diff --git a/__tests__/unit/api/tls-check-api.test.ts b/__tests__/unit/api/tls-check-api.test.ts
deleted file mode 100644
index e0af550dd..000000000
--- a/__tests__/unit/api/tls-check-api.test.ts
+++ /dev/null
@@ -1,108 +0,0 @@
-/**
- * @jest-environment node
- *
- * Node rather than jsdom: this route is plain web-standard Request/Response,
- * which jsdom does not provide as globals.
- */
-/**
- * This endpoint decides whether Caddy orders a TLS certificate, which makes it
- * the one place where being generous is expensive.
- *
- * Every 200 is an ACME order against our Let's Encrypt account, and that account
- * is rate-limited on failures. Anyone who points a hostname at this box and
- * requests it can spend that budget, so the rules being tested here are: only a
- * site that is published RIGHT NOW, never a reserved subdomain, and — the one
- * that is easy to get backwards — a denial rather than an approval when the
- * lookup itself fails.
- */
-
-import { GET } from '@/app/api/internal/tls-check/route';
-import { siteByHost } from '@/services/sites/registry';
-
-jest.mock('@/services/sites/registry', () => ({ siteByHost: jest.fn() }));
-jest.mock('@/utils/logger', () => ({
-  logger: { warn: jest.fn(), error: jest.fn(), info: jest.fn() },
-}));
-
-const mockSiteByHost = siteByHost as unknown as jest.Mock;
-
-function ask(domain?: string) {
-  const url = new URL('http://127.0.0.1:4003/api/internal/tls-check');
-  if (domain !== undefined) {
-    url.searchParams.set('domain', domain);
-  }
-  return GET(new Request(url));
-}
-
-const publishedSite = {
-  site: {
-    slug: 'acme',
-    title: 'Acme',
-    customDomain: 'acme.example',
-    aliasHosts: [],
-    profile: { kind: 'group' as const, slug: 'acme' },
-    builder: null,
-  },
-  profile: null,
-};
-
-beforeEach(() => {
-  mockSiteByHost.mockReset();
-});
-
-describe('tls-check — what earns a certificate', () => {
-  it('approves a hostname a published site answers on', async () => {
-    mockSiteByHost.mockResolvedValue(publishedSite);
-    expect((await ask('acme.orangecat.ch')).status).toBe(200);
-  });
-
-  it('refuses a hostname no site claims', async () => {
-    mockSiteByHost.mockResolvedValue(null);
-    expect((await ask('nobody.orangecat.ch')).status).toBe(403);
-  });
-
-  it('refuses without a domain, and refuses a malformed one', async () => {
-    expect((await ask()).status).toBe(403);
-    expect((await ask('')).status).toBe(403);
-    expect((await ask(`${'a'.repeat(300)}.example`)).status).toBe(403);
-    expect(mockSiteByHost).not.toHaveBeenCalled();
-  });
-});
-
-describe('tls-check — the refusals that matter', () => {
-  /**
-   * These already have certificates and their own Caddy blocks. Issuing a second
-   * one is waste at best; `security.orangecat.ch` under our certificate is a
-   * phish at worst. Refused BEFORE the lookup, so no database state can grant one.
-   */
-  it('refuses reserved subdomains without ever asking the database', async () => {
-    mockSiteByHost.mockResolvedValue(publishedSite);
-
-    for (const host of [
-      'supabase.orangecat.ch',
-      'fleetcrown.orangecat.ch',
-      'security.orangecat.ch',
-      'www.orangecat.ch',
-      'kivvi.orangecat.ch',
-    ]) {
-      expect((await ask(host)).status).toBe(403);
-    }
-    expect(mockSiteByHost).not.toHaveBeenCalled();
-  });
-
-  it('refuses a multi-label subdomain, which no hosted site can have', async () => {
-    mockSiteByHost.mockResolvedValue(publishedSite);
-    expect((await ask('a.b.orangecat.ch')).status).toBe(403);
-    expect(mockSiteByHost).not.toHaveBeenCalled();
-  });
-
-  /**
-   * The one that is easy to get backwards. A database blip must not turn this
-   * into an open certificate mint — an outage should cost new certificates, not
-   * hand them out.
-   */
-  it('fails closed when the lookup throws', async () => {
-    mockSiteByHost.mockRejectedValue(new Error('database unreachable'));
-    expect((await ask('acme.example')).status).toBe(403);
-  });
-});
diff --git a/__tests__/unit/config/hosted-sites.test.ts b/__tests__/unit/config/hosted-sites.test.ts
deleted file mode 100644
index faeed0be1..000000000
--- a/__tests__/unit/config/hosted-sites.test.ts
+++ /dev/null
@@ -1,342 +0,0 @@
-/**
- * A hosted site is the claim /domains makes, turned into code: a profile's own
- * data, served as a whole website on its own hostname. Three things have to
- * hold for that claim to be true, and none of them is obvious from reading a
- * component.
- *
- * 1. Host resolution has to work for the free subdomain, a custom domain and
- *    local development — and has to REFUSE everything else, because a
- *    too-eager match would silently swallow orangecat.ch itself.
- * 2. The site surface has to be a surface, not a chrome override, or a hosted
- *    site quietly grows OrangeCat's header on somebody else's domain.
- * 3. The pages have to be generated from the profile config rather than
- *    authored beside it, or the "spins up a website" claim is a copy-paste.
- */
-
-import {
-  RESERVED_SUBDOMAINS,
-  isReservedSubdomain,
-  siteHref,
-  siteSlugForHost,
-} from '@/config/sites';
-import {
-  ALWAYS_PUBLISHED,
-  HOSTED_SITE_FALLBACKS,
-  siteCanonicalHost,
-  toHostedSite,
-} from '@/config/hosted-site';
-import {
-  pageRendersOwnHeader,
-  sitePageAt,
-  sitePagesFor,
-  siteChromeFor,
-} from '@/config/site-content';
-import { getRouteSurface, isHostedSiteRequest } from '@/config/routes';
-import { COMPANY, MANDATE_CURVES, MATERIALS } from '@/config/substrata';
-import { CHOKEPOINTS, COVERAGE, coverageProgress } from '@/config/substrata-coverage';
-
-const site = HOSTED_SITE_FALLBACKS.substrata;
-
-describe('hosted sites — host resolution', () => {
-  it('resolves the free subdomain, with or without www and port', () => {
-    expect(siteSlugForHost('substrata.orangecat.ch')).toBe('substrata');
-    expect(siteSlugForHost('www.substrata.orangecat.ch')).toBe('substrata');
-    expect(siteSlugForHost('Substrata.OrangeCat.ch:443')).toBe('substrata');
-  });
-
-  it('resolves the local development host, so the rewrite is testable without DNS', () => {
-    expect(siteSlugForHost('substrata.localhost:3020')).toBe('substrata');
-  });
-
-  /**
-   * Resolution is now positional rather than an allowlist — that is what makes a
-   * new customer zero deploys. The safety therefore has to come from SHAPE, and
-   * these are the shapes that must never resolve.
-   */
-  it('refuses everything else — a greedy match would swallow OrangeCat itself', () => {
-    for (const host of [
-      'orangecat.ch',
-      'www.orangecat.ch',
-      'localhost:3000',
-      'substrata.evil.example',
-      'substrata.orangecat.ch.evil.example',
-      'a.b.orangecat.ch',
-      '.orangecat.ch',
-      'sub_domain.orangecat.ch',
-      '-leading.orangecat.ch',
-      'trailing-.orangecat.ch',
-      '',
-      null,
-      undefined,
-    ]) {
-      expect(siteSlugForHost(host)).toBeNull();
-    }
-  });
-
-  /**
-   * An unclaimed slug MUST resolve, because the page is what knows whether a
-   * site exists. If this ever returned null the whole no-deploy path would be
-   * gone and every customer would need a code change again.
-   */
-  it('resolves a slug no site has claimed, leaving existence to the page', () => {
-    expect(siteSlugForHost('a-brand-new-customer.orangecat.ch')).toBe('a-brand-new-customer');
-  });
-
-  /**
-   * The dangerous half of a positional match. `security.orangecat.ch` under our
-   * own certificate is a phish; `supabase.orangecat.ch` is the database. Neither
-   * may ever be handed to a group that happens to pick that slug.
-   */
-  it('refuses every reserved subdomain, infrastructure and impersonation alike', () => {
-    for (const { label } of RESERVED_SUBDOMAINS) {
-      expect(isReservedSubdomain(label)).toBe(true);
-      expect(siteSlugForHost(`${label}.orangecat.ch`)).toBeNull();
-      expect(siteSlugForHost(`${label.toUpperCase()}.orangecat.ch`)).toBeNull();
-    }
-  });
-
-  it('reserves the hosts that are actually live on the box', () => {
-    // Every one of these has its own Caddy block today. A site claiming one
-    // would be shadowed by it, or would shadow it.
-    for (const live of ['www', 'bridge', 'fleetcrown', 'evig', 'supabase']) {
-      expect(isReservedSubdomain(live)).toBe(true);
-    }
-  });
-
-  it('advertises the custom domain once one is set, and the subdomain until then', () => {
-    const bare = toHostedSite({ slug: 'acme', name: 'Acme' }, {});
-    expect(siteCanonicalHost(bare)).toBe('acme.orangecat.ch');
-
-    const custom = toHostedSite({ slug: 'acme', name: 'Acme' }, { customDomain: 'acme.example' });
-    expect(siteCanonicalHost(custom)).toBe('acme.example');
-  });
-});
-
-describe('hosted sites — the config a site owner may set', () => {
-  /**
-   * `group_features.config` is jsonb, which is `any` wearing a hat. Whatever a
-   * client wrote there reaches this function, so a bad field must cost that
-   * field and never the customer's whole website.
-   */
-  it('falls back to the group name and drops malformed fields', () => {
-    const site = toHostedSite(
-      { slug: 'acme', name: 'Acme Corp' },
-      { title: '   ', customDomain: 'not a hostname', aliasHosts: ['ok.example', 'nodot', ''] }
-    );
-    expect(site.title).toBe('Acme Corp');
-    expect(site.customDomain).toBeNull();
-    expect(site.aliasHosts).toEqual(['ok.example']);
-  });
-
-  it('survives config that is not an object at all', () => {
-    for (const junk of [null, undefined, 42, 'string', []]) {
-      expect(toHostedSite({ slug: 'acme', name: 'Acme' }, junk).title).toBe('Acme');
-    }
-  });
-
-  it('marks only repo-resident sites as bespoke, so everyone else renders from their profile', () => {
-    expect(toHostedSite({ slug: 'substrata', name: 'Substrata' }, {}).builder).toBe('substrata');
-    expect(toHostedSite({ slug: 'acme', name: 'Acme' }, {}).builder).toBeNull();
-  });
-});
-
-describe('hosted sites — the rewrite must not leak OrangeCat onto a customer domain', () => {
-  /**
-   * This is the case that shipped broken.
-   *
-   * A hosted site is served by a REWRITE, so the browser path stays "/" while
-   * `/sites/<slug>` renders. Everything that decided chrome from the visible
-   * path therefore classified a customer's website as OrangeCat's public
-   * marketing surface, and substrata.orangecat.ch came up with OrangeCat's
-   * header, "Sign In", our Google Analytics, our Organization schema and the
-   * internal FleetCrown feedback widget on it.
-   *
-   * The old tests all asked `getRouteSurface('/sites/substrata')` — the path
-   * form, which was never broken. None of them asked what happens when the path
-   * is "/" and only a header knows better.
-   */
-  function headersOf(map: Record<string, string>) {
-    return (name: string) => map[name] ?? null;
-  }
-
-  it('recognises a rewritten request, whose visible path is only "/"', () => {
-    expect(getRouteSurface('/')).toBe('public');
-    expect(isHostedSiteRequest(headersOf({ 'x-pathname': '/' }))).toBe(false);
-
-    // The rewrite sets this. Without it the request is indistinguishable from
-    // a visit to orangecat.ch itself.
-    expect(
-      isHostedSiteRequest(headersOf({ 'x-pathname': '/', 'x-hosted-site': 'substrata' }))
-    ).toBe(true);
-  });
-
-  it('recognises a deep page on a hosted site', () => {
-    expect(
-      isHostedSiteRequest(headersOf({ 'x-pathname': '/map', 'x-hosted-site': 'substrata' }))
-    ).toBe(true);
-  });
-
-  it('recognises the preview form, which has no rewrite and no header', () => {
-    expect(isHostedSiteRequest(headersOf({ 'x-pathname': '/sites/substrata' }))).toBe(true);
-    expect(isHostedSiteRequest(headersOf({ 'x-pathname': '/sites/substrata/map' }))).toBe(true);
-  });
-
-  it('leaves ordinary OrangeCat requests alone, header absent', () => {
-    for (const path of ['/', '/dashboard', '/about', '/groups/substrata', '/auth']) {
-      expect(isHostedSiteRequest(headersOf({ 'x-pathname': path }))).toBe(false);
-    }
-    expect(isHostedSiteRequest(headersOf({}))).toBe(false);
-  });
-});
-
-describe('hosted sites — links', () => {
-  it('always emits the path form, which resolves on every host', () => {
-    expect(siteHref(site.slug)).toBe('/sites/substrata');
-    expect(siteHref(site.slug, 'map')).toBe('/sites/substrata/map');
-    expect(siteHref(site.slug, '/map')).toBe('/sites/substrata/map');
-    expect(siteHref(site.slug, '/')).toBe('/sites/substrata');
-  });
-});
-
-describe('hosted sites — chrome isolation', () => {
-  it('classifies a hosted site as its own surface, not app or public', () => {
-    expect(getRouteSurface('/sites/substrata')).toBe('site');
-    expect(getRouteSurface('/sites/substrata/map')).toBe('site');
-  });
-
-  it('leaves the rest of the app classified as it was', () => {
-    expect(getRouteSurface('/dashboard')).toBe('app');
-    expect(getRouteSurface('/about')).toBe('public');
-    expect(getRouteSurface('/auth')).toBe('auth');
-    expect(getRouteSurface('/groups/substrata')).toBe('app');
-  });
-});
-
-describe('hosted sites — every site renders', () => {
-  it.each(ALWAYS_PUBLISHED.map(slug => [slug, HOSTED_SITE_FALLBACKS[slug]] as const))(
-    '%s has chrome, a home page, and a nav where every entry resolves',
-    (_slug, site) => {
-      const chrome = siteChromeFor(site, null);
-      const pages = sitePagesFor(site, null);
-
-      expect(chrome).not.toBeNull();
-      expect(pages.length).toBeGreaterThan(0);
-      expect(pages.some(page => page.path === '')).toBe(true);
-
-      // Unique paths, or two nav entries fight over one URL.
-      const paths = pages.map(page => page.path);
-      expect(new Set(paths).size).toBe(paths.length);
-
-      for (const page of pages) {
-        // The builders return fresh objects per call, so compare by value.
-        expect(sitePageAt(sitePagesFor(site, null), page.path)).toEqual(page);
-        expect(page.title.length).toBeGreaterThan(0);
-        expect(page.sections.length).toBeGreaterThan(0);
-      }
-    }
-  );
-
-  it('returns null for a path no page claims, so the route can 404', () => {
-    expect(sitePageAt(sitePagesFor(site, null), 'not-a-page')).toBeNull();
-  });
-});
-
-describe('substrata.orangecat.ch — the site is the profile, not a copy of it', () => {
-  const pages = sitePagesFor(site, null);
-  const text = JSON.stringify(pages);
-
-  it('takes its name and tagline from the profile config', () => {
-    const chrome = siteChromeFor(site);
-    expect(chrome?.name).toBe(COMPANY.name);
-    expect(chrome?.tagline).toBe(COMPANY.tagline);
-  });
-
-  it('renders every material under coverage, from the same config the profile uses', () => {
-    for (const material of MATERIALS) {
-      expect(text).toContain(material.title);
-    }
-  });
-
-  it('renders every producer in the coverage universe', () => {
-    for (const entry of COVERAGE) {
-      for (const producer of entry.producers) {
-        expect(text).toContain(producer.name);
-      }
-    }
-  });
-
-  it('states the mandate the profile states', () => {
-    for (const curve of MANDATE_CURVES) {
-      expect(text).toContain(curve.label);
-    }
-  });
-
-  it('reports coverage honestly — unsourced rows read as leads, not findings', () => {
-    const mapPage = sitePageAt(sitePagesFor(site, null), 'map');
-    const rows = JSON.stringify(mapPage);
-    const { sourced, total } = coverageProgress();
-
-    // Every row the config has not sourced must be labelled as unverified on
-    // the public page. This is the test that stops the website becoming the
-    // place where the caveat quietly gets dropped.
-    if (sourced < total) {
-      expect(rows).toContain('Unverified lead');
-    }
-
-    // And the meter must carry the same two numbers, so the picture and the
-    // table can never disagree about how much is actually done.
-    const meter = mapPage!.sections.find(section => section.kind === 'meter');
-    expect(meter).toMatchObject({ value: sourced, of: total });
-  });
-
-  it('gives the map a jump index whose every anchor lands on a real table', () => {
-    const mapPage = sitePageAt(sitePagesFor(site, null), 'map')!;
-    const index = mapPage.sections.find(section => section.kind === 'index');
-    expect(index).toBeDefined();
-
-    const anchors = new Set(
-      mapPage.sections.flatMap(section =>
-        section.kind === 'table' && section.anchor ? [section.anchor] : []
-      )
-    );
-    const entries = index!.kind === 'index' ? index.entries : [];
-    expect(entries.length).toBe(COVERAGE.length);
-    for (const entry of entries) {
-      expect(anchors.has(entry.anchor)).toBe(true);
-    }
-  });
-
-  it('opens the home page with a hero, and never doubles it with a title block', () => {
-    const home = sitePageAt(sitePagesFor(site, null), '')!;
-    expect(home.sections[0].kind).toBe('hero');
-    expect(pageRendersOwnHeader(home)).toBe(true);
-
-    // Inner pages take the standard header instead.
-    expect(pageRendersOwnHeader(sitePageAt(sitePagesFor(site, null), 'map')!)).toBe(false);
-  });
-
-  it('has no desk page, because there is no desk', () => {
-    expect(sitePageAt(sitePagesFor(site, null), 'desk')).toBeNull();
-    const navLabels = sitePagesFor(site, null).map(page => page.navLabel);
-    expect(navLabels).not.toContain('The desk');
-  });
-
-  it('carries the non-material chokepoints, so the site shows the whole universe', () => {
-    const page = sitePageAt(sitePagesFor(site, null), 'chokepoints');
-    expect(page).not.toBeNull();
-    const text = JSON.stringify(page);
-    for (const point of CHOKEPOINTS) {
-      expect(text).toContain(point.name);
-    }
-  });
-
-  it('says nowhere that the firm trades, quotes or takes a position', () => {
-    // The whole site, not one page: if a price or an invitation to deal ever
-    // reappears anywhere, this is what catches it before a reader does.
-    const everything = JSON.stringify(sitePagesFor(site, null));
-    for (const phrase of ['RFQ', 'per kg', 'Indicative CHF', 'Settlement in Bitcoin']) {
-      expect(`${phrase}: ${everything.includes(phrase)}`).toBe(`${phrase}: false`);
-    }
-    expect(everything).toContain('no trading desk');
-  });
-});
diff --git a/__tests__/unit/config/site-profile.test.ts b/__tests__/unit/config/site-profile.test.ts
deleted file mode 100644
index 76b6bfade..000000000
--- a/__tests__/unit/config/site-profile.test.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-/**
- * The default website is the product claim, so these tests hold the claim
- * rather than the implementation.
- *
- * The claim is: a group that filled in a profile already has a website, and
- * turning it on costs one switch and no code. Two things have to be true for
- * that to survive contact with real profiles — it must render something decent
- * from the little a profile guarantees (a name), and it must never invent
- * anything the group did not say. A default site that prints an empty "Support"
- * heading is advertising a capability nobody set up.
- */
-
-import { profileSiteChrome, profileSitePages, type SiteProfile } from '@/config/site-profile';
-import { pageRendersOwnHeader, sitePageAt } from '@/config/site-content';
-
-function profile(overrides: Partial<SiteProfile> = {}): SiteProfile {
-  return {
-    slug: 'acme',
-    name: 'Acme Cooperative',
-    description: null,
-    label: null,
-    tags: [],
-    bitcoinAddress: null,
-    lightningAddress: null,
-    canonicalHost: 'acme.orangecat.ch',
-    ...overrides,
-  };
-}
-
-describe('the default site renders from a profile alone', () => {
-  it('produces a home page from nothing but a name', () => {
-    const pages = profileSitePages(profile());
-
-    expect(pages).toHaveLength(1);
-    expect(pages[0].path).toBe('');
-    expect(pages[0].title).toBe('Acme Cooperative');
-    expect(pageRendersOwnHeader(pages[0])).toBe(true);
-    expect(sitePageAt(pages, '')).toBe(pages[0]);
-  });
-
-  it('splits the description into a hero lead and an About section', () => {
-    const pages = profileSitePages(
-      profile({ description: 'We repair things.\n\nFounded 2019.\n\nIn Zürich.' })
-    );
-    const [hero, about] = pages[0].sections;
-
-    expect(hero).toMatchObject({ kind: 'hero', lead: ['We repair things.'] });
-    expect(about).toMatchObject({
-      kind: 'prose',
-      heading: 'About',
-      paragraphs: ['Founded 2019.', 'In Zürich.'],
-    });
-  });
-
-  it('never prints the same paragraph in both the hero and the prose', () => {
-    const pages = profileSitePages(profile({ description: 'One line only.' }));
-    const kinds = pages[0].sections.map(section => section.kind);
-
-    expect(kinds).toEqual(['hero']);
-  });
-
-  it('omits Support entirely when there is nothing to pay to', () => {
-    const sections = profileSitePages(profile()).flatMap(page => page.sections);
-
-    expect(sections.some(section => 'heading' in section && section.heading === 'Support')).toBe(
-      false
-    );
-  });
-
-  it('shows Support only for the addresses the group actually set', () => {
-    const sections = profileSitePages(profile({ lightningAddress: 'acme@getalby.com' })).flatMap(
-      page => page.sections
-    );
-    const support = sections.find(
-      (section): section is Extract<typeof section, { kind: 'definitions' }> =>
-        section.kind === 'definitions'
-    );
-
-    expect(support?.items).toEqual([{ term: 'Lightning', detail: 'acme@getalby.com' }]);
-  });
-
-  it('gives a one-page site no nav, because a single "Home" link is furniture', () => {
-    expect(profileSitePages(profile()).every(page => page.navLabel === undefined)).toBe(true);
-  });
-
-  it('takes a masthead tagline from the first sentence, not the whole description', () => {
-    const chrome = profileSiteChrome(
-      profile({ description: 'We repair things. We have since 2019. Ask us anything.' })
-    );
-
-    expect(chrome.name).toBe('Acme Cooperative');
-    expect(chrome.tagline).toBe('We repair things.');
-  });
-
-  it('survives a profile with no description at all', () => {
-    const chrome = profileSiteChrome(profile());
-
-    expect(chrome.name).toBe('Acme Cooperative');
-    expect(chrome.tagline).toBe('');
-  });
-});
diff --git a/__tests__/unit/config/substrata-acting.test.ts b/__tests__/unit/config/substrata-acting.test.ts
deleted file mode 100644
index e9b85ca07..000000000
--- a/__tests__/unit/config/substrata-acting.test.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-/**
- * The regulatory line, held by tests rather than by good intentions.
- *
- * This is the part of the site with real legal exposure. Substrata is not
- * registered anywhere, so three things have to stay true, and all three are the
- * kind that erode quietly: a helpful sentence gets personalised, a partner list
- * appears because somebody offered a fee, or the page starts telling people
- * what to do because that is what readers keep asking for.
- *
- * Nothing here checks taste. Each test corresponds to a specific way a
- * publisher becomes a regulated intermediary without noticing.
- */
-
-import {
-  ACTING_LIMITS,
-  ACTION_ROUTES,
-  INVESTMENT_THESIS,
-  READINESS,
-  READINESS_STATUS_LABEL,
-  readinessProgress,
-} from '@/config/substrata-acting';
-import { HOSTED_SITE_FALLBACKS } from '@/config/hosted-site';
-import { sitePageAt, sitePagesFor } from '@/config/site-content';
-
-const site = HOSTED_SITE_FALLBACKS.substrata;
-const actingPage = sitePageAt(sitePagesFor(site, null), 'acting');
-const everything = JSON.stringify(sitePagesFor(site, null));
-
-describe('Substrata — the limits are stated, not assumed', () => {
-  it('says on the page what the firm does and does not do', () => {
-    const text = JSON.stringify(actingPage);
-    expect(text).toContain('does not manage money');
-    expect(text).toContain('paid nothing by any participant');
-  });
-
-  it('keeps the unpaid rule, which is what makes the directory worth reading', () => {
-    // A directory somebody bought their way into is an advertisement wearing a
-    // table's clothes. This sentence is the difference.
-    expect(ACTING_LIMITS.join(' ')).toContain('paid nothing by any participant');
-    expect(ACTING_LIMITS.join(' ')).toContain('before the arrangement starts');
-  });
-});
-
-describe('Substrata — routes describe markets, they do not recommend', () => {
-  it('gives every route a provider category, a limitation, and questions to ask', () => {
-    for (const route of ACTION_ROUTES) {
-      expect(route.providedBy.length).toBeGreaterThan(0);
-      // The omission is the real risk on a page like this: a reader taking a
-      // commodity ETF as exposure to a seven-nines grade has been misled by
-      // what nobody said.
-      expect(route.doesNotGive.length).toBeGreaterThan(0);
-      expect(route.ask.length).toBeGreaterThan(0);
-    }
-  });
-
-  it('names no individual firm as a route provider', () => {
-    for (const route of ACTION_ROUTES) {
-      expect(route.providedBy).not.toMatch(/\b(Ltd|AG|GmbH|Inc|LLC|PLC|S\.A\.)\b/);
-    }
-  });
-
-  it('uses no directive or personalised language anywhere on the site', () => {
-    // Impersonal and general is what keeps publishing on the publishing side
-    // of the line. These phrasings are how that slips.
-    for (const phrase of [
-      'we recommend',
-      'you should buy',
-      'we advise',
-      'best investment',
-      'guaranteed',
-      'risk-free',
-    ]) {
-      expect(`${phrase}: ${everything.toLowerCase().includes(phrase)}`).toBe(`${phrase}: false`);
-    }
-  });
-});
-
-describe('Substrata — the thesis is scoreable', () => {
-  it('gives every claim a falsifier, or it is a slogan', () => {
-    expect(INVESTMENT_THESIS.length).toBeGreaterThanOrEqual(4);
-    for (const claim of INVESTMENT_THESIS) {
-      expect(claim.claim.length).toBeGreaterThan(0);
-      expect(claim.detail.length).toBeGreaterThan(0);
-      expect(claim.falsifier.length).toBeGreaterThan(0);
-    }
-  });
-
-  it('publishes every claim and its falsifier on the site', () => {
-    const thesis = JSON.stringify(sitePageAt(sitePagesFor(site, null), 'thesis'));
-    for (const claim of INVESTMENT_THESIS) {
-      expect(thesis).toContain(claim.claim);
-      expect(thesis).toContain(claim.falsifier);
-    }
-  });
-});
-
-describe('Substrata — the readiness ledger cannot flatter itself', () => {
-  it('uses only known statuses, each with a label the site can print', () => {
-    for (const item of READINESS) {
-      expect(Object.keys(READINESS_STATUS_LABEL)).toContain(item.status);
-      expect(item.detail.length).toBeGreaterThan(0);
-    }
-  });
-
-  it('counts what is actually done, not what is planned', () => {
-    const progress = readinessProgress();
-    expect(progress.total).toBe(READINESS.length);
-    expect(progress.done).toBe(READINESS.filter(item => item.status === 'done').length);
-    expect(progress.done).toBeLessThan(progress.total);
-  });
-
-  it('still lists the licence as outstanding — the whole reason for this page', () => {
-    const licence = READINESS.find(item => item.id === 'licence');
-    expect(licence).toBeDefined();
-    expect(licence!.status).not.toBe('done');
-  });
-
-  it('shows the ledger and the meter on the site with matching numbers', () => {
-    const text = JSON.stringify(actingPage);
-    const { done, total } = readinessProgress();
-    const meter = actingPage!.sections.find(section => section.kind === 'meter');
-    expect(meter).toMatchObject({ value: done, of: total });
-    for (const item of READINESS) {
-      expect(text).toContain(item.requirement);
-    }
-  });
-});
diff --git a/__tests__/unit/config/substrata-participants.test.ts b/__tests__/unit/config/substrata-participants.test.ts
deleted file mode 100644
index caab5d3b8..000000000
--- a/__tests__/unit/config/substrata-participants.test.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-/**
- * The participant directory is only research because of its last column.
- *
- * A list of everyone in a supply chain is a phone book. The scarcity grade is
- * what turns it into a claim — and the claim is only meaningful if the grades
- * are actually discriminating. A directory on which everything is a chokepoint
- * has graded nothing, and that failure mode is invisible by inspection once the
- * list is a hundred rows long. These tests are what notice it.
- */
-
-import {
-  CHAIN_LAYERS,
-  PARTICIPANTS,
-  SCARCITY_DETAIL,
-  SCARCITY_LABEL,
-  bindingParticipants,
-  participantProgress,
-  participantsInLayer,
-} from '@/config/substrata-participants';
-import { MANDATE_CURVES } from '@/config/substrata';
-import { HOSTED_SITE_FALLBACKS } from '@/config/hosted-site';
-import { sitePageAt, sitePagesFor } from '@/config/site-content';
-
-const site = HOSTED_SITE_FALLBACKS.substrata;
-const page = sitePageAt(sitePagesFor(site, null), 'participants');
-
-describe('the directory is well formed', () => {
-  it('gives every participant a layer that exists and a curve behind it', () => {
-    const layerIds = CHAIN_LAYERS.map(layer => layer.id);
-    const curveIds = MANDATE_CURVES.map(curve => curve.id);
-    for (const item of PARTICIPANTS) {
-      expect(layerIds).toContain(item.layer);
-      expect(item.role.length).toBeGreaterThan(0);
-      expect(item.why.length).toBeGreaterThan(0);
-      expect(item.jurisdictions.length).toBeGreaterThan(0);
-      for (const code of item.jurisdictions) {
-        expect(code).toMatch(/^[A-Z]{2}$/);
-      }
-    }
-    for (const layer of CHAIN_LAYERS) {
-      expect(curveIds).toContain(layer.curve);
-    }
-  });
-
-  it('claims nothing it has not sourced — no revenue, capacity or share field', () => {
-    const allowed = ['jurisdictions', 'layer', 'name', 'role', 'scarcity', 'source', 'why'].sort();
-    for (const item of PARTICIPANTS) {
-      expect(Object.keys(item).sort()).toEqual(allowed);
-    }
-  });
-
-  it('leaves no layer of the chain empty', () => {
-    for (const layer of CHAIN_LAYERS) {
-      expect(participantsInLayer(layer.id).length).toBeGreaterThan(0);
-    }
-  });
-
-  it('does not list the same participant twice in one layer', () => {
-    for (const layer of CHAIN_LAYERS) {
-      const names = participantsInLayer(layer.id).map(item => item.name);
-      expect(new Set(names).size).toBe(names.length);
-    }
-  });
-});
-
-describe('the grades actually discriminate', () => {
-  it('uses all three grades, or it has graded nothing', () => {
-    const progress = participantProgress();
-    expect(progress.chokepoints).toBeGreaterThan(0);
-    expect(progress.concentrated).toBeGreaterThan(0);
-    // The one people skip. Naming participants that are NOT constraints is
-    // what gives "chokepoint" its meaning; without it the map is flattery.
-    expect(progress.competitive).toBeGreaterThan(0);
-  });
-
-  it('keeps chokepoints a minority — a chain where everything binds binds nowhere', () => {
-    const progress = participantProgress();
-    expect(progress.chokepoints).toBeLessThan(progress.total / 2);
-  });
-
-  it('adds up: every participant carries exactly one of the three grades', () => {
-    const progress = participantProgress();
-    expect(progress.chokepoints + progress.concentrated + progress.competitive).toBe(
-      progress.total
-    );
-    expect(bindingParticipants().length).toBe(progress.chokepoints);
-  });
-
-  it('gives every grade a label and an explanation the site can print', () => {
-    for (const grade of ['chokepoint', 'concentrated', 'competitive'] as const) {
-      expect(SCARCITY_LABEL[grade]).toBeTruthy();
-      expect(SCARCITY_DETAIL[grade].length).toBeGreaterThan(0);
-    }
-  });
-});
-
-describe('the site renders the whole directory', () => {
-  const text = JSON.stringify(page);
-
-  it('publishes every participant', () => {
-    expect(page).not.toBeNull();
-    for (const item of PARTICIPANTS) {
-      expect(text).toContain(item.name);
-    }
-  });
-
-  it('spells out why each binding participant binds', () => {
-    for (const item of bindingParticipants()) {
-      expect(text).toContain(item.why);
-    }
-  });
-
-  it('offers a layer index whose every anchor lands on a real table', () => {
-    const anchors = new Set(
-      page!.sections.flatMap(section =>
-        section.kind === 'table' && section.anchor ? [section.anchor] : []
-      )
-    );
-    const index = page!.sections.find(section => section.kind === 'index');
-    expect(index).toBeDefined();
-    const entries = index!.kind === 'index' ? index.entries : [];
-    expect(entries.length).toBe(CHAIN_LAYERS.length);
-    for (const entry of entries) {
-      expect(anchors.has(entry.anchor)).toBe(true);
-    }
-  });
-});
diff --git a/__tests__/unit/config/substrata.test.ts b/__tests__/unit/config/substrata.test.ts
deleted file mode 100644
index eedc86e91..000000000
--- a/__tests__/unit/config/substrata.test.ts
+++ /dev/null
@@ -1,284 +0,0 @@
-/**
- * The Substrate profile has to survive contact with the live schema, and the
- * firm has to survive contact with its own mandate.
- *
- * The config is written once and pushed to production by a seed that talks
- * straight to PostgREST, so a bad enum value or a price of zero doesn't fail in
- * CI — it fails halfway through a seed run against the real database, with some
- * rows written and some not. The first half of these tests is the cheap version
- * of that discovery: the payloads held against the CHECK constraints in
- * supabase/migrations/20240101000001_baseline_public_schema.sql and against the
- * group label / feature / governance registries.
- *
- * The second half holds the firm to its own rules — every listing traces to a
- * curve, every material on the desk has a coverage entry, and no producer row
- * is presented as a finding before someone has sourced it. Those are the
- * claims the profile makes in public; a test is what keeps them true.
- */
-
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import {
-  CHOKEPOINT_TEST,
-  COMPANY,
-  COVERAGE_AREAS,
-  DISCLOSURE,
-  GROUP_FEATURE_KEYS,
-  GROUP_PAYLOAD,
-  MANDATE_CURVES,
-  MATERIALS,
-  NODE_TYPES,
-  PHASES,
-  SCOPE,
-  areaFor,
-} from '@/config/substrata';
-import {
-  CHOKEPOINTS,
-  COVERAGE,
-  NODE_TYPE_LABEL,
-  PRODUCER_ROLES,
-  chokepointProgress,
-  coverageProgress,
-  materialsFor,
-} from '@/config/substrata-coverage';
-import { GROUP_LABELS } from '@/config/group-labels';
-import { GROUP_FEATURES } from '@/config/group-features';
-import { SITE_FEATURE_KEY } from '@/config/hosted-site';
-import { GOVERNANCE_PRESETS } from '@/config/governance-presets';
-import { isReservedUsername } from '@/config/usernames';
-
-// Mirror of the live CHECK constraint on public.groups. The user_products
-// mirrors that used to sit here were dropped: Substrata sells nothing and the
-// seed writes no product rows, so they asserted against a table this config
-// never touches.
