diff --git a/backend/internal/domain/vulnerability.go b/backend/internal/domain/vulnerability.go
index f1ad8f83..3206471a 100644
--- a/backend/internal/domain/vulnerability.go
+++ b/backend/internal/domain/vulnerability.go
@@ -203,12 +203,16 @@ func (v *Vulnerability) DedupKey() string {
 
 // VulnStats is the aggregate posture returned by GET /vulnerabilities/stats.
 type VulnStats struct {
-	Total        int64            `json:"total"`
-	Open         int64            `json:"open"`
-	BySeverity   map[string]int64 `json:"by_severity"`
-	ByStatus     map[string]int64 `json:"by_status"`
-	BySource     map[string]int64 `json:"by_source"`
-	ByTier       map[string]int64 `json:"by_tier"`
-	KEVCount     int64            `json:"kev_count"`
-	ExploitCount int64            `json:"exploit_count"`
+	Total      int64            `json:"total"`
+	Open       int64            `json:"open"`
+	BySeverity map[string]int64 `json:"by_severity"`
+	ByStatus   map[string]int64 `json:"by_status"`
+	BySource   map[string]int64 `json:"by_source"`
+	ByTier     map[string]int64 `json:"by_tier"`
+	KEVCount   int64            `json:"kev_count"`
+	// KEVOpen counts KEV-listed vulnerabilities still waiting for a fix (open,
+	// triaged or in remediation). KEVCount includes remediated and accepted ones,
+	// so it cannot answer "how many exploited flaws are still exposed".
+	KEVOpen      int64 `json:"kev_open"`
+	ExploitCount int64 `json:"exploit_count"`
 }
diff --git a/backend/internal/infrastructure/repository/gorm_vulnerability_repository.go b/backend/internal/infrastructure/repository/gorm_vulnerability_repository.go
index 02543e07..cd951fed 100644
--- a/backend/internal/infrastructure/repository/gorm_vulnerability_repository.go
+++ b/backend/internal/infrastructure/repository/gorm_vulnerability_repository.go
@@ -247,6 +247,9 @@ func (r *GormVulnerabilityRepository) Stats(ctx context.Context, tenantID uuid.U
 	}
 	base().Where("status = ?", domain.VulnStatusOpen).Count(&stats.Open)
 	base().Where("kev = ?", true).Count(&stats.KEVCount)
+	base().Where("kev = ? AND status IN ?", true, []domain.VulnStatus{
+		domain.VulnStatusOpen, domain.VulnStatusTriaged, domain.VulnStatusInRemediation,
+	}).Count(&stats.KEVOpen)
 	base().Where("exploit_available = ?", true).Count(&stats.ExploitCount)
 
