proof.json` records those bytes.
-The executable is a local development build, not a published release artifact.
-
-Reproduce the build using the documented Windows gnullvm toolchain and
-`cargo build -p oa-desktop --locked`. Place its matching `libunwind.dll` beside the
-executable, launch it, and open an isolated copy of the release1 example. Perform
-the workflows and use the window sizes in [the native report](candidate-f830/review.md).
-The baseline captures establish layout comparison; the report records actual
-interaction results and explicit unverified workflows.

harness/experiments/compact-help-20260925/candidate-5657/baseline-proof.json

@@ -1,49 +0,0 @@
-{
-  "baseline_binary": "2c03bd6cc3f1110c219e4f57ab94874a121590f83779239a93289b7170664399",
-  "baseline_source": "715036e132677dd2bc2fb37ed316d93dc9987aec",
-  "model_files": {
-    "evidence/repair-check.md": "f4db17bdca4ecbb1bf0caef01b2da5f1f7f798ab3152b648ce6dd8696a6a68e5",
-    "expected-diagnostics.json": "3700393d76b940cfc076bf52861bd7b1f43370f8eabce3594531bd0bf1fc851e",
-    "model.json": "ef0ef4006c3e09d5db6e1b621256b3f7d6642f3a7b09cc34607cfbcca830c727",
-    "model.rs": "ddc2d92b0d7699a4cadfbb35ae379f0a68d17f4f5d7df82b4b1afcf8d5425fbe",
-    "oa/activities/activity_oa_restore_work.arcadia": "21cbd7176af8fad68453306f2371ff03e127a994b8796cdf044567332de9686f",
-    "oa/behavior/process_oa_assessment_procedure.arcadia": "23cabc213c264a16c8595414db6acb09248c1cef9cd699f1b0316e5bb82c062a",
-    "oa/behavior/process_oa_field_procedure.arcadia": "9c52086759b7344b4809ceb8d372f65647b16fc24153a03b887faa378c37fe96",
-    "oa/behavior/process_oa_response.arcadia": "675798bd19e6b40d03e7076b0e59b110cdaaab7b6d16c47c3ac80fa960072e84",
-    "oa/behavior/scenario_oa_conversation.arcadia": "e217e5394a0771dc16206ed9437a231da27905d2f19be64b3f48281c0a32fb6b",
-    "oa/behavior/scenario_oa_full_scenario.arcadia": "c5a285f2d7c61bd2a136107f267fbf9cddb1cba3f63ff36a6f53f7ab98f33df5",
-    "oa/behavior/state_machine_oa_monitor.arcadia": "e7349e1e5336282eed3f5a103129db33d3ae4ed500788ee7129e8fc193ac57f6",
-    "oa/capabilities.arcadia": "26a3d9b615a3251ff010e0b47127f2d16bc2dcd45ed95967208b0076d725843a",
-    "oa/model.arcadia": "069a5eaaf525089935cc9d73ae7b916866ed78c6534705d75739650ecdea7ada",
-    "oa/participants.arcadia": "591a75a9ecad280302be4d4ae0171ad616377ed11ead5e233848ca2dc0a71819",
-    "oa/types.arcadia": "f02c391d584674c879f662a418abba3a220f1fee88471ca49322ac9873de628d",
-    "project.arcadia": "b2674e6bf77cfe0f6f0ba79c81d2e96d92f39c02ca2c6266d80e91723bfb9fda",
-    "README.md": "113cfb1cf38a98b51bff60442d86a35d636a3d80ef206bece7d53d0aae67f2d5",
-    "sa/behavior/process_sa_assessment_procedure.arcadia": "5c414fbdaabf9f9e402b0441fcacf1cacf4dbbc6c822162f028de35abf59be2d",
-    "sa/behavior/process_sa_field_procedure.arcadia": "ece846fdf93857e71a9ab0efcbdf64a5c41c71180f62afa3f79077fffb53b8f2",
-    "sa/behavior/process_sa_response.arcadia": "af7fdda280a917cf626f6e077162d481f9aaad280f8e81330c07d7fe384b1c52",
-    "sa/behavior/scenario_sa_conversation.arcadia": "01339699ec3ee409418d9bb232542f2bcd9419f1e67b183e77700c56bb9f71d2",
-    "sa/behavior/scenario_sa_full_scenario.arcadia": "5dce6b00a3a441162e8dee3e23d9ca5ab7bed4a24de669b1fba03664a3086dda",
-    "sa/behavior/state_machine_sa_monitor.arcadia": "17dbcfa5bbfd10fc8e23a325fc950ce853c219b4aa89c74f96278cbb3f34acc8",
-    "sa/capabilities.arcadia": "81706a0ca9d7db2aa0350888b9c00d853885185db2e6b90557d3d51a11c3d645",
-    "sa/functions/function_sa_audit_thresholds.arcadia": "27f798f78f36e72b38edab3725af2feb0eaa010fd52a60b5c6b6bef57ad3b686",
-    "sa/functions/function_sa_restore_work.arcadia": "357c6acb80f86b4e8d8f5c98f9f79d140f85fbe09f3406b41b7ac6eba464ec8c",
-    "sa/model.arcadia": "805b90262e27090ae7da81a51bcefa49c97fb0b3d3220b4a72323b4c4351c395",
-    "sa/participants.arcadia": "ca144d6a8f45fe720b5d18c7b59c7671444baa8c37e5ce9117bcba34b3a6aa84",
-    "sa/types.arcadia": "540ddbc2bcd0ccf45298e3ea5660637341aff63ff65fd87ac2f26469d1adc064",
-    "traceability.arcadia": "474bd28d955ff7af7722f6e9a23220d816879e3f46202e79a233544b9c593116",
-    "transition-before.json": "2253e6434f741687e22327c37d520ed15c043bc36025498650bc2366bb6a874d",
-    "transition-request.json": "43b9a22e5f95ad3bc0ebd2478ead0e14406854abc989ae94ded9367b013d812a",
-    "views/diagram_oa_allocation_view.arcadia": "c45d7467839219d894804c1ef2d22ff4d4a5a84a6a273c526bafd4c1facde624",
-    "views/diagram_sa_allocation_view.arcadia": "352a3ca745517592b5c9b1239b5770f62f0466a329a91fd03457ef2b53c06ed6",
-    "views/diagram_sa_capability_view.arcadia": "8f18fcccbcddcf3c1ea0ffe727b5b23b77fc148c5da4fde953abe681e4c20cd2",
-    "views/diagram_sa_service_view.arcadia": "4c72cb7593d9c4be8d2600b0656a7a3a6ce84c45bb2f3e58a4ee5ae3bf91913c",
-    "views/diagram_sa_state_view.arcadia": "dd1bea81ac7dc549a53f9b190be6f13052e00ede345bd180444cc31edb892230"
-  },
-  "matching_files": 37,
-  "baseline_captures": {
-    "baseline-allocation-compact.png": "d92a0cca62a038dcf0894d92b37a64028342c2365e3fb8880ed597222123d96f",
-    "baseline-trace-compact.png": "b608a3d75612d8c06aacc094a7aebd12a0798ce30f2126c00bc3ad61a9103217",
-    "baseline-trace-normal.png": "6dfb6c595af4247aab3600da0e0a25ba4b11151436e9fc4a406f1036053f71d0"
-  }
-}