-const GROUP_VISIBILITIES = ['public', 'members_only', 'private'];
-
-describe('Substrata — group profile payload', () => {
-  it('uses a label, governance preset and visibility the platform knows', () => {
-    expect(Object.keys(GROUP_LABELS)).toContain(GROUP_PAYLOAD.label);
-    expect(Object.keys(GOVERNANCE_PRESETS)).toContain(GROUP_PAYLOAD.governance_preset);
-    expect(GROUP_VISIBILITIES).toContain(GROUP_PAYLOAD.visibility);
-  });
-
-  it('is publicly readable — a research firm that gates its research is not one', () => {
-    expect(GROUP_PAYLOAD.is_public).toBe(true);
-    expect(GROUP_PAYLOAD.visibility).toBe('public');
-  });
-
-  it('carries a slug that is URL-safe and not a reserved handle', () => {
-    expect(GROUP_PAYLOAD.slug).toBe(COMPANY.slug);
-    expect(COMPANY.slug).toMatch(/^[a-z0-9]+(?:-[a-z0-9]+)*$/);
-    expect(isReservedUsername(COMPANY.slug)).toBe(false);
-  });
-
-  it('enables only features that exist and whose required fields are supplied', () => {
-    for (const key of GROUP_FEATURE_KEYS) {
-      const feature = GROUP_FEATURES[key as keyof typeof GROUP_FEATURES];
-      expect(feature).toBeDefined();
-
-      // treasury requires bitcoin_address; the payload has no wallet fields, so
-      // enabling it here would produce a group advertising a treasury it lacks.
-      const required: string[] = (feature as { requiresFields?: string[] }).requiresFields ?? [];
-      for (const field of required) {
-        expect(Object.keys(GROUP_PAYLOAD)).toContain(field);
-      }
-    }
-  });
-});
-
-describe('Substrata — there is no trading desk, and nothing may imply one', () => {
-  // The firm publishes research and sells nothing. Standing a regulated book up
-  // is a long road through licensing, so every price, unit, lot size and
-  // invitation to deal was removed. These tests are what stop one coming back:
-  // a config that quietly regrows a price field is a config that puts an offer
-  // in front of a reader nobody is licensed to sell to.
-  const config = readFileSync(join('src', 'config', 'substrata.ts'), 'utf8');
-  const siteBuilder = readFileSync(join('src', 'config', 'site-substrata.ts'), 'utf8');
-
-  it('carries no price, unit or lot-size field on a material', () => {
-    for (const material of MATERIALS) {
-      expect(Object.keys(material).sort()).toEqual(['area', 'spec', 'tags', 'title', 'why']);
-    }
-  });
-
-  it('never uses dealing language anywhere the reader can see it', () => {
-    for (const [name, source] of [
-      ['substrata.ts', config],
-      ['site-substrata.ts', siteBuilder],
-    ] as const) {
-      for (const phrase of ['RFQ', 'indicativePrice', 'Settlement in', 'per wafer']) {
-        expect(`${name} contains "${phrase}": ${source.includes(phrase)}`).toBe(
-          `${name} contains "${phrase}": false`
-        );
-      }
-    }
-  });
-
-  it('states plainly what the firm does not do', () => {
-    expect(SCOPE.today.length).toBeGreaterThanOrEqual(3);
-    expect(SCOPE.today.join(' ')).toContain('do not trade');
-    expect(DISCLOSURE.today).toContain('holds no position');
-  });
-
-  it('advertises no marketplace, because there is nothing to sell', () => {
-    // Asserted as "no COMMERCE feature", not "no features". The list was empty
-    // when this was written and the emptiness stood in for the rule; it does not
-    // any more, because publishing a website is a feature and sells nothing.
-    // What must never appear here is a way to take money for research.
-    for (const commerce of ['marketplace', 'treasury', 'shared_wallet']) {
-      expect(GROUP_FEATURE_KEYS).not.toContain(commerce);
-    }
-  });
-
-  it('publishes a website, which is the feature row substrata.orangecat.ch reads', () => {
-    expect(GROUP_FEATURE_KEYS).toContain(SITE_FEATURE_KEY);
-  });
-
-  it('keeps a desk only as a future phase, never as a running one', () => {
-    const desk = PHASES.find(phase => phase.id === 'desk');
-    expect(desk).toBeDefined();
-    expect(desk!.status).toBe('not-started');
-  });
-});
-
-describe('Substrata — the mandate is enforced, not just stated', () => {
-  it('every desk maps to one of the three curves', () => {
-    const curveIds = MANDATE_CURVES.map(curve => curve.id);
-    for (const area of COVERAGE_AREAS) {
-      expect(curveIds).toContain(area.curve);
-    }
-  });
-
-  it('every material sits in a coverage area, and so on a curve', () => {
-    for (const material of MATERIALS) {
-      const area = areaFor(material);
-      expect(area).toBeDefined();
-      expect(area.id).toBe(material.area);
-    }
-  });
-
-  it('no coverage area is left empty — an empty area is scope creep on paper', () => {
-    for (const area of COVERAGE_AREAS) {
-      expect(MATERIALS.some(material => material.area === area.id)).toBe(true);
-    }
-  });
-
-  it('every non-material chokepoint has a known node type and a real curve', () => {
-    const curveIds = MANDATE_CURVES.map(curve => curve.id);
-    const nodeIds = NODE_TYPES.map(node => node.id);
-    for (const point of CHOKEPOINTS) {
-      expect(curveIds).toContain(point.curve);
-      expect(nodeIds).toContain(point.type);
-      expect(NODE_TYPE_LABEL[point.type]).toBeTruthy();
-      expect(point.why.length).toBeGreaterThan(0);
-    }
-  });
-
-  it('proves the node taxonomy is used, not merely declared', () => {
-    // It sat in the config for a while with nothing but materials in the
-    // universe. If this ever drops back to one kind, "a node can be anything"
-    // has become a claim the coverage does not support.
-    expect(new Set(CHOKEPOINTS.map(point => point.type)).size).toBeGreaterThanOrEqual(3);
-    expect(new Set(CHOKEPOINTS.map(point => point.curve)).size).toBe(MANDATE_CURVES.length);
-  });
-
-  it('holds non-material chokepoints to the same claim limits as producers', () => {
-    const allowed = ['curve', 'jurisdictions', 'name', 'source', 'type', 'why'].sort();
-    for (const point of CHOKEPOINTS) {
-      expect(Object.keys(point).sort()).toEqual(allowed);
-    }
-    const { sourced, total } = chokepointProgress();
-    expect(total).toBe(CHOKEPOINTS.length);
-    expect(sourced).toBeLessThanOrEqual(total);
-  });
-
-  it('keeps a chokepoint screen and a node taxonomy, which is what makes it extensible', () => {
-    expect(CHOKEPOINT_TEST.length).toBeGreaterThanOrEqual(4);
-    // A universe that only admits materials cannot reach robotics by traversal.
-    expect(NODE_TYPES.map(node => node.id)).toEqual(
-      expect.arrayContaining(['material', 'company', 'person'])
-    );
-  });
-
-  it('runs at least one phase, and never the desk', () => {
-    const active = PHASES.filter(phase => phase.status === 'active');
-    expect(active.length).toBeGreaterThanOrEqual(1);
-    expect(active.some(phase => phase.id === 'desk')).toBe(false);
-  });
-
-  it('commits to disclosure before any position exists, which is the only time it is credible', () => {
-    expect(DISCLOSURE.rules.length).toBeGreaterThanOrEqual(3);
-  });
-});
-
-describe('Substrata — Phase 1 coverage universe', () => {
-  it('owes a coverage entry to every material on the desk', () => {
-    expect(coverageProgress().uncoveredMaterials).toEqual([]);
-  });
-
-  it('covers no material outside the list — coverage follows the universe', () => {
-    const covered = MATERIALS.map(material => material.title);
-    for (const entry of COVERAGE) {
-      expect(covered).toContain(entry.material);
-    }
-  });
-
-  it('names more than one producer per material, or it is not a map', () => {
-    for (const entry of COVERAGE) {
-      expect(entry.producers.length).toBeGreaterThan(1);
-      expect(entry.thesis.length).toBeGreaterThan(0);
-    }
-  });
-
-  it('uses only known roles and plausible ISO-3166 jurisdictions', () => {
-    const roles = PRODUCER_ROLES.map(role => role.id);
-    for (const entry of COVERAGE) {
-      for (const producer of entry.producers) {
-        expect(roles).toContain(producer.role);
-        expect(producer.jurisdictions.length).toBeGreaterThan(0);
-        for (const jurisdiction of producer.jurisdictions) {
-          expect(jurisdiction).toMatch(/^[A-Z]{2}$/);
-        }
-      }
-    }
-  });
-
-  it('does not list the same company twice on one material', () => {
-    for (const entry of COVERAGE) {
-      const names = entry.producers.map(producer => producer.name);
-      expect(new Set(names).size).toBe(names.length);
-    }
-  });
-
-  it('presents unsourced rows as leads, never as findings', () => {
-    const { total, sourced } = coverageProgress();
-    expect(total).toBeGreaterThan(0);
-    // Not an assertion that nothing is sourced — it is an assertion that the
-    // count is honest. Phase 1 is done when sourced === total, and this test
-    // is what makes that a number rather than a feeling.
-    expect(sourced).toBeLessThanOrEqual(total);
-    for (const entry of COVERAGE) {
-      for (const producer of entry.producers) {
-        expect(producer).toHaveProperty('source');
-      }
-    }
-  });
-
-  it('carries no capacity, share or financial claim — there is no field for one', () => {
-    const allowed = ['name', 'jurisdictions', 'role', 'source'].sort();
-    for (const entry of COVERAGE) {
-      for (const producer of entry.producers) {
-        expect(Object.keys(producer).sort()).toEqual(allowed);
-      }
-    }
-  });
-
-  it('surfaces the cross-material overlaps that make the map worth having', () => {
-    // A company appearing on several materials is the map earning its keep:
-    // one counterparty, several exposures. If this ever returns nothing for
-    // every company, the universe has been flattened into unrelated lists.
-    const everyName = COVERAGE.flatMap(entry => entry.producers.map(p => p.name));
-    const overlapping = [...new Set(everyName)].filter(name => materialsFor(name).length > 1);
-    expect(overlapping.length).toBeGreaterThan(0);
-  });
-});
diff --git a/__tests__/unit/services/site-publish.test.ts b/__tests__/unit/services/site-publish.test.ts
deleted file mode 100644
index 2401b6ecb..000000000
--- a/__tests__/unit/services/site-publish.test.ts
+++ /dev/null
@@ -1,68 +0,0 @@
-/**
- * Publishing is one call, so the refusals have to be right in that one call.
- *
- * Every rule here prevents a site that would exist in the database and never
- * answer on the internet — the worst failure mode for this feature, because the
- * button said it worked. A slug that cannot be a DNS label, a slug that already
- * belongs to infrastructure, and a private group whose site RLS would hide from
- * every visitor.
- */
-
-import { publishRefusal, siteAddress, type SiteGroup } from '@/services/sites/publish';
-
-function group(overrides: Partial<SiteGroup> = {}): SiteGroup {
-  return { id: 'uuid', name: 'Acme Cooperative', slug: 'acme', is_public: true, ...overrides };
-}
-
-describe('what may be published', () => {
-  it('publishes an ordinary public group', () => {
-    expect(publishRefusal(group())).toBeNull();
-  });
-
-  it('refuses a slug that cannot be a DNS label', () => {
-    for (const slug of ['-acme', 'acme-', 'ac me', 'acme_co', '']) {
-      expect(publishRefusal(group({ slug }))).toMatch(/cannot be a hostname/);
-    }
-  });
-
-  /**
-   * The one that would be a real incident. `supabase.orangecat.ch` is the
-   * database; `security.orangecat.ch` under our own certificate is a phish.
-   */
-  it('refuses a slug that already belongs to infrastructure or invites a phish', () => {
-    expect(publishRefusal(group({ slug: 'supabase' }))).toMatch(/reserved/);
-    expect(publishRefusal(group({ slug: 'security' }))).toMatch(/reserved/);
-    expect(publishRefusal(group({ slug: 'fleetcrown' }))).toMatch(/reserved/);
-  });
-
-  it('explains WHY a name is reserved, since the fix depends on it', () => {
-    expect(publishRefusal(group({ slug: 'supabase' }))).toContain('database');
-  });
-
-  /**
-   * The RLS policy only exposes a site whose group is public. Publishing a
-   * private group would write a row that every visitor is denied.
-   */
-  it('refuses a private group rather than publishing a site nobody can load', () => {
-    expect(publishRefusal(group({ is_public: false }))).toMatch(/private group/i);
-  });
-});
-
-describe('where a site lives', () => {
-  it('gives the free subdomain, and a preview path that works without DNS', () => {
-    expect(siteAddress(group(), {})).toEqual({
-      url: 'https://acme.orangecat.ch',
-      previewPath: '/sites/acme',
-    });
-  });
-
-  it('prefers a custom domain once one is configured', () => {
-    expect(siteAddress(group(), { customDomain: 'acme.example' }).url).toBe('https://acme.example');
-  });
-
-  it('ignores a malformed custom domain rather than advertising it', () => {
-    expect(siteAddress(group(), { customDomain: 'not a hostname' }).url).toBe(
-      'https://acme.orangecat.ch'
-    );
-  });
-});
diff --git a/deployment/caddy/hosted-sites.caddy b/deployment/caddy/hosted-sites.caddy
deleted file mode 100644
index 210ce909d..000000000
--- a/deployment/caddy/hosted-sites.caddy
+++ /dev/null
@@ -1,43 +0,0 @@
-# Hosted sites — every customer website, on one block, forever.
-#
-# Installed to /etc/caddy/apps.d/hosted-sites.caddy by
-# scripts/ci/install-hosted-sites-caddy.sh. Lives in the repo because it is
-# configuration, and configuration that exists only on a box is configuration
-# nobody can review.
-#
-# WHY A CATCH-ALL AND NOT A BLOCK PER SITE
-#
-# A block per site means every customer is an ssh session. This block is the
-# last resort — Caddy matches the most specific host first, so all twenty-odd
-# named blocks above still win — and it answers for everything else:
-#
-#   <slug>.orangecat.ch   the free subdomain every hosted site starts on
-#   anything.example      a customer's own domain, the hour they point it here
-#
-# WHY ON-DEMAND TLS
-#
-# A wildcard certificate would need a DNS-01 challenge, an Infomaniak API token
-# sitting on this box, and a Caddy DNS plugin — and it still would not cover a
-# customer's own domain. On-demand needs none of that: Caddy asks OrangeCat
-# whether a hostname is real before it orders a certificate, and OrangeCat
-# already knows, because a hosted site is a row in its database.
-#
-# The `ask` endpoint is the safety. Every yes is an ACME order and Let's Encrypt
-# rate-limits an account that fails them, so /api/internal/tls-check answers 403
-# for anything that is not a published site right now — and fails closed if it
-# cannot reach the database. Without that endpoint answering 200, this block
-# serves nothing at all, which is the correct behaviour for a misconfiguration.
-#
-# Requires in the global block of /etc/caddy/Caddyfile:
-#     on_demand_tls {
-#         ask http://127.0.0.1:4003/api/internal/tls-check
-#     }
-https:// {
-	encode zstd gzip
-	tls {
-		on_demand
-	}
-	reverse_proxy 127.0.0.1:4003 {
-		flush_interval -1
-	}
-}
diff --git a/deployment/reserved-hosts.txt b/deployment/reserved-hosts.txt
deleted file mode 100644
index 72c7db6f9..000000000
--- a/deployment/reserved-hosts.txt
+++ /dev/null
@@ -1,34 +0,0 @@
-# Subdomain labels currently served on bitbaum under *.orangecat.ch.
-#
-# Generated from the box, committed so CI can check it WITHOUT ssh:
-#   npm run sync:reserved-hosts
-#
-# Every label here must appear in RESERVED_SUBDOMAINS (src/config/sites.ts),
-# because host resolution for hosted sites is positional — any non-reserved
-# label on orangecat.ch is a candidate site slug. A label serving an app AND
-# claimable as a site is a collision waiting to happen, and on-demand TLS
-# would issue a second certificate for a name that already has one.
-#
-# check:reserved-hosts fails the build when this file and the code disagree.
-annushka
-aoz-wohnen
-aoz
-botsmann
-bridge
-camille
-datacat
-evig
-fleetcrown
-kivvi
-petvity
-printcraft
-reparaturbonus
-revamp-info
-revampit
-sbb
-sink
-solon
-supabase
-surf-your-life
-vitareba
-www
diff --git a/docs/operations/hosted-sites.md b/docs/operations/hosted-sites.md
deleted file mode 100644
index 31aa1d8b4..000000000
--- a/docs/operations/hosted-sites.md
+++ /dev/null
@@ -1,165 +0,0 @@
----
-created_date: 2026-08-27
-last_modified_date: 2026-08-27
-last_modified_summary: First version — how a group becomes a website, the publish API, and the two one-time infrastructure steps behind it.
----
-
-# Hosted sites — turning a group into a website
-
-`/domains` sells one sentence: _"a working site, hosted and managed at
-yourname.orangecat.ch — free. Move to your own domain when you are ready."_
-This is how that works, and what it costs.
-
-## Publishing a site
-
-**One call. No deploy, no ssh, no DNS.**
-
-```http
-PUT /api/groups/acme/site        → { published: true, url, previewPath }
-DELETE /api/groups/acme/site     → unpublish (keeps the configuration)
-GET /api/groups/acme/site        → status, address, and whether it is eligible
-```
-
-Admin/founder only. `PUT` is an upsert, so the same call publishes a new site
-and reconfigures a live one. This is what FleetCrown and the group settings UI
-call; neither knows anything about DNS or Caddy, because neither is involved.
-
-`GET` answers `url` even when unpublished, so the button can read _"Publish at
-acme.orangecat.ch"_ rather than a bare _"Publish"_, and returns `eligible` +
-`reason` so a group that can never be published (reserved slug, private group)
-says so before anyone clicks.
-
-Underneath, that call is one row:
-
-```sql
-INSERT INTO group_features (group_id, feature_key, enabled, enabled_by)
-VALUES ('<group-uuid>', 'site', true, '<user-uuid>');
-```
-
-The site is live at `<group-slug>.orangecat.ch` within a minute — that minute is
-`SITE_CACHE_TTL_SECONDS` in `src/services/sites/registry.ts`. Setting
-`enabled = false` unpublishes it just as fast.
-
-The pages are generated from the group's own profile (`src/config/site-profile.ts`):
-its name, description, label, tags, and payment addresses if it has them. There
-is no page builder and no second place to type the description, which is the
-point — if the profile is good, the website is good.
-
-### Optional configuration
-
-`group_features.config` (jsonb), all fields optional:
-
-| Field          | Default          | Meaning                                           |
-| -------------- | ---------------- | ------------------------------------------------- |
-| `title`        | the group's name | browser tab / OG title                            |
-| `customDomain` | `null`           | canonical hostname once the owner points DNS here |
-| `aliasHosts`   | `[]`             | extra hostnames answered but never advertised     |
-
-Every field is validated with its own fallback, so one bad value costs that
-field and never the site.
-
-## How a request gets there
-
-```
-Host: acme.orangecat.ch
-   │
-   ├─ middleware.ts        siteSlugForHost() — pure, no database.
-   │                       "acme" is one non-reserved label → rewrite.
-   │                       (Rewrite, not redirect: the URL bar keeps saying acme.)
-   │
-   ├─ /sites/acme          siteBySlug() — reads as ANON, so RLS decides
-   │                       "published". No row → 404.
-   │
-   └─ site-profile.ts      the group's profile, rendered as pages.
-```
-
-The split matters: middleware runs on **every request to the whole app**, so it
-may never query. It answers "is this shaped like a site?" An unclaimed slug
-rewrites and 404s, which is the safe direction.
-
-`/sites/<slug>` also works on any host, which is how a site is previewed before
-its DNS exists.
-
-## Reserved subdomains
-
-Host resolution is positional, so `RESERVED_SUBDOMAINS` (`src/config/sites.ts`)
-is load-bearing twice:
-
-- **Infrastructure** — `supabase`, `fleetcrown`, `bridge`, and 19 others already
-  serve something on this box.
-- **Impersonation** — `security.orangecat.ch` under our own certificate is a
-  phish, not a website.
-
-The infrastructure half is **generated, not remembered**. The first hand-written
-version held 7 labels while the box was serving 22.
-
-```bash
-npm run sync:reserved-hosts    # regenerate from Caddy (needs ssh)
-npm run check:reserved-hosts   # in `verify`; fails if the two disagree
-```
-
-**Deploying a new app on bitbaum will fail the build until you run the sync.**
-That is deliberate: the alternative is a hostname that serves an app _and_ is
-claimable as a customer's site.
-
-## The two one-time infrastructure steps
-
-Both are done once, ever. After them no site needs infrastructure work again.
-
-### 1. Caddy — on-demand TLS
-
-```bash
-bash scripts/ci/install-hosted-sites-caddy.sh
-```
-
-Installs `deployment/caddy/hosted-sites.caddy` as a catch-all block and adds
-`on_demand_tls { ask ... }` to the global block. The script refuses to run until
-`/api/internal/tls-check` answers 200, backs up the Caddyfile, validates before
-reloading, and re-checks the neighbouring hosts afterwards — one bad Caddyfile
-takes down every app on the box.
-
-A wildcard certificate was the alternative: DNS-01, an Infomaniak API token
-living on the box, a Caddy DNS plugin — and it still would not have covered a
-customer's own domain.
-
-### 2. DNS — the wildcard record
-
-At Infomaniak, on `orangecat.ch`:
-
-```
-*    A    167.233.22.31
-```
-
-**This is the only step that cannot be automated from a developer machine** —
-no Infomaniak API credentials exist here. Existing named records keep
-precedence, so nothing already live changes.
-
-A customer's own domain needs no record from us at all: they point it here, and
-Caddy asks `/api/internal/tls-check` whether it is real.
-
-## Bespoke sites
-
-A site whose content is genuinely not profile-shaped gets a builder. Substrata
-is the one example — a research corpus of tables, meters and a coverage ledger,
-which no generic renderer should try to guess.
-
-Adding one means an entry in `BESPOKE_BUILDERS` and a function returning
-`SitePage[]` from a closed set of section shapes (`src/config/site-content.ts`).
-**This is the exception.** If you are reaching for it for an ordinary customer,
-the profile builder is what should be improved instead — it costs zero lines per
-customer, and a fix there reaches every site at once.
-
-## Verifying a site
-
-```bash
-curl -sI https://acme.orangecat.ch/ | head -1
-curl -s https://acme.orangecat.ch/ | grep -o '<title>[^<]*</title>'
-
-# Would Caddy issue a certificate for this host?
-curl -s -o /dev/null -w '%{http_code}\n' \
-  'http://127.0.0.1:4003/api/internal/tls-check?domain=acme.orangecat.ch'
-```
-
-`403` from the last one means no published site answers on that hostname — check
-`group_features.enabled`, that the group is `is_public`, and that the label is
-not reserved.
diff --git a/package.json b/package.json
index 9b6a66f26..f3ba6861a 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "check:rpc-exists": "node scripts/check-rpc-exists.mjs",
     "check:ai-models": "node scripts/check-ai-models.mjs",
     "check:mdx": "node scripts/check-mdx.mjs",
-    "verify": "npm run ci:docs && npm run check:accent-ink && npm run type-check && npm run type-check:scripts && npm run check:sizes && npm run audit:routes && npm run lint && npm run check:duplication && npm run check:dead-fields && npm run check:migration-versions && npm run check:schema-columns && npm run check:currency-units && npm run check:reserved-hosts && npm run check:rpc-exists && npm run check:mdx && npm run test:unit -- --watchAll=false",
+    "verify": "npm run ci:docs && npm run check:accent-ink && npm run type-check && npm run type-check:scripts && npm run check:sizes && npm run audit:routes && npm run lint && npm run check:duplication && npm run check:dead-fields && npm run check:migration-versions && npm run check:schema-columns && npm run check:currency-units && npm run check:rpc-exists && npm run check:mdx && npm run test:unit -- --watchAll=false",
     "audit:schema": "node scripts/db/audit-schema-drift.mjs",
     "audit:routes": "node scripts/audit-routes.mjs",
     "gen:types": "bash scripts/db/gen-types.sh",
@@ -107,8 +107,6 @@
     "db:audit": "node scripts/db-audit.mjs",
     "eval:voice": "node scripts/eval-voice-routing.mjs",
     "check:migration-versions": "node scripts/check-migration-versions.mjs",
-    "check:reserved-hosts": "bash scripts/ci/check-reserved-hosts.sh",
-    "sync:reserved-hosts": "bash scripts/ci/sync-reserved-hosts.sh",
     "type-check:scripts": "tsc --noEmit --skipLibCheck -p tsconfig.scripts.json"
   },
   "dependencies": {
diff --git a/scripts/ci/check-reserved-hosts.sh b/scripts/ci/check-reserved-hosts.sh
deleted file mode 100755
index 392341f07..000000000
--- a/scripts/ci/check-reserved-hosts.sh
+++ /dev/null
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-#
-# Every subdomain already serving traffic on bitbaum must be reserved in code.
-#
-# WHY THIS GATE EXISTS
-#
-# Hosted-site resolution is positional: any non-reserved label on orangecat.ch
-# is a candidate site slug (src/config/sites.ts). That is what makes a new
-# customer cost zero deploys, and it is also what makes RESERVED_SUBDOMAINS
-# load-bearing. A label that serves an app AND is claimable as a site is a
-# collision — and with on-demand TLS it is also a second certificate order for a
-# hostname that already has one.
-#
-# The first version of that list was written by hand and was missing fourteen of
-# the twenty-two hosts that were already live. So it is no longer remembered: it
-# is generated from the box (`npm run sync:reserved-hosts`), committed, and
-# checked here. Nobody has to notice.
-#
-# Runs with no network and no ssh, which is why the manifest is committed.
-set -euo pipefail
-
-cd "$(dirname "$0")/../.."
-
-MANIFEST="deployment/reserved-hosts.txt"
-SOURCE="src/config/sites.ts"
-
-[ -f "$MANIFEST" ] || { echo "✗ missing $MANIFEST"; exit 1; }
-[ -f "$SOURCE" ]   || { echo "✗ missing $SOURCE"; exit 1; }
-
-# Labels the code reserves: the `label: '...'` field of each RESERVED_SUBDOMAINS entry.
-reserved=$(grep -oE "label: '[a-z0-9-]+'" "$SOURCE" | sed "s/label: '//; s/'//" | sort -u)
-live=$(grep -vE '^\s*(#|$)' "$MANIFEST" | tr -d ' \t' | sort -u)
-
-missing=$(comm -23 <(echo "$live") <(echo "$reserved"))
-
-if [ -n "$missing" ]; then
-  echo "✗ These hosts serve traffic on bitbaum but are NOT reserved in $SOURCE:"
-  echo "$missing" | sed 's/^/    /'
-  echo
-  echo "  Each one is claimable as a hosted-site slug right now. Add them to"
-  echo "  RESERVED_SUBDOMAINS, or if the host is gone, refresh the manifest:"
-  echo "      npm run sync:reserved-hosts"
-  exit 1
-fi
-
-echo "✓ reserved subdomains cover all $(echo "$live" | wc -l | tr -d ' ') live hosts"
diff --git a/scripts/ci/install-hosted-sites-caddy.sh b/scripts/ci/install-hosted-sites-caddy.sh
deleted file mode 100755
index 69af3bf2a..000000000
--- a/scripts/ci/install-hosted-sites-caddy.sh
+++ /dev/null
@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-#
-# Install the hosted-sites Caddy block on bitbaum. Idempotent, and validates
-# before it reloads — a bad Caddyfile takes down all twenty-odd apps on the box,
-# so this never writes and hopes.
-#
-# Run AFTER the code carrying /api/internal/tls-check is deployed. Without that
-# endpoint every certificate request is denied, which is safe but inert.
-#
-#   bash scripts/ci/install-hosted-sites-caddy.sh
-set -euo pipefail
-
-cd "$(dirname "$0")/../.."
-BOX="${BITBAUM_SSH:-root@167.233.22.31}"
-FRAGMENT="deployment/caddy/hosted-sites.caddy"
-ASK_URL="http://127.0.0.1:4003/api/internal/tls-check"
-
-[ -f "$FRAGMENT" ] || { echo "✗ missing $FRAGMENT"; exit 1; }
-
-echo "→ checking the ask endpoint is live before enabling on-demand TLS"
-if ! ssh -o BatchMode=yes "$BOX" "curl -fsS -o /dev/null -w '%{http_code}' '${ASK_URL}?domain=substrata.orangecat.ch'" | grep -q 200; then
-  echo "✗ ${ASK_URL} did not answer 200 for a known site."
-  echo "  Deploy the code first — otherwise every certificate request is denied."
-  exit 1
-fi
-
-echo "→ installing"
-scp -q "$FRAGMENT" "$BOX:/etc/caddy/apps.d/hosted-sites.caddy"
-
-ssh -o BatchMode=yes "$BOX" 'bash -s' <<'REMOTE'
-set -euo pipefail
-cd /etc/caddy
-cp Caddyfile "Caddyfile.bak-$(date +%Y%m%d-%H%M%S)"
-
-# Add the global on_demand_tls option once. Global options must be in the main
-# Caddyfile's first block; apps.d is imported at the end, so it cannot go there.
-if ! grep -q 'on_demand_tls' Caddyfile; then
-  python3 - <<'PY'
-import pathlib
-p = pathlib.Path('/etc/caddy/Caddyfile'); s = p.read_text()
-old = "\tservers {\n\t\tprotocols h1 h2\n\t}\n}"
-new = ("\tservers {\n\t\tprotocols h1 h2\n\t}\n"
-       "\ton_demand_tls {\n"
-       "\t\task http://127.0.0.1:4003/api/internal/tls-check\n"
-       "\t}\n}")
-assert old in s, "global block not in the expected shape — install by hand"
-p.write_text(s.replace(old, new, 1))
-PY
-  echo "  + on_demand_tls ask added to the global block"
-else
-  echo "  = on_demand_tls already configured"
-fi
-
-caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile >/dev/null 2>&1 \
-  || { echo "✗ Caddyfile invalid — NOT reloading"; exit 1; }
-systemctl reload caddy
-echo "  ✓ caddy reloaded"
-REMOTE
-
-echo "→ verifying the existing hosts still answer"
-for host in orangecat.ch fleetcrown.orangecat.ch supabase.orangecat.ch; do
-  code=$(curl -s -o /dev/null -w '%{http_code}' "https://$host/" || echo "000")
-  echo "    $host → $code"
-done
diff --git a/scripts/ci/sync-reserved-hosts.sh b/scripts/ci/sync-reserved-hosts.sh
deleted file mode 100755
index 08ea42e81..000000000
--- a/scripts/ci/sync-reserved-hosts.sh
+++ /dev/null
@@ -1,34 +0,0 @@
-#!/usr/bin/env bash
-#
-# Regenerate deployment/reserved-hosts.txt from what Caddy actually serves.
-#
-# Needs ssh to the box, which is why the RESULT is committed and the CHECK
-# (check-reserved-hosts.sh) reads the committed file instead of running this.
-# Run it after adding or removing an app on bitbaum.
-set -euo pipefail
-
-cd "$(dirname "$0")/../.."
-BOX="${BITBAUM_SSH:-root@167.233.22.31}"
-
-labels=$(ssh -o BatchMode=yes "$BOX" "caddy adapt --config /etc/caddy/Caddyfile 2>/dev/null" \
-  | python3 -c "
-import json,sys
-d=json.load(sys.stdin); hosts=set()
-for srv in d.get('apps',{}).get('http',{}).get('servers',{}).values():
-    for route in srv.get('routes',[]):
-        for m in route.get('match',[]):
-            for h in m.get('host',[]): hosts.add(h)
-suffix='.orangecat.ch'
-for h in sorted(hosts):
-    if h.endswith(suffix): print(h[:-len(suffix)])
-")
-
-[ -n "$labels" ] || { echo "✗ Caddy returned no orangecat.ch hosts — refusing to write an empty manifest"; exit 1; }
-
-{
-  sed -n '1,/^# check:reserved-hosts/p' deployment/reserved-hosts.txt
-  echo "$labels"
-} > deployment/reserved-hosts.txt.new
-mv deployment/reserved-hosts.txt.new deployment/reserved-hosts.txt
-
-echo "✓ manifest refreshed with $(echo "$labels" | wc -l | tr -d ' ') hosts"
diff --git a/scripts/seed-substrata.ts b/scripts/seed-substrata.ts
deleted file mode 100644
index 8dac08178..000000000
--- a/scripts/seed-substrata.ts
+++ /dev/null
@@ -1,208 +0,0 @@
-/**
- * Seed "Substrata" — an open-source research firm covering the chokepoints
- * between here and a technological singularity — as an OrangeCat group
- * profile with its own actor.
- *
- * OrangeCat is the SSOT for economic entities. A company is a `group` (label
- * 'company') that owns an `actors` row of actor_type 'group'; everything the
- * company lists hangs off that actor, which is what makes a group's store work
- * the same way a person's does.
- *
- * Idempotent: resolves the founder by actor slug at runtime, upserts the group
- * by slug, the actor by group_id, and membership by its unique key. Never
- * truncates. Safe to re-run. Owner-gated so it can't fire by accident.
- *
- * Runs from ANYWHERE that can reach supabase.orangecat.ch over HTTPS — it is
- * PostgREST calls, not psql, so it needs no SSH and no tunnel. In practice
- * that means a laptop with .env.local, or the box:
- *
- *   ORANGECAT_OWNER_SEED=1 npx tsx scripts/seed-substrata.ts
- *
- * Requires in the environment (both already in .env.local):
- *   NEXT_PUBLIC_SUPABASE_URL   — self-hosted Supabase URL
- *   SUPABASE_SERVICE_ROLE_KEY  — service role (bypasses RLS for the seed)
- *
- * The service-role key bypasses RLS, so treat a machine that has it as
- * privileged and do not paste it into a shell history you keep.
- *
- * Created: 2026-08-26
- */
-
-import { config as loadEnv } from 'dotenv';
-import { createClient, type SupabaseClient } from '@supabase/supabase-js';
-import type { Database } from '../src/types/database';
-import {
-  COMPANY,
-  FOUNDER_ACTOR_SLUG,
-  GROUP_FEATURE_KEYS,
-  GROUP_PAYLOAD,
-} from '../src/config/substrata';
-
-loadEnv({ path: '.env.local' });
-
-const SUPABASE_URL = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
-
-function die(message: string): never {
-  console.error(`✗ ${message}`);
-  process.exit(1);
-}
-
-if (process.env.ORANGECAT_OWNER_SEED !== '1') {
-  die('Refusing to run without ORANGECAT_OWNER_SEED=1 (owner-gated).');
-}
-if (!SUPABASE_URL || !SERVICE_ROLE_KEY) {
-  die('Missing NEXT_PUBLIC_SUPABASE_URL or SUPABASE_SERVICE_ROLE_KEY in the environment.');
-}
-
-/**
- * Typed against the generated schema, not `any`.
- *
- * A seed is the one place where a column rename fails on the box rather than in
- * CI — it runs by hand, months after the migration that broke it. Binding the
- * client to `Database` moves that failure to `npm run type-check`, and it is why
- * the row literals below need no casts.