 	type kv struct {
diff --git a/backend/internal/infrastructure/repository/gorm_vulnerability_stats_test.go b/backend/internal/infrastructure/repository/gorm_vulnerability_stats_test.go
new file mode 100644
index 00000000..5d8fb49e
--- /dev/null
+++ b/backend/internal/infrastructure/repository/gorm_vulnerability_stats_test.go
@@ -0,0 +1,87 @@
+// Copyright (c) 2026 OpenDefender Contributors
+// SPDX-License-Identifier: AGPL-3.0-only
+// This program is free software: you can redistribute it and/or modify it under
+// the terms of the GNU Affero General Public License v3.0 (see LICENSE).
+
+package repository
+
+import (
+	"context"
+	"testing"
+
+	"github.com/google/uuid"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"gorm.io/driver/sqlite"
+	"gorm.io/gorm"
+	"gorm.io/gorm/logger"
+
+	"github.com/opendefender/openrisk/internal/domain"
+	"github.com/opendefender/openrisk/internal/testsupport/sqliteschema"
+)
+
+func setupVulnStatsRepo(t *testing.T) (*GormVulnerabilityRepository, *gorm.DB) {
+	t.Helper()
+	db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{
+		Logger: logger.Default.LogMode(logger.Silent),
+	})
+	require.NoError(t, err)
+	require.NoError(t, db.Exec(`CREATE TABLE vulnerabilities (id TEXT PRIMARY KEY)`).Error)
+	require.NoError(t, sqliteschema.Reconcile(db, "vulnerabilities", &domain.Vulnerability{}))
+	return NewGormVulnerabilityRepository(db), db
+}
+
+func seedStatsVuln(t *testing.T, db *gorm.DB, tenant uuid.UUID, kev bool, status domain.VulnStatus) {
+	t.Helper()
+	v := domain.Vulnerability{
+		ID:       uuid.New(),
+		TenantID: tenant,
+		CVEID:    "CVE-2026-" + uuid.NewString()[:5],
+		Title:    "test finding",
+		Severity: domain.VulnSeverity("high"),
+		Status:   status,
+		KEV:      kev,
+	}
+	require.NoError(t, db.Create(&v).Error)
+}
+
+// The sidebar badge and the dashboard counter both read kev_open: a KEV flaw is
+// counted while it still waits for a fix, and drops out once remediated,
+// accepted or dismissed.
+func TestVulnStats_KEVOpen_Success(t *testing.T) {
+	repo, db := setupVulnStatsRepo(t)
+	tenant := uuid.New()
+	seedStatsVuln(t, db, tenant, true, domain.VulnStatusOpen)
+	seedStatsVuln(t, db, tenant, true, domain.VulnStatusTriaged)
+	seedStatsVuln(t, db, tenant, true, domain.VulnStatusInRemediation)
+	seedStatsVuln(t, db, tenant, true, domain.VulnStatusRemediated)
+	seedStatsVuln(t, db, tenant, true, domain.VulnStatusAccepted)
+	seedStatsVuln(t, db, tenant, true, domain.VulnStatusFalsePositive)
+	seedStatsVuln(t, db, tenant, false, domain.VulnStatusOpen)
+
+	stats, err := repo.Stats(context.Background(), tenant)
+	require.NoError(t, err)
+	assert.Equal(t, int64(6), stats.KEVCount, "kev_count keeps its historical meaning")
+	assert.Equal(t, int64(3), stats.KEVOpen)
+}
+
+// A tenant with no rows gets zeroes, not an error.
+func TestVulnStats_KEVOpen_NotFound(t *testing.T) {
+	repo, _ := setupVulnStatsRepo(t)
+	stats, err := repo.Stats(context.Background(), uuid.New())
+	require.NoError(t, err)
+	assert.Equal(t, int64(0), stats.KEVOpen)
+}
+
+// Another tenant's open KEV flaws never reach this tenant's count.
+func TestVulnStats_KEVOpen_Unauthorized(t *testing.T) {
+	repo, db := setupVulnStatsRepo(t)
+	mine, theirs := uuid.New(), uuid.New()
+	seedStatsVuln(t, db, theirs, true, domain.VulnStatusOpen)
+	seedStatsVuln(t, db, theirs, true, domain.VulnStatusOpen)
+	seedStatsVuln(t, db, mine, true, domain.VulnStatusOpen)
+
+	stats, err := repo.Stats(context.Background(), mine)
+	require.NoError(t, err)
+	assert.Equal(t, int64(1), stats.KEVOpen)
+}
diff --git a/frontend/.lint-ceiling.json b/frontend/.lint-ceiling.json
index 7114491f..05c13880 100644
--- a/frontend/.lint-ceiling.json
+++ b/frontend/.lint-ceiling.json
@@ -1,11 +1,11 @@
 {
-  "total": 99,
+  "total": 97,
   "rules": {
     "@typescript-eslint/no-unused-vars": 27,
     "@typescript-eslint/no-explicit-any": 21,
-    "react-hooks/set-state-in-effect": 13,
     "react-hooks/preserve-manual-memoization": 12,
-    "react-refresh/only-export-components": 10,
+    "react-hooks/set-state-in-effect": 12,
+    "react-refresh/only-export-components": 9,
     "react-hooks/static-components": 6,
     "react-hooks/purity": 3,
     "prefer-const": 2,
diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx
index a0d2eb3a..918613ff 100644
--- a/frontend/src/App.tsx
+++ b/frontend/src/App.tsx
@@ -397,6 +397,21 @@ const DashboardLayout = () => {
     };
   }, []);
 
+  // ⌘K / Ctrl+K opens the palette from anywhere. The palette is mounted only
+  // once opened, so its own listener cannot be the one that opens it: before
+  // #900 the shortcut did nothing until the search field had been clicked once.
+  // While it is open, the palette's listener handles the toggle.
+  useEffect(() => {
+    const onKey = (e: KeyboardEvent) => {
+      if (!(e.metaKey || e.ctrlKey) || e.key.toLowerCase() !== 'k') return;
+      if (useUIStore.getState().cmdkOpen) return;
+      e.preventDefault();
+      setCmdkOpen(true);
+    };
+    window.addEventListener('keydown', onKey);
+    return () => window.removeEventListener('keydown', onKey);
+  }, [setCmdkOpen]);
+
   // Discoverable global shortcuts (UX-26). Rows shown in ShortcutsOverlay must
   // mirror these handlers. The hook ignores keys while typing / with ⌘/Ctrl/Alt.
   useHotkeys([
@@ -442,10 +457,7 @@ const DashboardLayout = () => {
       {/* The organization's accent, worn by every member (#718). */}
       <BrandingSync />
       <Sidebar mobileOpen={mobileNavOpen} onMobileClose={() => setMobileNavOpen(false)} />
-      <div
-        className="flex-1 flex flex-col h-screen overflow-hidden relative min-w-0"
-        style={{ background: 'var(--bg-primary)' }}
-      >
+      <div className="flex-1 flex flex-col h-screen overflow-hidden relative min-w-0 bg-surface-0">
         {/* Demo (permanent, not dismissible by design — see shared/DemoBanner)
             on top; Offline below it, closest to the header it pushes. */}
         <BannerStack>
diff --git a/frontend/src/components/layout/AppHeader.tsx b/frontend/src/components/layout/AppHeader.tsx
index 24d50bce..c77c570d 100644
--- a/frontend/src/components/layout/AppHeader.tsx
+++ b/frontend/src/components/layout/AppHeader.tsx
@@ -1,21 +1,24 @@
 // Copyright (c) 2026 OpenDefender Contributors
 // SPDX-License-Identifier: AGPL-3.0-only
 //
-// Global glass header (OpenRisk.dc.html §5): breadcrumb · ⌘K search · connection
-// status · language · density · shortcuts · notifications · theme. Sticky,
-// backdrop-blurred, sits above the scrollable body. On < lg it collapses to a
-// hamburger + brand.
+// Global header (October 2026 redesign, #900): breadcrumb · ⌘K search ·
+// connection status · language · density · theme · notifications · help. It
+// keeps the redesign's layout (search, theme, bell, help on a solid canvas) and
+// adds the controls the redesign does not draw but the product relies on: the
+// live connection dot, the language switch and table density. On < lg it
+// collapses to a hamburger.
 //
 // Two controls were removed rather than kept as decoration (docs/ui/dead-controls.md):
 // the "Voice assistant" microphone (no speech feature exists anywhere in the
-// product) and the panel footer's "View all notifications" (there is no
-// all-notifications view; it merely closed the panel). The pulsing green dot,
+// product) and the old "View all notifications" footer, which merely closed the
+// panel. The redesign's footer link goes somewhere real, the activity feed, so
+// it is back with that destination. The pulsing green dot,
 // which claimed "Realtime" on every tenant regardless of anything, is now a real
 // connection indicator driven by lib/connection.
 