harness/experiments/compact-help-20260925/candidate-5657/build.json

@@ -1,6 +0,0 @@
-{
-  "buildExit": 0,
-  "runtime": "F45604A12E8BCD839FD86F667C1BE1CC7C4F9DA2B3C69FF381AC708F0E1AE7D4",
-  "source": "5657a996ed2cefb1fa84ef967b655eaf8f9f6817",
-  "binary": "83CCEFF8B713491AFEE92FFCAFE62B02F5EEA6A3D899F6F334848FDC7BB0D88D"
-}

harness/experiments/compact-help-20260925/candidate-5657/build.log

@@ -1,2 +0,0 @@
-   Compiling oa-desktop v0.2.0 (C:\ar-compact-01a0d717\crates\oa-desktop)
-    Finished `dev` profile [unoptimized] target(s) in 2m 12s

harness/experiments/compact-help-20260925/candidate-5657/clippy.log

@@ -1,6 +0,0 @@
-   Compiling oa-core v0.2.0 (C:\ar-compact-01a0d717\crates\oa-core)
-    Checking iced_widget v0.14.2 (C:\ar-compact-01a0d717\crates\vendor\iced_widget)
-   Compiling oa-server v0.2.0 (C:\ar-compact-01a0d717\crates\oa-server)
-   Compiling oa-desktop v0.2.0 (C:\ar-compact-01a0d717\crates\oa-desktop)
-    Checking iced v0.14.0
-    Finished `dev` profile [unoptimized] target(s) in 4m 09s

harness/experiments/compact-help-20260925/candidate-5657/help-failure.log

@@ -1,16 +0,0 @@
-
-running 1 test
-
-thread 'app::context_help_tests::mounted_context_help_keyboard_scroll_preserves_inspector_focus_and_exact_caret' (7368) panicked at crates\oa-desktop\src\app\context_help_tests.rs:389:5:
-assertion `left == right` failed
-  left: "DSend"
- right: "DRAFT Send"
-note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
-test app::context_help_tests::mounted_context_help_keyboard_scroll_preserves_inspector_focus_and_exact_caret ... FAILED
-
-failures:
-
-failures:
-    app::context_help_tests::mounted_context_help_keyboard_scroll_preserves_inspector_focus_and_exact_caret
-
-test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 1545 filtered out; finished in 1.56s