- */
-const admin: SupabaseClient<Database> = createClient<Database>(SUPABASE_URL, SERVICE_ROLE_KEY, {
-  auth: { persistSession: false, autoRefreshToken: false },
-});
-
-type GroupInsert = Database['public']['Tables']['groups']['Insert'];
-type ActorInsert = Database['public']['Tables']['actors']['Insert'];
-
-interface FounderRow {
-  id: string;
-  user_id: string;
-}
-
-/** The user behind FOUNDER_ACTOR_SLUG — `groups.created_by` needs a real user. */
-async function resolveFounder(): Promise<FounderRow> {
-  const { data, error } = await admin
-    .from('actors')
-    .select('id, user_id')
-    .eq('slug', FOUNDER_ACTOR_SLUG)
-    .maybeSingle();
-  if (error) die(`Failed to resolve founder actor: ${error.message}`);
-  if (!data) {
-    die(`No actor with slug '${FOUNDER_ACTOR_SLUG}'. Create it or change FOUNDER_ACTOR_SLUG.`);
-  }
-  if (!data.user_id) die(`Actor '${FOUNDER_ACTOR_SLUG}' has no user_id; groups require one.`);
-  return { id: data.id, user_id: data.user_id };
-}
-
-/** Upsert the company group by its (unique) slug. Returns its id. */
-async function upsertGroup(founder: FounderRow): Promise<string> {
-  const { data: existing, error: probeErr } = await admin
-    .from('groups')
-    .select('id')
-    .eq('slug', GROUP_PAYLOAD.slug)
-    .maybeSingle();
-  if (probeErr) die(`Failed to look up group '${GROUP_PAYLOAD.slug}': ${probeErr.message}`);
-
-  const row: GroupInsert = {
-    name: GROUP_PAYLOAD.name,
-    slug: GROUP_PAYLOAD.slug,
-    description: GROUP_PAYLOAD.description,
-    label: GROUP_PAYLOAD.label,
-    tags: GROUP_PAYLOAD.tags,
-    is_public: GROUP_PAYLOAD.is_public,
-    visibility: GROUP_PAYLOAD.visibility,
-    governance_preset: GROUP_PAYLOAD.governance_preset,
-    created_by: founder.user_id,
-  };
-
-  if (existing) {
-    const { error } = await admin.from('groups').update(row).eq('id', existing.id);
-    if (error) die(`Failed to update group: ${error.message}`);
-    console.log(`↻ updated group "${GROUP_PAYLOAD.name}" (${existing.id})`);
-    return existing.id;
-  }
-
-  const { data, error } = await admin.from('groups').insert(row).select('id').single();
-  if (error) die(`Failed to insert group: ${error.message}`);
-  console.log(`+ created group "${GROUP_PAYLOAD.name}" (${data.id})`);
-  return data.id;
-}
-
-/**
- * Upsert the group's actor. Nothing creates this automatically — `createGroup`
- * in the app doesn't either — and without it the group can own nothing, since
- * every entity table keys on actor_id.
- */
-async function upsertGroupActor(groupId: string): Promise<string> {
-  const { data: existing, error: probeErr } = await admin
-    .from('actors')
-    .select('id')
-    .eq('group_id', groupId)
-    .eq('actor_type', 'group')
-    .maybeSingle();
-  if (probeErr) die(`Failed to look up group actor: ${probeErr.message}`);
-
-  const row: ActorInsert = {
-    actor_type: 'group',
-    group_id: groupId,
-    user_id: null,
-    display_name: COMPANY.name,
-    slug: COMPANY.slug,
-  };
-
-  if (existing) {
-    const { error } = await admin.from('actors').update(row).eq('id', existing.id);
-    if (error) die(`Failed to update group actor: ${error.message}`);
-    console.log(`↻ group actor '${COMPANY.slug}' (${existing.id})`);
-    return existing.id;
-  }
-
-  const { data, error } = await admin.from('actors').insert(row).select('id').single();
-  if (error) die(`Failed to insert group actor: ${error.message}`);
-  console.log(`+ group actor '${COMPANY.slug}' (${data.id})`);
-  return data.id;
-}
-
-/** The founder seat. Unique on (group_id, user_id), so ignore-on-conflict. */
-async function ensureFounderMembership(groupId: string, founder: FounderRow): Promise<void> {
-  const { error } = await admin
-    .from('group_members')
-    .upsert(
-      { group_id: groupId, user_id: founder.user_id, role: 'founder' },
-      { onConflict: 'group_id,user_id' }
-    );
-  if (error) die(`Failed to seat the founder: ${error.message}`);
-  console.log(`  ✓ founder seat for actor '${FOUNDER_ACTOR_SLUG}'`);
-}
-
-/** Enable the features the company needs. Unique on (group_id, feature_key). */
-async function ensureFeatures(groupId: string, founder: FounderRow): Promise<void> {
-  if (GROUP_FEATURE_KEYS.length === 0) {
-    return;
-  }
-  const rows = GROUP_FEATURE_KEYS.map(feature_key => ({
-    group_id: groupId,
-    feature_key,
-    enabled: true,
-    enabled_by: founder.user_id,
-  }));
-  const { error } = await admin
-    .from('group_features')
-    .upsert(rows, { onConflict: 'group_id,feature_key' });
-  if (error) die(`Failed to enable features: ${error.message}`);
-  console.log(`  ✓ features: ${GROUP_FEATURE_KEYS.join(', ')}`);
-}
-
-async function main(): Promise<void> {
-  console.log(`Seeding "${COMPANY.name}" against ${SUPABASE_URL} …`);
-  const founder = await resolveFounder();
-  console.log(`founder actor '${FOUNDER_ACTOR_SLUG}' = ${founder.id}`);
-
-  const groupId = await upsertGroup(founder);
-  await upsertGroupActor(groupId);
-  await ensureFounderMembership(groupId, founder);
-  await ensureFeatures(groupId, founder);
-
-  // Deliberately no product listings. Substrata publishes research and sells
-  // nothing, so seeding a catalogue would put a shop on the profile of a firm
-  // that has none. If a licensed desk ever exists, that commit adds them.
-  console.log(`✓ done. View at /groups/${COMPANY.slug}.`);
-}
-
-main().catch(err => die(err instanceof Error ? err.message : String(err)));
diff --git a/src/app/api/groups/[slug]/site/route.ts b/src/app/api/groups/[slug]/site/route.ts
deleted file mode 100644
index 6cd6746dc..000000000
--- a/src/app/api/groups/[slug]/site/route.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-/**
- * Group Website API — publish a group as a website, and take it down again.
- *
- * GET    /api/groups/[slug]/site  — is this group published, and where?
- * PUT    /api/groups/[slug]/site  — publish it (admin/founder only)
- * DELETE /api/groups/[slug]/site  — unpublish it (admin/founder only)
- *
- * This endpoint IS the "few clicks": everything underneath it works off one
- * row, so turning a group into a website is this one call — no DNS, no Caddy,
- * no deploy. PUT is an upsert, so it both publishes and reconfigures; two verbs
- * would be two states where the database has one row.
- *
- * HTTP only. What may be published, and what publishing does, lives in
- * `@/services/sites/publish`.
- */
-
-import { withAuth, type AuthenticatedRequest } from '@/lib/api/withAuth';
-import { revalidateTag } from 'next/cache';
-import {
-  apiSuccess,
-  apiBadRequest,
-  apiForbidden,
-  apiNotFound,
-  apiRateLimited,
-  apiValidationError,
-  handleApiError,
-} from '@/lib/api/standardResponse';
-import { rateLimitWriteAsync, retryAfterSeconds } from '@/lib/rate-limit';
-import { logger } from '@/utils/logger';
-import { checkGroupAdmin } from '@/domain/groups/helpers.server';
-import { siteConfigSchema } from '@/config/hosted-site';
-import { HOSTED_SITES_TAG } from '@/services/sites/registry';
-import {
-  publishRefusal,
-  publishSite,
-  readSiteFeature,
-  resolveGroupForSite,
-  siteAddress,
-  unpublishSite,
-  type SiteGroup,
-} from '@/services/sites/publish';
-
-interface RouteContext {
-  params: Promise<{ slug: string }>;
-}
-
-/** Resolve + authorise in one step; every verb here needs exactly this. */
-async function requireAdminGroup(
-  req: AuthenticatedRequest,
-  slug: string
-): Promise<{ group: SiteGroup } | { error: ReturnType<typeof apiNotFound> }> {
-  const group = await resolveGroupForSite(req.supabase, slug);
-  if (!group) {
-    return { error: apiNotFound('Group not found') };
-  }
-  if (!(await checkGroupAdmin(req.supabase, group.id, req.user.id))) {
-    return { error: apiForbidden('Only group admins and founders can manage the website') };
-  }
-  return { group };
-}
-
-export const GET = withAuth(async (req: AuthenticatedRequest, { params }: RouteContext) => {
-  const { slug } = await params;
-  try {
-    const resolved = await requireAdminGroup(req, slug);
-    if ('error' in resolved) {
-      return resolved.error;
-    }
-    const { group } = resolved;
-    const feature = await readSiteFeature(req.supabase, group.id);
-    const refusal = publishRefusal(group);
-
-    return apiSuccess({
-      published: feature.enabled,
-      // Returned even when unpublished, so the UI can offer "Publish at
-      // acme.orangecat.ch" rather than a bare "Publish". It costs nothing.
-      ...siteAddress(group, feature.config),
-      eligible: refusal === null,
-      reason: refusal,
-      config: feature.config,
-    });
-  } catch (error) {
-    logger.error('Reading site settings failed', { slug, error: String(error) }, 'Sites');
-    return handleApiError(error);
-  }
-});
-
-export const PUT = withAuth(async (req: AuthenticatedRequest, { params }: RouteContext) => {
-  const { slug } = await params;
-  try {
-    const rl = await rateLimitWriteAsync(req.user.id);
-    if (!rl.success) {
-      return apiRateLimited('Too many requests. Please slow down.', retryAfterSeconds(rl));
-    }
-
-    const resolved = await requireAdminGroup(req, slug);
-    if ('error' in resolved) {
-      return resolved.error;
-    }
-    const { group } = resolved;
-
-    const refusal = publishRefusal(group);
-    if (refusal) {
-      return apiBadRequest(refusal);
-    }
-
-    const body = await req.json().catch(() => ({}));
-    const parsed = siteConfigSchema.safeParse(body ?? {});
-    if (!parsed.success) {
-      return apiValidationError('Invalid site configuration', parsed.error.flatten().fieldErrors);
-    }
-
-    await publishSite(req.supabase, group, parsed.data, req.user.id);
-    // Without this the site is live but the resolver holds its old answer for up
-    // to a minute, and a publish button that takes a minute to visibly work
-    // reads as a publish button that failed.
-    revalidateTag(HOSTED_SITES_TAG, 'max');
-    logger.info('Group website published', { group: group.slug }, 'Sites');
-
-    return apiSuccess({ published: true, ...siteAddress(group, parsed.data) });
-  } catch (error) {
-    logger.error('Publishing a site failed', { slug, error: String(error) }, 'Sites');
-    return handleApiError(error);
-  }
-});
-
-export const DELETE = withAuth(async (req: AuthenticatedRequest, { params }: RouteContext) => {
-  const { slug } = await params;
-  try {
-    const rl = await rateLimitWriteAsync(req.user.id);
-    if (!rl.success) {
-      return apiRateLimited('Too many requests. Please slow down.', retryAfterSeconds(rl));
-    }
-
-    const resolved = await requireAdminGroup(req, slug);
-    if ('error' in resolved) {
-      return resolved.error;
-    }
-
-    await unpublishSite(req.supabase, resolved.group);
-    revalidateTag(HOSTED_SITES_TAG, 'max');
-    logger.info('Group website unpublished', { group: slug }, 'Sites');
-
-    return apiSuccess({ published: false });
-  } catch (error) {
-    logger.error('Unpublishing a site failed', { slug, error: String(error) }, 'Sites');
-    return handleApiError(error);
-  }
-});
diff --git a/src/app/api/internal/tls-check/route.ts b/src/app/api/internal/tls-check/route.ts
deleted file mode 100644
index 4312f5cb0..000000000
--- a/src/app/api/internal/tls-check/route.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-/**
- * GET /api/internal/tls-check?domain=<host> — may Caddy issue a certificate?
- *
- * This is the endpoint Caddy's `on_demand_tls { ask ... }` calls before it
- * obtains a certificate for a hostname it has never seen. 200 means yes.
- *
- * WHY THIS EXISTS
- *
- * The alternative to on-demand TLS is a wildcard certificate, which needs a
- * DNS-01 challenge, an Infomaniak API token on the box, and a Caddy plugin — and
- * it still would not cover a customer's own domain. On-demand needs none of
- * that, and it inverts the relationship in the right direction: instead of
- * infrastructure being edited every time a customer appears, Caddy ASKS
- * OrangeCat which hostnames are real, and OrangeCat already knows.
- *
- * THIS IS A GATE, NOT A LOOKUP
- *
- * Answering 200 too freely is a denial of service against ourselves: every yes
- * is an ACME order, and Let's Encrypt rate-limits an account that fails them.
- * Somebody who points `whatever.example` at this box and requests it can
- * therefore burn our issuance budget. So the rule is strict — the hostname must
- * resolve to a site that is published RIGHT NOW, reserved subdomains are
- * refused before any query, and anything unrecognised is a flat 403.
- *
- * Internal by convention only: Caddy calls it over loopback, and it discloses
- * nothing an ordinary visitor could not learn by loading the site itself.
- */
-
-import { isReservedSubdomain, normaliseHost, SITES_BASE_DOMAIN } from '@/config/sites';
-import { siteByHost } from '@/services/sites/registry';
-import { logger } from '@/utils/logger';
-
-/** Caddy blocks on this call, so it must be quick and must never hang. */
-export const dynamic = 'force-dynamic';
-
-// Plain `Response`, not `NextResponse`: this returns a status and a line of
-// text, and nothing here needs Next's cookie or rewrite helpers.
-function deny(reason: string): Response {
-  // Caddy treats any non-2xx as "do not issue". The body is for our logs.
-  return new Response(reason, { status: 403 });
-}
-
-export async function GET(request: Request): Promise<Response> {
-  const domain = new URL(request.url).searchParams.get('domain');
-  if (!domain) {
-    return deny('missing domain');
-  }
-
-  const host = normaliseHost(domain);
-  if (!host || host.length > 253) {
-    return deny('malformed domain');
-  }
-
-  // Reserved names are refused before a query runs. They have their own Caddy
-  // blocks and their own certificates; issuing a second one here would at best
-  // be waste and at worst hand `security.orangecat.ch` to whoever asked.
-  const suffix = `.${SITES_BASE_DOMAIN}`;
-  if (host.endsWith(suffix)) {
-    const label = host.slice(0, -suffix.length);
-    if (!label || label.includes('.') || isReservedSubdomain(label)) {
-      return deny('reserved or malformed subdomain');
-    }
-  }
-
-  try {
-    const resolved = await siteByHost(host);
-    if (!resolved) {
-      return deny('no published site answers on this host');
-    }
-    return new Response('ok', { status: 200 });
-  } catch (error) {
-    // Fail CLOSED. A database blip must not become an open certificate mint.
-    logger.warn('TLS check failed', { host, error: String(error) }, 'Sites');
-    return deny('lookup failed');
-  }
-}
diff --git a/src/app/layout.tsx b/src/app/layout.tsx
index 35c3fc384..0850a0ffd 100644
--- a/src/app/layout.tsx
+++ b/src/app/layout.tsx
@@ -42,8 +42,6 @@ const ibmPlexMono = localFont({
 });
 import './globals.css';
 import Script from 'next/script';
-import { headers } from 'next/headers';
-import { isHostedSiteRequest } from '@/config/routes';
 import { AuthProvider } from '@/components/providers/AuthProvider';
 import { QueryProvider } from '@/components/providers/QueryProvider';
 import { ThemeProvider } from '@/components/providers/ThemeProvider';
@@ -105,25 +103,8 @@ export const metadata: Metadata = {
   },
 };
 
-export default async function RootLayout({ children }: { children: React.ReactNode }) {
-  /**
-   * Is this request rendering somebody else's website?
-   *
-   * Decided ONCE, here, on the server, because four separate things below are
-   * OrangeCat's and must not appear on a customer's domain: the app shell, our
-   * Organization schema, our analytics, and the FleetCrown feedback widget.
-   *
-   * It cannot be decided from the path in a client component. A hosted site is
-   * served by a REWRITE — the visitor's URL bar keeps saying
-   * substrata.orangecat.ch, so `usePathname()` returns "/" and every one of
-   * those four leaked onto the customer's site. Middleware therefore forwards
-   * `x-hosted-site` on the request headers, and the path form is covered by the
-   * same `getRouteSurface` SSOT the rest of the app uses.
-   */
-  const requestHeaders = await headers();
-  const isHostedSite = isHostedSiteRequest(name => requestHeaders.get(name));
-
-  const gaId = isHostedSite ? undefined : process.env.NEXT_PUBLIC_GA_MEASUREMENT_ID;
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  const gaId = process.env.NEXT_PUBLIC_GA_MEASUREMENT_ID;
   // Cache-only, never a network wait: rendering a page must not depend on a
   // third party answering. Whatever we last knew gets handed to the browser so
   // the first paint already speaks the visitor's currency.
@@ -136,42 +117,39 @@ export default async function RootLayout({ children }: { children: React.ReactNo
       suppressHydrationWarning
     >
       <body className="antialiased">
-        {/* Structured data: Organization + WebSite. Never on a hosted site —
-            it would tell every crawler that the customer's domain IS OrangeCat. */}
-        {!isHostedSite && (
-          <script
-            type="application/ld+json"
-            dangerouslySetInnerHTML={{
-              __html: JSON.stringify({
-                '@context': 'https://schema.org',
-                '@graph': [
-                  {
-                    '@type': 'Organization',
-                    name: APP_NAME,
-                    url: SITE_URL,
-                    logo: `${SITE_URL}/images/orange-cat-logo.svg`,
-                    description:
-                      'Fund, lend, invest, trade, and govern with any identity, settled in Bitcoin.',
-                    sameAs: [],
-                  },
-                  {
-                    '@type': 'WebSite',
-                    name: APP_NAME,
-                    url: SITE_URL,
-                    potentialAction: {
-                      '@type': 'SearchAction',
-                      target: {
-                        '@type': 'EntryPoint',
-                        urlTemplate: `${SITE_URL}/discover?q={search_term_string}`,
-                      },
-                      'query-input': 'required name=search_term_string',
+        {/* Structured data: Organization + WebSite */}
+        <script
+          type="application/ld+json"
+          dangerouslySetInnerHTML={{
+            __html: JSON.stringify({
+              '@context': 'https://schema.org',
+              '@graph': [
+                {
+                  '@type': 'Organization',
+                  name: APP_NAME,
+                  url: SITE_URL,
+                  logo: `${SITE_URL}/images/orange-cat-logo.svg`,
+                  description:
+                    'Fund, lend, invest, trade, and govern with any identity, settled in Bitcoin.',
+                  sameAs: [],
+                },
+                {
+                  '@type': 'WebSite',
+                  name: APP_NAME,
+                  url: SITE_URL,
+                  potentialAction: {
+                    '@type': 'SearchAction',
+                    target: {
+                      '@type': 'EntryPoint',
+                      urlTemplate: `${SITE_URL}/discover?q={search_term_string}`,
                     },
+                    'query-input': 'required name=search_term_string',
                   },
-                ],
-              }),
-            }}
-          />
-        )}
+                },
+              ],
+            }),
+          }}
+        />
         <a
           href="#main-content"
           className="sr-only focus:not-sr-only focus:fixed focus:top-2 focus:left-2 focus:z-[9999] focus:px-4 focus:py-2 focus:bg-fg-primary focus:text-fg-inverted focus:rounded-lg focus:outline-none"
@@ -191,7 +169,7 @@ export default async function RootLayout({ children }: { children: React.ReactNo
                     inner <Suspense> around the slow part, which is what the
                     Next.js docs recommend so the existence check still runs
                     before the response commits). Enforced by audit-routes. */}
-                <AppShell forceSurface={isHostedSite ? 'site' : undefined}>{children}</AppShell>
+                <AppShell>{children}</AppShell>
               </AuthProvider>
             </QueryProvider>
           </CurrencyRatesProvider>
@@ -205,7 +183,7 @@ export default async function RootLayout({ children }: { children: React.ReactNo
             polls) can keep the browser from going idle, so lazyOnload left the
             FAB unmounted for minutes — a feedback button that isn't there when
             something breaks is the one time it's needed. */}
-        {!isHostedSite && process.env.FLEETCROWN_FEEDBACK_TOKEN && (
+        {process.env.FLEETCROWN_FEEDBACK_TOKEN && (
           <Script
             src="https://fleetcrown.orangecat.ch/widget.js"
             strategy="afterInteractive"
diff --git a/src/app/sites/[site]/[[...path]]/page.tsx b/src/app/sites/[site]/[[...path]]/page.tsx
deleted file mode 100644
index 61d485ea9..000000000
--- a/src/app/sites/[site]/[[...path]]/page.tsx
+++ /dev/null
@@ -1,140 +0,0 @@
-/**
- * The hosted-site renderer — one route for every page of every hosted site.
- *
- * A visitor on substrata.orangecat.ch never sees this path: middleware rewrote
- * their request here while their URL bar kept saying substrata.orangecat.ch.
- * The path form stays reachable on any host so a site can be previewed before
- * its DNS exists, which is also how the tests and screenshots reach it.
- *
- * A catch-all rather than one file per page, because the pages are data
- * (src/config/site-content.ts). Adding a page to a hosted site is adding an
- * entry to that site's builder — never a new route file. Adding a WHOLE SITE is
- * a row in the database and no code at all.
- *
- * This is also the layer that is allowed to ask whether a site exists. The
- * middleware matched a shape; `siteBySlug` is what turns that into an answer,
- * and it reads as an anonymous visitor so RLS decides "published", not this file.
- */
-
-import React from 'react';
-import { notFound } from 'next/navigation';
-import type { Metadata } from 'next';
-import { ALWAYS_PUBLISHED, HOSTED_SITE_FALLBACKS, siteCanonicalHost } from '@/config/hosted-site';
-import {
-  pageRendersOwnHeader,
-  siteChromeFor,
-  siteNavItems,
-  sitePageAt,
-  sitePagesFor,
-} from '@/config/site-content';
-import { siteBySlug, type ResolvedSite } from '@/services/sites/registry';
-import { SiteFooter, SiteMasthead } from '@/components/sites/SiteChrome';
-import { SiteSections } from '@/components/sites/SiteSections';
-
-interface RouteParams {
-  params: Promise<{ site: string; path?: string[] }>;
-}
-
-/**
- * Pre-render the sites whose content lives in the repository.
- *
- * Only those: a database-backed site cannot be enumerated at build time without
- * making the build depend on a reachable database, and a customer who publishes
- * at 14:00 should not wait for a deploy. Those render on first request and are
- * held by `siteBySlug`'s cache, which is what `dynamicParams` allows.
- */
-export function generateStaticParams(): Array<{ site: string; path?: string[] }> {
-  return ALWAYS_PUBLISHED.flatMap(slug => {
-    const site = HOSTED_SITE_FALLBACKS[slug];
-    return site
-      ? sitePagesFor(site, null).map(page => ({
-          site: slug,
-          path: page.path ? [page.path] : [],
-        }))
-      : [];
-  });
-}
-
-async function resolve(slug: string, path?: string[]) {
-  const resolved: ResolvedSite | null = await siteBySlug(slug);
-  if (!resolved) {
-    return null;
-  }
-  const pages = sitePagesFor(resolved.site, resolved.profile);
-  const currentPath = (path ?? []).join('/');
-  const page = sitePageAt(pages, currentPath);
-  const chrome = siteChromeFor(resolved.site, resolved.profile);
-  if (!page || !chrome) {
-    return null;
-  }
-  return { site: resolved.site, pages, page, chrome, currentPath };
-}
-
-export async function generateMetadata({ params }: RouteParams): Promise<Metadata> {
-  const { site: slug, path } = await params;
-  const resolved = await resolve(slug, path);
-  if (!resolved) {
-    return {};
-  }
-  const { site, page } = resolved;
-  const title = page.path ? `${page.title} — ${site.title}` : site.title;
-  return {
-    // `absolute` breaks the root layout's "%s | OrangeCat" template. On
-    // substrata.orangecat.ch the browser tab has no business advertising the
-    // host — the visitor is on Substrata's site, not on ours.
-    title: { absolute: title },
-    description: page.intro,
-    openGraph: {
-      title,
-      description: page.intro,
-      siteName: site.title,
-      url: `https://${siteCanonicalHost(site)}${page.path ? `/${page.path}` : ''}`,
-    },
-  };
-}
-
-export default async function HostedSitePage({ params }: RouteParams) {
-  const { site: slug, path } = await params;
-  const resolved = await resolve(slug, path);
-
-  if (!resolved) {
-    notFound();
-  }
-
-  const { site, pages, page, chrome, currentPath } = resolved;
-
-  return (
-    <div className="flex min-h-screen flex-col bg-surface-page">
-      <SiteMasthead
-        site={site}
-        chrome={chrome}
-        navItems={siteNavItems(pages)}
-        currentPath={currentPath}
-      />
-
-      <main className="flex-1">
-        <div className="mx-auto max-w-shell px-4 py-14 sm:px-6 sm:py-20 lg:px-8">
-          {/* A page either opens with its own hero or gets the standard title
-              block — never both. The rule lives in site-content.ts so it holds
-              for every hosted site, not just this one. */}
-          {!pageRendersOwnHeader(page) && (
-            <header className="mb-14 border-b border-subtle pb-10">
-              <h1 className="font-heading text-3xl font-semibold tracking-display text-fg-primary sm:text-5xl">
-                {page.title}
-              </h1>
-              {page.intro && (
-                <p className="mt-4 max-w-prose text-lg leading-relaxed text-fg-secondary">
-                  {page.intro}
-                </p>
-              )}
-            </header>
-          )}
-
-          <SiteSections sections={page.sections} />
-        </div>
-      </main>
-
-      <SiteFooter site={site} chrome={chrome} />
-    </div>
-  );
-}
diff --git a/src/components/layout/AppShell.tsx b/src/components/layout/AppShell.tsx
index 58900c074..4e50127b8 100644
--- a/src/components/layout/AppShell.tsx
+++ b/src/components/layout/AppShell.tsx
@@ -3,7 +3,7 @@
 import { ReactNode, useEffect, useRef, useState } from 'react';
 import { usePathname } from 'next/navigation';
 import { useAuth } from '@/hooks/useAuth';
-import { getRouteChrome, getRouteSurface, isCatHubPath, type RouteSurface } from '@/config/routes';
+import { getRouteChrome, getRouteSurface, isCatHubPath } from '@/config/routes';
 import GlobalCatLauncher from '@/components/ai-chat/GlobalCatLauncher';
 import { STORAGE_KEYS } from '@/config/storage-keys';
 import { Header } from './Header';
@@ -16,14 +16,6 @@ import { MessageSyncManagerInitializer } from '@/components/MessageSyncManagerIn
 
 interface AppShellProps {
   children: ReactNode;
-  /**
-   * Override the surface derived from the browser path.
-   *
-   * Set by the root layout for hosted sites only, where a rewrite means the
-   * path a client component can see is not the path being rendered. Leave it
-   * undefined everywhere else.
-   */
-  forceSurface?: RouteSurface;
 }
 
 /**
@@ -40,27 +32,17 @@ interface AppShellProps {
  * Last Modified: 2025-12-17
  * Last Modified Summary: Fixed hydration race condition - wait for auth hydration before rendering sidebar
  */
-export function AppShell({ children, forceSurface }: AppShellProps) {
+export function AppShell({ children }: AppShellProps) {
   const pathname = usePathname();
   const { user, profile, hydrated, isLoading } = useAuth();
   // SSOT: every shell-related visibility decision derives from
   // getRouteSurface (src/config/routes.ts). Do not branch on pathname here.
-  //
-  // `forceSurface` exists for exactly one case, and it is not a style override:
-  // a hosted site is served by a REWRITE, so the browser path stays "/" and
-  // `usePathname()` cannot see `/sites/<slug>`. The server knows from the
-  // request headers and says so. Without it, OrangeCat's header and sidebar
-  // render on a customer's own domain.
-  const surface = forceSurface ?? getRouteSurface(pathname ?? '/');
+  const surface = getRouteSurface(pathname ?? '/');
   const isAppSurface = surface === 'app';
   // Auth pages render their own minimal chrome — global header + nav +
   // search are noise on a sign-in screen and dilute the focus from the
   // form. Stripe/Linear/Notion all do this.
   const isAuthSurface = surface === 'auth';
-  // A hosted site is a different company's website that happens to run here.
-  // It brings its own header and footer; ours would be someone else's branding
-  // on their domain.
-  const isSiteSurface = surface === 'site';
 
   // Wait for auth hydration to prevent sidebar flash
   // During hydration, user is null even if authenticated - this prevents the sidebar from flickering
@@ -78,7 +60,7 @@ export function AppShell({ children, forceSurface }: AppShellProps) {
     getFilteredSections,
   } = useNavigation(sidebarSections);
 
-  const routeChrome = getRouteChrome(forceSurface === 'site' ? '/sites' : (pathname ?? '/'));
+  const routeChrome = getRouteChrome(pathname ?? '/');
   // Mirrors MobileBottomNav visibility — when the bottom nav renders, reserve
   // space below the main scroll area so its content isn't covered.
   const showsMobileBottomNav = isAppSurface && !routeChrome.hideMobileBottomNav;
@@ -126,17 +108,6 @@ export function AppShell({ children, forceSurface }: AppShellProps) {
   // Get filtered sections based on auth state
   const filteredSections = getFilteredSections();
 
-  // Hosted site: no OrangeCat chrome whatsoever, and no message-sync manager
-  // either — a visitor to substrata.orangecat.ch has no OrangeCat session and
-  // no reason for one. The site's own layout supplies everything.
-  if (isSiteSurface) {
-    return (
-      <div className="min-h-screen bg-surface-page">
-        <main id="main-content">{children}</main>
-      </div>
-    );
-  }
-
   // Auth surface: no global chrome at all. The /auth page is its own
   // self-contained universe with its own minimal back-link.
   if (isAuthSurface) {
diff --git a/src/components/sites/SiteChrome.tsx b/src/components/sites/SiteChrome.tsx
deleted file mode 100644
index 8fd3e8984..000000000
--- a/src/components/sites/SiteChrome.tsx
+++ /dev/null
@@ -1,76 +0,0 @@
-/**
- * Masthead and footer for a hosted site.
- *
- * The visitor is on the site owner's domain, so the chrome is theirs: their
- * name, their nav, their footer. The only OrangeCat mark is one quiet line at
- * the bottom saying where this runs and linking to the profile behind it —
- * the honest disclosure a hosted site owes, and the only distribution
- * OrangeCat takes for hosting it.
- *
- * Design notes: the masthead is a rule, not a bar. It sticks so the section
- * nav stays reachable on a long research page, but it carries no shadow, no
- * fill beyond the page's own surface, and no logo — a hairline and a wordmark
- * are enough, and anything heavier competes with the document.
- */
-
-import React from 'react';
-import Link from 'next/link';
-import { ROUTES } from '@/config/routes';
-import { siteHref } from '@/config/sites';
-import { siteCanonicalHost, type HostedSite } from '@/config/hosted-site';
-import type { SiteChrome as SiteChromeSpec, SiteNavItem } from '@/config/site-content';
-import { SiteNav } from './SiteNav';
-
-interface Props {
-  site: HostedSite;
-  chrome: SiteChromeSpec;
-  navItems: SiteNavItem[];
-  currentPath: string;
-}
-
-export function SiteMasthead({ site, chrome, navItems, currentPath }: Props) {
-  return (
-    <header className="sticky top-0 z-30 border-b border-subtle bg-surface-page/85 backdrop-blur">
-      <div className="mx-auto max-w-shell px-4 sm:px-6 lg:px-8">
-        {/* One row at every width. Wrapping the nav onto a second line made a
-            sticky masthead eat a third of a phone screen, so on narrow
-            viewports the nav scrolls sideways instead. */}
-        <div className="flex items-center justify-between gap-6 py-4">
-          <Link href={siteHref(site.slug)} className="shrink-0">
-            <span className="font-heading text-lg font-semibold tracking-display text-fg-primary">
-              {chrome.name}
-            </span>
-          </Link>
-
-          <SiteNav slug={site.slug} items={navItems} currentPath={currentPath} />
-        </div>
-      </div>
-    </header>
-  );
-}
-
-export function SiteFooter({ site, chrome }: { site: HostedSite; chrome: SiteChromeSpec }) {
-  return (
-    <footer className="mt-24 border-t border-subtle">
-      <div className="mx-auto max-w-shell px-4 py-12 sm:px-6 lg:px-8">
-        <p className="max-w-prose text-sm leading-relaxed text-fg-secondary">{chrome.footerNote}</p>
-        <div className="mt-8 flex flex-col gap-2 border-t border-subtle pt-6 font-mono text-xs uppercase tracking-caps text-fg-muted sm:flex-row sm:items-center sm:justify-between">
-          <span>{siteCanonicalHost(site)}</span>
-          <span className="normal-case tracking-normal">
-            Hosted on{' '}
-            <Link href={ROUTES.HOME} className="underline underline-offset-2 hover:text-fg-primary">
-              OrangeCat
-            </Link>
-            {' · '}
-            <Link
-              href={`/groups/${site.profile.slug}`}
-              className="underline underline-offset-2 hover:text-fg-primary"
-            >
-              profile
-            </Link>
-          </span>
-        </div>
-      </div>
-    </footer>
-  );
-}
diff --git a/src/components/sites/SiteNav.tsx b/src/components/sites/SiteNav.tsx
deleted file mode 100644
index 1e98a0c40..000000000
--- a/src/components/sites/SiteNav.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-'use client';
-
-/**
- * The masthead's section nav.
- *
- * A client component for one reason: with eight sections the nav scrolls
- * sideways on a phone, and the active item is frequently off-screen at rest —
- * so a visitor arriving on a deep page sees a row of links with no indication
- * that any of them is the page they are on. Scrolling it into view on mount
- * fixes that, and there is no CSS-only way to do it.
- *
- * Everything else about the masthead stays server-rendered.
- */
-
-import React, { useEffect, useRef } from 'react';
-import Link from 'next/link';
-import { siteHref } from '@/config/sites';
-import type { SiteNavItem } from '@/config/site-content';
-
-interface Props {
-  slug: string;
-  /**
-   * Deliberately NOT `SitePage[]`. See `SiteNavItem` — everything passed to a
-   * client component is serialised into the payload of every page it renders on.
-   */
-  items: SiteNavItem[];
-  currentPath: string;
-}
-
-export function SiteNav({ slug, items, currentPath }: Props) {
-  const navRef = useRef<HTMLElement>(null);
-
-  useEffect(() => {
-    const active = navRef.current?.querySelector('[aria-current="page"]');
-    // `nearest` keeps the page itself still — `center` would scroll the whole
-    // document to the top of the masthead on every navigation.
-    active?.scrollIntoView({ inline: 'nearest', block: 'nearest' });
-  }, [currentPath]);
-
-  return (
-    <nav
-      ref={navRef}
-      aria-label="Sections"
-      className="scrollbar-hide -mx-1 flex flex-nowrap items-center gap-x-1 overflow-x-auto"
-    >
-      {items.map(item => {
-        const isCurrent = item.path === currentPath;
-        return (
-          <Link
-            key={item.path || 'home'}
-            href={siteHref(slug, item.path)}
-            aria-current={isCurrent ? 'page' : undefined}
-            className={[
-              'shrink-0 rounded px-2 py-1 font-mono text-xs uppercase tracking-caps transition-colors',
-              isCurrent
-                ? 'text-fg-primary underline decoration-accent-warm decoration-2 underline-offset-8'
-                : 'text-fg-tertiary hover:text-fg-primary',
-            ].join(' ')}
-          >
-            {item.label}
-          </Link>
-        );
-      })}
-    </nav>
-  );
-}
diff --git a/src/components/sites/SiteSections.tsx b/src/components/sites/SiteSections.tsx
deleted file mode 100644
index d41681014..000000000
--- a/src/components/sites/SiteSections.tsx
+++ /dev/null
@@ -1,57 +0,0 @@
-/**
- * Dispatches a page's sections to their renderers, and numbers them.
- *
- * One renderer for every hosted site is the point: it is what stops fifty
- * customer websites becoming fifty stylesheets, and it is why a site inherits
- * typography, dark mode and reading measure without its owner thinking about
- * any of them. Section shapes are the closed set in `src/config/site-content.ts`.
- *
- * Numbering counts only sections that carry a heading, so an unheaded lead
- * paragraph or a bare table does not consume a number and leave a gap in the
- * sequence a reader can see.