 import { useSyncExternalStore, useState, useEffect, useId, useRef } from 'react';
-import { useNavigate } from 'react-router';
-import { Search, Bell, Sun, Moon, Menu, Rows2, Rows3, Rows4, Keyboard } from 'lucide-react';
+import { Link, useNavigate } from 'react-router';
+import { Search, Bell, Sun, Moon, Menu, Rows2, Rows3, Rows4, CircleHelp } from 'lucide-react';
 import { cn, useDismissableLayer, useExitTimer } from '../../shared/ds';
 import { useUIStore } from '../../store/uiStore';
 import { useUIStrings } from '../../shared/uiStrings';
@@ -53,7 +56,7 @@ interface AppHeaderProps {
 }
 
 const iconBtn =
-  'w-9 h-9 rounded-[9px] flex items-center justify-center text-ink-muted hover:bg-hover hover:text-ink transition-colors';
+  'w-[34px] h-[34px] rounded-[10px] flex items-center justify-center text-fg-secondary hover:bg-surface-3 hover:text-ink transition-colors';
 
 export const AppHeader = ({ onOpenMobileNav }: AppHeaderProps) => {
   const setCmdkOpen = useUIStore((s) => s.setCmdkOpen);
@@ -92,7 +95,7 @@ export const AppHeader = ({ onOpenMobileNav }: AppHeaderProps) => {
   const badgeArmed = useArmedBadge(unreadFetched);
 
   return (
-    <header className="h-[58px] shrink-0 flex items-center gap-3 px-3 sm:px-[18px] border-b border-border sticky top-0 z-50 glass">
+    <header className="h-14 shrink-0 flex items-center gap-2.5 pl-3 pr-3 sm:pl-6 sm:pr-4 border-b border-border-subtle bg-surface-0 sticky top-0 z-50">
       {/* Mobile hamburger */}
       <button
         onClick={onOpenMobileNav}
@@ -104,31 +107,27 @@ export const AppHeader = ({ onOpenMobileNav }: AppHeaderProps) => {
 
       {/* Breadcrumb — a real clickable trail derived from the route tree, so
           every page at depth >= 2 renders its own way back. */}
-      <Breadcrumbs />
-
-      <div className="flex-1" />
+      <div className="flex-1 min-w-0">
+        <Breadcrumbs />
+      </div>
 
       {/* ⌘K search trigger */}
       <button
         data-tour="search"
         onClick={() => setCmdkOpen(true)}
-        className="hidden sm:flex items-center gap-[9px] h-[34px] px-3 rounded-[9px] text-ink-muted min-w-[230px] text-[13px] transition-colors"
-        style={{ background: 'var(--bg-elevated)', border: '1px solid var(--border)' }}
+        className="hidden sm:flex items-center gap-2 h-[34px] w-[300px] max-w-[32vw] shrink-0 pl-2.5 pr-1.5 rounded-[10px] border border-border-default bg-surface-1 text-ink-muted text-[13px] hover:border-border-strong hover:text-ink-soft transition-colors"
       >
         <Search size={15} strokeWidth={1.8} />
-        <span className="flex-1 text-left">{L.search}</span>
-        <span
-          className="mono text-[10.5px] px-1.5 py-0.5 rounded-[5px]"
-          style={{ background: 'var(--bg-hover)', border: '1px solid var(--border)' }}
-        >
+        <span className="flex-1 min-w-0 text-left whitespace-nowrap overflow-hidden text-ellipsis">
+          {L.searchHint}
+        </span>
+        <span className="mono text-[11px] px-1.5 py-0.5 rounded-[5px] border border-border-default text-ink-muted">
           ⌘K
         </span>
       </button>
 