harness/experiments/compact-help-20260925/candidate-5657/review.md

@@ -1,32 +0,0 @@
-# Independent native successor review
-
-Reviewed source `5657a996ed2cefb1fa84ef967b655eaf8f9f6817`; executable SHA-256 `83CCEFF8B713491AFEE92FFCAFE62B02F5EEA6A3D899F6F334848FDC7BB0D88D` independently rechecked after the run; runtime SHA-256 `F45604A12E8BCD839FD86F667C1BE1CC7C4F9DA2B3C69FF381AC708F0E1AE7D4` from build.json. Used Windows native Computer Use, the isolated `model/project.arcadia`, normal 1440x900 and minimum 1100x700 client sizes (1442x932 and 1102x732 captures). The prior candidate report remains historical under `../candidate-f830/review.md`.
-
-## Result
-
-Both prior blocking native findings are corrected in the exercised workflows. No new blocking finding was observed in this bounded retest. This is not complete product, accessibility, multiselection or first-release acceptance.
-
-### Help keyboard reading and caret preservation
-
-1. In normal Allocation, focused inspector Name, selected its text, typed `LEFT RIGHT`, and pressed Ctrl+Left to put the caret before `RIGHT`. Opened Help with F1. PageDown visibly scrolled to lower sections; PageUp returned to the top; End reached the bottom; Home returned to the top; Down moved one increment and Up reversed it. Evidence: `02-help-pagedown.png`, `03-help-end.png`.
-2. Pressed Escape, then typed `X` without refocusing. Name became exactly `LEFT XRIGHT`. Reopened with F1, clicked visible Close, then typed `Y` without refocusing. Name became exactly `LEFT XYRIGHT`. Thus keyboard reading did not move the background caret, and both dismissal paths preserved input continuation. Evidence: `04-caret-after-escape.png`, `05-caret-after-close.png`. Revert restored the accepted property.
-3. Opened Help again and resized the native window to its minimum width and height through the native system menu. Help reflowed with Close reachable; End still reached the bottom and Escape returned to the same diagram. Evidence: `06-help-minimum-resized.png`.
-4. At minimum size, opened System functional chain `Handle a pressure alarm`, chose W, clicked blank canvas, and entered `LEFT RIGHT` in the pending contribution Name. Ctrl+Left, F1, End, Escape, then `X` produced exactly `LEFT XRIGHT` without refocusing. Create remained disabled with its missing-source explanation and Cancel reachable. Cancel preserved the accepted model. Evidence: `15-process-caret-restored.png`.
-
-### Compact controls and actionable feedback
-
-- Normal and minimum Allocation show projection, Help and Arrange together, with a separate full-width Destination slot. At minimum size the canvas begins near y=350 versus baseline y=414, approximately 64 pixels recovered. Changing from no selection to a selected work card and exercising refused drags did not move the canvas boundary. Evidence: `01-allocation-normal.png`, `07-allocation-minimum.png`.
-- Clicking Arrange displays `Arrange ✓`; the tooltip explains one-drag scope, Alt+A and Escape. Escape removes the check; Alt+A arms it again. Evidence: `08-arrange-tooltip-armed.png`.
-- With Arrange armed, dragged `Assess pressure alarm` from Control room toward Field technician. The operation was refused with the visible footer message `Make room or adjust the view, then drag again. Zoom in to read the work and destination.` The accepted model remained saved and the work stayed allocated to Control room. Evidence: `09-arrange-refusal.png`.
-- Repeated the drag without Arrange. Core validation refused the reassignment with `exchange_allocation_performer: Actual activity allocations must agree with one permitted communication direction; review the means or the activity allocations.` The shortened footer remained visible, and pointing at it exposed the complete readable explanation. The selected activity and accepted model remained unchanged. Evidence: `10-assignment-refusal.png`, `11-refusal-tooltip.png`.
-- Changed View content to Traceability. Count, Add existing elements, Review layer traces, View visibility and Help all remain reachable at minimum width. Canvas starts near y=356 versus baseline y=470, approximately 114 pixels recovered. Undid this temporary projection change. Evidence: `12-trace-minimum.png`.
-- Opened saved State view `5 · SA pressure supervision`: the generic idle canvas instruction is removed. Choosing +Region still shows its active creation prompt. F1 opens the States topic; Escape returns with +Region still selected, without creating an object. Evidence: `13-state-idle.png`, `14-state-active-prompt.png`.
-
-## Limitations and minor observations
-
-- The existing State active prompt still truncates at minimum width (`Create Region ... machine or composite s...`). This retest confirms it was retained, not that every pre-existing State prompt has complete narrow-window readability.
-- The compact control says `Arrange`, while the guide still says `Arrange next drag`; its tooltip explains that wording. Minor consistency cleanup was reported to the integration owner; no user workflow failed because of it.
-- Modifier-click/native multiselection and long-name group toolbar layout were not independently operated because the supported Computer Use API has no modifier-click/key-hold operation. Do not infer them from the single-selection screenshots. The parent owns mounted-widget verification separately. Source-editor caret behavior and full Scenario workflows were not repeated in this bounded successor retest.
-- The approved native launch API does not expose stdout/stderr or process exit status. After Alt+F4, refreshed native window enumeration confirmed both successor application and console windows disappeared. No crash dialog was observed; this is not an asserted exit code or log inspection.
-
-No save was performed. A post-run hash comparison against baseline-proof.json found no changed files among all 37 copied fixture files. The UI returned to the saved baseline with 94 objects, 62 links and one model check before closure. Screenshots are supporting evidence; the results above describe actual input and observed responses.