- */
-
-import React from 'react';
-import type { SiteSection } from '@/config/site-content';
-import { HeroSection } from './sections/HeroSection';
-import { MeterSection, StatsSection } from './sections/FigureSections';
-import { CardsSection, DefinitionsSection, ProseSection } from './sections/ProseSections';
-import { IndexSection, TableSection } from './sections/DataSections';
-
-/** True when a section shows a heading, and therefore takes the next number. */
-function isNumbered(section: SiteSection): boolean {
-  return section.kind !== 'hero' && section.kind !== 'table' && Boolean(section.heading);
-}
-
-export function SiteSections({ sections }: { sections: SiteSection[] }) {
-  let counter = 0;
-
-  return (
-    <div className="space-y-16">
-      {sections.map((section, key) => {
-        const index = isNumbered(section) ? ++counter : undefined;
-
-        switch (section.kind) {
-          case 'hero':
-            return <HeroSection key={key} section={section} />;
-          case 'prose':
-            return <ProseSection key={key} section={section} index={index} />;
-          case 'stats':
-            return <StatsSection key={key} section={section} index={index} />;
-          case 'meter':
-            return <MeterSection key={key} section={section} index={index} />;
-          case 'cards':
-            return <CardsSection key={key} section={section} index={index} />;
-          case 'definitions':
-            return <DefinitionsSection key={key} section={section} index={index} />;
-          case 'index':
-            return <IndexSection key={key} section={section} index={index} />;
-          case 'table':
-            return <TableSection key={key} section={section} />;
-          default:
-            return null;
-        }
-      })}
-    </div>
-  );
-}
diff --git a/src/components/sites/sections/DataSections.tsx b/src/components/sites/sections/DataSections.tsx
deleted file mode 100644
index 27ab76873..000000000
--- a/src/components/sites/sections/DataSections.tsx
+++ /dev/null
@@ -1,141 +0,0 @@
-/**
- * Sections that present the research itself: the jump index and the tables.
- *
- * These are the instrument. Codes, counts and statuses are set in mono so a
- * reader can scan a column; the status cell carries a dot because "Unverified
- * lead" and "Sourced" are the two words on this site a reader must never
- * skim past.
- */
-
-import React from 'react';
-import { Blurb, SectionBody, SectionHeading } from './Primitives';
-import type { SiteSection } from '@/config/site-content';
-
-/** Status keyword → dot colour. Anything unrecognised stays neutral. */
-const STATUS_DOT: Record<string, string> = {
-  sourced: 'bg-status-positive',
-  'unverified lead': 'bg-status-warning',
-  taken: 'bg-fg-muted',
-  done: 'bg-status-positive',
-  'in progress': 'bg-status-warning',
-  'not started': 'bg-fg-muted',
-  // Scarcity grades. Red reads as "constrained", green as "no constraint here" —
-  // the opposite of a risk dashboard, and correct for this page.
-  chokepoint: 'bg-status-negative',
-  concentrated: 'bg-status-warning',
-  competitive: 'bg-status-positive',
-};
-
-export function IndexSection({
-  section,
-  index,
-}: {
-  section: Extract<SiteSection, { kind: 'index' }>;
-  index?: number;
-}) {
-  return (
-    <section>
-      {section.heading && <SectionHeading index={index}>{section.heading}</SectionHeading>}
-      {section.blurb && <div className="sm:pl-10">{<Blurb>{section.blurb}</Blurb>}</div>}
-      <SectionBody>
-        <ol className="divide-y divide-subtle border-y border-subtle">
-          {section.entries.map((entry, i) => (
-            <li key={entry.anchor}>
-              <a
-                href={`#${entry.anchor}`}
-                className="group flex items-baseline gap-4 py-2.5 transition-colors hover:text-fg-primary"
-              >
-                <span className="font-mono text-xs tabular-nums text-fg-muted">
-                  {String(i + 1).padStart(2, '0')}
-                </span>
-                <span className="flex-1 text-sm text-fg-secondary group-hover:text-fg-primary">
-                  {entry.label}
-                </span>
-                {entry.meta && (
-                  <span className="font-mono text-xs tabular-nums text-fg-muted">{entry.meta}</span>
-                )}
-              </a>
-            </li>
-          ))}
-        </ol>
-      </SectionBody>
-    </section>
-  );
-}
-
-export function TableSection({ section }: { section: Extract<SiteSection, { kind: 'table' }> }) {
-  const mono = new Set(section.monoColumns ?? []);
-
-  // Fixed layout with declared widths, because this page stacks fifteen tables
-  // with the same four columns. Auto layout sizes each one to its own longest
-  // cell, so "Malaysia Smelting Corporation" in one table shifts every column
-  // out of line with the table above it. Aligned columns are what make the set
-  // read as one instrument rather than fifteen separate exhibits. The first
-  // column carries the names and takes a third; the rest divide the remainder.
-  const restWidth = section.columns.length > 1 ? 66 / (section.columns.length - 1) : 100;
-
-  return (
-    <section id={section.anchor} className="scroll-mt-24">
-      {section.heading && (
-        <h3 className="font-heading text-lg font-semibold text-fg-primary">{section.heading}</h3>
-      )}
-      {section.blurb && (
-        <p className="mt-2 max-w-prose text-sm leading-relaxed text-fg-secondary">
-          {section.blurb}
-        </p>
-      )}
-      <div className="mt-4 overflow-x-auto">
-        <table className="w-full min-w-[38rem] table-fixed border-collapse text-left text-sm">
-          <colgroup>
-            {section.columns.map((column, i) => (
-              <col key={column} style={{ width: `${i === 0 ? 34 : restWidth}%` }} />
-            ))}
-          </colgroup>
-          <thead>
-            <tr className="border-y border-subtle">
-              {section.columns.map(column => (
-                <th
-                  key={column}
-                  scope="col"
-                  className="py-2 pr-6 font-mono text-xs font-medium uppercase tracking-caps text-fg-tertiary"
-                >
-                  {column}
-                </th>
-              ))}
-            </tr>
-          </thead>
-          <tbody>
-            {section.rows.map((row, rowIndex) => (
-              <tr key={rowIndex} className="border-b border-subtle">
-                {row.map((cell, cellIndex) => {
-                  const isStatus = cellIndex === section.statusColumn;
-                  const dot = isStatus ? STATUS_DOT[cell.toLowerCase()] : undefined;
-                  return (
-                    <td
-                      key={cellIndex}
-                      className={[
-                        'py-2.5 pr-6 align-baseline',
-                        cellIndex === 0 ? 'font-medium text-fg-primary' : 'text-fg-secondary',
-                        mono.has(cellIndex) || isStatus ? 'font-mono text-xs' : '',
-                      ].join(' ')}
-                    >
-                      {dot ? (
-                        <span className="inline-flex items-center gap-2">
-                          <span className={`h-1.5 w-1.5 shrink-0 rounded-full ${dot}`} />
-                          {cell}
-                        </span>
-                      ) : (
-                        cell
-                      )}
-                    </td>
-                  );
-                })}
-              </tr>
-            ))}
-          </tbody>
-        </table>
-      </div>
-      {section.note && <p className="mt-2 text-xs text-fg-muted">{section.note}</p>}
-    </section>
-  );
-}
diff --git a/src/components/sites/sections/FigureSections.tsx b/src/components/sites/sections/FigureSections.tsx
deleted file mode 100644
index 0519bf9c3..000000000
--- a/src/components/sites/sections/FigureSections.tsx
+++ /dev/null
@@ -1,87 +0,0 @@
-/**
- * Sections that render a number.
- *
- * Both use tabular mono figures so digits line up column to column — the
- * difference between a page that looks measured and one that looks typed.
- */
-
-import React from 'react';
-import { SectionBody, SectionHeading } from './Primitives';
-import type { SiteSection } from '@/config/site-content';
-
-export function StatsSection({
-  section,
-  index,
-}: {
-  section: Extract<SiteSection, { kind: 'stats' }>;
-  index?: number;
-}) {
-  return (
-    <section>
-      {section.heading && <SectionHeading index={index}>{section.heading}</SectionHeading>}
-      <dl className="mt-6 grid grid-cols-1 divide-y divide-subtle border-y border-subtle sm:grid-cols-3 sm:divide-x sm:divide-y-0">
-        {section.stats.map(stat => (
-          <div key={stat.label} className="px-0 py-6 sm:px-6 sm:first:pl-0">
-            <dt className="font-mono text-xs uppercase tracking-caps text-fg-tertiary">
-              {stat.label}
-            </dt>
-            <dd className="mt-3 font-heading text-4xl font-medium tabular-nums text-fg-primary">
-              {stat.value}
-            </dd>
-            {stat.note && <p className="mt-2 text-sm leading-relaxed text-fg-muted">{stat.note}</p>}
-          </div>
-        ))}
-      </dl>
-    </section>
-  );
-}
-
-/**
- * One number, drawn.
- *
- * The bar is intentionally literal: when nothing is sourced it renders empty,
- * because an empty bar is the honest picture of an unfinished research phase.
- * Anything that dressed a 0% up as progress would be the page lying.
- */
-export function MeterSection({
-  section,
-  index,
-}: {
-  section: Extract<SiteSection, { kind: 'meter' }>;
-  index?: number;
-}) {
-  const percent = section.of > 0 ? Math.round((section.value / section.of) * 100) : 0;
-
-  return (
-    <section>
-      {section.heading && <SectionHeading index={index}>{section.heading}</SectionHeading>}
-      <SectionBody>
-        <div className="flex items-baseline justify-between gap-6">
-          <span className="font-mono text-xs uppercase tracking-caps text-fg-tertiary">
-            {section.label}
-          </span>
-          <span className="font-mono text-sm tabular-nums text-fg-secondary">{percent}%</span>
-        </div>
-        <p className="mt-3 font-heading text-4xl font-medium tabular-nums text-fg-primary">
-          {section.value}
-          <span className="text-fg-muted"> / {section.of}</span>
-        </p>
-        <div
-          className="mt-4 h-1.5 w-full overflow-hidden rounded-full bg-surface-raised"
-          role="progressbar"
-          aria-valuenow={section.value}
-          aria-valuemin={0}
-          aria-valuemax={section.of}
-          aria-label={section.label}
-        >
-          <div className="h-full rounded-full bg-accent-warm" style={{ width: `${percent}%` }} />
-        </div>
-        {section.caption && (
-          <p className="mt-3 max-w-prose text-sm leading-relaxed text-fg-muted">
-            {section.caption}
-          </p>
-        )}
-      </SectionBody>
-    </section>
-  );
-}
diff --git a/src/components/sites/sections/HeroSection.tsx b/src/components/sites/sections/HeroSection.tsx
deleted file mode 100644
index 591507171..000000000
--- a/src/components/sites/sections/HeroSection.tsx
+++ /dev/null
@@ -1,32 +0,0 @@
-/**
- * The opening of a page that has one.
- *
- * An eyebrow, one display statement, and the lead — the shape a serious
- * publication uses, and deliberately not a marketing hero: no gradient, no
- * illustration, no button. The claim is the design.
- */
-
-import React from 'react';
-import type { SiteSection } from '@/config/site-content';
-
-export function HeroSection({ section }: { section: Extract<SiteSection, { kind: 'hero' }> }) {
-  return (
-    <section className="border-b border-subtle pb-12">
-      {section.eyebrow && (
-        <p className="font-mono text-xs uppercase tracking-caps text-fg-tertiary">
-          {section.eyebrow}
-        </p>
-      )}
-      <h1 className="mt-5 max-w-4xl font-heading text-4xl font-semibold leading-tight tracking-display text-fg-primary sm:text-5xl lg:text-6xl">
-        {section.statement}
-      </h1>
-      <div className="mt-7 max-w-prose space-y-4">
-        {section.lead.map((paragraph, index) => (
-          <p key={index} className="text-lg leading-relaxed text-fg-secondary">
-            {paragraph}
-          </p>
-        ))}
-      </div>
-    </section>
-  );
-}
diff --git a/src/components/sites/sections/Primitives.tsx b/src/components/sites/sections/Primitives.tsx
deleted file mode 100644
index c1be1a92b..000000000
--- a/src/components/sites/sections/Primitives.tsx
+++ /dev/null
@@ -1,46 +0,0 @@
-/**
- * Shared type primitives for hosted-site sections.
- *
- * The whole visual system of a hosted site lives in these three components plus
- * the section files beside them. Typography does the work: Space Grotesk for
- * display, IBM Plex Mono for anything a reader might compare (codes, counts,
- * prices, statuses), Inter for prose at a reading measure. Colour is reserved —
- * monochrome surfaces, the warm accent only for the current position and one
- * meter fill, status colours only on actual status.
- */
-
-import React from 'react';
-
-/**
- * A numbered section heading. Research houses number their sections; it makes a
- * long page navigable and signals that the document has a structure rather than
- * being a stack of blocks.
- */
-export function SectionHeading({ index, children }: { index?: number; children: React.ReactNode }) {
-  return (
-    <div className="flex items-baseline gap-4">
-      {index !== undefined && (
-        <span aria-hidden className="font-mono text-xs tabular-nums text-fg-muted">
-          {String(index).padStart(2, '0')}
-        </span>
-      )}
-      <h2 className="font-heading text-2xl font-semibold tracking-display text-fg-primary sm:text-3xl">
-        {children}
-      </h2>
-    </div>
-  );
-}
-
-/** Standfirst under a heading. Kept at measure — it is prose, not layout. */
-export function Blurb({ children }: { children: React.ReactNode }) {
-  return <p className="mt-3 max-w-prose text-base leading-relaxed text-fg-secondary">{children}</p>;
-}
-
-/**
- * Indents a section's body to sit under the heading text rather than under its
- * number. Small thing; it is what makes the numbering read as a margin note
- * instead of a bullet.
- */
-export function SectionBody({ children }: { children: React.ReactNode }) {
-  return <div className="mt-6 sm:pl-10">{children}</div>;
-}
diff --git a/src/components/sites/sections/ProseSections.tsx b/src/components/sites/sections/ProseSections.tsx
deleted file mode 100644
index 91156f057..000000000
--- a/src/components/sites/sections/ProseSections.tsx
+++ /dev/null
@@ -1,90 +0,0 @@
-/**
- * Sections made of words: running prose, top-ruled cards, and definitions.
- *
- * Cards are ruled rather than boxed. A grid of bordered boxes reads as a
- * product page; a grid of hairline-topped columns reads as a document, which
- * is what a research firm is publishing.
- */
-
-import React from 'react';
-import { Blurb, SectionBody, SectionHeading } from './Primitives';
-import type { SiteSection } from '@/config/site-content';
-
-export function ProseSection({
-  section,
-  index,
-}: {
-  section: Extract<SiteSection, { kind: 'prose' }>;
-  index?: number;
-}) {
-  return (
-    <section>
-      {section.heading && <SectionHeading index={index}>{section.heading}</SectionHeading>}
-      <div className={section.heading ? 'mt-6 sm:pl-10' : ''}>
-        <div className="max-w-prose space-y-4">
-          {section.paragraphs.map((paragraph, i) => (
-            <p key={i} className="text-base leading-relaxed text-fg-secondary">
-              {paragraph}
-            </p>
-          ))}
-        </div>
-      </div>
-    </section>
-  );
-}
-
-export function CardsSection({
-  section,
-  index,
-}: {
-  section: Extract<SiteSection, { kind: 'cards' }>;
-  index?: number;
-}) {
-  const columns = section.columns === 3 ? 'lg:grid-cols-3' : 'lg:grid-cols-2';
-  return (
-    <section>
-      {section.heading && <SectionHeading index={index}>{section.heading}</SectionHeading>}
-      {section.blurb && <div className="sm:pl-10">{<Blurb>{section.blurb}</Blurb>}</div>}
-      <SectionBody>
-        <div className={`grid grid-cols-1 gap-x-8 gap-y-9 sm:grid-cols-2 ${columns}`}>
-          {section.cards.map(card => (
-            <article key={card.title} className="flex h-full flex-col border-t border-strong pt-4">
-              <h3 className="font-heading text-base font-semibold text-fg-primary">{card.title}</h3>
-              <p className="mt-2 flex-1 text-sm leading-relaxed text-fg-secondary">{card.body}</p>
-              {card.meta && (
-                <p className="mt-4 font-mono text-xs leading-relaxed text-fg-muted">{card.meta}</p>
-              )}
-            </article>
-          ))}
-        </div>
-      </SectionBody>
-    </section>
-  );
-}
-
-export function DefinitionsSection({
-  section,
-  index,
-}: {
-  section: Extract<SiteSection, { kind: 'definitions' }>;
-  index?: number;
-}) {
-  return (
-    <section>
-      {section.heading && <SectionHeading index={index}>{section.heading}</SectionHeading>}
-      {section.blurb && <div className="sm:pl-10">{<Blurb>{section.blurb}</Blurb>}</div>}
-      <SectionBody>
-        <dl className="divide-y divide-subtle border-y border-subtle">
-          {section.items.map(item => (
-            <div key={item.term} className="grid grid-cols-1 gap-1 py-4 sm:grid-cols-3 sm:gap-6">
-              <dt className="text-sm font-semibold text-fg-primary">{item.term}</dt>
-              <dd className="text-sm leading-relaxed text-fg-secondary sm:col-span-2">
-                {item.detail}
-              </dd>
-            </div>
-          ))}
-        </dl>
-      </SectionBody>
-    </section>
-  );
-}
diff --git a/src/config/group-features.ts b/src/config/group-features.ts
index 499f79004..3d6a1ca35 100644
--- a/src/config/group-features.ts
+++ b/src/config/group-features.ts
@@ -58,14 +58,6 @@ export const GROUP_FEATURES = {
     dependencies: [],
   },
 
-  site: {
-    id: 'site',
-    name: 'Website',
-    description: 'Publish this group as a website at <slug>.orangecat.ch',
-    icon: 'globe',
-    dependencies: [],
-  },
-
   shared_wallet: {
     id: 'shared_wallet',
     name: 'Shared Wallet',
diff --git a/src/config/hosted-site.ts b/src/config/hosted-site.ts
deleted file mode 100644
index f8b088e94..000000000
--- a/src/config/hosted-site.ts
+++ /dev/null
@@ -1,178 +0,0 @@
-/**
- * What a hosted site IS — the record, and where it is stored.
- *
- * `sites.ts` answers "which slug is this host asking for". This file answers
- * "what is a site, and what may its owner configure". They are separate because
- * the first runs at the edge with no database and the second is a database row.
- *
- * WHERE THE ROW LIVES, AND WHY THERE IS NO NEW TABLE
- *
- * A hosted site is stored as a `group_features` row with `feature_key = 'site'`.
- * That table already exists, already has `enabled`, and already has a `config`
- * jsonb column; `group-features.ts` already says in its own header that adding
- * a feature is "adding an entry here, no code changes needed". Publishing a
- * website is a capability a group switches on, exactly like treasury or events.
- *
- * A `hosted_sites` table would have duplicated the group_id, the enabled flag,
- * the enabled_by audit column and the RLS policy that already guards them — and
- * it would have created a second answer to "what has this group turned on".
- * One source of truth for that question; a site is not special.
- *
- * The jsonb is validated HERE, at the boundary, because jsonb is `any` wearing
- * a hat. Everything downstream receives a `HostedSite` and can stop worrying.
- */
-
-import { z } from 'zod';
-import { SITE_SLUG_PATTERN, normaliseHost } from './sites';
-
-/** The `group_features.feature_key` that means "this group publishes a website". */
-export const SITE_FEATURE_KEY = 'site';
-
-/**
- * Sites whose PAGES are hand-written code rather than generated from the
- * profile. The escape hatch, deliberately narrow.
- *
- * A bespoke builder is justified when a site's content is genuinely not
- * profile-shaped — Substrata's is a research corpus with tables, meters and a
- * coverage ledger, which no generic renderer should try to guess. Everything
- * else gets the profile builder and needs no entry here, which is the point:
- * the normal path costs zero lines of code.
- *
- * A slug appearing here does NOT publish it. The database still decides that,
- * except for slugs in `ALWAYS_PUBLISHED` below.
- */
-export const BESPOKE_BUILDERS = ['substrata'] as const;
-export type BespokeBuilder = (typeof BESPOKE_BUILDERS)[number];
-
-export function isBespokeBuilder(slug: string): slug is BespokeBuilder {
-  return (BESPOKE_BUILDERS as readonly string[]).includes(slug);
-}
-
-/** A resolved hosted site. What every renderer downstream actually receives. */
-export interface HostedSite {
-  /** Path segment and registry key: `/sites/<slug>`. Equals the group slug. */
-  slug: string;
-  /** Browser tab title / OG title for the whole site. */
-  title: string;
-  /** Canonical custom domain, or null while the site lives on its subdomain. */
-  customDomain: string | null;
-  /** Extra hostnames answered but never advertised. */
-  aliasHosts: readonly string[];
-  /** The OrangeCat profile this site renders. */
-  profile: { kind: 'group'; slug: string };
-  /** Named bespoke builder, or null to render from the profile. */
-  builder: BespokeBuilder | null;
-}
-
-/**
- * Sites that render without the database having been asked, and the record each
- * one resolves to.
- *
- * Only for sites whose content is entirely in the repository. Substrata's is,
- * which is what lets it be statically generated at build time and previewed
- * before its group has ever been seeded — and what stops a build-time render of
- * a fully static site failing on a network blip. A profile-built site can never
- * be listed here: its content IS the database.
- *
- * This is the ONLY place a site is described in code. Adding an ordinary
- * customer here would be the mistake the rest of this design exists to prevent.
- */
-export const HOSTED_SITE_FALLBACKS: Readonly<Record<string, HostedSite>> = {
-  substrata: {
-    slug: 'substrata',
-    title: 'Substrata',
-    customDomain: null,
-    // substrata.ch is the intended home and appears free — .ch publishes no
-    // RDAP, so that has to be confirmed at a registrar rather than by us.
-    // substrataintel.com is the .com fallback, since substrata.com is taken.
-    aliasHosts: ['substrata.ch', 'substrataintel.com'],
-    profile: { kind: 'group', slug: 'substrata' },
-    builder: 'substrata',
-  },
-};
-
-export const ALWAYS_PUBLISHED: readonly string[] = Object.keys(HOSTED_SITE_FALLBACKS);
-
-/**
- * The owner-configurable part of a site: everything stored in
- * `group_features.config`.
- *
- * Deliberately small. Every field here is a field somebody has to understand
- * before their site works, and the answer to "what should I put here" must be
- * "nothing, it already works". Defaults come from the group profile.
- */
-export const siteConfigSchema = z.object({
-  /**
-   * Browser tab title. Defaults to the group's name — which is right often
-   * enough that most sites will never set it.
-   */
-  title: z.string().trim().min(1).max(120).optional().catch(undefined),
-  /** Custom domain once the owner points DNS here. Canonical when set. */
-  customDomain: z
-    .string()
-    .trim()
-    .toLowerCase()
-    .regex(/^[a-z0-9.-]+\.[a-z]{2,63}$/, 'must be a hostname')
-    .nullish()
-    .catch(null),
-  /**
-   * Extra hostnames this site also answers on.
-   *
-   * Wired ahead of ownership on purpose: a host only reaches this check if
-   * somebody already pointed DNS at our box, so listing a domain not yet held
-   * costs nothing and means the site works the hour it is bought, with no
-   * deploy. Never canonical.
-   */
-  aliasHosts: z.array(z.string().trim().toLowerCase()).max(20).optional().catch(undefined),
-});
-
-// Every field carries its own `.catch`, so one bad value costs THAT FIELD and
-// never the whole object. A malformed alias host must not take a customer's
-// website down — and jsonb written by a client will eventually contain one.
-
-export type SiteConfigInput = z.infer<typeof siteConfigSchema>;
-
-/**
- * Turn a group row plus its raw `group_features.config` into a `HostedSite`.
- *
- * Invalid config is DROPPED FIELD BY FIELD rather than failing the request: a
- * malformed alias host should cost that alias, not the customer's whole
- * website. What cannot be defaulted — the slug and the name — comes from the
- * group row, which the database constrains.
- */
-export function toHostedSite(
-  group: { slug: string; name: string },
-  rawConfig: unknown
-): HostedSite {
-  const parsed = siteConfigSchema.safeParse(rawConfig ?? {});
-  const config: SiteConfigInput = parsed.success ? parsed.data : {};
-
-  return {
-    slug: group.slug,
-    title: config.title?.trim() || group.name,
-    customDomain: config.customDomain ? normaliseHost(config.customDomain) : null,
-    aliasHosts: (config.aliasHosts ?? [])
-      .map(normaliseHost)
-      .filter(host => host.length > 0 && host.includes('.')),
-    profile: { kind: 'group', slug: group.slug },
-    builder: isBespokeBuilder(group.slug) ? group.slug : null,
-  };
-}
-
-/** The public address the site advertises as its own. */
-export function siteCanonicalHost(site: HostedSite): string {
-  return site.customDomain ?? `${site.slug}.orangecat.ch`;
-}
-
-/**
- * Every hostname a site answers on — used to decide whether Caddy should issue
- * a certificate for a name, so it must be exact rather than generous.
- */
-export function siteHostnames(site: HostedSite): string[] {
-  const hosts = [`${site.slug}.orangecat.ch`];
-  if (site.customDomain) {
-    hosts.push(site.customDomain);
-  }
-  hosts.push(...site.aliasHosts);
-  return hosts.filter(host => SITE_SLUG_PATTERN.test(host.split('.')[0]));
-}
diff --git a/src/config/routes.ts b/src/config/routes.ts
index 16a664678..8352e4d59 100644
--- a/src/config/routes.ts
+++ b/src/config/routes.ts
@@ -111,7 +111,7 @@ export type RouteContext = 'authenticated' | 'public' | 'universal' | 'auth' | '
 // the matching list below. Both layers exist so source-tree organisation
 // and runtime classification can never silently drift.
 
-export type RouteSurface = 'app' | 'public' | 'auth' | 'site';
+export type RouteSurface = 'app' | 'public' | 'auth';
 
 const APP_SURFACES = [
   '/dashboard',
@@ -152,14 +152,6 @@ const APP_SURFACES = [
 
 const AUTH_SURFACES = ['/auth'] as const;
 
-// A hosted site is somebody else's website that happens to run on our
-// infrastructure (see src/config/sites.ts). It carries none of OrangeCat's
-// chrome — no header, no sidebar, no footer, no marketing nav — because on
-// substrate.orangecat.ch the visitor is not on OrangeCat, they are on
-// Substrate. This is a fourth surface rather than a chrome override precisely
-// so that nothing can accidentally opt it back into the app shell.
-const SITE_SURFACES = ['/sites'] as const;
-
 /** O(n) prefix-match against a sorted list. Pathname like `/discover/123`
  *  matches `'/discover'`. Exact `/` matches only `'/'`.
  */
@@ -176,36 +168,7 @@ function matchesPrefix(pathname: string, routes: readonly string[]): boolean {
  * Single SSOT for shell-related route classification. Sidebar, mobile nav,
  * header variant, and footer must all derive from this.
  */
-/**
- * Is this request rendering a hosted site — somebody else's website?
- *
- * Takes a header lookup rather than a `Headers`, so it is callable from a
- * layout, a route handler and a test without any of them constructing a request.
- *
- * WHY A HEADER AND NOT THE PATH
- *
- * A hosted site is served by a REWRITE: the visitor stays on
- * substrata.orangecat.ch while `/sites/substrata` renders. So the path visible
- * to the browser — and to any client component calling `usePathname()` — is
- * "/", which classifies as the public marketing surface. Deciding from that
- * put OrangeCat's header, analytics, Organization schema and internal feedback
- * widget on a customer's own domain. Middleware sets `x-hosted-site` on the
- * request precisely so the server can answer this without guessing.
- *
- * `x-pathname` covers the other way in: `/sites/<slug>` requested directly,
- * which is the preview form and has no rewrite.
- */
-export function isHostedSiteRequest(getHeader: (name: string) => string | null): boolean {
-  if (getHeader('x-hosted-site')) {
-    return true;
-  }
-  return getRouteSurface(getHeader('x-pathname') ?? '/') === 'site';
-}
-
 export function getRouteSurface(pathname: string): RouteSurface {
-  if (matchesPrefix(pathname, SITE_SURFACES)) {
-    return 'site';
-  }
   if (matchesPrefix(pathname, AUTH_SURFACES)) {
     return 'auth';
   }
diff --git a/src/config/site-content.ts b/src/config/site-content.ts
deleted file mode 100644
index 7512333f2..000000000
--- a/src/config/site-content.ts
+++ /dev/null
@@ -1,192 +0,0 @@
-/**
- * Hosted-site content model.
- *
- * A hosted site is a list of pages, and a page is a list of sections drawn
- * from a small closed set of shapes. That constraint is the design: it means a
- * profile can produce a whole website out of the structured data it already
- * has, without anybody hand-writing JSX per customer, and it means every
- * hosted site inherits typography, spacing and dark mode from one renderer
- * instead of drifting into fifty bespoke stylesheets.
- *
- * Adding an ordinary site costs NO code: `site-profile.ts` renders any group
- * from the profile it already has, and the database decides which groups are
- * published. A builder is written only when a site's content is genuinely not
- * profile-shaped — Substrata's lives in `site-substrata.ts` and is built
- * entirely from the config the profile already needed, so nothing on that
- * website is authored twice either.
- *
- * Created: 2026-08-26
- */
-
-import type { BespokeBuilder, HostedSite } from './hosted-site';
-import { substrataSiteChrome, substrataSitePages } from './site-substrata';
-import { profileSiteChrome, profileSitePages, type SiteProfile } from './site-profile';
-
-// =====================================================================
-// SECTIONS
-// =====================================================================
-
-/** A stat worth putting at the top of a page. */
-export interface SiteStat {
-  label: string;
-  value: string;
-  note?: string;
-}
-
-export interface SiteCard {
-  title: string;
-  body: string;
-  /** Short trailing line — a price, a status, a jurisdiction. */
-  meta?: string;
-}
-
-export interface SiteDefinition {
-  term: string;
-  detail: string;
-}
-
-export interface SiteIndexEntry {
-  label: string;
-  /** Small trailing figure — a count, a desk name. Rendered in mono. */
-  meta?: string;
-  /** Fragment this entry jumps to; must match a section's `anchor`. */
-  anchor: string;
-}
-
-export type SiteSection =
-  /**
-   * Opens a page in place of the standard title block. An eyebrow, one display
-   * statement, and the lead. Only ever the FIRST section of a page — the shell
-   * checks for it and suppresses its own header so the two cannot both render.
-   */
-  | { kind: 'hero'; eyebrow?: string; statement: string; lead: string[] }
-  | { kind: 'prose'; heading?: string; paragraphs: string[] }
-  | { kind: 'stats'; heading?: string; stats: SiteStat[] }
-  /**
-   * One number that deserves a picture. Used for research coverage, where the
-   * gap between `value` and `of` IS the message — an empty bar is the honest
-   * rendering of "nothing sourced yet", and it should look empty.
-   */
-  | { kind: 'meter'; heading?: string; label: string; value: number; of: number; caption?: string }
-  | { kind: 'cards'; heading?: string; blurb?: string; columns?: 2 | 3; cards: SiteCard[] }
-  | { kind: 'definitions'; heading?: string; blurb?: string; items: SiteDefinition[] }
-  /** Jump list for a long page. Without one, fifteen tables is a scroll, not a document. */
-  | { kind: 'index'; heading?: string; blurb?: string; entries: SiteIndexEntry[] }
-  | {
-      kind: 'table';
-      heading?: string;
-      blurb?: string;
-      /** Fragment id, so an `index` entry can link straight here. */
-      anchor?: string;
-      columns: string[];
-      rows: string[][];
-      /** Column indices rendered in mono — codes, figures, statuses. */
-      monoColumns?: number[];
-      /** Column index whose cell text is also a status keyword to dot-colour. */
-      statusColumn?: number;
-      note?: string;
-    };
-
-// =====================================================================
-// PAGES
-// =====================================================================
-
-export interface SitePage {
-  /** '' is the home page; otherwise a single path segment, e.g. 'map'. */
-  path: string;
-  /** Label in the site's own navigation. Omit to keep a page out of the nav. */
-  navLabel?: string;
-  /** <title> and the page's h1. */
-  title: string;
-  /** One line under the h1. */
-  intro?: string;
-  sections: SiteSection[];
-}
-
-/** Everything the site chrome needs: the masthead, the nav, the footer. */
-export interface SiteChrome {
-  name: string;
-  tagline: string;
-  /** Line in the footer — who runs this and under what rules. */
-  footerNote: string;
-}
-
-// =====================================================================
-// DISPATCH
-// =====================================================================
-
-/**
- * Sites whose pages are hand-written rather than generated from the profile.
- *
- * This was a `switch` when there was one site and the comment here said it
- * should stay one until there were three. What changed is not the count — it is
- * that ordinary sites no longer appear here AT ALL. `profileSitePages` renders
- * any group from its own profile, so this map holds only the exceptions, and an
- * exception is exactly the thing that belongs in a lookup table rather than in
- * control flow. Substrata is an exception because a research corpus of tables,
- * meters and a coverage ledger is not profile-shaped.
- *
- * Keys are `BESPOKE_BUILDERS`, so a builder cannot be referenced without being
- * declared, and cannot be declared without being implemented.
- */
-const BESPOKE_SITES: Record<BespokeBuilder, { pages: () => SitePage[]; chrome: () => SiteChrome }> =
-  {
-    substrata: { pages: substrataSitePages, chrome: substrataSiteChrome },
-  };
-
-/**
- * The pages of a site.
- *
- * @param profile the group snapshot, for a site rendered from its profile.
- *   Bespoke sites ignore it; profile sites return nothing without it.
- */
-export function sitePagesFor(site: HostedSite, profile: SiteProfile | null): SitePage[] {
-  if (site.builder) {
-    return BESPOKE_SITES[site.builder].pages();
-  }
-  return profile ? profileSitePages(profile) : [];
-}
-
-export function siteChromeFor(site: HostedSite, profile: SiteProfile | null): SiteChrome | null {
-  if (site.builder) {
-    return BESPOKE_SITES[site.builder].chrome();
-  }
-  return profile ? profileSiteChrome(profile) : null;
-}
-
-/**
- * True when the page opens with its own hero, in which case the shell must not
- * also print a title block. One rule, checked in one place, so a page can never
- * render two competing headers.
- */
-export function pageRendersOwnHeader(page: SitePage): boolean {
-  return page.sections[0]?.kind === 'hero';
-}
-
-/**
- * The nav's view of a page: a label and where it goes, nothing else.
- *
- * This type exists because `SiteNav` is a client component. Every prop crossing
- * that boundary is serialised into the RSC payload of every page, so handing it
- * `SitePage[]` shipped the WHOLE SITE — all 92 producer rows, all 102
- * participants — into the HTML of all eight pages, 60 KB of it, to render eight
- * links totalling 0.33 KB. A client component takes the narrowest shape that
- * answers its question, and this is that shape.
- */
-export interface SiteNavItem {
-  path: string;
-  label: string;
-}
-
-/** Nav entries for a site, in page order. Pages without a `navLabel` are omitted. */
-export function siteNavItems(pages: SitePage[]): SiteNavItem[] {
-  return pages
-    .filter((page): page is SitePage & { navLabel: string } => Boolean(page.navLabel))
-    .map(page => ({ path: page.path, label: page.navLabel }));
-}
-
-/** @returns the page at this path within these pages, or null. */
-export function sitePageAt(pages: SitePage[], path: string): SitePage | null {
-  const normalised = path.replace(/^\/+|\/+$/g, '');
-  return pages.find(page => page.path === normalised) ?? null;
-}
diff --git a/src/config/site-profile.ts b/src/config/site-profile.ts
deleted file mode 100644
index 1f55ba344..000000000
--- a/src/config/site-profile.ts
+++ /dev/null
@@ -1,135 +0,0 @@
-/**
- * The default website: a group profile, rendered as pages.
- *
- * This file is the answer to "how many clicks to turn a project into a site".
- * The answer is one — the switch in FleetCrown that writes `feature_key='site'`
- * — and this is why: everything the site shows is something the group already
- * filled in to have a profile at all. No wizard, no page builder, no second
- * place to type the description. If the profile is good, the website is good.
- *
- * A bespoke builder (see `BESPOKE_BUILDERS`) exists for content that is not
- * profile-shaped, like Substrata's research corpus. That is the exception. This
- * is the path every ordinary customer takes, and it costs zero lines of code
- * per customer, which is the whole design.
- *
- * Pure: a function of the profile snapshot it is handed. No database, no fetch,
- * no clock — so the tests state exactly what a given profile renders as.
- */
-
-import type { SiteChrome, SitePage, SiteSection } from './site-content';
-
-/** Everything the default site needs from a group. All of it already exists. */
-export interface SiteProfile {
-  slug: string;
-  name: string;
-  description: string | null;
-  /** Group label: company, cooperative, dao, nonprofit… Used as the eyebrow. */
-  label: string | null;
-  tags: readonly string[];
-  bitcoinAddress: string | null;
-  lightningAddress: string | null;
-  /** Public address the site advertises. Shown in the footer. */
-  canonicalHost: string;
-}
-
-/**
- * Split a description into paragraphs.