-      <div className="flex-1" />
-
       {/* Actions */}
-      <div className="flex items-center gap-0.5">
+      <div className="flex items-center gap-0.5 shrink-0">
         <button
           onClick={() => setCmdkOpen(true)}
           className={cn(iconBtn, 'sm:hidden')}
@@ -163,37 +162,48 @@ export const AppHeader = ({ onOpenMobileNav }: AppHeaderProps) => {
             title={densityMeta.label}
             aria-label={densityMeta.label}
           >
-            <densityMeta.Icon size={18} strokeWidth={1.7} />
+            <densityMeta.Icon size={17} strokeWidth={1.7} />
           </button>
         </Hint>
 
-        {/* Replays the 3-coach-mark product tour (spec §8). A tour you cannot
-            replay is a tour you have to get right first time — and that nobody
-            can consult when they actually have the question. */}
-        <Hint
-          id="header-shortcuts"
-          side="bottom"
-          text={
-            lang === 'fr'
-              ? 'Raccourcis clavier — ou appuyez sur « ? » à tout moment.'
-              : 'Keyboard shortcuts — or press “?” anytime.'
-          }
+
+        <button
+          onClick={toggleTheme}
+          className={iconBtn}
+          title={theme === 'dark' ? L.themeToLight : L.themeToDark}
+          /* Names what pressing it DOES, not a static "toggle theme" — the
+             accessible name tracks state the same way the icon does. */
+          aria-label={theme === 'dark' ? L.themeToLight : L.themeToDark}
         >
-          <button
-            onClick={() => window.dispatchEvent(new CustomEvent('openrisk:shortcuts'))}
-            className={cn(iconBtn, 'hidden sm:flex')}
-            title={lang === 'fr' ? 'Raccourcis clavier (?)' : 'Keyboard shortcuts (?)'}
-            aria-label={lang === 'fr' ? 'Raccourcis clavier' : 'Keyboard shortcuts'}
-          >
-            <Keyboard size={18} strokeWidth={1.7} />
-          </button>
-        </Hint>
+          {/* Both icons stacked in one grid cell and cross-faded on
+              --motion-hover (opacity + a slight scale) — no rotation, no pop. */}
+          <span className="grid">
+            <Sun
+              aria-hidden="true"
+              size={17}
+              strokeWidth={1.7}
+              className={cn(
+                '[grid-area:1/1] transition-[opacity,transform] duration-fast ease-out',
+                theme === 'dark' ? 'opacity-100 scale-100' : 'opacity-0 scale-75',
+              )}
+            />
+            <Moon
+              aria-hidden="true"
+              size={17}
+              strokeWidth={1.7}
+              className={cn(
+                '[grid-area:1/1] transition-[opacity,transform] duration-fast ease-out',
+                theme === 'dark' ? 'opacity-0 scale-75' : 'opacity-100 scale-100',
+              )}
+            />
+          </span>
+        </button>
 
         {/* Notifications */}
         <div className="relative">
           <button
             onClick={() => setNotifOpen((v) => !v)}
-            className={cn(iconBtn, 'relative')}
+            className={cn(iconBtn, 'relative', notifOpen && 'bg-surface-3')}
             title={L.notifTitle}
             // The count is real server data (polled, never invented), so the
             // accessible name carries it — the true number, not the "9+" the
@@ -210,42 +220,21 @@ export const AppHeader = ({ onOpenMobileNav }: AppHeaderProps) => {
             aria-expanded={notifOpen}
             aria-haspopup="dialog"
           >
-            <Bell size={18} strokeWidth={1.7} />
+            <Bell size={17} strokeWidth={1.7} />
             <NotifBadge count={unreadCount} armed={badgeArmed} />
           </button>
           {notifMounted && <NotifPanel open={notifOpen} onClose={() => setNotifOpen(false)} />}
         </div>
 
+        {/* Help: the keyboard shortcuts sheet ("?" opens it from anywhere). */}
         <button
-          onClick={toggleTheme}
-          className={iconBtn}
-          title="Theme"
-          /* Names what pressing it DOES, not a static "toggle theme" — the
-             accessible name tracks state the same way the icon does. */
-          aria-label={theme === 'dark' ? L.themeToLight : L.themeToDark}
+          onClick={() => window.dispatchEvent(new CustomEvent('openrisk:shortcuts'))}
+          className={cn(iconBtn, 'hidden sm:flex')}
+          title={L.helpShortcutsTitle}
+          aria-label={L.helpShortcuts}
+          data-testid="header-help"
         >
-          {/* Both icons stacked in one grid cell and cross-faded on
-              --motion-hover (opacity + a slight scale) — no rotation, no pop. */}
-          <span className="grid">
-            <Sun
-              aria-hidden="true"
-              size={18}
-              strokeWidth={1.7}
-              className={cn(
-                '[grid-area:1/1] transition-[opacity,transform] duration-fast ease-out',
-                theme === 'dark' ? 'opacity-100 scale-100' : 'opacity-0 scale-75',
-              )}
-            />
-            <Moon
-              aria-hidden="true"
-              size={18}
-              strokeWidth={1.7}
-              className={cn(
-                '[grid-area:1/1] transition-[opacity,transform] duration-fast ease-out',
-                theme === 'dark' ? 'opacity-0 scale-75' : 'opacity-100 scale-100',
-              )}
-            />
-          </span>
+          <CircleHelp size={17} strokeWidth={1.7} />
         </button>
       </div>
     </header>
@@ -269,11 +258,11 @@ function NotifBadge({ count, armed }: { count: number; armed: boolean }) {
       aria-hidden="true"
       data-armed={armed}
       data-visible={visible}
-      className="notif-badge absolute top-[4px] right-[4px] min-w-[16px] h-[16px] px-1 rounded-full flex items-center justify-center text-[11px] font-semibold tabular-nums"
+      className="notif-badge absolute top-[5px] right-[5px] min-w-[15px] h-[15px] px-1 rounded-full flex items-center justify-center text-[9.5px] font-bold tabular-nums"
       style={{
-        background: 'var(--accent-solid)',
+        background: 'var(--danger-solid)',
         color: 'var(--fg-on-solid)',
-        boxShadow: '0 0 0 2px var(--glass)',
+        boxShadow: '0 0 0 2px var(--surface-0)',
       }}
     >
       {count > 9 ? '9+' : count}
@@ -324,7 +313,7 @@ function useEnterGate(open: boolean): boolean {
   return ready && open;
 }
 