harness/experiments/compact-help-20260925/candidate-6e7c/baseline-proof.json

@@ -1,49 +0,0 @@
-{
-  "baseline_binary": "2c03bd6cc3f1110c219e4f57ab94874a121590f83779239a93289b7170664399",
-  "baseline_source": "715036e132677dd2bc2fb37ed316d93dc9987aec",
-  "model_files": {
-    "evidence/repair-check.md": "f4db17bdca4ecbb1bf0caef01b2da5f1f7f798ab3152b648ce6dd8696a6a68e5",
-    "expected-diagnostics.json": "3700393d76b940cfc076bf52861bd7b1f43370f8eabce3594531bd0bf1fc851e",
-    "model.json": "ef0ef4006c3e09d5db6e1b621256b3f7d6642f3a7b09cc34607cfbcca830c727",
-    "model.rs": "ddc2d92b0d7699a4cadfbb35ae379f0a68d17f4f5d7df82b4b1afcf8d5425fbe",
-    "oa/activities/activity_oa_restore_work.arcadia": "21cbd7176af8fad68453306f2371ff03e127a994b8796cdf044567332de9686f",
-    "oa/behavior/process_oa_assessment_procedure.arcadia": "23cabc213c264a16c8595414db6acb09248c1cef9cd699f1b0316e5bb82c062a",
-    "oa/behavior/process_oa_field_procedure.arcadia": "9c52086759b7344b4809ceb8d372f65647b16fc24153a03b887faa378c37fe96",
-    "oa/behavior/process_oa_response.arcadia": "675798bd19e6b40d03e7076b0e59b110cdaaab7b6d16c47c3ac80fa960072e84",
-    "oa/behavior/scenario_oa_conversation.arcadia": "e217e5394a0771dc16206ed9437a231da27905d2f19be64b3f48281c0a32fb6b",
-    "oa/behavior/scenario_oa_full_scenario.arcadia": "c5a285f2d7c61bd2a136107f267fbf9cddb1cba3f63ff36a6f53f7ab98f33df5",
-    "oa/behavior/state_machine_oa_monitor.arcadia": "e7349e1e5336282eed3f5a103129db33d3ae4ed500788ee7129e8fc193ac57f6",
-    "oa/capabilities.arcadia": "26a3d9b615a3251ff010e0b47127f2d16bc2dcd45ed95967208b0076d725843a",
-    "oa/model.arcadia": "069a5eaaf525089935cc9d73ae7b916866ed78c6534705d75739650ecdea7ada",
-    "oa/participants.arcadia": "591a75a9ecad280302be4d4ae0171ad616377ed11ead5e233848ca2dc0a71819",
-    "oa/types.arcadia": "f02c391d584674c879f662a418abba3a220f1fee88471ca49322ac9873de628d",
-    "project.arcadia": "b2674e6bf77cfe0f6f0ba79c81d2e96d92f39c02ca2c6266d80e91723bfb9fda",
-    "README.md": "113cfb1cf38a98b51bff60442d86a35d636a3d80ef206bece7d53d0aae67f2d5",
-    "sa/behavior/process_sa_assessment_procedure.arcadia": "5c414fbdaabf9f9e402b0441fcacf1cacf4dbbc6c822162f028de35abf59be2d",
-    "sa/behavior/process_sa_field_procedure.arcadia": "ece846fdf93857e71a9ab0efcbdf64a5c41c71180f62afa3f79077fffb53b8f2",
-    "sa/behavior/process_sa_response.arcadia": "af7fdda280a917cf626f6e077162d481f9aaad280f8e81330c07d7fe384b1c52",
-    "sa/behavior/scenario_sa_conversation.arcadia": "01339699ec3ee409418d9bb232542f2bcd9419f1e67b183e77700c56bb9f71d2",
-    "sa/behavior/scenario_sa_full_scenario.arcadia": "5dce6b00a3a441162e8dee3e23d9ca5ab7bed4a24de669b1fba03664a3086dda",
-    "sa/behavior/state_machine_sa_monitor.arcadia": "17dbcfa5bbfd10fc8e23a325fc950ce853c219b4aa89c74f96278cbb3f34acc8",
-    "sa/capabilities.arcadia": "81706a0ca9d7db2aa0350888b9c00d853885185db2e6b90557d3d51a11c3d645",
-    "sa/functions/function_sa_audit_thresholds.arcadia": "27f798f78f36e72b38edab3725af2feb0eaa010fd52a60b5c6b6bef57ad3b686",
-    "sa/functions/function_sa_restore_work.arcadia": "357c6acb80f86b4e8d8f5c98f9f79d140f85fbe09f3406b41b7ac6eba464ec8c",
-    "sa/model.arcadia": "805b90262e27090ae7da81a51bcefa49c97fb0b3d3220b4a72323b4c4351c395",
-    "sa/participants.arcadia": "ca144d6a8f45fe720b5d18c7b59c7671444baa8c37e5ce9117bcba34b3a6aa84",
-    "sa/types.arcadia": "540ddbc2bcd0ccf45298e3ea5660637341aff63ff65fd87ac2f26469d1adc064",
-    "traceability.arcadia": "474bd28d955ff7af7722f6e9a23220d816879e3f46202e79a233544b9c593116",
-    "transition-before.json": "2253e6434f741687e22327c37d520ed15c043bc36025498650bc2366bb6a874d",
-    "transition-request.json": "43b9a22e5f95ad3bc0ebd2478ead0e14406854abc989ae94ded9367b013d812a",
-    "views/diagram_oa_allocation_view.arcadia": "c45d7467839219d894804c1ef2d22ff4d4a5a84a6a273c526bafd4c1facde624",
-    "views/diagram_sa_allocation_view.arcadia": "352a3ca745517592b5c9b1239b5770f62f0466a329a91fd03457ef2b53c06ed6",
-    "views/diagram_sa_capability_view.arcadia": "8f18fcccbcddcf3c1ea0ffe727b5b23b77fc148c5da4fde953abe681e4c20cd2",
-    "views/diagram_sa_service_view.arcadia": "4c72cb7593d9c4be8d2600b0656a7a3a6ce84c45bb2f3e58a4ee5ae3bf91913c",
-    "views/diagram_sa_state_view.arcadia": "dd1bea81ac7dc549a53f9b190be6f13052e00ede345bd180444cc31edb892230"
-  },
-  "matching_files": 37,
-  "baseline_captures": {
-    "baseline-allocation-compact.png": "d92a0cca62a038dcf0894d92b37a64028342c2365e3fb8880ed597222123d96f",
-    "baseline-trace-compact.png": "b608a3d75612d8c06aacc094a7aebd12a0798ce30f2126c00bc3ad61a9103217",
-    "baseline-trace-normal.png": "6dfb6c595af4247aab3600da0e0a25ba4b11151436e9fc4a406f1036053f71d0"
-  }
-}

harness/experiments/compact-help-20260925/candidate-6e7c/build.json

@@ -1,6 +0,0 @@
-{
-  "source": "6e7c4ddaf0775198384a8c4882809ea8e14b2976",
-  "binary": "D55ECAD4B0F75C0C9C26625E5441BEF9C9360890B65BC13236C6EBFAF03D631E",
-  "buildExit": 0,
-  "runtime": "F45604A12E8BCD839FD86F667C1BE1CC7C4F9DA2B3C69FF381AC708F0E1AE7D4"
-}

harness/experiments/compact-help-20260925/candidate-6e7c/build.log

@@ -1,2 +0,0 @@
-   Compiling oa-desktop v0.2.0 (C:\ar-compact-01a0d717\crates\oa-desktop)
-    Finished `dev` profile [unoptimized] target(s) in 2m 21s

harness/experiments/compact-help-20260925/candidate-6e7c/clippy.log

@@ -1,2 +0,0 @@
-    Checking oa-desktop v0.2.0 (C:\ar-compact-01a0d717\crates\oa-desktop)
-    Finished `dev` profile [unoptimized] target(s) in 5m 24s