- *
- * A profile description is a textarea, so the only structure it reliably has is
- * blank lines. Anything cleverer would be guessing at markup the author never
- * wrote.
- */
-function paragraphs(text: string | null): string[] {
-  if (!text) {
-    return [];
-  }
-  return text
-    .split(/\n\s*\n/)
-    .map(part => part.replace(/\s+/g, ' ').trim())
-    .filter(Boolean);
-}
-
-/** Sentence-case a label like `network_state` for display. */
-function labelText(label: string | null): string | undefined {
-  if (!label) {
-    return undefined;
-  }
-  const words = label.replace(/_/g, ' ').trim();
-  return words ? words.charAt(0).toUpperCase() + words.slice(1) : undefined;
-}
-
-export function profileSiteChrome(profile: SiteProfile): SiteChrome {
-  const lead = paragraphs(profile.description)[0] ?? '';
-  return {
-    name: profile.name,
-    // The chrome's tagline is the first sentence, not the whole description —
-    // a masthead is not the place for three paragraphs.
-    tagline: lead.split(/(?<=\.)\s/)[0] ?? '',
-    footerNote: `${profile.name} publishes this site from its OrangeCat profile.`,
-  };
-}
-
-/**
- * The pages of a default site.
- *
- * One page, deliberately. A profile does not contain enough distinct material
- * to fill a nav, and an eight-item menu of empty pages is worse than an honest
- * single page. When a profile grows sections worth their own URL — a catalogue,
- * an events list — that is the commit that adds a second page here, for every
- * customer at once.
- */
-export function profileSitePages(profile: SiteProfile): SitePage[] {
-  const body = paragraphs(profile.description);
-  const [lead, ...rest] = body;
-
-  const sections: SiteSection[] = [
-    {
-      kind: 'hero',
-      eyebrow: labelText(profile.label),
-      statement: profile.name,
-      // The hero carries the opening; the prose below carries the rest. Passing
-      // the whole description to both would print it twice.
-      lead: lead ? [lead] : [],
-    },
-  ];
-
-  if (rest.length > 0) {
-    sections.push({ kind: 'prose', heading: 'About', paragraphs: rest });
-  }
-
-  if (profile.tags.length > 0) {
-    sections.push({
-      kind: 'stats',
-      heading: 'Focus',
-      stats: profile.tags.slice(0, 6).map(tag => ({ label: tag, value: '·' })),
-    });
-  }
-
-  // Only when there is something to pay to. A "Support" heading above an empty
-  // block advertises a capability the group has not set up.
-  const addresses: Array<{ term: string; detail: string }> = [];
-  if (profile.lightningAddress) {
-    addresses.push({ term: 'Lightning', detail: profile.lightningAddress });
-  }
-  if (profile.bitcoinAddress) {
-    addresses.push({ term: 'Bitcoin', detail: profile.bitcoinAddress });
-  }
-  if (addresses.length > 0) {
-    sections.push({
-      kind: 'definitions',
-      heading: 'Support',
-      blurb: `Send to ${profile.name} directly.`,
-      items: addresses,
-    });
-  }
-
-  return [
-    {
-      path: '',
-      // No navLabel: a one-page site has nothing to navigate between, and a nav
-      // holding a single "Home" link is furniture.
-      title: profile.name,
-      sections,
-    },
-  ];
-}
diff --git a/src/config/site-substrata.ts b/src/config/site-substrata.ts
deleted file mode 100644
index acee8736b..000000000
--- a/src/config/site-substrata.ts
+++ /dev/null
@@ -1,662 +0,0 @@
-/**
- * Substrata's website, generated from its OrangeCat profile.
- *
- * Every word and number below comes from `substrata.ts` and
- * `substrata-coverage.ts` — the same objects the group profile, the product
- * catalogue and the Cat read. There is no second copy of the mandate, no
- * duplicated price list, and no separately-maintained "about" text. Change the
- * profile and the website changes with it, which is the whole claim /domains
- * is making when it says a profile can spin up a working site.
- *
- * That constraint is also why the site is honest: the coverage page cannot
- * quietly present unsourced research leads as findings, because the only data
- * it has is the same data the tests hold to `source: null`.
- *
- * Created: 2026-08-26
- */
-
-import {
-  CHOKEPOINT_TEST,
-  COMPANY,
-  DISCLOSURE,
-  EXCLUSION_RULE,
-  LISTING_COPY,
-  MANDATE_CURVES,
-  MATERIALS,
-  NODE_TYPES,
-  PHASES,
-  SCOPE,
-  areaFor,
-} from './substrata';
-import {
-  ACTING_LIMITS,
-  ACTION_ROUTES,
-  INVESTMENT_THESIS,
-  READINESS,
-  READINESS_STATUS_LABEL,
-  readinessProgress,
-} from './substrata-acting';
-import {
-  CHAIN_LAYERS,
-  SCARCITY_DETAIL,
-  SCARCITY_LABEL,
-  bindingParticipants,
-  participantProgress,
-  participantsInLayer,
-} from './substrata-participants';
-import {
-  CHOKEPOINTS,
-  COVERAGE,
-  NODE_TYPE_LABEL,
-  PRODUCER_ROLES,
-  chokepointProgress,
-  coverageProgress,
-} from './substrata-coverage';
-import type { SiteChrome, SitePage, SiteSection } from './site-content';
-
-const ROLE_LABEL: Record<string, string> = Object.fromEntries(
-  PRODUCER_ROLES.map(role => [role.id, role.label])
-);
-
-export function substrataSiteChrome(): SiteChrome {
-  return {
-    name: COMPANY.name,
-    tagline: COMPANY.tagline,
-    footerNote:
-      `${COMPANY.name} publishes research. It does not trade, broker or quote, holds no ` +
-      'position in anything it covers, and nothing here is an offer or investment advice. ' +
-      'Rows marked unverified are research leads, not findings.',
-  };
-}
-
-// =====================================================================
-// HOME
-// =====================================================================
-
-function homePage(): SitePage {
-  const progress = coverageProgress();
-  const activePhases = PHASES.filter(phase => phase.status === 'active');
-  const companies = new Set(COVERAGE.flatMap(entry => entry.producers.map(p => p.name))).size;
-
-  return {
-    path: '',
-    navLabel: 'Home',
-    title: COMPANY.name,
-    sections: [
-      {
-        kind: 'hero',
-        eyebrow: 'Open-source research · Materials desk',
-        // The proposition, not the company name. A visitor who reads one line
-        // should know what this firm does and what it refuses to do.
-        statement: COMPANY.tagline,
-        // The first two paragraphs only: the proposition and the rule that
-        // bounds it. The remaining two — which phase is running, and how
-        // quotes work — are said properly by the phase block below and by the
-        // desk page, and a lead that repeats them is a lead nobody finishes.
-        lead: LISTING_COPY.body.slice(0, 2),
-      },
-      {
-        kind: 'stats',
-        heading: 'Where the research stands',
-        stats: [
-          {
-            label: 'Materials covered',
-            value: String(MATERIALS.length),
-            note: 'Each one a chokepoint, not a commodity.',
-          },
-          {
-            label: 'Producers identified',
-            value: String(progress.total),
-            note: `Across ${companies} distinct companies.`,
-          },
-          {
-            label: 'Non-material chokepoints',
-            value: String(CHOKEPOINTS.length),
-            note: 'Tools, capacity, queues and know-how that gate the same curves.',
-          },
-        ],
-      },
-      {
-        kind: 'meter',
-        heading: 'Coverage',
-        label: 'Producer rows confirmed against a primary source',
-        value: progress.sourced,
-        of: progress.total,
-        caption:
-          'Phase 1 completes when these match. The bar is drawn from the same data the ' +
-          'map is drawn from, so it cannot flatter the work — an unfinished phase looks ' +
-          'unfinished here.',
-      },
-      {
-        kind: 'cards',
-        heading: 'The two tests',
-        blurb:
-          'A node enters coverage, or the book, only if it passes both. Failing either is a ' +
-          'decline — and we decline every week.',
-        columns: 3,
-        cards: MANDATE_CURVES.map(curve => ({
-          title: curve.label,
-          body: curve.detail,
-          meta: curve.test,
-        })),
-      },
-      {
-        kind: 'definitions',
-        heading: 'The chokepoint screen',
-        blurb: EXCLUSION_RULE.rule,
-        items: CHOKEPOINT_TEST.map(factor => ({
-          term: factor.question,
-          detail: factor.detail,
-        })),
-      },
-      {
-        kind: 'definitions',
-        heading: 'Running now',
-        blurb:
-          'Two phases at once. A desk is not one of them — see Disclosure for what this ' +
-          'firm does and does not do.',
-        items: activePhases.map(phase => ({ term: phase.label, detail: phase.detail })),
-      },
-    ],
-  };
-}
-
-// =====================================================================
-// MANDATE
-// =====================================================================
-
-function mandatePage(): SitePage {
-  return {
-    path: 'mandate',
-    navLabel: 'Mandate',
-    title: 'Mandate',
-    intro: EXCLUSION_RULE.rule,
-    sections: [
-      { kind: 'prose', paragraphs: [EXCLUSION_RULE.explainer] },
-      {
-        kind: 'cards',
-        heading: 'Three curves',
-        columns: 3,
-        cards: MANDATE_CURVES.map(curve => ({
-          title: curve.label,
-          body: curve.detail,
-          meta: curve.test,
-        })),
-      },
-      {
-        kind: 'definitions',
-        heading: 'The chokepoint screen',
-        blurb:
-          'Being on a curve is not enough. Most of a supply chain is substitutable, and ' +
-          'therefore uninteresting. A node earns coverage when it gates a curve.',
-        items: CHOKEPOINT_TEST.map(factor => ({ term: factor.question, detail: factor.detail })),
-      },
-      {
-        kind: 'cards',
-        heading: 'What counts as a node',
-        blurb:
-          'The unit of coverage is a chokepoint, not an asset class. This is how the universe ' +
-          'reaches robotics, AI hardware and additive manufacturing without becoming ' +
-          '“everything”: you arrive at them by tracing a chain you were already mapping.',
-        columns: 3,
-        cards: NODE_TYPES.map(node => ({ title: node.label, body: node.detail })),
-      },
-      {
-        kind: 'definitions',
-        heading: 'Sequence',
-        blurb:
-          'Research first, because it costs nothing but attention and it is the sourcing work the desk needs anyway.',
-        items: PHASES.map(phase => ({
-          term: `${phase.label}${phase.status === 'active' ? ' — active' : ''}`,
-          detail: phase.detail,
-        })),
-      },
-    ],
-  };
-}
-
-// =====================================================================
-// THE MAP
-// =====================================================================
-
-/** Stable fragment id for a material, so the index can link into the tables. */
-function materialAnchor(material: string): string {
-  return material
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, '-')
-    .replace(/^-|-$/g, '');
-}
-
-function mapPage(): SitePage {
-  const progress = coverageProgress();
-
-  // The material's own research — why it gates, and which grade actually ships
-  // — used to live on the desk page. With no desk there is no desk page, and
-  // that content belongs here anyway: it is research, not a product listing.
-  const materialById = new Map(MATERIALS.map(material => [material.title, material]));
-
-  const materialTables: SiteSection[] = COVERAGE.map(entry => {
-    const material = materialById.get(entry.material);
-    return {
-      kind: 'table' as const,
-      heading: entry.material,
-      anchor: materialAnchor(entry.material),
-      blurb: material
-        ? `${entry.thesis} Traded grade: ${material.spec} · ${areaFor(material).name}`
-        : entry.thesis,
-      columns: ['Company', 'Jurisdiction', 'Step in the chain', 'Status'],
-      // Jurisdiction codes and statuses are scanned down a column, not read
-      // across a row — mono keeps them aligned and comparable.
-      monoColumns: [1],
-      statusColumn: 3,
-      rows: entry.producers.map(producer => [
-        producer.name,
-        producer.jurisdictions.join(' '),
-        ROLE_LABEL[producer.role] ?? producer.role,
-        producer.source ? 'Sourced' : 'Unverified lead',
-      ]),
-    };
-  });
-
-  return {
-    path: 'map',
-    navLabel: 'The map',
-    title: 'The map',
-    intro: 'Every qualified producer of the fifteen materials on the desk.',
-    sections: [
-      {
-        kind: 'prose',
-        paragraphs: [
-          'This is Phase 1, published as it is built rather than when it is finished. Each row ' +
-            'asserts three things and no more: a company’s name, where it operates, and which ' +
-            'step of the chain it occupies. There is no column for capacity, market share or ' +
-            'revenue, because this firm has not sourced those numbers — and a table that ' +
-            'implies otherwise is worse than an empty one.',
-          'A row marked “unverified lead” is exactly that: a research lead we believe is right ' +
-            'and have not yet confirmed against a primary source. It is not a finding. When an ' +
-            'analyst attaches the source, the row flips to “sourced” and the meter below moves. ' +
-            'That meter is the honest measure of how far along this is.',
-          'Corrections are the reason this is public. If you work in one of these chains and a ' +
-            'row is wrong, telling us makes the map better for everyone who reads it next.',
-        ],
-      },
-      {
-        kind: 'meter',
-        heading: 'Coverage',
-        label: 'Producer rows confirmed against a primary source',
-        value: progress.sourced,
-        of: progress.total,
-        caption: `${COVERAGE.length} materials, ${progress.total} producer rows. Phase 1 completes when every row carries a source.`,
-      },
-      {
-        kind: 'index',
-        heading: 'Materials',
-        blurb: 'Fifteen chokepoints. The number beside each is how many producers are mapped.',
-        entries: COVERAGE.map(entry => ({
-          label: entry.material,
-          meta: String(entry.producers.length),
-          anchor: materialAnchor(entry.material),
-        })),
-      },
-      ...materialTables,
-    ],
-  };
-}
-
-// =====================================================================
-// CHOKEPOINTS BEYOND MATERIALS
-// =====================================================================
-
-function chokepointsPage(): SitePage {
-  const progress = chokepointProgress();
-
-  // Cards, not a table. A table of names and country codes scans nicely and
-  // says nothing — the claim IS the reason it gates, and a research page that
-  // hides its reasoning behind a tidy grid has published a list, not research.
-  const byCurve = MANDATE_CURVES.map(curve => ({
-    kind: 'cards' as const,
-    heading: curve.label,
-    blurb: curve.detail,
-    columns: 2 as const,
-    cards: CHOKEPOINTS.filter(point => point.curve === curve.id).map(point => ({
-      title: point.name,
-      body: point.why,
-      meta: [
-        NODE_TYPE_LABEL[point.type],
-        point.jurisdictions.length ? point.jurisdictions.join(' ') : 'Not geographic',
-        point.source ? 'Sourced' : 'Unverified lead',
-      ].join('  ·  '),
-    })),
-  }));
-
-  return {
-    path: 'chokepoints',
-    navLabel: 'Chokepoints',
-    title: 'Chokepoints',
-    intro: 'The constraints that are not materials — and often are the tighter ones.',
-    sections: [
-      {
-        kind: 'prose',
-        paragraphs: [
-          'A material is only one kind of chokepoint. For the compute and power curves it ' +
-            'is frequently not the binding one: a lithography tool with a single supplier, ' +
-            'packaging capacity allocated years before it is used, a transformer order ' +
-            'book, an interconnection queue, and process knowledge that does not transfer ' +
-            'when a competitor buys the same equipment all gate the same three curves — ' +
-            'and none of them appears on a periodic table.',
-          'They enter coverage on exactly the tests a material does: does it move a curve, ' +
-            'and does it genuinely gate it. The unit of coverage was never the substance. ' +
-            'It is the constraint.',
-          'Each row claims what the node is and why it gates, and nothing about capacity, ' +
-            'market share or price — the same rule as the producer map, for the same ' +
-            'reason. Rows read “unverified lead” until an analyst attaches a primary source.',
-        ],
-      },
-      {
-        kind: 'stats',
-        heading: 'The universe so far',
-        stats: [
-          { label: 'Materials', value: String(MATERIALS.length) },
-          { label: 'Non-material chokepoints', value: String(progress.total) },
-          {
-            label: 'Kinds of node',
-            value: String(new Set(CHOKEPOINTS.map(point => point.type)).size),
-            note: 'Machines, processes, companies and people.',
-          },
-        ],
-      },
-      {
-        kind: 'meter',
-        heading: 'Verification',
-        label: 'Chokepoint rows confirmed against a primary source',
-        value: progress.sourced,
-        of: progress.total,
-        caption:
-          'Newer than the producer map and further from finished. Published anyway, ' +
-          'because a lead somebody can correct is worth more than a note nobody sees.',
-      },
-      ...byCurve,
-    ],
-  };
-}
-
-// =====================================================================
-// THESIS
-// =====================================================================
-
-function thesisPage(): SitePage {
-  return {
-    path: 'thesis',
-    navLabel: 'Thesis',
-    title: 'Thesis',
-    intro: 'What we think follows from the map — stated so it can be scored, not admired.',
-    sections: [
-      {
-        kind: 'prose',
-        paragraphs: [
-          'A research house is supposed to have a view and be judged on it. Each claim ' +
-            'below carries a falsifier: the thing that, if observed, would show it to be ' +
-            'wrong. A thesis without one is a slogan, and a slogan cannot be scored.',
-          'This is a general view published to whoever reads it. It is not advice, it is ' +
-            'not addressed to anyone in particular, and it takes no account of your ' +
-            'circumstances — see Acting on it for what that does and does not permit.',
-        ],
-      },
-      ...INVESTMENT_THESIS.map(claim => ({
-        kind: 'definitions' as const,
-        heading: claim.claim,
-        blurb: claim.detail,
-        items: [{ term: 'What would prove this wrong', detail: claim.falsifier }],
-      })),
-    ],
-  };
-}
-
-// =====================================================================
-// PARTICIPANTS
-// =====================================================================
-
-function participantsPage(): SitePage {
-  const progress = participantProgress();
-  const binding = bindingParticipants();
-
-  const layerTables: SiteSection[] = CHAIN_LAYERS.flatMap(layer => {
-    const rows = participantsInLayer(layer.id);
-    if (rows.length === 0) {
-      return [];
-    }
-    return [
-      {
-        kind: 'table' as const,
-        heading: layer.name,
-        anchor: layer.id,
-        blurb: layer.detail,
-        columns: ['Participant', 'Role in the chain', 'Where', 'Scarcity'],
-        monoColumns: [2],
-        statusColumn: 3,
-        rows: rows.map(item => [
-          item.name,
-          item.role,
-          item.jurisdictions.join(' '),
-          SCARCITY_LABEL[item.scarcity],
-        ]),
-      },
-    ];
-  });
-
-  return {
-    path: 'participants',
-    navLabel: 'Participants',
-    title: 'Participants',
-    intro: 'Everyone in the chain from ore to buyer, graded by how hard they are to replace.',
-    sections: [
-      {
-        kind: 'prose',
-        paragraphs: [
-          'A directory of everyone in a supply chain is a phone book. What makes this ' +
-            'research is the last column: for each participant, whether it is a chokepoint, ' +
-            'merely concentrated, or genuinely competitive.',
-          'Grading participants “competitive” is not filler. It is the thing that makes ' +
-            '“chokepoint” mean anything — a map on which every node is critical is a map ' +
-            'nobody has actually read. Several well-known names in this list are here ' +
-            'precisely because they are not constraints.',
-          'On the demand side the grade reads the other way round: when a handful of firms ' +
-            'account for most of the world’s orders, that concentration is a scarcity fact ' +
-            'about the chain too, pointing upstream instead of down.',
-        ],
-      },
-      {
-        kind: 'stats',
-        stats: [
-          {
-            label: 'Participants mapped',
-            value: String(progress.total),
-            note: `Across ${CHAIN_LAYERS.length} layers and ${progress.jurisdictions} jurisdictions.`,
-          },
-          {
-            label: 'Graded a chokepoint',
-            value: String(progress.chokepoints),
-            note: 'One or very few qualified suppliers, and no substitute that arrives in time.',
-          },
-          {
-            label: 'Graded competitive',
-            value: String(progress.competitive),
-            note: 'In the chain, and not a constraint on it. Saying so is the point.',
-          },
-        ],
-      },
-      {
-        kind: 'definitions',
-        heading: 'How the grades are assigned',
-        blurb:
-          'The mandate’s own screen — concentration, substitutability, lead time, demand ' +
-          'inelasticity — applied one participant at a time.',
-        items: (Object.keys(SCARCITY_DETAIL) as Array<keyof typeof SCARCITY_DETAIL>).map(grade => ({
-          term: SCARCITY_LABEL[grade],
-          detail: SCARCITY_DETAIL[grade],
-        })),
-      },
-      {
-        kind: 'cards',
-        heading: 'Where the chain actually binds',
-        blurb:
-          `${binding.length} of ${progress.total} participants are graded a hard constraint. ` +
-          'These are the ones worth knowing by name.',
-        columns: 2,
-        cards: binding.map(item => ({
-          title: item.name,
-          body: item.why,
-          meta: `${item.role}  ·  ${item.jurisdictions.join(' ')}`,
-        })),
-      },
-      {
-        kind: 'index',
-        heading: 'The chain, layer by layer',
-        blurb: 'Ordered upstream to downstream. The number is how many participants are mapped.',
-        entries: CHAIN_LAYERS.map(layer => ({
-          label: layer.name,
-          meta: String(participantsInLayer(layer.id).length),
-          anchor: layer.id,
-        })),
-      },
-      ...layerTables,
-    ],
-  };
-}
-
-// =====================================================================
-// ACTING ON IT
-// =====================================================================
-
-function actingPage(): SitePage {
-  const progress = readinessProgress();
-
-  return {
-    path: 'acting',
-    navLabel: 'Acting on it',
-    title: 'Acting on it',
-    intro: 'What you can do with this research, and what we are not allowed to do for you.',
-    sections: [
-      {
-        kind: 'definitions',
-        heading: 'Read this first',
-        blurb:
-          'People read research and want to act on it — that is why it is published. But ' +
-          'the line between publishing a view and advising a person is a legal one, and ' +
-          'this firm sits firmly on the publishing side of it.',
-        items: ACTING_LIMITS.map((limit, index) => ({
-          term: `Limit ${index + 1}`,
-          detail: limit,
-        })),
-      },
-      ...ACTION_ROUTES.map(route => ({
-        kind: 'definitions' as const,
-        heading: route.name,
-        blurb: route.gives,
-        items: [
-          { term: 'Who provides it', detail: route.providedBy },
-          { term: 'What it does not give you', detail: route.doesNotGive },
-          { term: 'Worth asking', detail: route.ask.join(' · ') },
-        ],
-      })),
-      {
-        kind: 'prose',
-        heading: 'What we can do if you get in touch',
-        paragraphs: [
-          'We can answer questions about the research: why a node is in the universe, ' +
-            'what a grade designation means, who else makes something, what we have and ' +
-            'have not verified. We are glad to be told a row is wrong, and that is the ' +
-            'most useful message anyone sends us.',
-          'We cannot tell you what to buy, how much, or when. Not because of caution but ' +
-            'because doing so would be a licensed activity we are not licensed for, and ' +
-            'a firm that quietly crosses that line has told you exactly how much its ' +
-            'other statements are worth.',
-        ],
-      },
-      {
-        kind: 'meter',
-        heading: 'Becoming the investor',
-        label: 'Requirements met to manage money rather than only publish',
-        value: progress.done,
-        of: progress.total,
-        caption:
-          `${progress.done} done, ${progress.inProgress} in progress. Managing third-party ` +
-          'money is licensed activity everywhere that matters, and the gap below is real ' +
-          'rather than paperwork. It is published for the same reason the coverage meter ' +
-          'is: a plan with statuses is a plan, and everything else is a feeling.',
-      },
-      {
-        // Definitions, not a table. Three columns where one holds a paragraph
-        // is a table that scrolls sideways on a phone and is read by nobody;
-        // the status belongs next to the requirement, not in a column of its own.
-        kind: 'definitions',
-        heading: 'The ledger',
-        items: READINESS.map(item => ({
-          term: `${item.requirement} — ${READINESS_STATUS_LABEL[item.status]}`,
-          detail: item.detail,
-        })),
-      },
-    ],
-  };
-}
-
-// =====================================================================
-// DISCLOSURE
-// =====================================================================
-
-function disclosurePage(): SitePage {
-  return {
-    path: 'disclosure',
-    navLabel: 'Disclosure',
-    title: 'Disclosure',
-    intro: 'What this firm does, what it does not do, and what it holds.',
-    sections: [
-      {
-        kind: 'definitions',
-        heading: 'Today',
-        blurb: DISCLOSURE.today,
-        items: SCOPE.today.map((rule, index) => ({ term: `Position ${index + 1}`, detail: rule })),
-      },
-      {
-        kind: 'prose',
-        heading: 'On the desk that does not exist',
-        paragraphs: [
-          'Acting on this map rather than only publishing it would mean a regulated book: ' +
-            'licensing, compliance, capital and counterparty onboarding, none of it quick ' +
-            'and none of it started. It is an intention. Until it is real, no page here ' +
-            'carries a price, a lot size or an invitation to deal, because a firm that ' +
-            'advertises a capability it does not have has already told you how much its ' +
-            'other claims are worth.',
-          'The rules below are written now, in advance, for the reason a disclosure policy ' +
-            'is only ever credible before it is needed. Written after the first position, ' +
-            'every clause reads as a response to something.',
-        ],
-      },
-      {
-        kind: 'definitions',
-        heading: 'The rules, when there is something to disclose',
-        items: DISCLOSURE.rules.map((rule, index) => ({
-          term: `Rule ${index + 1}`,
-          detail: rule,
-        })),
-      },
-      { kind: 'prose', heading: 'Why it is free', paragraphs: [DISCLOSURE.openByDefault] },
-      { kind: 'prose', heading: 'Out of scope', paragraphs: [SCOPE.outOfScope] },
-    ],
-  };
-}
-
-// =====================================================================
-
-export function substrataSitePages(): SitePage[] {
-  return [
-    homePage(),
-    mandatePage(),
-    thesisPage(),
-    mapPage(),
-    chokepointsPage(),
-    participantsPage(),
-    actingPage(),
-    disclosurePage(),
-  ];
-}
diff --git a/src/config/sites.ts b/src/config/sites.ts
deleted file mode 100644
index abd33ff34..000000000
--- a/src/config/sites.ts
+++ /dev/null
@@ -1,210 +0,0 @@
-/**
- * Hosted sites — the host math, and nothing else.
- *
- * `/domains` sells one sentence: "a working site, hosted and managed at
- * yourname.orangecat.ch — free. Move to your own domain when you are ready."
- * This file answers the only question the EDGE has to answer to deliver it:
- * *given a Host header, which site slug is this request for?*
- *
- * WHY THIS IS A PATTERN AND NOT A LIST
- *
- * It used to be a list. A list means every new customer is a code change, a
- * pull request, a CI run and a deploy before their domain resolves — which is
- * the opposite of the product. So the rule is now positional: any label on
- * `orangecat.ch` that is not reserved is a candidate site slug, and whether a
- * site actually EXISTS is decided downstream by `/sites/<slug>`, which can read
- * the database because it is a page, not middleware.
- *
- * That split is the whole design:
- *
- *   this file (edge, pure)     — is this host SHAPED like a hosted site?
- *   services/sites (page, DB)  — is there a published site at that slug?
- *
- * Resolving "shaped like" without a database is what keeps `middleware.ts` free
- * of a query on the hot path of every request to the entire app. Guessing wrong
- * is cheap and safe: an unclaimed slug rewrites to `/sites/<slug>` and 404s.
- *
- * Three ways a request reaches a site:
- *   substrata.orangecat.ch     — the free subdomain every hosted site starts on
- *   substrata.localhost:3020   — local development, so the rewrite is testable
- *   substrata.example          — a custom domain (resolved from the database,
- *                                since no pattern can recognise one)
- *
- * The path form `/sites/<slug>` always works on any host. That is what makes a
- * site previewable before its DNS exists, and it is the URL the tests use.
- */
-
-/** The domain every hosted site gets a free subdomain on. */
-export const SITES_BASE_DOMAIN = 'orangecat.ch';
-
-/** URL prefix the middleware rewrites a matched host onto. */
-export const SITES_PATH_PREFIX = '/sites';
-
-/**
- * Labels on `orangecat.ch` that must never resolve to a customer's site.
- *
- * Two different harms, kept in one list because one lookup should answer both:
- *
- *  - **Infrastructure.** These hosts already serve something else on this box.
- *    A site claiming one would either be shadowed by its Caddy block or, worse,
- *    shadow it — and the whole point of on-demand TLS is that Caddy asks US
- *    which hostnames are real, so this list is load-bearing for certificates.
- *  - **Impersonation.** A site at `security.orangecat.ch` is a phish with a
- *    valid certificate and our domain in the URL bar. `RESERVED_USERNAMES`
- *    already refuses these as handles for the same reason; a subdomain is a
- *    stronger claim than a handle, so it cannot be a weaker check.
- *
- * The live half is generated from the box into `deployment/reserved-hosts.txt`
- * and checked by `npm run check:reserved-hosts`, which is in `verify`. It is a
- * generated-and-checked list rather than a remembered one because the first
- * hand-written version of it was missing fourteen of the twenty-two hosts that
- * were already serving traffic.
- */
-export const RESERVED_SUBDOMAINS: ReadonlyArray<{ label: string; why: string }> = [
-  // Live on the box today — one Caddy block each. Kept in step with
-  // `deployment/reserved-hosts.txt` by `npm run check:reserved-hosts`, because a
-  // hand-maintained copy of this list had already drifted by fourteen entries.
-  { label: 'annushka', why: 'Annushka — a live app on this box' },
-  { label: 'aoz-wohnen', why: 'AOZ Wohnen — a live app on this box' },
-  { label: 'aoz', why: 'AOZ — a live app on this box' },
-  { label: 'botsmann', why: 'Botsmann — a live app on this box' },
-  { label: 'bridge', why: 'the agent bridge' },
-  { label: 'camille', why: 'Camille Boulangerie — a live app on this box' },
-  { label: 'datacat', why: 'DataCat — a live app on this box' },
-  { label: 'evig', why: 'Evig' },
-  { label: 'fleetcrown', why: 'FleetCrown' },
-  { label: 'kivvi', why: 'Kivvi — a live app on this box' },
-  { label: 'petvity', why: 'Petvity — a live app on this box' },
-  { label: 'printcraft', why: 'PrintCraft — a live app on this box' },
-  { label: 'reparaturbonus', why: 'Reparaturbonus ZH — a live app on this box' },
-  { label: 'revamp-info', why: 'Revamp Info — a live app on this box' },
-  { label: 'revampit', why: 'redirects to evig' },
-  { label: 'sbb', why: 'SBB Lost & Found — a live app on this box' },
-  { label: 'sink', why: 'Sink — a live app on this box' },
-  { label: 'solon', why: 'Solon governance' },
-  { label: 'supabase', why: 'the database and its auth endpoints' },
-  { label: 'surf-your-life', why: 'Surf Your Life — a live app on this box' },
-  { label: 'vitareba', why: 'Vitareba — a live app on this box' },
-  { label: 'www', why: 'the platform itself' },
-
-  // Infrastructure names a future block will want, claimed before a customer can.
-  { label: 'api', why: 'the public API surface' },
-  { label: 'app', why: 'reads as the platform itself' },
-  { label: 'cdn', why: 'asset host' },
-  { label: 'static', why: 'asset host' },
-  { label: 'assets', why: 'asset host' },
-  { label: 'mail', why: 'mail host — an MX name is a phishing primitive' },
-  { label: 'smtp', why: 'mail host' },
-  { label: 'imap', why: 'mail host' },
-  { label: 'ns1', why: 'nameserver' },
-  { label: 'ns2', why: 'nameserver' },
-  { label: 'mx', why: 'mail host' },
-  { label: 'vpn', why: 'network infrastructure' },
-  { label: 'db', why: 'database host' },
-  { label: 'status', why: 'status page — must be trustworthy during an incident' },
-  { label: 'staging', why: 'deploy environment' },
-  { label: 'dev', why: 'deploy environment' },
-  { label: 'test', why: 'deploy environment' },
-  { label: 'preview', why: 'deploy environment' },
-
-  // Impersonation. Mirrors RESERVED_USERNAMES — a subdomain claims more, not less.
-  { label: 'admin', why: 'impersonates platform staff' },
-  { label: 'support', why: 'impersonates platform staff' },
-  { label: 'help', why: 'impersonates platform staff' },
-  { label: 'security', why: 'impersonates platform staff — the highest-value phish' },
-  { label: 'billing', why: 'impersonates platform staff on a money topic' },
-  { label: 'payments', why: 'impersonates platform staff on a money topic' },
-  { label: 'pay', why: 'impersonates platform staff on a money topic' },
-  { label: 'wallet', why: 'impersonates platform staff on a money topic' },
-  { label: 'login', why: 'a credential-harvesting host under our own certificate' },
-  { label: 'signin', why: 'a credential-harvesting host under our own certificate' },
-  { label: 'auth', why: 'a credential-harvesting host under our own certificate' },
-  { label: 'account', why: 'a credential-harvesting host under our own certificate' },
-  { label: 'accounts', why: 'a credential-harvesting host under our own certificate' },
-  { label: 'system', why: 'impersonates the platform' },
-  { label: 'official', why: 'impersonates the platform' },
-  { label: 'orangecat', why: 'the platform itself' },
-  { label: 'root', why: 'impersonates the platform' },
-];
-
-const RESERVED_SET: ReadonlySet<string> = new Set(RESERVED_SUBDOMAINS.map(entry => entry.label));
-
-/** @returns why this label is reserved, or null if it is free. */
-export function reservedSubdomainReason(label: string): string | null {
-  return RESERVED_SUBDOMAINS.find(entry => entry.label === label.toLowerCase())?.why ?? null;
-}
-
-export function isReservedSubdomain(label: string): boolean {
-  return RESERVED_SET.has(label.toLowerCase());
-}
-
-/**
- * The shape a slug must have to be a subdomain at all.
- *
- * Stricter than a group slug on purpose: this string becomes a DNS label and a
- * certificate subject. No leading or trailing hyphen, no underscores, 1–63
- * characters, which is what RFC 1123 permits.
- */
-export const SITE_SLUG_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
-
-export function isValidSiteSlug(slug: string): boolean {
-  return SITE_SLUG_PATTERN.test(slug);
-}
-
-/** Strip the port and lowercase, so `Substrata.localhost:3020` matches. */
-export function normaliseHost(host: string): string {
-  return host.trim().toLowerCase().split(':')[0];
-}
-
-/**
- * The slug a Host header is asking for, by SHAPE alone.
- *
- * Pure, allocation-light and database-free: this runs in edge middleware on
- * every request to the whole app. It answers "could this be a hosted site?" —
- * never "does that site exist", which only the page can know.
- *
- * @returns the slug, or null when the host is not a hosted-site host.
- */
-export function siteSlugForHost(host: string | null | undefined): string | null {
-  if (!host) {
-    return null;
-  }
-  const hostname = normaliseHost(host);
-  const bare = hostname.startsWith('www.') ? hostname.slice(4) : hostname;
-
-  for (const suffix of [`.${SITES_BASE_DOMAIN}`, '.localhost']) {
-    if (!bare.endsWith(suffix)) {
-      continue;
-    }
-    const label = bare.slice(0, -suffix.length);
-    // Exactly one label. `a.b.orangecat.ch` is not a hosted site — it is either
-    // a mistake or somebody probing, and a greedy match would hand them one.
-    if (!label || label.includes('.')) {
-      return null;
-    }
-    if (isReservedSubdomain(label) || !isValidSiteSlug(label)) {
-      return null;
-    }
-    return label;
-  }
-  return null;
-}
-
-/**
- * Build an in-site link.
- *
- * Always the `/sites/<slug>/...` path form rather than an absolute URL on the
- * site's own domain. On the custom domain the rewrite makes this path resolve
- * to the same page, and on orangecat.ch it is the only form that works at all —
- * so one form is correct everywhere and no link needs to know which host it was
- * rendered on.
- */
-export function siteHref(slug: string, path = ''): string {
-  const suffix = path && path !== '/' ? `/${path.replace(/^\/+/, '')}` : '';
-  return `${SITES_PATH_PREFIX}/${slug}${suffix}`;
-}
-
-/** The free subdomain a slug gets, whether or not it has a custom domain yet. */
-export function siteSubdomainHost(slug: string): string {
-  return `${slug}.${SITES_BASE_DOMAIN}`;
-}
diff --git a/src/config/substrata-acting.ts b/src/config/substrata-acting.ts
deleted file mode 100644
index 76cff794c..000000000
--- a/src/config/substrata-acting.ts
+++ /dev/null
@@ -1,361 +0,0 @@
-/**
- * Substrata — the investment thesis, how a reader can act on it, and the
- * ledger of what standing up a fund would actually require.