-/* ---------- Notifications panel (glass, anchored right) ---------- */
+/* ---------- Notifications panel (anchored right) ---------- */
 // Reads the real /notifications feed. This panel used to render four invented
 // notifications on every tenant, which is how a fresh install came to report
 // incidents it had never had.
@@ -396,16 +385,17 @@ function NotifPanel({ open, onClose }: { open: boolean; onClose: () => void }) {
         aria-modal="true"
         aria-labelledby={titleId}
         tabIndex={-1}
-        className="notif-panel glass-strong absolute top-[44px] right-0 w-[352px] rounded-[16px] overflow-hidden shadow-card-lg z-70 outline-none"
+        className="notif-panel absolute top-[42px] right-0 w-[400px] max-w-[calc(100vw-24px)] rounded-[14px] overflow-hidden bg-surface-2 border border-border-default z-70 outline-none"
+        style={{ boxShadow: 'var(--elev-3)' }}
       >
-        <div className="flex items-center justify-between px-[17px] py-[15px] border-b border-border">
-          <span id={titleId} className="text-[14px] font-semibold text-ink">
+        <div className="flex items-center justify-between px-3.5 py-3 border-b border-border-subtle">
+          <span id={titleId} className="text-[13px] font-semibold text-ink">
             {L.notifTitle}
           </span>
           {items.some((it) => it.unread) && (
             <button
               onClick={() => markAllRead.mutate()}
-              className="text-[12px] font-medium text-accent hover:brightness-110"
+              className="text-[12px] font-semibold text-accent-strong px-1.5 py-1 rounded-[6px] hover:bg-accent-soft transition-colors"
             >
               {L.notifAll}
             </button>
@@ -415,7 +405,7 @@ function NotifPanel({ open, onClose }: { open: boolean; onClose: () => void }) {
         {/* category filter — separate the contexts (UX-6). Only rendered when
             there is something to filter; chips over an empty list are noise. */}
         {cats.length > 1 && (
-          <div className="flex gap-1.5 px-[15px] py-2.5 border-b border-border overflow-x-auto">
+          <div className="flex gap-1.5 px-3.5 py-2.5 border-b border-border-subtle overflow-x-auto">
             {cats.map((c) => {
               const active = filter === c;
               const label =
@@ -437,7 +427,7 @@ function NotifPanel({ open, onClose }: { open: boolean; onClose: () => void }) {
           </div>
         )}
 