harness/experiments/compact-help-20260925/candidate-6e7c/review.md

@@ -1,49 +0,0 @@
-# Final native UX retest
-
-Independent review by `/root/ux_critique`, using Windows Computer Use (`@oai/sky`). Final preparation and launch began on 2026-09-29; the resumed input session completed on 2026-10-01 America/Los_Angeles (completion clock: 2026-10-02 00:42:55 UTC).
-
-## Identity and scope
-
-- Source: `6e7c4ddaf0775198384a8c4882809ea8e14b2976`.
-- Executable: `.local/native-final/arcadia-studio.exe`, SHA-256 `D55ECAD4B0F75C0C9C26625E5441BEF9C9360890B65BC13236C6EBFAF03D631E`.
-- Runtime: `libunwind.dll`, SHA-256 `F45604A12E8BCD839FD86F667C1BE1CC7C4F9DA2B3C69FF381AC708F0E1AE7D4`.
-- Read build identity from `build.json`. Parent launched this executable with a stdout/stderr/exit watcher; reviewer selected its unique returned native window and did not launch another executable.
-- Model: only `.local/native-final/model/project.arcadia`, copied from the released water-pressure fixture. `baseline-proof.json` records its 37 original file hashes and baseline source/binary identity. No Save was performed.
-- Normal window: 1440x900 client, captured 1442x932. Minimum: 1100x700 client, captured 1102x732. Same native environment and baseline fixture as prior review.
-
-This is a bounded final-delta retest plus previously missing native group-selection/long-name coverage. The earlier `../candidate-5657/review.md` remains historical evidence for Process draft, State, Traceability, refused allocation, and resize-with-Help workflows on source `5657a996...`; those are not silently relabeled as this binary's results.
-
-## Result
-
-No blocking UX defect found in the workflows below. The two final minor corrections behave as intended, and the newly exercised native group workflow passed.
-
-### Arrange cancellation and disclosed guidance
-
-1. In the populated Allocation view, clicked Arrange. The control displayed its check and footer showed the armed state.
-2. Pressed Escape. The check cleared and footer became `Arrange cancelled`, replacing the obsolete armed outcome. Repeated at minimum size with the same result. Evidence: `02-arrange-escape-cancelled.png`, `14-minimum-arrange-cancelled.png`.
-3. Armed Arrange again, then opened contextual Help with the pointer. Help opened and footer became `Arrange cancelled`. Visible Close returned to the same model and canvas. Evidence: `03-help-cancels-arrange.png`.
-4. Used PageDown to reach the relevant guide paragraphs. They now say `Choose Arrange` / `choose Arrange or press Alt+A`, matching the visible control, and explain right-click Add to selection / Inspect this element. Evidence: `04-guide-arrange-and-context-selection.png`.
-
-### Native group selection and primary inspector
-
-1. Clicked `Assess pressure alarm`; right-clicked `Repair valve in the field`; chose `Add to selection` from the ordinary context menu. Both cards gained selected outlines and the row displayed `2 selected`, `Hide selected`, `Clear`, and `Properties: Repair valve ... only`. Inspector showed the Repair activity. Evidence: `05-native-group-selection.png`.
-2. Right-clicked the selected Assess card and chose `Inspect this element`. Both cards stayed selected; Inspector switched to Assess and the row's `Properties: ... only` summary followed it. Evidence: `06-group-primary-inspector.png`.
-3. Opened F1 Help and dismissed with Escape. The same pair, primary inspector, canvas position and zoom remained. Evidence: `07-group-help-preserved.png`.
-4. Resized to the configured minimum through the native window system menu. The group controls remained readable and reachable, with the full-width Destination slot above them. The intentional resize refitted the view; subsequent selection/draft/help transitions did not move its canvas boundary. Evidence: `08-group-minimum.png`.
-
-### Long name, exact caret, Apply, Undo and Redo
-
-1. With both cards still selected and Assess as primary, focused its Name field and replaced the draft with `Pressure alarm assessment with a deliberately long operational activity name LEFT RIGHT`.
-2. Ctrl+Left placed the caret before RIGHT. Opened F1, pressed End to scroll Help, dismissed with Escape, and typed X without clicking the field. Reopened F1, used visible Close, and typed Y without refocusing. Pressing End in the restored field exposed the ending `LEFT XYRIGHT`. Thus both dismissal paths preserved the exact draft caret, not merely the draft contents. The pair and primary inspector also remained unchanged. Evidence: `09-group-long-draft-caret.png`.
-3. Clicked Apply changes. Only the primary Assess activity acquired the long name; Repair retained its original label. At minimum size, the selection row remained one stable row: count, Hide selected, Clear, and a shortened `Properties: Pressure alar... only` summary. The truncation did not hide the `only` distinction or an action. The Inspector Name field remained editable/scrollable for the complete name. Evidence: `10-long-name-group-minimum.png`.
-4. Clicked the non-editable summary row to leave the text input, then Ctrl+Z restored `Assess pressure alarm` and the UI's saved state. Ctrl+Y restored the long name and unsaved state. Ctrl+Z restored the original name and saved state again. The group remained selected through all three operations. Evidence: `11-long-name-undo.png`, `12-long-name-redo.png`.
-5. Clicked Clear. The group cleared, Inspector returned to view properties, and the canvas boundary and card positions remained stable. Evidence: `13-clear-selection-stable-canvas.png`.
-
-## Environment observation and limits
-
-- Initial Ctrl+O unexpectedly opened Windows On-Screen Keyboard, obscuring the target. Its screenshot showed a highlighted Windows key; another observation showed a different highlighted key without another keyboard action from this reviewer. Input was stopped and the parent notified. The keyboard was already absent on the next fresh window enumeration; reviewer did not close it or press any Windows-key control. Used pointer Open and a literal copied-fixture path to continue. Subsequent Escape, PageDown, F1, Ctrl+A, Ctrl+Left, Alt+Space, Undo/Redo and typing produced the expected target-app responses. This transient environment interference is preserved in `00-environment-input-interference.png`; it is not attributed to an application defect.
-- Native modifier-click remains untested; native group selection was genuinely exercised through the supported context menu instead. No multi-item drag/assignment was attempted in this final retest. Prior successor refused-drag evidence is separate.
-- Process/State/Scenario, source-editor caret, all Help navigation keys and resize while Help is open were not all repeated on this final binary. The final run directly exercised property draft/caret, group preservation, PageDown and End, F1/Escape/Close, minimum sizing and edit recovery. Full acceptance must combine the accurately versioned evidence rather than infer missing workflows from screenshots.
-- Saved-state labels, counts and visible Undo results do not prove whole-Project equality. This review made no Save; post-close byte-hash and watcher-log checks belong to the parent and are recorded separately.
-
-Before closure, UI showed `All changes saved`, original activity names, 94 objects, 62 links and one model check. Closed normally with Alt+F4. Fresh native window enumeration confirmed the final application's window was absent. Parent was notified to inspect watcher stdout/stderr/exit and fixture hashes. No crash dialog was observed; native window disappearance alone is not an asserted exit code.