- *
- * THE REGULATORY LINE THIS FILE EXISTS TO HOLD
- *
- * People will read this research and want to do something with it. That is the
- * point of publishing it. But Substrata is not registered, licensed or
- * supervised anywhere, and three things follow that no amount of product
- * ambition may erode:
- *
- *  1. NO ADVICE. Publishing an impersonal, generally-circulated view is
- *     research. Telling a particular person what to buy is advice, and advice
- *     is licensed almost everywhere. Nothing here may be personalised.
- *  2. NO EXECUTION. Substrata does not hold client money or assets, does not
- *     receive or transmit orders, and does not arrange deals.
- *  3. NOBODY PAYS TO BE HERE. The participant directory and the routes below
- *     are research output, not placements. Keeping them unpaid is what makes
- *     them worth reading — a directory somebody bought their way into is an
- *     advertisement wearing a table's clothes.
- *
- * So this file holds a stated view, an honest description of the routes by
- * which anyone acts in these markets, the questions worth asking, and a public
- * record of how far the firm is from being able to act on its own behalf.
- *
- * Created: 2026-08-26
- */
-
-// =====================================================================
-// THE HARD LIMITS — stated on the page, not just in a footer
-// =====================================================================
-
-export const ACTING_LIMITS: readonly string[] = [
-  'Substrata publishes research. It does not manage money, hold client assets, ' +
-    'execute orders, or take a position in anything it covers.',
-  'Everything here is a general view, published to whoever reads it. It is not ' +
-    'addressed to you, and it takes no account of your circumstances.',
-  'Substrata is paid nothing by any participant in this directory. If that ever ' +
-    'changes it will be written here before the arrangement starts.',
-];
-
-// =====================================================================
-// INVESTMENT THESIS
-//
-// A view, held in public, impersonal and generally circulated. This is the
-// thing a research house is supposed to have and be judged on — and stating it
-// plainly is also what makes a track record possible later, since a thesis
-// nobody wrote down cannot be scored.
-// =====================================================================
-
-export interface ThesisClaim {
-  id: string;
-  claim: string;
-  detail: string;
-  /** What would show this to be wrong. A thesis without one is a slogan. */
-  falsifier: string;
-}
-
-export const INVESTMENT_THESIS: readonly ThesisClaim[] = [
-  {
-    id: 'bottleneck-migrates',
-    claim: 'The bottleneck is rarely where the attention is.',
-    detail:
-      'Attention, and therefore price, concentrates on the visible layer — the model, ' +
-      'the accelerator, the hyperscaler. The binding constraint usually sits one or two ' +
-      'layers below it, in a company nobody writes about. The gap between where a chain ' +
-      'is priced and where it actually binds is the whole reason to map it.',
-    falsifier:
-      'If constraints resolved at the visible layer — if compute output tracked chip ' +
-      'design announcements rather than packaging, power and tooling — the map would be ' +
-      'describing a chain that no longer gates anything.',
-  },
-  {
-    id: 'chokepoints-are-not-commodities',
-    claim: 'A chokepoint does not price like a commodity.',
-    detail:
-      'When both demand and supply are inelastic, price is set by scarcity rather than ' +
-      'by cost of production, and it moves in jumps. Cost-plus intuition — the instinct ' +
-      'that says a material cannot be worth many times its input cost — systematically ' +
-      'misprices exactly the nodes this firm covers.',
-    falsifier:
-      'Sustained periods where chokepoint prices track production cost, with substitution ' +
-      'or new entry arriving fast enough to cap them.',
-  },
-  {
-    id: 'energy-binds-first',
-    claim: 'This decade, energy binds before silicon does.',
-    detail:
-      'Compute is being announced faster than it can be energised. Transformer order ' +
-      'books, interconnection queues and turbine slots clear on a slower clock than fab ' +
-      'construction, and none of them can be accelerated with capital alone.',
-    falsifier:
-      'Interconnection queues and transformer lead times shortening while announced ' +
-      'datacentre capacity keeps rising — energy ceasing to be the thing that slips.',
-  },
-  {
-    id: 'substitution-is-slow',
-    claim: '“There is an alternative” is usually false on the horizon that matters.',
-    detail:
-      'Qualification is measured in years: a second-source material, tool or resist has ' +
-      'to be proven per process, per fab, per application. A substitute that exists in a ' +
-      'laboratory and a substitute that is qualified are different facts, and only the ' +
-      'second one relieves a constraint.',
-    falsifier:
-      'Qualification cycles compressing materially — second sources reaching production ' +
-      'in quarters rather than years.',
-  },
-  {
-    id: 'concentration-is-political',
-    claim: 'Supply concentration is now a policy variable, in both directions.',
-    detail:
-      'Export controls made geography a first-order term in these chains. That cuts both ' +
-      'ways: restriction raises the value of what is restricted, and subsidised ' +
-      're-shoring can destroy the scarcity that made a node interesting in the first place.',
-    falsifier:
-      'A durable de-escalation in which controls are lifted and re-shoring programmes ' +
-      'deliver qualified capacity at scale.',
-  },
-  {
-    id: 'the-map-compounds',
-    claim: 'The map compounds. A position does not.',
-    detail:
-      'Any single view can be wrong and is eventually closed. Knowing every qualified ' +
-      'producer of a material, and being told when a row is wrong by someone who works ' +
-      'in that chain, is an asset that accumulates. That is why the research is ' +
-      'published rather than sold, and why it comes before any book.',
-    falsifier:
-      'The map failing to attract corrections — no practitioner engagement — which would ' +
-      'mean it is not compounding, only ageing.',
-  },
-];
-
-// =====================================================================
-// ROUTES — how anyone acts in these markets
-//
-// Descriptions of market structure, not recommendations, and deliberately
-// written to include what each route does NOT give you. A reader who takes a
-// commodity ETF for exposure to seven-nines tin has been misled by omission,
-// and omission is the failure mode a page like this actually has.
-// =====================================================================
-
-export interface ActionRoute {
-  id: string;
-  name: string;
-  /** Who provides it — a category of firm, never a named one. */
-  providedBy: string;
-  gives: string;
-  /** The mismatch between this route and what the research is actually about. */
-  doesNotGive: string;
-  /** Questions worth putting to any provider before committing. */
-  ask: string[];
-}
-
-export const ACTION_ROUTES: readonly ActionRoute[] = [
-  {
-    id: 'listed-equity',
-    name: 'Listed equity in the chain',
-    providedBy: 'Any regulated broker or bank offering international market access.',
-    gives:
-      'Exposure to the listed producers, tool makers and refiners that appear in the map — ' +
-      'the most accessible route, and the only one most readers will need.',
-    doesNotGive:
-      'Many of the most concentrated nodes are private, family-held, or listed only ' +
-      'domestically in markets a retail account cannot reach. And a listed company is ' +
-      'rarely a pure play on the chokepoint you care about; the interesting segment is ' +
-      'often a small share of its revenue.',
-    ask: [
-      'Which exchanges can this account actually reach, and at what cost?',
-      'What share of this company’s revenue comes from the segment the research is about?',
-      'Is there a foreign-ownership limit or a withholding treatment I should know about?',
-    ],
-  },
-  {
-    id: 'commodity-derivatives',
-    name: 'Exchange-traded commodity exposure',
-    providedBy: 'Brokers offering futures, or issuers of exchange-traded commodities.',
-    gives: 'Liquid, transparent exposure to the benchmark grade of a traded metal.',
-    doesNotGive:
-      'The benchmark grade is almost never the grade this research is about. Exchange ' +
-      'tin is not seven-nines tin qualified for an EUV source, and the premium between ' +
-      'them is the part that reflects the chokepoint. Rolling a futures position also ' +
-      'carries a cost that has nothing to do with the thesis.',
-    ask: [
-      'What exactly does this contract deliver — which grade, which warehouse?',
-      'What has the roll cost been over a horizon like mine?',
-      'Is the premium I actually care about visible in this price at all?',
-    ],
-  },
-  {
-    id: 'physical',
-    name: 'Physical metal',
-    providedBy: 'Specialist metals dealers and vaulting or custody providers.',
-    gives:
-      'The only route that touches the actual grade — and, for an industrial buyer, ' +
-      'the one that also solves a supply problem rather than expressing a view.',
-    doesNotGive:
-      'Liquidity. Assay, storage, insurance, minimum lot sizes and a bid-offer that ' +
-      'reflects a genuinely thin market. Several of these materials are export-controlled, ' +
-      'which is a licensing question before it is a price question.',
-    ask: [
-      'What assay and certificate of analysis comes with the lot, and from whom?',
-      'Where is it stored, insured by whom, and what does it cost to hold per year?',
-      'Who will buy this back from me, and at what discount to today’s price?',
-    ],
-  },
-  {
-    id: 'private',
-    name: 'Private markets',
-    providedBy: 'Licensed placement agents, private funds, and eligibility-gated platforms.',
-    gives:
-      'Access to the part of the universe that is not listed anywhere — which, for ' +
-      'several chokepoints in the map, is the only part there is.',
-    doesNotGive:
-      'Liquidity, price discovery, or entry on your timetable. Eligibility rules ' +
-      '(qualified, professional or accredited investor, depending on jurisdiction) ' +
-      'exclude most people by law, not by preference.',
-    ask: [
-      'Am I eligible for this under my own jurisdiction’s rules — and who verified that?',
-      'Is the party introducing this licensed to do so, and how are they paid?',
-      'What is the realistic holding period before any liquidity event?',
-    ],
-  },
-  {
-    id: 'funds',
-    name: 'Thematic funds',
-    providedBy: 'Fund managers and the platforms that distribute them.',
-    gives: 'Diversified, professionally managed exposure without needing to pick nodes.',
-    doesNotGive:
-      'Precision. A fund named for a theme frequently holds the visible layer — the ' +
-      'large, liquid, widely-owned names — rather than the constrained one. The holdings ' +
-      'list settles this in about five minutes, and it is worth the five minutes.',
-    ask: [
-      'What are the actual top holdings, and do they own the chokepoint or sit next to it?',
-      'What is the total cost of ownership, including anything not in the headline fee?',
-    ],
-  },
-  {
-    id: 'procurement',
-    name: 'Securing supply instead of buying exposure',
-    providedBy: 'Your own procurement function, and the producers in the map directly.',
-    gives:
-      'For a company that consumes any of this, the highest-return action is usually not ' +
-      'an investment at all: qualify a second source, lengthen a contract, or hold ' +
-      'strategic stock before the constraint binds. The map is a supplier list as much ' +
-      'as it is a research product.',
-    doesNotGive:
-      'Anything financial. This is an operational decision with operational costs — ' +
-      'qualification time, working capital, obsolescence risk.',
-    ask: [
-      'Which of these producers is already qualified for our process, and which is not?',
-      'What would a second source cost in time, not just in price?',
-    ],
-  },
-];
-
-// =====================================================================
-// READINESS — the honest distance to becoming the investor
-//
-// The same discipline as the coverage meter: a checklist that flatters nobody.
-// "We are getting everything ready" is a feeling until it is a list with
-// statuses, and then it is a plan.
-// =====================================================================
-
-export type ReadinessStatus = 'done' | 'in-progress' | 'not-started';
-
-export interface ReadinessItem {
-  id: string;
-  requirement: string;
-  status: ReadinessStatus;
-  detail: string;
-}
-
-export const READINESS: readonly ReadinessItem[] = [
-  {
-    id: 'thesis',
-    requirement: 'A written, public investment thesis',
-    status: 'done',
-    detail:
-      'Stated above, with a falsifier against each claim, so it can be scored rather ' +
-      'than admired.',
-  },
-  {
-    id: 'process',
-    requirement: 'A documented research process and coverage universe',
-    status: 'in-progress',
-    detail:
-      'Two tests, a defined universe, and a verification standard that separates leads ' +
-      'from findings. Phase 1 is not finished; the meter on the map says by how much.',
-  },
-  {
-    id: 'conflicts',
-    requirement: 'Conflicts, personal-dealing and disclosure policy',
-    status: 'in-progress',
-    detail:
-      'The disclosure rules are written and public. Personal-dealing rules for staff, ' +
-      'and the compliance function to enforce them, are not.',
-  },
-  {
-    id: 'track-record',
-    requirement: 'A timestamped, independently checkable track record',
-    status: 'not-started',
-    detail:
-      'The single hardest one to fake and the slowest to acquire. It starts accruing the ' +
-      'day published calls carry dates nobody can quietly edit.',
-  },
-  {
-    id: 'entity',
-    requirement: 'Legal entity, domicile and governance',
-    status: 'not-started',
-    detail: 'Structure follows the regulatory pathway, so it waits on the next line.',
-  },
-  {
-    id: 'licence',
-    requirement: 'Regulatory pathway chosen and licence obtained',
-    status: 'not-started',
-    detail:
-      'Managing third-party money is licensed activity. The options — an asset-manager ' +
-      'licence, operating under a licensed manager, or a structure that stays below a ' +
-      'threshold — have materially different costs and timelines, and none is quick.',
-  },
-  {
-    id: 'onboarding',
-    requirement: 'Investor eligibility, KYC and AML onboarding',
-    status: 'not-started',
-    detail:
-      'Eligibility is a legal test, not a checkbox. This is also where the portal stops ' +
-      'being an account and starts being a regulated record.',
-  },
-  {
-    id: 'custody',
-    requirement: 'Custody, execution and administration relationships',
-    status: 'not-started',
-    detail: 'Somebody independent has to hold the assets and strike the valuations.',
-  },
-  {
-    id: 'reporting',
-    requirement: 'Valuation and investor reporting policy',
-    status: 'not-started',
-    detail: 'How positions are marked, how often, and by whom — agreed before the first one.',
-  },
-];
-
-export interface ReadinessProgress {
-  total: number;
-  done: number;
-  inProgress: number;
-}
-
-export function readinessProgress(): ReadinessProgress {
-  return {
-    total: READINESS.length,
-    done: READINESS.filter(item => item.status === 'done').length,
-    inProgress: READINESS.filter(item => item.status === 'in-progress').length,
-  };
-}
-
-export const READINESS_STATUS_LABEL: Record<ReadinessStatus, string> = {
-  done: 'Done',
-  'in-progress': 'In progress',
-  'not-started': 'Not started',
-};
diff --git a/src/config/substrata-coverage.ts b/src/config/substrata-coverage.ts
deleted file mode 100644
index 1e235508e..000000000
--- a/src/config/substrata-coverage.ts
+++ /dev/null
@@ -1,504 +0,0 @@
-/**
- * Substrate — Phase 1 coverage universe: the producers of the fifteen.
- *
- * The firm's first research product. For every material on the desk
- * (`substrata.ts` → CATALOGUE), the set of companies that mine, refine,
- * convert or recycle it. Mostly private, mostly uncovered: there is a great
- * deal of published research on chip designers and almost none on who fires
- * crucible-grade quartz or upgrades tin to seven nines.
- *
- * WHAT THIS FILE CLAIMS, AND WHAT IT DELIBERATELY DOES NOT
- *
- * Each entry asserts three things only: a company's name, where it operates,
- * and which step of the chain it occupies. Those are stable, widely documented
- * facts. It asserts NOTHING about capacity, market share, revenue, cost
- * position, or quality — the claims that go stale within a quarter, that move
- * markets when wrong, and that this firm has not yet sourced. There is no
- * field for them on purpose: the structure is the discipline, and the research
- * phase is what adds those numbers, each with a citation.
- *
- * Consequently every entry starts at `source: null`, which reads as UNVERIFIED
- * — a research lead, not a finding. An analyst clears a row by attaching the
- * primary source that confirms the company's role in that material. Coverage
- * progress is measured by how many rows have a source, not by how many rows
- * exist, and `coverageProgress()` below is what reports it.
- *
- * This is the mandate's own rule turned on the firm: an unsourced claim is
- * marked unverified rather than stated, however confident the analyst is.
- *
- * Created: 2026-08-26
- */
-
-import { MATERIALS, type CurveId, type NodeType } from './substrata';
-
-// =====================================================================
-// SHAPE
-// =====================================================================
-
-/**
- * Where a company sits in the chain. A single firm can appear on more than one
- * material, and at different steps on each — that overlap is precisely the
- * structure the map exists to expose.
- */
-export const PRODUCER_ROLES = [
-  {
-    id: 'mine',
-    label: 'Mine / extract',
-    detail: 'Primary extraction, or recovery as a by-product.',
-  },
-  { id: 'refine', label: 'Refine', detail: 'Purification to the grade the application needs.' },
-  {
-    id: 'convert',
-    label: 'Convert',
-    detail: 'Into the form that ships: ingot, wafer, tape, coil, target.',
-  },
-  { id: 'recycle', label: 'Recycle', detail: 'Secondary supply — often the only elastic source.' },
-] as const;
-
-export type ProducerRole = (typeof PRODUCER_ROLES)[number]['id'];
-
-export interface Producer {
-  /** Company name as it trades. */
-  name: string;
-  /** ISO 3166-1 alpha-2 of the operating jurisdiction(s) for this material. */
-  jurisdictions: string[];
-  role: ProducerRole;
-  /**
-   * Primary source confirming this company's role in this material.
-   * `null` = unverified research lead. Never present an unsourced row as a
-   * finding — see the header.
-   */
-  source: string | null;
-}
-
-export interface MaterialCoverage {
-  /** Must exactly match a CATALOGUE title in `substrata.ts`. */
-  material: string;
-  /** What makes this material a chokepoint, in one line — the research thesis. */
-  thesis: string;
-  producers: Producer[];
-}
-
-/** Shorthand: every row starts unverified, because every row starts unsourced. */
-function lead(name: string, jurisdictions: string[], role: ProducerRole): Producer {
-  return { name, jurisdictions, role, source: null };
-}
-
-// =====================================================================
-// THE UNIVERSE
-// =====================================================================
-
-export const COVERAGE: readonly MaterialCoverage[] = [
-  // ---------- Lithography & Optics ----------
-  {
-    material: 'High-purity tin, EUV droplet grade',
-    thesis:
-      'Tin metal is not scarce; tin at seven nines, qualified for an EUV source, is. The chokepoint is the upgrading step, not the mine.',
-    producers: [
-      lead('Yunnan Tin', ['CN'], 'refine'),
-      lead('Minsur', ['PE'], 'refine'),
-      lead('PT Timah', ['ID'], 'refine'),
-      lead('Malaysia Smelting Corporation', ['MY'], 'refine'),
-      lead('Indium Corporation', ['US'], 'convert'),
-      lead('5N Plus', ['CA', 'DE'], 'convert'),
-      lead('Aurubis', ['DE'], 'recycle'),
-    ],
-  },
-  {
-    material: 'Neon, excimer laser grade',
-    thesis:
-      'Neon is separated from air, but economically only alongside large-scale air separation attached to steelmaking — which is why an industrial gas map and a war map turned out to be the same map in 2022.',
-    producers: [
-      lead('Linde', ['GB', 'US', 'DE'], 'refine'),
-      lead('Air Liquide', ['FR'], 'refine'),
-      lead('Messer', ['DE'], 'refine'),
-      lead('Iceblick', ['UA'], 'refine'),
-      lead('Cryoin Engineering', ['UA'], 'refine'),
-      lead('Baosteel Gases', ['CN'], 'refine'),
-    ],
-  },
-  {
-    material: 'Ruthenium, sputtering and ALD grade',
-    thesis:
-      'Ruthenium is a by-product of PGM mining, so supply is set by platinum and palladium economics rather than by demand for ruthenium. Refining and target fabrication are separately concentrated.',
-    producers: [
-      lead('Sibanye-Stillwater', ['ZA'], 'mine'),
-      lead('Impala Platinum', ['ZA'], 'mine'),
-      lead('Nornickel', ['RU'], 'mine'),
-      lead('Heraeus', ['DE'], 'refine'),
-      lead('Johnson Matthey', ['GB'], 'refine'),
-      lead('Umicore', ['BE'], 'refine'),
-      lead('Furuya Metal', ['JP'], 'convert'),
-      lead('Tanaka Kikinzoku', ['JP'], 'convert'),
-    ],
-  },
-
-  // ---------- Semiconductor Feedstock ----------
-  {
-    material: 'Electronic-grade polysilicon',
-    thesis:
-      'Solar-grade polysilicon has many producers; electronic-grade has very few, and the gap between the two is measured in orders of magnitude of impurity, not in price.',
-    producers: [
-      lead('Wacker Chemie', ['DE', 'US'], 'refine'),
-      lead('Hemlock Semiconductor', ['US'], 'refine'),
-      lead('Tokuyama', ['JP', 'MY'], 'refine'),
-      lead('OCI', ['KR', 'MY'], 'refine'),
-      lead('Mitsubishi Materials', ['JP'], 'refine'),
-      lead('REC Silicon', ['US', 'NO'], 'refine'),
-    ],
-  },
-  {
-    material: '300 mm prime silicon wafers',
-    thesis:
-      'Five firms supply essentially all prime 300 mm wafer capacity. Qualification at a leading-edge fab takes years, so the barrier is certification history rather than capital.',
-    producers: [
-      lead('Shin-Etsu Handotai', ['JP'], 'convert'),
-      lead('SUMCO', ['JP'], 'convert'),
-      lead('GlobalWafers', ['TW'], 'convert'),
-      lead('Siltronic', ['DE'], 'convert'),
-      lead('SK Siltron', ['KR'], 'convert'),
-    ],
-  },
-  {
-    material: 'Crucible-grade high-purity quartz sand',
-    thesis:
-      'The clearest single point of failure in the entire chain: inner-layer crucible quartz comes, in practice, from a very small number of deposits, and every Czochralski puller on earth needs it.',
-    producers: [
-      lead('The Quartz Corp', ['NO', 'US'], 'mine'),
-      lead('Sibelco', ['BE', 'US'], 'mine'),
-      lead('Russian Quartz', ['RU'], 'mine'),
-      lead('Jiangsu Pacific Quartz', ['CN'], 'refine'),
-      lead('Momentive Technologies', ['US'], 'convert'),
-      lead('Shin-Etsu Quartz', ['JP'], 'convert'),
-      lead('Ferrotec', ['JP', 'CN'], 'convert'),
-    ],
-  },
-  {
-    material: 'Gallium, refined',
-    thesis:
-      'A by-product of alumina refining, so primary supply cannot respond to price. Concentrated in one jurisdiction and under export control since 2023 — the textbook case for why the map matters.',
-    producers: [
-      lead('Chinalco', ['CN'], 'refine'),
-      lead('East Hope Group', ['CN'], 'refine'),
-      lead('Zhuhai Fangyuan', ['CN'], 'refine'),
-      lead('Rio Tinto', ['CA'], 'refine'),
-      lead('Nyrstar', ['AU'], 'refine'),
-      lead('5N Plus', ['CA'], 'convert'),
-    ],
-  },
-
-  // ---------- Thermal & Packaging ----------
-  {
-    material: 'CVD synthetic diamond heat spreader',
-    thesis:
-      'Reactor time, not raw material, is the constraint. Growing optical-grade polycrystalline diamond is slow, and the qualified capacity is held by a handful of firms.',
-    producers: [
-      lead('Element Six', ['GB', 'IE'], 'convert'),
-      lead('Coherent', ['US'], 'convert'),
-      lead('Diamond Materials', ['DE'], 'convert'),
-      lead('Applied Diamond', ['US'], 'convert'),
-      lead('Sumitomo Electric', ['JP'], 'convert'),
-    ],
-  },
-  {
-    material: 'Silicon carbide substrate, 200 mm semi-insulating',
-    thesis:
-      'The 150 mm to 200 mm transition resets everyone’s yield curve at once. Semi-insulating grade is a much smaller field than conductive SiC, and defect density is the gate.',
-    producers: [
-      lead('Wolfspeed', ['US'], 'convert'),
-      lead('Coherent', ['US'], 'convert'),
-      lead('SK Siltron CSS', ['KR', 'US'], 'convert'),
-      lead('Resonac', ['JP'], 'convert'),
-      lead('SICC', ['CN'], 'convert'),
-      lead('TankeBlue', ['CN'], 'convert'),
-    ],
-  },
-  {
-    material: 'Two-phase dielectric immersion coolant',
-    thesis:
-      'A chokepoint created by regulation rather than geology: PFAS restriction is withdrawing the incumbent fluorinated chemistry precisely as immersion cooling starts to scale.',
-    producers: [
-      lead('3M', ['US'], 'refine'),
-      lead('Chemours', ['US'], 'refine'),
-      lead('Syensqo', ['BE'], 'refine'),
-      lead('AGC', ['JP'], 'refine'),
-      lead('Engineered Fluids', ['US'], 'convert'),
-    ],
-  },
-
-  // ---------- Power, Grid & Superconductors ----------
-  {
-    material: 'Grain-oriented electrical steel (GOES)',
-    thesis:
-      'The binding constraint on datacentre energisation. Large power transformers queue for years, and the core steel behind them is made on a small number of qualified lines.',
-    producers: [
-      lead('Nippon Steel', ['JP'], 'convert'),
-      lead('JFE Steel', ['JP'], 'convert'),
-      lead('POSCO', ['KR'], 'convert'),
-      lead('ThyssenKrupp Electrical Steel', ['DE'], 'convert'),
-      lead('Cleveland-Cliffs', ['US'], 'convert'),
-      lead('Baosteel', ['CN'], 'convert'),
-      lead('Stalprodukt', ['PL'], 'convert'),
-    ],
-  },
-  {
-    material: 'REBCO superconducting tape, 12 mm',
-    thesis:
-      'A single high-field fusion magnet consumes tape by the kilometre. Annual world output is small enough that one programme’s order book moves the whole market.',
-    producers: [
-      lead('Fujikura', ['JP'], 'convert'),
-      lead('Faraday Factory Japan', ['JP'], 'convert'),
-      lead('SuperPower', ['US'], 'convert'),
-      lead('MetOx', ['US'], 'convert'),
-      lead('THEVA', ['DE'], 'convert'),
-      lead('Shanghai Superconductor', ['CN'], 'convert'),
-      lead('AMSC', ['US'], 'convert'),
-    ],
-  },
-  {
-    material: 'Liquid helium (He-4)',
-    thesis:
-      'Helium is produced only as a by-product of a few natural gas fields with unusual composition, so supply is set by unrelated gas economics and by a handful of political jurisdictions.',
-    producers: [
-      lead('QatarEnergy', ['QA'], 'mine'),
-      lead('ExxonMobil', ['US'], 'mine'),
-      lead('Gazprom', ['RU'], 'mine'),
-      lead('Air Products', ['US'], 'refine'),
-      lead('Linde', ['US', 'GB'], 'refine'),
-      lead('Air Liquide', ['FR'], 'refine'),
-    ],
-  },
-
-  // ---------- Actuation & Robotics ----------
-  {
-    material: 'Didymium (Nd-Pr) metal, magnet feed',
-    thesis:
-      'Mining is diversifying; separation and metal-making have not. The chokepoint moved downstream of the mine, which is where most published coverage still is not looking.',
-    producers: [
-      lead('China Northern Rare Earth', ['CN'], 'refine'),
-      lead('Shenghe Resources', ['CN'], 'refine'),
-      lead('Lynas Rare Earths', ['AU', 'MY'], 'refine'),
-      lead('MP Materials', ['US'], 'mine'),
-      lead('Neo Performance Materials', ['CA', 'EE'], 'convert'),
-      lead('Solvay', ['FR'], 'refine'),
-    ],
-  },
-  {
-    material: 'Dysprosium metal',
-    thesis:
-      'Heavy rare earths are a far narrower chain than light ones, feedstock included. Small volumes, no substitute for hot-running magnets, and separation concentrated in effectively one jurisdiction.',
-    producers: [
-      lead('China Rare Earth Group', ['CN'], 'refine'),
-      lead('Shenghe Resources', ['CN'], 'refine'),
-      lead('Lynas Rare Earths', ['AU', 'MY'], 'refine'),
-      lead('Neo Performance Materials', ['CA', 'EE'], 'convert'),
-      lead('Less Common Metals', ['GB'], 'convert'),
-    ],
-  },
-];
-
-// =====================================================================
-// PROGRESS
-// =====================================================================
-
-export interface CoverageProgress {
-  /** Research leads in the universe. */
-  total: number;
-  /** Rows with a primary source attached — the only ones that count as covered. */
-  sourced: number;
-  /** Materials on the desk with no coverage entry at all. */
-  uncoveredMaterials: string[];
-}
-
-/**
- * What Phase 1 completion actually means. Rows without a source are leads, so
- * a universe of 90 unsourced entries is 0% covered, not 100% mapped.
- */
-export function coverageProgress(): CoverageProgress {
-  const rows = COVERAGE.flatMap(entry => entry.producers);
-  const covered = new Set(COVERAGE.map(entry => entry.material));
-  return {
-    total: rows.length,
-    sourced: rows.filter(producer => producer.source !== null).length,
-    uncoveredMaterials: MATERIALS.map(material => material.title).filter(
-      title => !covered.has(title)
-    ),
-  };
-}
-
-/** @returns every material a company appears on — the overlaps are the point. */
-export function materialsFor(companyName: string): string[] {
-  return COVERAGE.filter(entry =>
-    entry.producers.some(producer => producer.name === companyName)
-  ).map(entry => entry.material);
-}
-
-// =====================================================================
-// CHOKEPOINTS THAT ARE NOT MATERIALS
-//
-// A material is only one kind of chokepoint, and for the compute and power
-// curves it is often not the tightest one. A tool with a single supplier,
-// packaging capacity allocated years ahead, a transformer order book, an
-// interconnection queue and a process that lives in people rather than in
-// equipment all gate the same curves — and none of them appears on a periodic
-// table. The two tests do not care what a node is made of, so these enter the
-// universe the same way and carry the same verification discipline: each row
-// claims what the node is and why it gates, and nothing about capacity,
-// share or price, because those are the numbers this firm has not sourced.
-// =====================================================================
-
-export interface Chokepoint {
-  name: string;
-  type: NodeType;
-  curve: CurveId;
-  /** ISO 3166-1 alpha-2 codes where the constraint physically sits, if narrow. */
-  jurisdictions: string[];
-  /** Why this gates a curve. The research claim, and the whole of it. */
-  why: string;
-  /** Primary source. `null` = unverified research lead, exactly as above. */
-  source: string | null;
-}
-
-function node(
-  name: string,
-  type: NodeType,
-  curve: CurveId,
-  jurisdictions: string[],
-  why: string
-): Chokepoint {
-  return { name, type, curve, jurisdictions, why, source: null };
-}
-
-/** Display label per node type, so the site never prints a raw enum. */
-export const NODE_TYPE_LABEL: Record<NodeType, string> = {
-  material: 'Material',
-  company: 'Company',
-  person: 'People',
-  machine: 'Machine',
-  process: 'Process',
-};
-
-export const CHOKEPOINTS: readonly Chokepoint[] = [
-  // ---------- Compute per joule ----------
-  node(
-    'EUV lithography scanners',
-    'machine',
-    'compute-per-joule',
-    ['NL'],
-    'One company on earth builds them, the queue is measured in years, and no second source is in progress. Every leading-edge wafer in the world is downstream of one factory.'
-  ),
-  node(
-    'EUV projection optics',
-    'process',
-    'compute-per-joule',
-    ['DE'],
-    'The mirror systems inside the scanner are polished to a tolerance one supplier has ever achieved. It is a chokepoint inside a chokepoint, and the constraint is know-how, not capacity.'
-  ),
-  node(
-    'Advanced packaging capacity',
-    'process',
-    'compute-per-joule',
-    ['TW', 'KR', 'US'],
-    'Accelerator output is gated by how many dies can be packaged onto an interposer, not by wafer starts. Capacity is allocated years ahead, which makes the allocation itself the scarce good.'
-  ),
-  node(
-    'High-bandwidth memory stacking yield',
-    'process',
-    'compute-per-joule',
-    ['KR', 'US'],
-    'Three suppliers, and the yield on stacking and bonding is knowledge that does not transfer when someone else buys the same equipment.'
-  ),
-  node(
-    'Leading-edge foundry capacity',
-    'company',
-    'compute-per-joule',
-    ['TW', 'KR', 'US'],
-    'A handful of fabs can run the newest node at volume. New capacity is a multi-year, multi-billion commitment, so the supply curve cannot answer a demand shock.'
-  ),
-  node(
-    'Photoresist formulation',
-    'process',
-    'compute-per-joule',
-    ['JP'],
-    'The chemistry is qualified per process per fab and is overwhelmingly Japanese. Substituting a resist is a re-qualification programme, not a purchase.'
-  ),
-  node(
-    'Semiconductor process engineers',
-    'person',
-    'compute-per-joule',
-    [],
-    'The constraint nobody can buy. A fab ramp moves at the speed of people who have done it before, which is why capacity announcements and capacity slip on different clocks.'
-  ),
-
-  // ---------- Joules delivered ----------
-  node(
-    'Large power transformer slots',
-    'machine',
-    'joules-delivered',
-    ['KR', 'DE', 'JP', 'US'],
-    'Lead times run to several years, and a datacentre cannot be energised without one. This gates more announced compute today than chip supply does.'
-  ),
-  node(
-    'Grid interconnection queues',
-    'process',
-    'joules-delivered',
-    [],
-    'Not a material, not a machine, and frequently the binding constraint: a multi-year administrative queue between a signed site and a live megawatt.'
-  ),
-  node(
-    'Heavy-duty gas turbine order books',
-    'machine',
-    'joules-delivered',
-    ['US', 'DE'],
-    'The fastest route to firm power at scale, and the order books are effectively sold out. A slot is worth more than the turbine price implies.'
-  ),
-  node(
-    'High-voltage cable and switchgear',
-    'machine',
-    'joules-delivered',
-    ['DE', 'IT', 'KR'],
-    'The unglamorous half of energisation. Same multi-year lead times as transformers, same inability to respond quickly to a demand shock.'
-  ),
-
-  // ---------- Actuation ----------
-  node(
-    'Rare-earth magnet sintering',
-    'process',
-    'actuation',
-    ['CN'],
-    'Even where the metal is mined elsewhere, sintering and grain-boundary diffusion are concentrated in one jurisdiction. The chokepoint sits downstream of the mine, where most coverage is not looking.'
-  ),
-  node(
-    'Precision reduction drives',
-    'company',
-    'actuation',
-    ['JP'],
-    'Harmonic and cycloidal drives set what a robot joint can do. Few qualified suppliers, and the tolerances are decades of accumulated manufacturing practice.'
-  ),
-  node(
-    'Robot-grade encoders and force sensors',
-    'company',
-    'actuation',
-    ['JP', 'DE'],
-    'Closing the loop is what separates a manipulator from an arm. Narrow supply, and qualification is per-application.'
-  ),
-];
-
-export interface ChokepointProgress {
-  total: number;
-  sourced: number;
-  byCurve: Record<string, number>;
-}
-
-/** Same honesty as the producer map: a row counts only once it has a source. */
-export function chokepointProgress(): ChokepointProgress {
-  const byCurve: Record<string, number> = {};
-  for (const point of CHOKEPOINTS) {
-    byCurve[point.curve] = (byCurve[point.curve] ?? 0) + 1;
-  }
-  return {
-    total: CHOKEPOINTS.length,
-    sourced: CHOKEPOINTS.filter(point => point.source !== null).length,
-    byCurve,
-  };
-}
diff --git a/src/config/substrata-participants.ts b/src/config/substrata-participants.ts
deleted file mode 100644
index 228ce8c25..000000000
--- a/src/config/substrata-participants.ts
+++ /dev/null
@@ -1,1045 +0,0 @@
-/**
- * Substrata — the participants of the singularity chain, graded by scarcity.
- *
- * The producer map answers "who makes this material". This answers the bigger
- * question: who is in the chain at all, from the ore to the buyer, and which of
- * them are actually hard to replace.
- *
- * THE SCARCITY GRADE IS THE PRODUCT
- *
- * A directory of everyone in a supply chain is a phone book. What makes this
- * research is the third column: for each participant, whether it is a
- * chokepoint, merely concentrated, or genuinely competitive. Grading some
- * participants "competitive" is not filler — it is the thing that makes
- * "chokepoint" mean something. A map where every node is critical is a map
- * that has not been read.