-        <div className="max-h-[340px] overflow-y-auto">
+        <div className="max-h-[420px] overflow-y-auto">
           {isLoading ? (
             <div className="p-3">
               <SkeletonRows rows={3} height={44} />
@@ -487,26 +477,28 @@ function NotifPanel({ open, onClose }: { open: boolean; onClose: () => void }) {
                       openItem(it);
                     }
                   }}
-                  className="w-full text-left flex gap-3 px-[17px] py-[13px] border-b border-border cursor-pointer hover:bg-hover focus-visible:bg-hover outline-none transition-colors"
-                  style={{
-                    background: it.unread
-                      ? 'color-mix(in srgb,var(--accent) 4%,transparent)'
-                      : 'transparent',
-                  }}
+                  className="w-full text-left flex gap-3 px-3.5 py-3 border-b border-border-subtle cursor-pointer hover:bg-surface-3 focus-visible:bg-surface-3 outline-none transition-colors"
                 >
                   <div
-                    className="w-[34px] h-[34px] rounded-[10px] flex items-center justify-center shrink-0"
+                    className="w-[30px] h-[30px] rounded-[8px] flex items-center justify-center shrink-0"
                     style={{
                       background: `color-mix(in srgb,${it.color} 14%,transparent)`,
                       color: it.color,
                     }}
                   >
-                    <Icon size={17} strokeWidth={1.7} />
+                    <Icon size={15} strokeWidth={1.8} />
                   </div>
                   <div className="flex-1 min-w-0">
-                    <div className="text-[13px] font-semibold text-ink mb-0.5">{it.title}</div>
+                    <div
+                      className={cn(
+                        'text-[13px] leading-[1.35] text-ink',
+                        it.unread ? 'font-semibold' : 'font-medium',
+                      )}
+                    >
+                      {it.title}
+                    </div>
                     {it.body && (
-                      <div className="text-[12px] text-ink-soft leading-snug">{it.body}</div>
+                      <div className="text-[12px] text-ink-muted mt-0.5 leading-snug">{it.body}</div>
                     )}
                     <div className="text-[11px] text-ink-muted mt-1 flex items-center gap-1.5">
                       {it.time}
@@ -532,6 +524,13 @@ function NotifPanel({ open, onClose }: { open: boolean; onClose: () => void }) {
             })
           )}
         </div>
+        <Link
+          to="/activity"
+          onClick={onClose}
+          className="block text-center p-2.5 text-[12.5px] font-semibold text-accent-strong hover:bg-surface-3 transition-colors"
+        >
+          {L.notifSeeAll}
+        </Link>
       </div>
     </>
   );
diff --git a/frontend/src/components/layout/CommandPalette.tsx b/frontend/src/components/layout/CommandPalette.tsx
index 0f865647..a1b80c8d 100644
--- a/frontend/src/components/layout/CommandPalette.tsx
+++ b/frontend/src/components/layout/CommandPalette.tsx
@@ -1,9 +1,10 @@
 // Copyright (c) 2026 OpenDefender Contributors
 // SPDX-License-Identifier: AGPL-3.0-only
 //
-// ⌘K / Ctrl+K command palette (OpenRisk.dc.html §8). Glass overlay, autofocused
-// input, grouped Navigation + Quick actions filtered as you type. Esc / backdrop
-// closes. Registers the global ⌘K keyboard shortcut itself.
+// ⌘K / Ctrl+K command palette, laid out as in the October 2026 redesign (#900):
+// actions first, then pages ("Aller à"), then the live cross-entity results.
+// ↑↓ move the highlighted row, ↵ runs it, Esc or the backdrop closes. Registers
+// the global ⌘K keyboard shortcut itself.
 
 import { useEffect, useMemo, useRef, useState } from 'react';
 import { useNavigate } from 'react-router';
@@ -26,6 +27,7 @@ import {
 } from 'lucide-react';
 import { useUIStore } from '../../store/uiStore';
 import { useUIStrings } from '../../shared/uiStrings';
+import { pickLocalized } from '../../i18n/locales';
 import { visibleNavGroups } from '../../shared/navModel';
 import { usePermissions } from '../../hooks/usePermissions';
 import {
@@ -38,7 +40,9 @@ interface CmdItem {
   label: string;
   icon: LucideIcon;
   shortcut?: string;
-  subtitle?: string;
+  /** Right-hand hint: the nav group of a page, an entity's reference. */
+  hint?: string;
+  hintMono?: boolean;
   badge?: { text: string; tone: string };
   run: () => void;
 }
@@ -58,6 +62,22 @@ const TYPE_ICON: Record<SearchResultType, LucideIcon> = {
   cve: Globe,
   user: Users,
 };
+// The search API sends raw keys; the palette shows words.
+const SEVERITY_LABEL: Record<string, { fr: string; en: string }> = {
+  critical: { fr: 'Critique', en: 'Critical' },
+  high: { fr: 'Élevé', en: 'High' },
+  medium: { fr: 'Moyen', en: 'Medium' },
+  low: { fr: 'Faible', en: 'Low' },
+  info: { fr: 'Info', en: 'Info' },
+};
+const STATUS_LABEL: Record<string, { fr: string; en: string }> = {
+  open: { fr: 'Ouvert', en: 'Open' },
+  in_progress: { fr: 'En cours', en: 'In progress' },
+  mitigated: { fr: 'Atténué', en: 'Mitigated' },
+  accepted: { fr: 'Accepté', en: 'Accepted' },
+  closed: { fr: 'Clos', en: 'Closed' },
+};
+
 const TONE: Record<string, string> = {
   critical: 'var(--critical)',
   high: 'var(--high)',
@@ -80,7 +100,9 @@ export const CommandPalette = () => {
   const [query, setQuery] = useState('');
   const [results, setResults] = useState<SearchResult[]>([]);
   const [searching, setSearching] = useState(false);
+  const [active, setActive] = useState(0);
   const inputRef = useRef<HTMLInputElement>(null);
+  const listRef = useRef<HTMLDivElement>(null);
 