harness/experiments/compact-help-20260925/candidate-6e7c/runtime.json

@@ -1,10 +0,0 @@
-{
-  "source": "6e7c4ddaf0775198384a8c4882809ea8e14b2976",
-  "binary": "D55ECAD4B0F75C0C9C26625E5441BEF9C9360890B65BC13236C6EBFAF03D631E",
-  "started_utc": "2026-09-29T14:58:41.721798+00:00",
-  "pid": 7964,
-  "exit_code": 0,
-  "finished_utc": "2026-10-02T00:42:39.601915+00:00",
-  "stdout_bytes": 0,
-  "stderr_bytes": 0
-}

harness/experiments/compact-help-20260925/candidate-6e7c/tests.log

@@ -1,132 +0,0 @@
-   Compiling oa-desktop v0.2.0 (C:\ar-compact-01a0d717\crates\oa-desktop)
-    Finished `test` profile [unoptimized] target(s) in 5m 01s
-     Running unittests src\main.rs (C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\arcadia_studio-c5b42126ba36cd38.exe)
-
-running 125 tests
-test allocation_drag::tests::allocation_artifact_and_manual_trace_cascades_are_named_and_refused ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_detects_hidden_moved_child_and_stationary_enclosure_growth ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_distributed_oa_sa_exact_scope_routes_source_history_and_anchor ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_noop_stale_tamper_target_and_all_selected_headers ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_performer_closure_does_not_acquire_incidental_semantic_root ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_preserves_existing_overlap_but_refuses_its_growth ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_preserves_roles_and_does_not_invent_unplaced_descendants ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_preserves_unrelated_folded_interior_diagnostic_boundary ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_simultaneous_roots_may_enter_each_others_vacated_bounds ... ok
-test allocation_drag::tests::arrange_tests::explicit_arrange_validates_all_original_members_before_normalizing ... ok
-test allocation_drag::tests::assignment_boundary_tests::group_assignment_checks_original_identity_and_visibility_before_normalization ... ok
-test allocation_drag::tests::assignment_boundary_tests::group_assignment_distributed_parent_refuses_but_its_independent_leaves_can_reassign ... ok
-test allocation_drag::tests::assignment_boundary_tests::group_assignment_finish_rejects_stale_project_and_each_tampered_result ... ok
-test allocation_drag::tests::assignment_boundary_tests::group_assignment_normalizes_parent_child_and_assigns_unplaced_leaf_once ... ok
-test allocation_drag::tests::assignment_boundary_tests::group_assignment_requires_non_anchor_selected_header_inside_viewport ... ok
-test allocation_drag::tests::assignment_boundary_tests::group_assignment_unresolved_oa_role_leaf_accepts_explicit_target_but_not_outside ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_accumulates_stable_ids_and_aliases_without_partial_reuse ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_collateral_surviving_constraint_refuses_whole_semantic_candidate ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_deletes_only_own_routes_across_views_and_keeps_internal_flow ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_independent_performers_preserves_already_correct_provenance ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_source_failure_preserves_existing_history_and_retry_ids ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_unfolds_only_changed_destination_and_refuses_newly_exposed_overlap ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_uses_vacated_space_and_one_complete_route_owner_map ... ok
-test allocation_drag::tests::assignment_tests::group_assignment_zero_delta_changes_semantics_once_and_then_is_noop ... ok
-test allocation_drag::tests::cache_plan_uses_candidate_index_and_same_pixel_different_target_changes_preview ... ok
-test allocation_drag::tests::collapsed_target_unfold_is_explicit_and_no_other_fold_changes ... ok
-test allocation_drag::tests::direct_exit_revealing_another_role_performer_has_truthful_refusal ... ok
-test allocation_drag::tests::explicit_different_performer_retains_advisory_role_warning ... ok
-test allocation_drag::tests::folded_subtree_cannot_hide_new_collision ... ok
-test allocation_drag::tests::geometry_refuses_new_overlap_bounds_and_invisible_headers_and_preserves_existing_overlap ... ok
-test allocation_drag::tests::group_arrange_experiment::mixed_arrange_experiment_detects_moved_folded_child_collision ... ok
-test allocation_drag::tests::group_arrange_experiment::mixed_arrange_experiment_detects_stationary_enclosure_growth_collision ... ok
-test allocation_drag::tests::group_arrange_experiment::mixed_arrange_experiment_distributed_root_and_performer_can_translate_rigidly ... ok
-test allocation_drag::tests::group_arrange_experiment::mixed_arrange_experiment_unrelated_folded_interiors_are_outside_diagnostic_domain ... ok
-test allocation_drag::tests::malformed_scope_wrong_projection_duplicate_placement_and_stable_id_collision_refuse ... ok
-test allocation_drag::tests::mixed_p_x_y_refuses_semantic_and_arrange_instead_of_stretching_destination ... ok
-test allocation_drag::tests::oa_communication_incompleteness_remains_advisory_without_collateral_loss ... ok
-test allocation_drag::tests::oa_sa_incoming_between_outgoing_preserve_identity_source_history_and_other_views ... ok