- *
- * The grades are the mandate's own screen (concentration, substitutability,
- * lead time, demand inelasticity) applied one participant at a time:
- *
- *   chokepoint   — one or a very few qualified suppliers, and no substitute
- *                  arrives on a horizon that matters. Removing it stops things.
- *   concentrated — a handful of credible suppliers. Substitution is possible
- *                  but slow, costly, or requires re-qualification.
- *   competitive  — many credible suppliers. Present in the chain, and not a
- *                  constraint on it.
- *
- * On the demand side the same grade reads as concentration of BUYERS: when a
- * handful of firms account for most of the world's orders, that is a scarcity
- * fact about the chain too, pointing the other way.
- *
- * Same verification discipline as everywhere else: each row claims a name, a
- * layer, a jurisdiction, a role and a scarcity judgement — and nothing about
- * revenue, capacity or share. Every row starts unsourced, which reads as a
- * research lead rather than a finding.
- *
- * Created: 2026-08-26
- */
-
-import type { CurveId } from './substrata';
-
-// =====================================================================
-// LAYERS — ore to buyer
-// =====================================================================
-
-export type ChainLayer =
-  | 'extraction'
-  | 'refining'
-  | 'conversion'
-  | 'equipment'
-  | 'fabrication'
-  | 'packaging'
-  | 'systems'
-  | 'energy'
-  | 'actuation'
-  | 'deployment';
-
-export interface ChainLayerSpec {
-  id: ChainLayer;
-  name: string;
-  curve: CurveId;
-  detail: string;
-}
-
-/** Ordered upstream to downstream. The order is the chain. */
-export const CHAIN_LAYERS: readonly ChainLayerSpec[] = [
-  {
-    id: 'extraction',
-    name: 'Extraction',
-    curve: 'compute-per-joule',
-    detail: 'Ore, gas fields and the by-product streams that most of these elements come from.',
-  },
-  {
-    id: 'refining',
-    name: 'Refining & separation',
-    curve: 'compute-per-joule',
-    detail:
-      'Purification to the grade an application needs. For most of this chain the chokepoint moved here long ago, downstream of the mine and out of view.',
-  },
-  {
-    id: 'conversion',
-    name: 'Conversion',
-    curve: 'compute-per-joule',
-    detail: 'Into the form that ships: wafer, crucible, tape, coil, target, magnet.',
-  },
-  {
-    id: 'equipment',
-    name: 'Equipment & consumables',
-    curve: 'compute-per-joule',
-    detail:
-      'The tools that print, etch, deposit and measure — and the chemistry they consume doing it.',
-  },
-  {
-    id: 'fabrication',
-    name: 'Fabrication',
-    curve: 'compute-per-joule',
-    detail: 'The fabs. Where a design becomes a die, at a node and a yield.',
-  },
-  {
-    id: 'packaging',
-    name: 'Packaging & memory',
-    curve: 'compute-per-joule',
-    detail:
-      'Where dies become an accelerator. Increasingly the step that gates output rather than wafer starts.',
-  },
-  {
-    id: 'systems',
-    name: 'Systems & silicon',
-    curve: 'compute-per-joule',
-    detail: 'Accelerators, interconnect and the machines they are built into.',
-  },
-  {
-    id: 'energy',
-    name: 'Energy & grid',
-    curve: 'joules-delivered',
-    detail:
-      'Transformers, turbines, cable and switchgear. The layer that decides whether announced compute is ever energised.',
-  },
-  {
-    id: 'actuation',
-    name: 'Actuation & robotics',
-    curve: 'actuation',
-    detail: 'Drives, motors, encoders and the robots they add up to.',
-  },
-  {
-    id: 'deployment',
-    name: 'Deployment & demand',
-    curve: 'compute-per-joule',
-    detail:
-      'Who is actually buying. Concentrated demand is a scarcity fact about a chain in its own right.',
-  },
-];
-
-// =====================================================================
-// SCARCITY
-// =====================================================================
-
-export type ScarcityGrade = 'chokepoint' | 'concentrated' | 'competitive';
-
-export const SCARCITY_LABEL: Record<ScarcityGrade, string> = {
-  chokepoint: 'Chokepoint',
-  concentrated: 'Concentrated',
-  competitive: 'Competitive',
-};
-
-export const SCARCITY_DETAIL: Record<ScarcityGrade, string> = {
-  chokepoint:
-    'One or very few qualified suppliers, and no substitute on a horizon that matters. Removing it stops things.',
-  concentrated:
-    'A handful of credible suppliers. Substitution is possible but slow, costly, or needs re-qualification.',
-  competitive:
-    'Many credible suppliers. In the chain, but not a constraint on it — and saying so is what makes the other two grades mean something.',
-};
-
-export interface Participant {
-  name: string;
-  layer: ChainLayer;
-  jurisdictions: string[];
-  /** What they do in the chain, in one line. */
-  role: string;
-  scarcity: ScarcityGrade;
-  /** Why the grade — the research claim, and the whole of it. */
-  why: string;
-  /** Primary source. `null` = unverified research lead, as everywhere else. */
-  source: string | null;
-}
-
-function p(
-  name: string,
-  layer: ChainLayer,
-  jurisdictions: string[],
-  role: string,
-  scarcity: ScarcityGrade,
-  why: string
-): Participant {
-  return { name, layer, jurisdictions, role, scarcity, why, source: null };
-}
-
-// =====================================================================
-// THE DIRECTORY
-// =====================================================================
-
-export const PARTICIPANTS: readonly Participant[] = [
-  // ---------------- Extraction ----------------
-  p(
-    'The Quartz Corp',
-    'extraction',
-    ['NO', 'US'],
-    'High-purity quartz sand',
-    'chokepoint',
-    'Inner-layer crucible quartz comes in practice from a very small number of deposits, and every Czochralski puller on earth needs it.'
-  ),
-  p(
-    'Sibelco',
-    'extraction',
-    ['BE', 'US'],
-    'High-purity quartz sand',
-    'chokepoint',
-    'The other holder of the same rare deposit quality. Two names deep is the whole of the upstream for this input.'
-  ),
-  p(
-    'Sibanye-Stillwater',
-    'extraction',
-    ['ZA'],
-    'PGM mining incl. ruthenium',
-    'concentrated',
-    'Ruthenium is a by-product, so its supply is set by platinum economics rather than by demand for it.'
-  ),
-  p(
-    'Impala Platinum',
-    'extraction',
-    ['ZA'],
-    'PGM mining',
-    'concentrated',
-    'Same by-product logic, same narrow geography.'
-  ),
-  p(
-    'Nornickel',
-    'extraction',
-    ['RU'],
-    'Nickel and PGM mining',
-    'concentrated',
-    'Material share of world PGM and nickel, with sanctions risk layered on top of geology.'
-  ),
-  p(
-    'MP Materials',
-    'extraction',
-    ['US'],
-    'Rare-earth ore',
-    'concentrated',
-    'The main non-Chinese light rare-earth mine. Mining diversified before separation did, which is the gap the map cares about.'
-  ),
-  p(
-    'Lynas Rare Earths',
-    'extraction',
-    ['AU', 'MY'],
-    'Rare-earth mining and separation',
-    'concentrated',
-    'The most complete non-Chinese rare-earth chain, and still small against the incumbent.'
-  ),
-  p(
-    'Yunnan Tin',
-    'extraction',
-    ['CN'],
-    'Tin mining and smelting',
-    'concentrated',
-    'Large in tin metal; the EUV-grade constraint sits downstream of it.'
-  ),
-  p(
-    'Minsur',
-    'extraction',
-    ['PE'],
-    'Tin mining and smelting',
-    'competitive',
-    'Tin metal has several credible producers. It is purity, not tonnage, that binds here.'
-  ),
-  p(
-    'PT Timah',
-    'extraction',
-    ['ID'],
-    'Tin mining and smelting',
-    'competitive',
-    'Same: the scarcity in this chain is an upgrading step, not an ore body.'
-  ),
-  p(
-    'QatarEnergy',
-    'extraction',
-    ['QA'],
-    'Helium from LNG',
-    'concentrated',
-    'Helium exists commercially only as a by-product of a few gas fields with unusual composition.'
-  ),
-  p(
-    'ExxonMobil',
-    'extraction',
-    ['US'],
-    'Helium from natural gas',
-    'concentrated',
-    'One of a very small number of fields worldwide rich enough to justify extraction.'
-  ),
-
-  // ---------------- Refining & separation ----------------
-  p(
-    'Wacker Chemie',
-    'refining',
-    ['DE', 'US'],
-    'Electronic-grade polysilicon',
-    'chokepoint',
-    'Solar-grade polysilicon has many producers; electronic-grade has very few, and the gap is orders of magnitude of impurity.'
-  ),
-  p(
-    'Hemlock Semiconductor',
-    'refining',
-    ['US'],
-    'Electronic-grade polysilicon',
-    'chokepoint',
-    'One of a handful of qualified suppliers of the first material in the entire chain.'
-  ),
-  p(
-    'Tokuyama',
-    'refining',
-    ['JP', 'MY'],
-    'Electronic-grade polysilicon',
-    'chokepoint',
-    'Same short list, different geography — which is most of why it matters.'
-  ),
-  p(
-    'OCI',
-    'refining',
-    ['KR', 'MY'],
-    'Polysilicon',
-    'concentrated',
-    'Credible at scale, with electronic-grade a narrower qualification than volume implies.'
-  ),
-  p(
-    'China Northern Rare Earth',
-    'refining',
-    ['CN'],
-    'Rare-earth separation',
-    'chokepoint',
-    'Separation, not mining, is where the rare-earth chain actually narrows, and it narrows here.'
-  ),
-  p(
-    'Shenghe Resources',
-    'refining',
-    ['CN'],
-    'Rare-earth separation and trading',
-    'chokepoint',
-    'Processes feedstock from mines all over the world, including ones marketed as diversification.'
-  ),
-  p(
-    'Chinalco',
-    'refining',
-    ['CN'],
-    'Gallium from alumina refining',
-    'chokepoint',
-    'Gallium is an alumina by-product, so supply cannot answer price — and it is export-controlled.'
-  ),
-  p(
-    'Heraeus',
-    'refining',
-    ['DE'],
-    'Precious-metal refining',
-    'concentrated',
-    'One of the few refiners able to deliver PGMs at semiconductor purity.'
-  ),
-  p(
-    'Johnson Matthey',
-    'refining',
-    ['GB'],
-    'PGM refining',
-    'concentrated',
-    'Long-established PGM chemistry; a short list of peers worldwide.'
-  ),
-  p(
-    'Umicore',
-    'refining',
-    ['BE'],
-    'PGM refining and recycling',
-    'concentrated',
-    'Secondary supply is often the only elastic source in these metals.'
-  ),
-  p(
-    'Linde',
-    'refining',
-    ['GB', 'US', 'DE'],
-    'Industrial and electronic gases',
-    'concentrated',
-    'Noble gases come from air separation attached to heavy industry, which limits where they can come from at all.'
-  ),
-  p(
-    'Air Liquide',
-    'refining',
-    ['FR'],
-    'Industrial and electronic gases',
-    'concentrated',
-    'One of three global gas majors; the fab-qualified end is narrower than the industrial one.'
-  ),
-  p(
-    'Air Products',
-    'refining',
-    ['US'],
-    'Industrial gases and helium',
-    'concentrated',
-    'Helium distribution is a small club with long-dated source contracts.'
-  ),
-  p(
-    'Iceblick',
-    'refining',
-    ['UA'],
-    'Neon and rare gases',
-    'concentrated',
-    'The 2022 squeeze made the point: an industrial-gas map and a war map turned out to be the same map.'
-  ),
-  p(
-    '5N Plus',
-    'refining',
-    ['CA', 'DE'],
-    'High-purity specialty metals',
-    'concentrated',
-    'Upgrading to five nines and beyond is a different business from producing the metal.'
-  ),
-
-  // ---------------- Conversion ----------------
-  p(
-    'Shin-Etsu Handotai',
-    'conversion',
-    ['JP'],
-    '300 mm prime silicon wafers',
-    'chokepoint',
-    'Five firms supply essentially all prime 300 mm capacity, and qualification at a leading-edge fab takes years.'
-  ),
-  p(
-    'SUMCO',
-    'conversion',
-    ['JP'],
-    '300 mm prime silicon wafers',
-    'chokepoint',
-    'The other half of a duopoly at the top of the wafer market.'
-  ),
-  p(
-    'GlobalWafers',
-    'conversion',
-    ['TW'],
-    'Silicon wafers',
-    'concentrated',
-    'Third of the big five, with a genuine multi-region footprint.'
-  ),
-  p(
-    'Siltronic',
-    'conversion',
-    ['DE'],
-    'Silicon wafers',
-    'concentrated',
-    'European supply of an input with almost no European alternative.'
-  ),
-  p(
-    'SK Siltron',
-    'conversion',
-    ['KR'],
-    'Silicon and SiC wafers',
-    'concentrated',
-    'Captive-adjacent to Korean memory, and one of few SiC entrants at scale.'
-  ),
-  p(
-    'Momentive Technologies',
-    'conversion',
-    ['US'],
-    'Fused quartz crucibles',
-    'chokepoint',
-    'Turning rare sand into a crucible that survives a pull is knowledge held in very few places.'
-  ),
-  p(
-    'Shin-Etsu Quartz',
-    'conversion',
-    ['JP'],
-    'Fused quartz components',
-    'chokepoint',
-    'Same step, same shortness of the list.'
-  ),
-  p(
-    'Ferrotec',
-    'conversion',
-    ['JP', 'CN'],
-    'Quartz and fab consumables',
-    'concentrated',
-    'Broad consumables base spanning both sides of an export-control line.'
-  ),
-  p(
-    'Element Six',
-    'conversion',
-    ['GB', 'IE'],
-    'CVD synthetic diamond',
-    'concentrated',
-    'Reactor time, not raw material, is the constraint on optical-grade diamond.'
-  ),
-  p(
-    'Coherent',
-    'conversion',
-    ['US'],
-    'SiC substrates, diamond, photonics',
-    'concentrated',
-    'One of the few firms present in several of this chain’s narrow materials at once.'
-  ),
-  p(
-    'Wolfspeed',
-    'conversion',
-    ['US'],
-    'Silicon carbide substrates',
-    'concentrated',
-    'The 150 to 200 mm transition resets everyone’s yield curve, which is where the scarcity currently lives.'
-  ),
-  p(
-    'Resonac',
-    'conversion',
-    ['JP'],
-    'SiC epitaxy and fab materials',
-    'concentrated',
-    'Deep in the materials nobody outside the industry can name.'
-  ),
-  p(
-    'Fujikura',
-    'conversion',
-    ['JP'],
-    'REBCO superconducting tape',
-    'concentrated',
-    'A single high-field magnet consumes tape by the kilometre against a small world output.'
-  ),
-  p(
-    'Faraday Factory Japan',
-    'conversion',
-    ['JP'],
-    'REBCO superconducting tape',
-    'concentrated',
-    'One of the very few able to ship fusion-programme quantities at all.'
-  ),
-  p(
-    'Neo Performance Materials',
-    'conversion',
-    ['CA', 'EE'],
-    'Rare-earth magnets and materials',
-    'concentrated',
-    'The main non-Chinese magnet-making capacity outside Japan, and small against demand.'
-  ),
-  p(
-    'Less Common Metals',
-    'conversion',
-    ['GB'],
-    'Rare-earth alloys and strip',
-    'chokepoint',
-    'A tiny specialist standing between Western separated oxide and a finished magnet.'
-  ),
-  p(
-    'Nippon Steel',
-    'conversion',
-    ['JP'],
-    'Grain-oriented electrical steel',
-    'concentrated',
-    'Transformer cores are made on a small number of qualified lines worldwide.'
-  ),
-  p(
-    'POSCO',
-    'conversion',
-    ['KR'],
-    'Grain-oriented electrical steel',
-    'concentrated',
-    'Same short list, and the same multi-year lead times downstream.'
-  ),
-  p(
-    'Indium Corporation',
-    'conversion',
-    ['US'],
-    'High-purity metals and solders',
-    'concentrated',
-    'Seven-nines upgrading is a specialist step with few qualified providers.'
-  ),
-
-  // ---------------- Equipment & consumables ----------------
-  p(
-    'ASML',
-    'equipment',
-    ['NL'],
-    'EUV and DUV lithography systems',
-    'chokepoint',
-    'One company on earth builds EUV, the queue runs to years, and no second source is in progress.'
-  ),
-  p(
-    'Carl Zeiss SMT',
-    'equipment',
-    ['DE'],
-    'EUV projection optics',
-    'chokepoint',
-    'A chokepoint inside a chokepoint: the mirrors are polished to a tolerance one supplier has ever achieved.'
-  ),
-  p(
-    'Trumpf',
-    'equipment',
-    ['DE'],
-    'EUV plasma-source lasers',
-    'chokepoint',
-    'The drive laser is as single-sourced as the scanner it sits inside.'
-  ),
-  p(
-    'Applied Materials',
-    'equipment',
-    ['US'],
-    'Deposition, etch and process tools',
-    'concentrated',
-    'Broadest tool portfolio, with several steps where it is effectively the only qualified option.'
-  ),
-  p(
-    'Lam Research',
-    'equipment',
-    ['US'],
-    'Etch and deposition',
-    'concentrated',
-    'High-aspect-ratio etch for 3D memory is a narrow specialism.'
-  ),
-  p(
-    'Tokyo Electron',
-    'equipment',
-    ['JP'],
-    'Coaters, developers, etch',
-    'concentrated',
-    'Track systems pair with lithography and are qualified alongside it.'
-  ),
-  p(
-    'KLA',
-    'equipment',
-    ['US'],
-    'Process control and metrology',
-    'concentrated',
-    'You cannot yield what you cannot measure, and few can measure at this scale.'
-  ),
-  p(
-    'ASM International',
-    'equipment',
-    ['NL'],
-    'Atomic layer deposition',
-    'concentrated',
-    'ALD became unavoidable as devices went vertical, on a short supplier list.'
-  ),
-  p(
-    'JSR',
-    'equipment',
-    ['JP'],
-    'Photoresists',
-    'chokepoint',
-    'Resist chemistry is qualified per process per fab; substituting one is a programme, not a purchase.'
-  ),
-  p(
-    'Tokyo Ohka Kogyo',
-    'equipment',
-    ['JP'],
-    'Photoresists and process chemicals',
-    'chokepoint',
-    'The same Japanese concentration that made resist an export-control talking point.'
-  ),
-  p(
-    'Shin-Etsu Chemical',
-    'equipment',
-    ['JP'],
-    'Photoresists, masks and silicones',
-    'chokepoint',
-    'Present at several narrow points of this chain simultaneously.'
-  ),
-  p(
-    'Nikon',
-    'equipment',
-    ['JP'],
-    'Lithography systems',
-    'competitive',
-    'Credible in mature-node lithography, and not a factor at the leading edge — which is what "competitive" means here.'
-  ),
-  p(
-    'Canon',
-    'equipment',
-    ['JP'],
-    'Lithography and nanoimprint',
-    'competitive',
-    'An alternative path that has not yet displaced anything at volume.'
-  ),
-
-  // ---------------- Fabrication ----------------
-  p(
-    'TSMC',
-    'fabrication',
-    ['TW'],
-    'Leading-edge foundry',
-    'chokepoint',
-    'A handful of fabs can run the newest node at volume, and one of them runs most of it.'
-  ),
-  p(
-    'Samsung Foundry',
-    'fabrication',
-    ['KR'],
-    'Leading-edge foundry and memory',
-    'concentrated',
-    'The only other merchant foundry credibly at the leading edge.'
-  ),
-  p(
-    'Intel Foundry',
-    'fabrication',
-    ['US', 'IE', 'IL'],
-    'Leading-edge foundry',
-    'concentrated',
-    'The main non-Asian leading-edge option, and the reason several policy programmes exist.'
-  ),
-  p(
-    'SMIC',
-    'fabrication',
-    ['CN'],
-    'Foundry',
-    'concentrated',
-    'Domestic Chinese capacity operating under equipment restrictions — the constraint is imported, not technical.'
-  ),
-  p(
-    'GlobalFoundries',
-    'fabrication',
-    ['US', 'DE', 'SG'],
-    'Mature and specialty nodes',
-    'competitive',
-    'Mature-node capacity is genuinely contested, which is exactly why it is not where the chain binds.'
-  ),
-  p(
-    'UMC',
-    'fabrication',
-    ['TW'],
-    'Mature-node foundry',
-    'competitive',
-    'Same: plenty of credible suppliers at these nodes.'
-  ),
-
-  // ---------------- Packaging & memory ----------------
-  p(
-    'TSMC Advanced Packaging',
-    'packaging',
-    ['TW'],
-    'CoWoS-class packaging',
-    'chokepoint',
-    'Accelerator output is gated by packaging slots, not wafer starts, and they are allocated years ahead.'
-  ),
-  p(
-    'ASE Technology',
-    'packaging',
-    ['TW'],
-    'Assembly and test',
-    'concentrated',
-    'The largest OSAT, moving up into advanced packaging as demand overflows.'
-  ),
-  p(
-    'Amkor',
-    'packaging',
-    ['US', 'KR'],
-    'Assembly and test',
-    'concentrated',
-    'The main non-Taiwanese OSAT of scale, and a policy favourite for that reason.'
-  ),
-  p(
-    'SK hynix',
-    'packaging',
-    ['KR'],
-    'High-bandwidth memory',
-    'chokepoint',
-    'HBM stacking yield is knowledge that does not transfer when a competitor buys the same equipment.'
-  ),
-  p(
-    'Micron',
-    'packaging',
-    ['US', 'JP', 'SG'],
-    'High-bandwidth memory',
-    'concentrated',
-    'One of three, and the only one headquartered outside Korea.'
-  ),
-  p(
-    'Samsung Memory',
-    'packaging',
-    ['KR'],
-    'High-bandwidth memory',
-    'concentrated',
-    'Enormous capacity, with qualification at the top of the HBM range a separate question from volume.'
-  ),
-
-  // ---------------- Systems & silicon ----------------
-  p(
-    'NVIDIA',
-    'systems',
-    ['US'],
-    'Accelerators and interconnect',
-    'chokepoint',
-    'The constraint is not only silicon: the software estate around it is what makes substitution slow even where alternatives exist.'
-  ),
-  p(
-    'AMD',
-    'systems',
-    ['US'],
-    'Accelerators and CPUs',
-    'concentrated',
-    'The credible merchant alternative, gated by the same packaging and memory as everyone else.'
-  ),
-  p(
-    'Broadcom',
-    'systems',
-    ['US'],
-    'Custom accelerators and networking silicon',
-    'concentrated',
-    'Most large in-house accelerator programmes run through a very short list of design partners.'
-  ),
-  p(
-    'Marvell',
-    'systems',
-    ['US'],
-    'Custom silicon, optics and interconnect',
-    'concentrated',
-    'The other name on that short list.'
-  ),
-  p(
-    'Vertiv',
-    'systems',
-    ['US'],
-    'Datacentre power and thermal systems',
-    'concentrated',
-    'Rack-level power and cooling became a constraint the moment density outran air.'
-  ),
-  p(
-    'Arista Networks',
-    'systems',
-    ['US'],
-    'Datacentre networking',
-    'competitive',
-    'Several credible suppliers of high-speed switching, and merchant silicon underneath most of them.'
-  ),
-  p(
-    'Supermicro',
-    'systems',
-    ['US', 'TW'],
-    'Server systems integration',
-    'competitive',
-    'Integration capacity is contested; the parts going into it are not.'
-  ),
-
-  // ---------------- Energy & grid ----------------
-  p(
-    'Hitachi Energy',
-    'energy',
-    ['CH', 'JP'],
-    'Transformers, HVDC, grid equipment',
-    'chokepoint',
-    'Large power transformers run to multi-year lead times, and a datacentre cannot be energised without one.'
-  ),
-  p(
-    'Siemens Energy',
-    'energy',
-    ['DE'],
-    'Grid equipment and turbines',
-    'chokepoint',
-    'Order books for both halves of the energisation problem are effectively spoken for.'
-  ),
-  p(
-    'GE Vernova',
-    'energy',
-    ['US'],
-    'Gas turbines and grid equipment',
-    'chokepoint',
-    'The fastest route to firm power at scale, sold out well into the future.'
-  ),
-  p(
-    'Prysmian',
-    'energy',
-    ['IT'],
-    'High-voltage cable',
-    'concentrated',
-    'The unglamorous half of energisation, with the same inability to answer a demand shock quickly.'
-  ),
-  p(
-    'NKT',
-    'energy',
-    ['DK'],
-    'High-voltage cable',
-    'concentrated',
-    'A short list of firms able to make and lay HV cable at all.'
-  ),
-  p(
-    'Schneider Electric',
-    'energy',
-    ['FR'],
-    'Electrical distribution and datacentre power',
-    'concentrated',
-    'Switchgear and distribution have deepened into a constraint alongside transformers.'
-  ),
-  p(
-    'ABB',
-    'energy',
-    ['CH'],
-    'Electrification and drives',
-    'concentrated',
-    'Present on both the power and the motion side of this chain.'
-  ),
-  p(
-    'Mitsubishi Electric',
-    'energy',
-    ['JP'],
-    'Transformers and power electronics',
-    'concentrated',
-    'One of the few transformer makers with capacity outside Europe and the US.'
-  ),
-
-  // ---------------- Actuation & robotics ----------------
-  p(
-    'Harmonic Drive Systems',
-    'actuation',
-    ['JP'],
-    'Strain-wave reduction gears',
-    'chokepoint',
-    'Precision drives set what a robot joint can do, and the tolerances are decades of accumulated practice.'
-  ),
-  p(
-    'Nabtesco',
-    'actuation',
-    ['JP'],
-    'Cycloidal reduction gears',
-    'chokepoint',
-    'The other half of a duopoly that quietly gates humanoid and industrial robotics alike.'
-  ),
-  p(
-    'FANUC',
-    'actuation',
-    ['JP'],
-    'Industrial robots and CNC',
-    'concentrated',
-    'Vertically integrated down to its own drives and controls, which is itself the moat.'
-  ),
-  p(
-    'Yaskawa',
-    'actuation',
-    ['JP'],
-    'Servo motors and robots',
-    'concentrated',
-    'Servo and drive expertise that new entrants consistently underestimate.'
-  ),
-  p(
-    'ABB Robotics',
-    'actuation',
-    ['CH', 'SE'],
-    'Industrial robots',
-    'concentrated',
-    'One of a small number of full-line robot makers worldwide.'
-  ),
-  p(
-    'Renishaw',
-    'actuation',
-    ['GB'],
-    'Encoders and metrology',
-    'concentrated',
-    'Closing the control loop precisely is a narrow specialism.'
-  ),
-  p(
-    'KUKA',
-    'actuation',
-    ['DE', 'CN'],
-    'Industrial robots',
-    'competitive',
-    'Robot assembly is contested; the drives inside are where the scarcity sits.'
-  ),
-
-  // ---------------- Deployment & demand ----------------
-  p(
-    'Microsoft',
-    'deployment',
-    ['US'],
-    'Hyperscale compute buyer',
-    'concentrated',
-    'On the demand side the grade reads the other way: a handful of buyers account for most of the world’s accelerator orders.'
-  ),
-  p(
-    'Amazon Web Services',
-    'deployment',
-    ['US'],
-    'Hyperscale compute buyer and custom silicon',
-    'concentrated',
-    'Buys at a scale that moves supply, and designs around it where it can.'
-  ),
-  p(
-    'Google',
-    'deployment',
-    ['US'],
-    'Hyperscale compute buyer and custom silicon',
-    'concentrated',
-    'The longest-running in-house accelerator programme, and still bound by the same packaging.'
-  ),
-  p(
-    'Meta',
-    'deployment',
-    ['US'],
-    'Hyperscale compute buyer',
-    'concentrated',
-    'Among the largest single sources of demand for everything upstream of it.'
-  ),
-  p(
-    'OpenAI',
-    'deployment',
-    ['US'],
-    'Frontier model developer',
-    'concentrated',
-    'Demand large enough to be a planning input for several layers above it in this list.'
-  ),
-  p(
-    'Anthropic',
-    'deployment',
-    ['US'],
-    'Frontier model developer',
-    'concentrated',
-    'Same: frontier training demand is concentrated in very few organisations.'
-  ),
-  p(
-    'xAI',
-    'deployment',
-    ['US'],
-    'Frontier model developer',
-    'concentrated',
-    'Notable for building its own power and datacentre capacity to get around the queues.'
-  ),
-  p(
-    'CoreWeave',
-    'deployment',
-    ['US'],
-    'Specialist compute provider',
-    'competitive',
-    'Neocloud capacity is contested and growing — the constraint is what they buy, not what they sell.'
-  ),
-];
-
-// =====================================================================
-// VIEWS
-// =====================================================================
-
-export interface ParticipantProgress {
-  total: number;
-  sourced: number;
-  chokepoints: number;
-  concentrated: number;
-  competitive: number;
-  jurisdictions: number;
-}
-
-export function participantProgress(): ParticipantProgress {
-  const grade = (g: ScarcityGrade) => PARTICIPANTS.filter(item => item.scarcity === g).length;
-  return {
-    total: PARTICIPANTS.length,
-    sourced: PARTICIPANTS.filter(item => item.source !== null).length,
-    chokepoints: grade('chokepoint'),
-    concentrated: grade('concentrated'),
-    competitive: grade('competitive'),
-    jurisdictions: new Set(PARTICIPANTS.flatMap(item => item.jurisdictions)).size,
-  };
-}
-
-/** Participants in one layer, in the order they were written. */
-export function participantsInLayer(layer: ChainLayer): Participant[] {
-  return PARTICIPANTS.filter(item => item.layer === layer);
-}
-
-/** Every participant graded a hard constraint — the point of the exercise. */
-export function bindingParticipants(): Participant[] {
-  return PARTICIPANTS.filter(item => item.scarcity === 'chokepoint');
-}
diff --git a/src/config/substrata.ts b/src/config/substrata.ts
deleted file mode 100644
index 2145e639a..000000000
--- a/src/config/substrata.ts
+++ /dev/null
@@ -1,591 +0,0 @@
-/**
- * "Substrata" — OrangeCat-side SSOT
- *
- * An open-source research firm covering the chokepoints between here and a
- * technological singularity. Intelligence is not made of software. It is made
- * of purified tin, neon and rare-earth metal — and also of EUV scanners nobody
- * else can build, packaging capacity allocated years ahead, transformer slots,
- * grid queues, and process knowledge that does not transfer with a purchase
- * order. Behind each is a lead time and a dependency almost nobody has written
- * down in public.
- *
- * THE PRODUCT IS THE MAP. There is NO TRADING DESK, and this file must not
- * imply one: standing a regulated commodities book up is a long road through
- * licensing, and until it is walked, publishing prices or inviting enquiries to
- * deal would advertise a capability that does not exist. Research, data and intel are
- * the whole of the business today. When a desk exists it will be added here
- * with the disclosure rules that already sit below, written in advance
- * precisely so they cannot look like a reaction later.
- *
- * This file is the single source of truth for the firm's identity, its mandate
- * (the tests that make "focused" a rule rather than a slogan), its phases, its
- * desks, its listed catalogue, and its compliance and disclosure stance. The
- * Phase 1 coverage universe lives next door in `substrata-coverage.ts`. The
- * seed that registers the firm on-platform (scripts/seed-substrata.ts) reads
- * these two files and nothing else.
- *
- * On-platform shape: a `group` with label 'company' (public, so the research
- * and the book are both readable), its own `actors` row of actor_type 'group',
- * and a catalogue of `user_products` owned by that group actor. Ownership
- * follows the Revive My Old Ride convention — the founder's `mao` actor
- * creates it; swap to a dedicated actor by changing FOUNDER_ACTOR_SLUG.
- *
- * Created: 2026-08-26
- */
-
-import { SITE_FEATURE_KEY } from './hosted-site';
-
-// =====================================================================
-// OWNERSHIP
-// =====================================================================
-
-/** Actor slug of the user who founds the firm (created_by + founder seat). */
-export const FOUNDER_ACTOR_SLUG = 'mao';
-
-// =====================================================================
-// IDENTITY
-// =====================================================================
-
-export const COMPANY = {
-  name: 'Substrata',
-  /** Also the actor slug and the public path: /groups/substrata */
-  slug: 'substrata',
-  tagline: 'The chokepoints between here and the singularity, written down in public.',
-} as const;
-
-// =====================================================================
-// THE MANDATE — first test: which curve does it move?
-// =====================================================================
-
-/**
- * Coverage and trading both start here. A node enters the universe only if it
- * sits on the critical path of one of three curves. Everything else — however
- * interesting, however profitable — is out of scope.
- */
-export const MANDATE_CURVES = [
-  {
-    id: 'compute-per-joule',
-    label: 'Compute per joule',
-    test: 'Does this make a thought cheaper to have?',
-    detail:
-      'Feedstock, lithography consumables, thermal materials, and the firms ' +
-      'that make them — what decides how much computation a watt can buy.',
-  },
-  {
-    id: 'joules-delivered',
-    label: 'Joules delivered',
-    test: 'Does this get power to where the compute is?',
-    detail:
-      'Transformer steel, conductors, superconducting tape, the cryogens that ' +
-      'keep them cold, and the interconnect queue. A datacentre that cannot ' +
-      'be energised is a shed.',
-  },
-  {
-    id: 'actuation',
-    label: 'Actuation',
-    test: 'Does this give intelligence hands?',
-    detail:
-      'Permanent-magnet feed, precision drives, additive manufacturing — the ' +
-      'step where a model stops advising and starts doing physical work.',
-  },
-] as const;
-
-export type CurveId = (typeof MANDATE_CURVES)[number]['id'];
-
-// =====================================================================
-// THE MANDATE — second test: is it actually a chokepoint?
-// =====================================================================
-
-/**
- * Being on a curve is not enough; most of a supply chain is substitutable and
- * therefore uninteresting. A node earns coverage when it GATES a curve. These
- * four factors are the screen, and they are why the universe stays countable
- * as the firm expands from materials into robotics, compute and manufacturing.
- */
-export const CHOKEPOINT_TEST = [
-  {
-    id: 'concentration',
-    question: 'How few suppliers actually qualify?',
-    detail: 'Qualified is not the same as capable — a producer nobody has certified is not supply.',
-  },
-  {
-    id: 'substitutability',
-    question: 'What happens if it disappears — a workaround, or a stop?',
-    detail: 'A material with a drop-in replacement is a price story, not a chokepoint.',
-  },
-  {
-    id: 'lead-time',
-    question: 'How long from order to delivery, and from decision to new capacity?',
-    detail: 'Large power transformers gate more datacentres today than chip supply does.',
-  },
-  {
-    id: 'demand-inelasticity',
-    question: 'Can the buyer walk away at any price?',
-    detail: 'If the machine does not exist without it, the demand curve is a wall.',
-  },
-] as const;
-
-/**
- * The exclusion rule, stated plainly because it is the harder half of focus.
- * A firm that will cover anything has no edge, in the same way that an analyst
- * with an opinion on everything has none worth reading.
- */
-export const EXCLUSION_RULE = {
-  rule: 'On a curve, and a chokepoint. Fail either test and it does not enter coverage.',
-  explainer:
-    'We decline business and coverage every week. Not because either is ' +
-    'unprofitable, but because a universe that drifts into general commodities ' +
-    'and general tech loses the only edge a specialist has: knowing, for a ' +
-    'countable number of nodes, every qualified producer, every grade that ' +
-    'actually ships, and every lead time that is real rather than quoted.',
-} as const;
-
-// =====================================================================
-// NODE TYPES — how the universe grows without becoming "everything"
-// =====================================================================
-
-/**
- * The unit of coverage is a chokepoint NODE, not an asset class. A node can be
- * a material, a company, a person, a machine or a process — the tests above
- * apply identically to all of them. This is what lets the firm move from rare
- * earths into robotics, AI hardware and additive manufacturing without a
- * change of strategy: you do not decide to cover robotics, you ARRIVE at it by
- * tracing dysprosium downstream. The graph grows by traversal, not by ambition.