   // Global ⌘K / Ctrl+K + Esc.
   useEffect(() => {
@@ -99,6 +121,7 @@ export const CommandPalette = () => {
     if (open) {
       setQuery('');
       setResults([]);
+      setActive(0);
       // Autofocus after the mount animation begins.
       requestAnimationFrame(() => inputRef.current?.focus());
     }
@@ -135,6 +158,7 @@ export const CommandPalette = () => {
       g.items.map((it) => ({
         label: L[it.labelKey],
         icon: it.icon,
+        hint: it.pinned ? undefined : L[g.groupKey],
         run: () => {
           navigate(it.href ?? it.path);
           close();
@@ -165,14 +189,7 @@ export const CommandPalette = () => {
         },
       },
       {
-        label:
-          lang === 'fr'
-            ? theme === 'dark'
-              ? 'Thème clair'
-              : 'Thème sombre'
-            : theme === 'dark'
-              ? 'Light theme'
-              : 'Dark theme',
+        label: theme === 'dark' ? L.themeToLight : L.themeToDark,
         icon: theme === 'dark' ? Sun : Moon,
         run: () => {
           toggleTheme();
@@ -195,94 +212,130 @@ export const CommandPalette = () => {
     const resultItems: CmdItem[] = results.map((r) => ({
       label: r.title,
       icon: TYPE_ICON[r.type] ?? Search,
-      subtitle: r.subtitle,
-      badge: r.badge ? { text: r.badge, tone: TONE[r.badge] ?? 'var(--fg-muted)' } : undefined,
+      hint:
+        r.type === 'risk' && r.subtitle && STATUS_LABEL[r.subtitle]
+          ? pickLocalized(lang, STATUS_LABEL[r.subtitle])
+          : r.subtitle,
+      badge: r.badge
+        ? {
+            text: (SEVERITY_LABEL[r.badge] && pickLocalized(lang, SEVERITY_LABEL[r.badge])) ?? r.badge,
+            tone: TONE[r.badge] ?? 'var(--fg-muted)',
+          }
+        : undefined,
       run: () => {
         navigate(r.url);
         close();
       },
     }));
     return [
-      { label: lang === 'fr' ? 'Résultats' : 'Results', items: resultItems },
-      { label: lang === 'fr' ? 'Navigation' : 'Navigation', items: flt(nav) },
-      { label: lang === 'fr' ? 'Actions rapides' : 'Quick actions', items: flt(actions) },
+      { label: L.cmdActions, items: flt(actions) },
+      {
+        label: q ? L.cmdPages : L.cmdGoTo,
+        // With no query the palette offers a short jump list, as the design does.
+        items: q ? flt(nav) : nav.slice(0, 8),
+      },
+      { label: L.cmdResults, items: resultItems },
     ].filter((g) => g.items.length > 0);
   }, [L, query, results, navigate, setOpen, theme, lang, toggleTheme, toggleLang, can, isAdmin]);
 
+  const flat = groups.flatMap((g) => g.items);
+  const current = Math.min(active, Math.max(flat.length - 1, 0));
+
   if (!open) return null;
 
-  const runFirst = () => {
-    const first = groups[0]?.items[0];
-    first?.run();
+  const onInputKey = (e: React.KeyboardEvent<HTMLInputElement>) => {
+    if (e.key === 'ArrowDown' || e.key === 'ArrowUp') {
+      e.preventDefault();
+      if (flat.length === 0) return;
+      const next =
+        e.key === 'ArrowDown' ? (current + 1) % flat.length : (current - 1 + flat.length) % flat.length;
+      setActive(next);
+      listRef.current
+        ?.querySelector<HTMLElement>(`[data-cmd-index="${next}"]`)
+        ?.scrollIntoView({ block: 'nearest' });
+    } else if (e.key === 'Enter') {
+      e.preventDefault();
+      flat[current]?.run();
+    }
   };
+  let index = -1;
 
   return (
     <div
       onClick={() => setOpen(false)}
-      className="fixed inset-0 z-80 flex items-start justify-center"
+      className="fixed inset-0 z-80 flex items-start justify-center px-4"
       style={{
         background: 'var(--surface-overlay)',
-        backdropFilter: 'blur(6px)',
-        WebkitBackdropFilter: 'blur(6px)',
-        paddingTop: '14vh',
+        backdropFilter: 'blur(4px)',
+        WebkitBackdropFilter: 'blur(4px)',
+        paddingTop: '12vh',
         animation: 'or-fadein var(--motion-enter)',
       }}
     >
       <div
+        role="dialog"
+        aria-modal="true"
+        aria-label={L.cmdPalette}
         onClick={(e) => e.stopPropagation()}
-        className="glass-strong rounded-[18px] overflow-hidden shadow-card-lg"
-        style={{ width: 'min(92vw,600px)', animation: 'or-scalein var(--motion-enter)' }}
+        className="w-[640px] max-w-full rounded-[14px] overflow-hidden bg-surface-2 border border-border-default"
+        style={{ boxShadow: 'var(--elev-3)', animation: 'or-scalein var(--motion-enter)' }}
       >
-        <div className="flex items-center gap-[11px] px-[18px] py-4 border-b border-border">
+        <div className="flex items-center gap-2.5 px-4 h-[52px] border-b border-border-subtle">
           {searching ? (
-            <Loader2 size={18} strokeWidth={1.8} className="text-ink-muted animate-spin" />
+            <Loader2 size={17} strokeWidth={1.8} className="text-ink-muted animate-spin" />
           ) : (
-            <Search size={18} strokeWidth={1.8} className="text-ink-muted" />
+            <Search size={17} strokeWidth={1.8} className="text-ink-muted" />
           )}
           <input
             ref={inputRef}
             value={query}
-            onChange={(e) => setQuery(e.target.value)}
-            onKeyDown={(e) => e.key === 'Enter' && runFirst()}
+            onChange={(e) => {
+              setQuery(e.target.value);
+              setActive(0);
+            }}
+            onKeyDown={onInputKey}
             placeholder={L.cmdkPlaceholder}
-            className="flex-1 bg-transparent border-none outline-none text-ink text-[15px] placeholder:text-ink-muted"
+            aria-label={L.cmdkPlaceholder}
+            className="flex-1 h-full bg-transparent border-none outline-none focus-visible:outline-none text-ink text-[15px] placeholder:text-ink-muted"
           />
-          <span
-            className="mono text-[10.5px] px-[7px] py-[3px] rounded-md text-ink-muted"
-            style={{ background: 'var(--bg-hover)', border: '1px solid var(--border)' }}
-          >
-            ESC
+          <span className="mono text-[11px] px-1.5 py-0.5 rounded-[5px] border border-border-default text-ink-muted">
+            {L.cmdEsc}
           </span>
         </div>
 