-test allocation_drag::tests::oa_sa_one_leaf_move_refuses_when_ancestor_regrouping_introduces_unrelated_overlap ... ok
-test allocation_drag::tests::oa_sa_one_leaf_reassignment_and_outward_move_regroup_ancestors_without_moving_sibling ... ok
-test allocation_drag::tests::oa_sa_populated_collapsed_target_accepts_room_and_refuses_collision_without_relocating_contents ... ok
-test allocation_drag::tests::oa_sa_state_owned_action_and_availability_reject_reassignment_atomically ... ok
-test allocation_drag::tests::oa_sa_unfolding_prior_hidden_overlap_refuses_even_when_insertion_does_not_collide ... ok
-test allocation_drag::tests::own_deleted_allocation_routes_may_disappear_in_every_diagram_only ... ok
-test allocation_drag::tests::role_only_same_effective_performer_is_semantic_noop_and_outgoing_refuses ... ok
-test allocation_drag::tests::sa_port_and_deferred_exchange_allocation_cascade_refuses_and_retarget_is_invalid ... ok
-test allocation_drag::tests::same_performer_readability_preserves_snapped_noop_and_allocation_identity ... ok
-test allocation_drag::tests::scope_detects_first_child_allocation_and_role_transfer_and_finish_rejects_live_edits ... ok
-test allocation_drag::tests::selected_header_visibility_allows_viewport_edge_but_refuses_clipping ... ok
-test allocation_drag::tests::snapped_noop_returns_no_command_and_keeps_source_revision_and_redo ... ok
-test allocation_drag::tests::source_budget_refusal_keeps_project_bundle_history_and_retry_identity_exact ... ok
-test allocation_drag::tests::surviving_constraint_mutation_is_refused_even_when_core_candidate_is_valid ... ok
-test allocation_drag::tests::target_presentation_requires_accepted_identity_and_selected_header_visibility ... ok
-test allocation_drag::tests::toolbar_identity_allows_exact_incoming_placement_at_old_label_overlap ... ok
-test allocation_drag::tests::uniform_folded_grandchild_and_unplaced_scope_moves_exactly_q_and_all_l_oa_sa ... ok
-test allocation_drag::tests::uniform_role_only_and_mixed_direct_role_composites_same_target_do_not_allocate ... ok
-test allocation_drag::tests::uniformly_unassigned_composite_creates_only_stable_leaf_allocations_including_unplaced ... ok
-test allocation_drag::tests::unrequested_view_option_cleanup_is_not_whitelisted ... ok
-test allocation_drag::tests::unresolved_role_leaf_can_arrange_or_accept_explicit_target_without_guessing ... ok
-test app::allocation_drag::tests::actual_canvas_origin_change_cancels_held_work_before_any_legacy_release ... ok
-test app::allocation_drag::tests::arrange_is_one_gesture_and_snapped_noop_preserves_redo_and_source ... ok
-test app::allocation_drag::tests::candidate_semantics_are_cached_per_destination_with_stable_ids_and_own_index ... ok
-test app::allocation_drag::tests::destination_identity_does_not_describe_blocked_or_outside_viewport_as_unallocation ... ok
-test app::allocation_drag::tests::frozen_collapsed_target_uses_only_visible_header_and_port_edge_controls_occlude ... ok
-test app::allocation_drag::tests::frozen_targets_use_half_open_semantic_priority_and_refuse_incomparable_overlap ... ok
-test app::allocation_drag::tests::full_tree::actual_app_tree_dirty_description_retains_focus_and_middle_caret_for_next_key ... ok
-test app::allocation_drag::tests::full_tree::actual_app_tree_dirty_name_retains_focus_and_middle_caret_for_next_key ... ok
-test app::allocation_drag::tests::full_tree::actual_app_tree_exact_incoming_drag_keeps_destination_visible_and_canvas_stable ... ok
-test app::allocation_drag::tests::full_tree::actual_keyboard_arrange_shortcut_consumes_once_escape_cancels_and_dirty_owner_refuses ... ok
-test app::allocation_drag::tests::full_tree::actual_rendered_canvas_pixels_do_not_change_when_toolbar_feedback_text_changes ... ok
-test app::allocation_drag::tests::full_tree::actual_toolbar_hover_inspects_last_full_name_without_authorizing_an_outside_drop ... ok
-test app::allocation_drag::tests::full_tree::control_focus::dirty_selected_pin_outer_ring_keeps_real_name_focus_and_caret ... ok
-test app::allocation_drag::tests::group::allocation_bare_moves_cannot_bypass_armed_active_or_retired_lifetime ... ok
-test app::allocation_drag::tests::group::completed_text_apply_rejects_old_allocation_packets_without_retiring_a_new_drag ... ok
-test app::allocation_drag::tests::group::connection_lifetime::captured_connection_after_cancel_preserves_arrange_arm_and_live_group ... ok
-test app::allocation_drag::tests::group::connection_lifetime::captured_connection_context_mismatches_preserve_the_current_session ... ok
-test app::allocation_drag::tests::group::connection_lifetime::captured_connection_current_restart_and_pair_commit_after_tool_boundary ... ok
-test app::allocation_drag::tests::group::group_arrange_work_and_performer_anchors_preserve_every_responsibility ... ok
-test app::allocation_drag::tests::group::group_assignment_split_rebuild_preserves_primary_and_commits_one_complete_candidate ... ok
-test app::allocation_drag::tests::group::group_out_and_back_assigns_at_zero_delta_then_true_noop_preserves_redo ... ok
-test app::allocation_drag::tests::group::group_selection_aba_and_old_press_cannot_retire_a_new_token ... ok