- */
-export const NODE_TYPES = [
-  {
-    id: 'material',
-    label: 'Material',
-    detail: 'A substance with a grade, a purity and a producer.',
-  },
-  {
-    id: 'company',
-    label: 'Company',
-    detail: 'Public or private. Most of the interesting ones are private.',
-  },
-  { id: 'person', label: 'Person', detail: 'Where the process knowledge actually lives.' },
-  {
-    id: 'machine',
-    label: 'Machine',
-    detail: 'Tools with single-digit annual output and multi-year queues.',
-  },
-  {
-    id: 'process',
-    label: 'Process',
-    detail: 'Know-how that does not transfer with a purchase order.',
-  },
-] as const;
-
-export type NodeType = (typeof NODE_TYPES)[number]['id'];
-
-// =====================================================================
-// PHASES — research first, trade second, integrate third
-// =====================================================================
-
-/**
- * Research leads because it costs nothing but attention, because it IS the
- * sourcing work the desk needs anyway, and because publishing is the
- * distribution engine: put the map out, the people who work in it correct it,
- * and you become the place people check. The research is given away; what is
- * monetised is the position it buys — deal flow, counterparty access, and a
- * view of where the chain is thin.
- */
-export const PHASES = [
-  {
-    id: 'producers-of-the-fifteen',
-    label: 'Phase 1 — the producers of the fifteen',
-    status: 'active',
-    detail:
-      'Map every qualified producer of the fifteen materials under coverage. ' +
-      'Mostly private, mostly uncovered: the sell side writes about chip ' +
-      'designers, not about who fires crucible-grade quartz.',
-  },
-  {
-    id: 'beyond-materials',
-    label: 'Phase 2 — the chokepoints that are not materials',
-    status: 'active',
-    detail:
-      'A material is only one kind of chokepoint. A tool with one supplier, ' +
-      'packaging capacity allocated years ahead, a transformer order book, an ' +
-      'interconnection queue and a process that lives in people rather than ' +
-      'equipment all gate the same curves. These enter coverage on the same ' +
-      'two tests, and the universe has already started admitting them.',
-  },
-  {
-    id: 'one-hop-out',
-    label: 'Phase 3 — one hop out',
-    status: 'planned',
-    detail:
-      'From each node, one hop upstream and one downstream. This is where ' +
-      'robotics, AI hardware and additive manufacturing enter on their own — ' +
-      'as counterparties in a chain already being mapped, not as a new vertical.',
-  },
-  {
-    id: 'desk',
-    label: 'Later — a desk, if and when it is licensed',
-    status: 'not-started',
-    detail:
-      'Acting on the map rather than only publishing it means a regulated ' +
-      'book: licensing, compliance, capital and counterparty onboarding, none ' +
-      'of it quick. It is an intention, not a service, and nothing on this ' +
-      'site should be read as an offer to trade.',
-  },
-] as const;
-
-// =====================================================================
-// COVERAGE AREAS
-//
-// Named for segments of the chain, not for trading desks — there is no desk.
-// =====================================================================
-
-export type AreaId = 'lithography' | 'feedstock' | 'thermal' | 'power' | 'actuation';
-
-export interface CoverageArea {
-  id: AreaId;
-  name: string;
-  curve: CurveId;
-  covers: string;
-}
-
-export const COVERAGE_AREAS: readonly CoverageArea[] = [
-  {
-    id: 'lithography',
-    name: 'Lithography & Optics',
-    curve: 'compute-per-joule',
-    covers:
-      'Consumables the leading-edge fab burns to expose a wafer: EUV droplet ' +
-      'tin, excimer and source gases, capping-layer platinum-group metals, ' +
-      'fused silica and calcium fluoride optical blanks.',
-  },
-  {
-    id: 'feedstock',
-    name: 'Semiconductor Feedstock',
-    curve: 'compute-per-joule',
-    covers:
-      'What a wafer is made of before anything is printed on it: ' +
-      'electronic-grade polysilicon, prime wafers, crucible-grade quartz, and ' +
-      'the compound-semiconductor metals — gallium, germanium, indium.',
-  },
-  {
-    id: 'thermal',
-    name: 'Thermal & Packaging',
-    curve: 'compute-per-joule',
-    covers:
-      'The materials that carry heat away from a die, which is what actually ' +
-      'caps rack density: CVD diamond and SiC spreaders, wide-bandgap ' +
-      'substrates, two-phase dielectric coolants.',
-  },
-  {
-    id: 'power',
-    name: 'Power, Grid & Superconductors',
-    curve: 'joules-delivered',
-    covers:
-      'Grain-oriented electrical steel for transformers, Grade A copper, ' +
-      'REBCO superconducting tape, and the helium that keeps superconductors ' +
-      'superconducting.',
-  },
-  {
-    id: 'actuation',
-    name: 'Actuation & Robotics',
-    curve: 'actuation',
-    covers:
-      'Permanent-magnet feed — didymium and the heavy rare earths that hold ' +
-      'coercivity hot — plus the cobalt and precision-drive alloys behind ' +
-      'every robot joint.',
-  },
-] as const;
-
-// =====================================================================
-// MATERIALS UNDER COVERAGE
-//
-// Research subjects, not a price list. There are deliberately no prices, no
-// units and no lot sizes here: this firm does not trade, and a page carrying
-// indicative levels reads as an invitation to deal whatever the small print
-// says. What is kept is the part that is research — why the material gates a
-// curve, and which grade actually ships, since "tin" and "seven-nines tin
-// qualified for an EUV source" are different markets.
-//
-// This list is also the Phase 1 work queue: `substrata-coverage.ts` owes a
-// producer map to every title here, and a test enforces the correspondence.
-// =====================================================================
-
-export interface MaterialListing {
-  /** Display name, and the key `substrata-coverage.ts` maps producers onto. */
-  title: string;
-  area: AreaId;
-  /** Why this material gates a curve — the research claim. */
-  why: string;
-  /** The grade that actually ships. Naming it is most of the specialism. */
-  spec: string;
-  tags: string[];
-}
-
-export const MATERIALS: readonly MaterialListing[] = [
-  // ---------- Lithography & Optics ----------
-  {
-    title: 'High-purity tin, EUV droplet grade',
-    area: 'lithography',
-    why: 'Every EUV photon in production today starts as a tin droplet hit by a CO₂ laser. Purity, not tonnage, is the constraint.',
-    spec: '7N (99.99999%) tin, shot or ingot, certificate of analysis per lot.',
-    tags: ['euv', 'lithography', 'tin', 'high-purity'],
-  },
-  {
-    title: 'Neon, excimer laser grade',
-    area: 'lithography',
-    why: 'DUV excimer sources run on neon mixtures. The 2022 squeeze showed how thin and how geographically concentrated that supply is.',
-    spec: '≥99.999% neon, cylinder or ISO container, blended mixes to order.',
-    tags: ['neon', 'noble-gas', 'duv', 'lithography'],
-  },
-  {
-    title: 'Ruthenium, sputtering and ALD grade',
-    area: 'lithography',
-    why: 'Caps EUV multilayer mirrors and lines advanced interconnect. Annual world supply is a few dozen tonnes, almost all a by-product of other mining.',
-    spec: '4N ruthenium, targets or precursor feed, PGM-refiner traceable.',
-    tags: ['ruthenium', 'pgm', 'euv', 'interconnect'],
-  },
-
-  // ---------- Semiconductor Feedstock ----------
-  {
-    title: 'Electronic-grade polysilicon',
-    area: 'feedstock',
-    why: 'The first material in the chain. Solar-grade will not do: one part per billion of boron changes the device.',
-    spec: '11N (99.999999999%) polysilicon chunk or rod, Siemens process.',
-    tags: ['polysilicon', 'feedstock', 'wafer', 'high-purity'],
-  },
-  {
-    title: '300 mm prime silicon wafers',
-    area: 'feedstock',
-    why: 'The unit of account for all leading-edge capacity. Every fab expansion is ultimately a wafer-start number.',
-    spec: 'Prime polished 300 mm, p-type or n-type, epi to specification.',
-    tags: ['wafer', '300mm', 'silicon', 'feedstock'],
-  },
-  {
-    title: 'Crucible-grade high-purity quartz sand',
-    area: 'feedstock',
-    why: 'Czochralski crucibles need a quartz purity that comes, in practice, from a very small number of deposits. A genuine single point of failure for the whole industry.',
-    spec: 'Inner-layer crucible grade, ≤ 20 ppm total impurities.',
-    tags: ['quartz', 'crucible', 'czochralski', 'feedstock'],
-  },
-  {
-    title: 'Gallium, refined',
-    area: 'feedstock',
-    why: 'GaN power stages and RF front-ends. A by-product of alumina refining, so supply cannot respond quickly to demand — and it is export-controlled.',
-    spec: '4N–7N gallium metal. Export-licence and end-use documentation required.',
-    tags: ['gallium', 'gan', 'compound-semiconductor', 'export-controlled'],
-  },
-
-  // ---------- Thermal & Packaging ----------
-  {
-    title: 'CVD synthetic diamond heat spreader',
-    area: 'thermal',
-    why: 'The highest thermal conductivity available at any price. Where the die is hot enough that copper has stopped being an answer.',
-    spec: 'Polycrystalline CVD diamond, 10 × 10 mm, metallised to specification.',
-    tags: ['diamond', 'thermal', 'packaging', 'cvd'],
-  },
-  {
-    title: 'Silicon carbide substrate, 200 mm semi-insulating',
-    area: 'thermal',
-    why: 'Wide-bandgap power conversion is how a datacentre stops wasting a tenth of its intake as heat in the power train.',
-    spec: '200 mm semi-insulating 4H-SiC, micropipe density to specification.',
-    tags: ['sic', 'wide-bandgap', 'power', 'substrate'],
-  },
-  {
-    title: 'Two-phase dielectric immersion coolant',
-    area: 'thermal',
-    why: 'Air cooling ends somewhere around 50 kW a rack. Immersion is what the next order of magnitude of density runs on.',
-    spec: 'Engineered fluid, boiling point matched to the target die temperature.',
-    tags: ['immersion', 'cooling', 'datacenter', 'dielectric'],
-  },
-
-  // ---------- Power, Grid & Superconductors ----------
-  {
-    title: 'Grain-oriented electrical steel (GOES)',
-    area: 'power',
-    why: 'Every megawatt reaching a GPU passes through transformer cores. Lead times on large power transformers, not chip supply, are the binding constraint on many buildouts.',
-    spec: 'M3-class grain-oriented silicon steel, coil, coated.',
-    tags: ['goes', 'transformer', 'grid', 'electrical-steel'],
-  },
-  {
-    title: 'REBCO superconducting tape, 12 mm',
-    area: 'power',
-    why: 'High-field magnets for fusion and for compact motors. The kilometre-per-machine numbers make tape output an industry-level bottleneck.',
-    spec: '12 mm REBCO tape, critical current specified at 77 K, self-field.',
-    tags: ['rebco', 'superconductor', 'fusion', 'magnets'],
-  },
-  {
-    title: 'Liquid helium (He-4)',
-    area: 'power',
-    why: 'Nothing else reaches 4 K at scale. Superconducting magnets and every dilution refrigerator in quantum computing depend on a supply tied to a handful of gas fields.',
-    spec: '5N liquid helium, dewar or ISO container, boil-off terms per contract.',
-    tags: ['helium', 'cryogenics', 'superconductor', 'quantum'],
-  },
-
-  // ---------- Actuation & Robotics ----------
-  {
-    title: 'Didymium (Nd-Pr) metal, magnet feed',
-    area: 'actuation',
-    why: 'The bulk of every NdFeB magnet, and therefore of every robot joint, traction motor and hard-drive actuator.',
-    spec: 'Nd-Pr metal ingot, 75/25 nominal, ≥99% RE.',
-    tags: ['rare-earth', 'ndfeb', 'magnets', 'robotics'],
-  },
-  {
-    title: 'Dysprosium metal',
-    area: 'actuation',
-    why: 'The heavy rare earth that keeps a magnet coercive when the motor gets hot. Small quantities, no substitute, single-country refining.',
-    spec: '≥99% dysprosium metal. Export-licence and end-use documentation required.',
-    tags: ['dysprosium', 'rare-earth', 'magnets', 'export-controlled'],
-  },
-];
-
-// =====================================================================
-// SCOPE — what this firm does not do
-// =====================================================================
-
-/**
- * Several materials under coverage are dual-use and export-controlled
- * (gallium, germanium, the heavy rare earths). That is a fact ABOUT them and a
- * reason to cover them carefully — it is not an operating obligation here,
- * because nothing is bought, sold, brokered or moved. Saying so plainly
- * matters more than a compliance section would: an export-licence policy on a
- * firm with no shipments is theatre, and theatre is what makes the honest
- * parts of a page harder to believe.
- */
-export const SCOPE = {
-  today: [
-    'We publish research. We do not trade, broker, quote, or arrange the ' +
-      'movement of any material under coverage.',
-    'Nothing on this site is an offer, a solicitation, an inducement to deal, ' +
-      'or investment advice.',
-    'We hold no position in anything we cover. When that changes it will be ' +
-      'disclosed before the note, not after.',
-  ],
-  outOfScope:
-    'Nothing on the weapons or nuclear-fuel-cycle path is covered, and no ' +
-    'coverage is written to help anyone acquire a controlled material. The ' +
-    'three curves are compute, energy and actuation.',
-} as const;
-
-// =====================================================================
-// DISCLOSURE — written before there is anything to disclose
-// =====================================================================
-
-/**
- * Today the disclosure is short, because the firm holds nothing: no book, no
- * positions, no counterparties. The rules below are kept anyway, in advance of
- * the desk that may one day exist, for the reason a disclosure policy is only
- * ever credible before it is needed. Written after the first position, every
- * clause reads as a response to something.
- */
-export const DISCLOSURE = {
-  today:
-    'Substrata holds no position in anything it covers, trades nothing, and ' +
-    'is paid by nobody it writes about. There is currently nothing to declare, ' +
-    'and that itself is the declaration.',
-  rules: [
-    'Every published note states the firm’s position in what it covers — long, ' +
-      'short, flat, or none — at time of publication.',
-    'Research is never withheld, delayed or softened because of a position. If ' +
-      'the two conflict, the position is the thing that moves.',
-    'Nothing is published to move a price the firm is about to act on. Notes go ' +
-      'out on a schedule.',
-    'Sources are named. An unsourced claim is marked unverified rather than ' +
-      'stated, however confident the analyst is.',
-  ],
-  openByDefault:
-    'The research is free and public. What it buys is standing — being the ' +
-    'place people check, and being told when a row is wrong by someone who ' +
-    'works in that chain.',
-} as const;
-
-// =====================================================================
-// PUBLIC LISTING COPY
-// =====================================================================
-
-export const LISTING_COPY = {
-  headline: COMPANY.name,
-  subhead: COMPANY.tagline,
-  body: [
-    'Substrata is an open-source research firm covering the physical ' +
-      'chokepoints between here and a technological singularity. The research ' +
-      'is free and the map is the product. There is no trading desk and no ' +
-      'position in anything covered here.',
-    'A node enters coverage only if it passes two tests: it moves one of ' +
-      'three curves — compute per joule, joules delivered, or actuation — and ' +
-      'it genuinely gates that curve, on concentration, substitutability, ' +
-      'lead time and demand inelasticity. A node can be a material, a machine, ' +
-      'a company, a process or a person; the tests do not care, and a tool ' +
-      'with one supplier gates a curve as hard as an element does.',
-    'Two phases run at once. Every qualified producer of the fifteen ' +
-      'materials under coverage, and the chokepoints that are not materials ' +
-      'at all — packaging capacity, transformer order books, interconnection ' +
-      'queues, process knowledge that does not transfer with equipment.',
-  ],
-  cta: 'Read the map',
-} as const;
-
-// =====================================================================
-// GROUP PROFILE PAYLOAD (maps 1:1 to the live `groups` table)
-// =====================================================================
-
-export interface CompanyGroupPayload {
-  name: string;
-  slug: string;
-  description: string;
-  label: string;
-  tags: string[];
-  is_public: boolean;
-  visibility: 'public' | 'members_only' | 'private';
-  governance_preset: string;
-}
-
-export const GROUP_PAYLOAD: CompanyGroupPayload = {
-  name: COMPANY.name,
-  slug: COMPANY.slug,
-  description: [LISTING_COPY.subhead, '', ...LISTING_COPY.body].join('\n'),
-  label: 'company',
-  tags: [
-    'research',
-    'open-source-research',
-    'supply-chain',
-    'chokepoints',
-    'semiconductors',
-    'rare-earths',
-    'energy',
-    'robotics',
-    'singularity',
-  ],
-  // The 'company' label defaults to members_only. This firm publishes its
-  // research and expects a reader to check it before sending any
-  // enquiry, so the research has to be readable without an account.
-  is_public: true,
-  visibility: 'public',
-  governance_preset: 'hierarchical',
-} as const;
-
-/**
- * No features. `marketplace` was enabled to list a catalogue that no longer
- * exists — a research firm with nothing to sell should not advertise a shop —
- * and `treasury` needs a `bitcoin_address` the group does not have. Both get
- * enabled by the commit that gives them something true to point at.
- */
-export const GROUP_FEATURE_KEYS: readonly string[] = [
-  // Substrata publishes a website at substrata.orangecat.ch. This row IS the
-  // site — see src/config/hosted-site.ts. Its pages are bespoke and live in the
-  // repository, so the site renders whether or not the seed has run; enabling
-  // the feature is what makes the profile agree with what is already serving.
-  SITE_FEATURE_KEY,
-];
-
-// =====================================================================
-// LOOKUPS
-// =====================================================================
-
-const AREA_BY_ID: Record<AreaId, CoverageArea> = COVERAGE_AREAS.reduce(
-  (acc, area) => ({ ...acc, [area.id]: area }),
-  {} as Record<AreaId, CoverageArea>
-);
-
-/** @returns the coverage area a material belongs to. */
-export function areaFor(material: MaterialListing): CoverageArea {
-  return AREA_BY_ID[material.area];
-}
diff --git a/src/middleware.ts b/src/middleware.ts
index ef3be79a2..092b9fba4 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -2,7 +2,6 @@ import { NextResponse } from 'next/server';
 import type { NextRequest } from 'next/server';
 import { createServerClient } from '@supabase/ssr';
 import { getRouteSurface, ROUTES } from '@/config/routes';
-import { SITES_PATH_PREFIX, siteSlugForHost } from '@/config/sites';
 
 // Edge middleware route classification reads from the SAME SSOT used by
 // AppShell / MobileBottomNav / Footer / Header (src/config/routes.ts).
@@ -36,49 +35,9 @@ export async function middleware(request: NextRequest) {
     return NextResponse.next();
   }
 
-  // Hosted sites (src/config/sites.ts): a request arriving on a site's own
-  // host is somebody else's website, so rewrite it onto /sites/<slug> and let
-  // that standalone layout answer. Rewrite, not redirect — the visitor's URL
-  // bar must keep saying substrata.orangecat.ch, which is the entire point of
-  // what /domains sells. Requests already on /sites/... pass through, so the
-  // path form stays previewable from any host.
-  //
-  // `siteSlugForHost` matches by SHAPE and never touches the database — this
-  // runs on every request to the entire app. Whether a site is actually
-  // published is decided by the page, which is allowed to query. An unclaimed
-  // slug therefore rewrites and then 404s, which is the safe direction.
-  const siteSlug = siteSlugForHost(request.headers.get('host'));
-  if (siteSlug && !pathname.startsWith(`${SITES_PATH_PREFIX}/`)) {
-    const target = request.nextUrl.clone();
-    target.pathname = `${SITES_PATH_PREFIX}/${siteSlug}${pathname === '/' ? '' : pathname}`;
-
-    // These go on the REQUEST headers, not just the response.
-    //
-    // A rewrite keeps the visitor's URL bar saying substrata.orangecat.ch,
-    // which means `usePathname()` in the app says "/" — so the layout cannot
-    // tell it is rendering somebody else's website by looking at the path. It
-    // has to be told. Setting these only on the response (which is what this
-    // did first) tells the browser and nothing else, and the result was
-    // OrangeCat's header, analytics and Organization schema all rendering on a
-    // customer's domain.
-    const forwarded = new Headers(request.headers);
-    forwarded.set('x-pathname', target.pathname);
-    forwarded.set('x-hosted-site', siteSlug);
-
-    const rewritten = NextResponse.rewrite(target, { request: { headers: forwarded } });
-    rewritten.headers.set('x-pathname', target.pathname);
-    rewritten.headers.set('x-hosted-site', siteSlug);
-    return rewritten;
-  }
-
-  // Same reasoning as the rewrite above: the layout reads `x-pathname` from the
-  // REQUEST, so it has to be set there and not only echoed to the browser.
-  const forwardedHeaders = new Headers(request.headers);
-  forwardedHeaders.set('x-pathname', pathname);
-
   const response = NextResponse.next({
     request: {
-      headers: forwardedHeaders,
+      headers: request.headers,
     },
   });
 
diff --git a/src/services/sites/publish.ts b/src/services/sites/publish.ts
deleted file mode 100644
index d7bb5e39c..000000000
--- a/src/services/sites/publish.ts
+++ /dev/null
@@ -1,130 +0,0 @@
-/**
- * Publishing a group as a website — the domain half.
- *
- * The route beside this (`/api/groups/[slug]/site`) is HTTP: auth, rate limit,
- * status codes, cache invalidation. Everything that decides WHETHER and WHAT
- * lives here, so the rules are testable without a request and so a second
- * caller — the group settings UI, FleetCrown, a script — cannot end up with a
- * different answer.
- *
- * Deliberately imports nothing from `next/`. It did import `revalidateTag`, and
- * that single line dragged Next's whole server runtime into any test that
- * touched these rules. Dropping a framework cache is the route's job anyway.
- */
-
-import {
-  SITE_FEATURE_KEY,
-  siteCanonicalHost,
-  toHostedSite,
-  type SiteConfigInput,
-} from '@/config/hosted-site';
-import { isReservedSubdomain, isValidSiteSlug, reservedSubdomainReason } from '@/config/sites';
-
-/** The three group fields publishing needs. */
-export interface SiteGroup {
-  id: string;
-  name: string;
-  slug: string;
-  is_public: boolean | null;
-}
-
-/** Minimal client shape, so this module does not care which client it is given. */
-type Client = {
-  from: (table: string) => any;
-};
-
-export async function resolveGroupForSite(
-  supabase: Client,
-  slug: string
-): Promise<SiteGroup | null> {
-  const { data, error } = await supabase
-    .from('groups')
-    .select('id, name, slug, is_public')
-    .eq('slug', slug)
-    .maybeSingle();
-  return error || !data ? null : (data as SiteGroup);
-}
-
-/**
- * Why this group may not be published, or null if it may.
- *
- * A site's address IS its group slug, so a slug that cannot be a hostname can
- * never resolve. Saying so once, here, is much kinder than a published site
- * that silently never answers.
- */
-export function publishRefusal(group: SiteGroup): string | null {
-  if (!isValidSiteSlug(group.slug)) {
-    return `"${group.slug}" cannot be a hostname. A site address may contain only letters, numbers and hyphens, and may not start or end with one.`;
-  }
-  if (isReservedSubdomain(group.slug)) {
-    return `"${group.slug}.orangecat.ch" is reserved — ${reservedSubdomainReason(group.slug)}.`;
-  }
-  // A published site is public by definition, and the RLS policy enforces it.
-  // Refusing here beats publishing a website nobody can load.
-  if (group.is_public === false) {
-    return 'A private group cannot publish a public website. Make the group public first.';
-  }
-  return null;
-}
-
-/** Where this group's site is, or would be. */
-export function siteAddress(group: SiteGroup, config: unknown) {
-  const site = toHostedSite({ slug: group.slug, name: group.name }, config ?? {});
-  return {
-    url: `https://${siteCanonicalHost(site)}`,
-    // Reachable with or without DNS — this is the preview link, and it is what
-    // makes a site checkable before anybody points a domain at anything.
-    previewPath: `/sites/${group.slug}`,
-  };
-}
-
-export async function readSiteFeature(
-  supabase: Client,
-  groupId: string
-): Promise<{ enabled: boolean; config: unknown }> {
-  const { data, error } = await supabase
-    .from('group_features')
-    .select('enabled, config')
-    .eq('group_id', groupId)
-    .eq('feature_key', SITE_FEATURE_KEY)
-    .maybeSingle();
-  if (error) {
-    throw error;
-  }
-  return { enabled: Boolean(data?.enabled), config: data?.config ?? {} };
-}
-
-export async function publishSite(
-  supabase: Client,
-  group: SiteGroup,
-  config: SiteConfigInput,
-  userId: string
-): Promise<void> {
-  const { error } = await supabase.from('group_features').upsert(
-    {
-      group_id: group.id,
-      feature_key: SITE_FEATURE_KEY,
-      enabled: true,
-      config,
-      enabled_by: userId,
-    },
-    { onConflict: 'group_id,feature_key' }
-  );
-  if (error) {
-    throw error;
-  }
-}
-
-export async function unpublishSite(supabase: Client, group: SiteGroup): Promise<void> {
-  // Disabled, not deleted. `enabled = false` is what both the RLS policy and
-  // the resolver read, and keeping the row keeps the configuration — taking a
-  // site down for a week must not lose its custom domain.
-  const { error } = await supabase
-    .from('group_features')
-    .update({ enabled: false })
-    .eq('group_id', group.id)
-    .eq('feature_key', SITE_FEATURE_KEY);
-  if (error) {
-    throw error;
-  }
-}
diff --git a/src/services/sites/registry.ts b/src/services/sites/registry.ts
deleted file mode 100644
index dbd3f4d1c..000000000
--- a/src/services/sites/registry.ts
+++ /dev/null
@@ -1,194 +0,0 @@
-/**
- * Which sites exist, and at what hostnames — the database half of hosted sites.
- *
- * `src/config/sites.ts` decides, at the edge and without a query, whether a Host
- * header is SHAPED like a hosted site. This module answers the question that
- * actually needs data: is there a published site at that slug, and what is it?
- *
- * Read as ANON on purpose. `createPublicClient` carries no session, so every
- * answer here is one an anonymous visitor could have got for themselves — which
- * is the correct definition of "published", and it means the RLS policy added in
- * `20260827090000_hosted_sites_public_read.sql` is the authority rather than a
- * condition duplicated in TypeScript. Unpublishing is `enabled = false`, and it
- * takes effect here without any code knowing it happened.
- */
-
-import { unstable_cache } from 'next/cache';
-import { createPublicClient } from '@/lib/supabase/public';
-import {
-  ALWAYS_PUBLISHED,
-  HOSTED_SITE_FALLBACKS,
-  SITE_FEATURE_KEY,
-  siteCanonicalHost,
-  toHostedSite,
-  type HostedSite,
-} from '@/config/hosted-site';
-import type { SiteProfile } from '@/config/site-profile';
-import { isValidSiteSlug, normaliseHost, SITES_BASE_DOMAIN } from '@/config/sites';
-import { logger } from '@/utils/logger';
-
-/**
- * How long a resolved site is held.
- *
- * Short, because this is the latency between a customer flipping the switch in
- * FleetCrown and their website answering — the "few clicks" promise is measured
- * through this constant. A minute is fast enough to feel immediate and long
- * enough that a page of a busy site is not eight queries.
- */
-const SITE_CACHE_TTL_SECONDS = 60;
-
-/**
- * Cache tag both resolvers share, so publishing can drop them together.
- *
- * Exported because the publish endpoint invalidates it — a publish button that
- * takes a minute to visibly work reads as a publish button that failed.
- */
-export const HOSTED_SITES_TAG = 'hosted-sites';
-
-const SITE_SELECT =
-  'config, groups!inner(slug, name, description, label, tags, is_public, bitcoin_address, lightning_address)';
-
-interface SiteFeatureRow {
-  config: unknown;
-  groups: {
-    slug: string;
-    name: string;
-    description: string | null;
-    label: string | null;
-    tags: string[] | null;
-    is_public: boolean | null;
-    bitcoin_address: string | null;
-    lightning_address: string | null;
-  } | null;
-}
-
-/**
- * A published site and the profile it renders from, together.
- *
- * One shape because they come from one row. Returning them separately would
- * mean two queries and, worse, a moment where a site exists but its content
- * does not.
- */
-export interface ResolvedSite {
-  site: HostedSite;
-  /** Null for a bespoke site, whose content is in the repository. */
-  profile: SiteProfile | null;
-}
-
-function rowToResolved(row: SiteFeatureRow | null): ResolvedSite | null {
-  if (!row?.groups || row.groups.is_public === false) {
-    return null;
-  }
-  const group = row.groups;
-  const site = toHostedSite({ slug: group.slug, name: group.name }, row.config);
-  return {
-    site,
-    profile: site.builder
-      ? null
-      : {
-          slug: group.slug,
-          name: group.name,
-          description: group.description,
-          label: group.label,
-          tags: group.tags ?? [],
-          bitcoinAddress: group.bitcoin_address,
-          lightningAddress: group.lightning_address,
-          canonicalHost: siteCanonicalHost(site),
-        },
-  };
-}
-
-/**
- * The site published at this slug, or null.
- *
- * Sites in `ALWAYS_PUBLISHED` short-circuit: their pages live entirely in the
- * repository, so making their existence depend on a reachable database would
- * mean a build-time render of a fully static site could fail on a network blip.
- */
-async function loadSiteBySlug(slug: string): Promise<ResolvedSite | null> {
-  if (!isValidSiteSlug(slug)) {
-    return null;
-  }
-  if (ALWAYS_PUBLISHED.includes(slug)) {
-    const site = HOSTED_SITE_FALLBACKS[slug];
-    return site ? { site, profile: null } : null;
-  }
-
-  try {
-    const { data, error } = await createPublicClient()
-      .from('group_features')
-      .select(SITE_SELECT)
-      .eq('feature_key', SITE_FEATURE_KEY)
-      .eq('enabled', true)
-      .eq('groups.slug', slug)
-      .maybeSingle<SiteFeatureRow>();
-
-    if (error) {
-      logger.warn('Hosted site lookup failed', { slug, error: error.message }, 'Sites');
-      return null;
-    }
-    return rowToResolved(data);
-  } catch (error) {
-    logger.warn('Hosted site lookup threw', { slug, error: String(error) }, 'Sites');
-    return null;
-  }
-}
-
-export const siteBySlug = unstable_cache(loadSiteBySlug, ['hosted-site-by-slug'], {
-  revalidate: SITE_CACHE_TTL_SECONDS,
-  tags: [HOSTED_SITES_TAG],
-});
-
-/**
- * The site answering on this hostname, or null.
- *
- * Two shapes, in cost order. A free subdomain is decided by string arithmetic
- * plus one lookup by slug. A custom domain has no pattern to match — the
- * hostname is whatever the customer bought — so it costs a query against the
- * partial indexes the same migration created.
- */
-async function loadSiteByHost(host: string): Promise<ResolvedSite | null> {
-  const hostname = normaliseHost(host);
-  const bare = hostname.startsWith('www.') ? hostname.slice(4) : hostname;
-
-  const suffix = `.${SITES_BASE_DOMAIN}`;
-  if (bare.endsWith(suffix)) {
-    const label = bare.slice(0, -suffix.length);
-    if (label && !label.includes('.')) {
-      return loadSiteBySlug(label);
-    }
-  }
-
-  try {
-    const client = createPublicClient();
-    const { data, error } = await client
-      .from('group_features')
-      .select(SITE_SELECT)
-      .eq('feature_key', SITE_FEATURE_KEY)
-      .eq('enabled', true)
-      .or(`config->>customDomain.eq.${bare},config->aliasHosts.cs.["${bare}"]`)
-      .limit(1)
-      .maybeSingle<SiteFeatureRow>();
-
-    if (error) {
-      logger.warn('Custom-domain lookup failed', { host: bare, error: error.message }, 'Sites');
-      return null;
-    }
-    const resolved = rowToResolved(data);
-    // Trust the row only if it really claims this hostname. `.or` is a filter,
-    // not a proof, and a certificate is about to be issued on the strength of it.
-    const site = resolved?.site;
-    if (site && (site.customDomain === bare || site.aliasHosts.includes(bare))) {
-      return resolved;
-    }
-    return null;
-  } catch (error) {
-    logger.warn('Custom-domain lookup threw', { host: bare, error: String(error) }, 'Sites');
-    return null;
-  }
-}
-
-export const siteByHost = unstable_cache(loadSiteByHost, ['hosted-site-by-host'], {
-  revalidate: SITE_CACHE_TTL_SECONDS,
-  tags: [HOSTED_SITES_TAG],
-});
diff --git a/supabase/migrations/20260827090000_hosted_sites_public_read.sql b/supabase/migrations/20260827090000_hosted_sites_public_read.sql
deleted file mode 100644
index 2457c1e0b..000000000
--- a/supabase/migrations/20260827090000_hosted_sites_public_read.sql
+++ /dev/null
@@ -1,52 +0,0 @@
--- Hosted sites: let the public read the fact that a site is published.
---
--- A hosted site is a `group_features` row with feature_key = 'site'. No new
--- table: that row already carries group_id, enabled, an audit column and a
--- `config` jsonb, and `src/config/group-features.ts` already treats "adding a
--- feature" as the way a group gains a capability. A website is a capability.
---
--- THE PROBLEM THIS FIXES
---
--- `group_features_select` restricts SELECT to members of the group. That is
--- right for treasury and voting, and wrong for a website: the entire purpose of
--- substrata.orangecat.ch is that a stranger can load it. Without this policy a
--- published site is invisible to exactly the audience it exists for, and the
--- app would have to answer "is this site published?" with a service-role client
--- — which moves a public/private decision out of the database and into code
--- that can drift from it.
---
--- So the database keeps the answer. A site row is world-readable when, and only
--- when, it is switched on AND its group is public. Turning `enabled` off, or
--- making the group private, unpublishes the website in the same instant — one
--- fact, one place.
---
--- Nothing else about group_features changes: every other feature_key stays
--- members-only, because the existing policy is unmodified and policies are ORed.
-
-CREATE POLICY group_features_select_site_anon ON public.group_features
-  FOR SELECT
-  TO anon, authenticated
-  USING (
-    feature_key = 'site'
-    AND enabled = true
-    AND EXISTS (
-      SELECT 1
-      FROM public.groups g
-      WHERE g.id = group_features.group_id
-        AND g.is_public = true
-    )
-  );
-
-COMMENT ON POLICY group_features_select_site_anon ON public.group_features IS
-  'A published hosted site is public by definition — see src/config/hosted-site.ts. Scoped to feature_key = ''site'' so every other feature stays members-only.';
-
--- Resolving a CUSTOM domain is the one lookup that cannot be a pattern match:
--- given "substrata.ch", which site is that? Both indexes are partial on the
--- site rows, so they cost nothing for the other feature keys.
-CREATE INDEX IF NOT EXISTS group_features_site_custom_domain_idx
-  ON public.group_features ((config ->> 'customDomain'))
-  WHERE feature_key = 'site';
-
-CREATE INDEX IF NOT EXISTS group_features_site_alias_hosts_idx
-  ON public.group_features USING gin ((config -> 'aliasHosts') jsonb_path_ops)
-  WHERE feature_key = 'site';
diff --git a/supabase/migrations/20260827130000_drop_hosted_sites_policy.sql b/supabase/migrations/20260827130000_drop_hosted_sites_policy.sql
new file mode 100644
index 000000000..3cc984ad7
--- /dev/null
+++ b/supabase/migrations/20260827130000_drop_hosted_sites_policy.sql
@@ -0,0 +1,19 @@
+-- Drop the hosted-sites read policy and its indexes.
+--
+-- 20260827090000 opened `group_features` rows with feature_key = 'site' to anon,
+-- so a website published from a group profile could be loaded by a stranger.
+-- That feature has been removed: a site is its own repository, deployed on its
+-- own, exactly like every other site in this studio. OrangeCat is not the host.
+--
+-- Deleting the migration file does not undo a policy that already ran on
+-- production, and an RLS policy granting anonymous SELECT is not the kind of
+-- thing to leave lying around because "nothing writes that row any more". The
+-- rows are gone; the grant should go with them.
+--
+-- `group_features_select` (members only) is untouched and remains the only
+-- policy on the table, which is where this started.
+
+DROP POLICY IF EXISTS group_features_select_site_anon ON public.group_features;
+
+DROP INDEX IF EXISTS public.group_features_site_custom_domain_idx;
+DROP INDEX IF EXISTS public.group_features_site_alias_hosts_idx;