-test app::allocation_drag::tests::group::group_source_refusal_retains_primary_source_and_both_history_paths ... ok
-test app::allocation_drag::tests::group::idle_group_press_rejects_selection_generation_aba_with_unchanged_other_stamps ... ok
-test app::allocation_drag::tests::group::ordinary_off_grid_performer_out_and_back_is_noop_with_redo ... ok
-test app::allocation_drag::tests::group::route_lifetime::captured_route_context_fields_independently_reject_before_retirement ... ok
-test app::allocation_drag::tests::group::route_lifetime::current_route_commits_without_session_preserve_exact_route_history ... ok
-test app::allocation_drag::tests::group::route_lifetime::same_context_route_attachment_after_selection_preserves_arrange_arm_and_live_group ... ok
-test app::allocation_drag::tests::group::route_lifetime::same_context_route_commit_after_selection_preserves_arrange_arm_and_live_group ... ok
-test app::allocation_drag::tests::group::route_lifetime::stale_route_attachment_preserves_arrange_arm_and_live_group ... ok
-test app::allocation_drag::tests::group::route_lifetime::stale_route_commit_preserves_arrange_arm_and_live_group ... ok
-test app::allocation_drag::tests::group::unsupported_group_click_collapses_but_threshold_crossing_never_becomes_click ... ok
-test app::allocation_drag::tests::modal_roundtrip_equal_fit_undo_resize_and_focus_retire_press_before_replay ... ok
-test app::allocation_drag::tests::mounted_clean_stationary_selects_exact_work_without_revision_or_legacy_apply ... ok
-test app::allocation_drag::tests::mounted_dirty_port_press_cannot_fall_through_to_applying_port_selection ... ok
-test app::allocation_drag::tests::mounted_dirty_property_press_does_not_select_apply_or_destroy_draft ... ok
-test app::allocation_drag::tests::mounted_oa_sa_ordered_incoming_between_outgoing_are_exact_single_history_steps ... ok
-test app::allocation_drag::tests::mounted_role_only_outgoing_refusal_retains_placement_and_same_performer_creates_no_allocation ... ok
-test app::allocation_drag::tests::mounted_uniform_parent_moves_hidden_placements_and_assigns_only_leaves ... ok
-test app::allocation_drag::tests::navigation_union::old_chooser_envelopes_preserve_a_current_canvas_gesture ... ok
-test app::allocation_drag::tests::navigation_union::stale_gesture_packets_preserve_navigation_and_a_new_live_cancel_still_works ... ok
-test app::allocation_drag::tests::oa_sa_clipped_selected_header_refuses_preview_release_and_retries_without_partial_source_or_history ... ok
-test app::allocation_drag::tests::oa_sa_toolbar_identity_accepts_exact_receiver_and_collapsed_header_drag ... ok
-test app::allocation_drag::tests::outside_release_is_cancel_and_does_not_remove_an_assignment ... ok
-test app::allocation_drag::tests::pending_behavior_draft_refuses_actual_work_press_and_equal_document_replacement_retires_packet ... ok
-test app::allocation_drag::tests::release_uses_ordered_native_position_before_later_motion_in_same_batch ... ok
-test app::allocation_drag::tests::same_snapped_position_on_opposite_shared_border_rebuilds_semantics_even_if_layout_refuses ... ok
-test app::allocation_drag::tests::source_and_modal_admission_reject_prebuilt_clean_press_without_selecting ... ok
-test app::allocation_drag::tests::source_refusal_is_atomic_and_a_new_gesture_can_retry_against_live_revision ... ok
-test app::allocation_drag::tests::stale_packets_do_not_cancel_a_newer_token_and_each_release_is_consumed_once ... ok
-test app::allocation_drag::tests::toolbar_destination_names_transformed_target_whose_header_is_clipped ... ok
-test app::allocation_drag::tests::toolbar_status_leaves_transformed_top_edge_work_header_readable ... ok
-test app::context_help_tests::context_help_accepts_live_process_viewport_and_rejects_stale_measurements ... ok
-test app::context_help_tests::context_help_barrier_retires_text_selection_drag_without_changing_the_caret ... ok
-test app::context_help_tests::context_help_disables_allocation_input_including_early_work_drag_dispatch ... ok
-test app::context_help_tests::context_help_escape_preserves_pending_behavior_form_and_blocks_submit ... ok
-test app::context_help_tests::context_help_f1_selects_scenario_topic_without_leaving_the_workspace ... ok
-test app::context_help_tests::context_help_preserves_group_property_draft_camera_and_model ... ok
-test app::context_help_tests::context_help_rejects_a_reference_picker_open_queued_from_the_inspector ... ok
-test app::context_help_tests::context_help_retains_source_draft_and_rejects_background_source_input ... ok
-test app::context_help_tests::mounted_context_help_keyboard_scroll_preserves_inspector_focus_and_exact_caret ... ok
-test app::context_help_tests::mounted_context_help_observes_modifier_release_before_plain_canvas_click ... ok
-test app::context_help_tests::mounted_context_help_retires_held_pan_without_replaying_its_release ... ok
-test guide::tests::filtering_and_related_navigation_keep_selection_visible ... ok
-test guide::tests::guide_topic_navigation_resets_only_article_and_same_topic_search_keeps_scroll ... ok
-test guide::tests::search_finds_concepts_in_walkthroughs_and_api_reference ... ok
-
-test result: ok. 125 passed; 0 failed; 0 ignored; 0 measured; 1421 filtered out; finished in 75.83s