-        <div className="p-2 overflow-y-auto" style={{ maxHeight: '52vh' }}>
+        <div ref={listRef} className="p-1.5 overflow-y-auto max-h-[400px]">
           {groups.map((g) => (
-            <div key={g.label} className="mb-1.5">
-              <div className="text-[10.5px] uppercase tracking-[0.08em] text-ink-muted font-semibold px-3 pt-2 pb-[5px]">
+            <div key={g.label}>
+              <div className="text-[10.5px] uppercase tracking-[0.06em] text-ink-muted font-semibold px-2.5 pt-2.5 pb-1.5">
                 {g.label}
               </div>
-              {g.items.map((it, i) => {
+              {g.items.map((it) => {
                 const Icon = it.icon;
+                index += 1;
+                const i = index;
+                const on = i === current;
                 return (
                   <button
                     key={g.label + i}
+                    data-cmd-index={i}
                     onClick={it.run}
-                    className="w-full flex items-center gap-3 px-3 py-[9px] rounded-[10px] hover:bg-accent-soft transition-colors text-left"
+                    onMouseMove={() => {
+                      if (!on) setActive(i);
+                    }}
+                    className={`relative w-full flex items-center gap-3 h-10 px-2.5 rounded-[9px] text-left ${on ? 'bg-surface-3' : ''}`}
                   >
-                    <span className="text-ink-soft flex shrink-0">
-                      <Icon size={17} strokeWidth={1.75} />
-                    </span>
-                    <span className="flex-1 min-w-0">
-                      <span className="block text-[13.5px] text-ink truncate">{it.label}</span>
-                      {it.subtitle && (
-                        <span className="block text-[11px] text-ink-muted truncate">
-                          {it.subtitle}
-                        </span>
-                      )}
+                    <span
+                      aria-hidden="true"
+                      className="absolute left-0 top-2.5 bottom-2.5 w-[2px] rounded-[2px]"
+                      style={{ background: on ? 'var(--accent)' : 'transparent' }}
+                    />
+                    <Icon size={16} strokeWidth={1.75} className="text-ink-soft shrink-0 w-[18px]" />
+                    <span className="flex-1 min-w-0 text-[13px] text-ink whitespace-nowrap overflow-hidden text-ellipsis">
+                      {it.label}
                     </span>
                     {it.badge && (
                       <span
-                        className="text-[9.5px] font-semibold uppercase tracking-wide px-1.5 py-0.5 rounded shrink-0"
+                        className="text-[11px] font-semibold px-2 py-0.5 rounded-full shrink-0"
                         style={{
                           color: it.badge.tone,
                           background: `color-mix(in srgb, ${it.badge.tone} 16%, transparent)`,
@@ -291,28 +344,34 @@ export const CommandPalette = () => {
                         {it.badge.text}
                       </span>
                     )}
-                    {it.shortcut && (
+                    {it.hint && (
                       <span
-                        className="mono text-[10.5px] px-1.5 py-0.5 rounded text-ink-muted"
-                        style={{ background: 'var(--bg-hover)', border: '1px solid var(--border)' }}
+                        className={`text-[12px] text-ink-muted whitespace-nowrap max-w-[40%] overflow-hidden text-ellipsis ${it.hintMono ? 'mono' : ''}`}
                       >
-                        {it.shortcut}
+                        {it.hint}
                       </span>
                     )}
+                    {it.shortcut && (
+                      <span className="text-[12px] text-ink-muted">{it.shortcut}</span>
+                    )}
                   </button>
                 );
               })}
             </div>
           ))}
           {groups.length === 0 && (
-            <div className="px-3 py-6 text-center text-[13px] text-ink-muted">
-              {searching ? (lang === 'fr' ? 'Recherche…' : 'Searching…') : L.notifEmpty}
+            <div className="p-7 text-center text-[13px] text-ink-muted">
+              {searching ? L.cmdSearching : `${L.cmdNoResults} « ${query.trim()} ».`}
             </div>
           )}
         </div>
 
-        <div className="px-4 py-2.5 border-t border-border text-[11px] text-ink-muted text-center">
-          ↑↓ {L.navigate} · ↵ {L.open} · esc {L.close}
+        <div className="flex gap-4 px-4 py-[9px] border-t border-border-subtle text-[11.5px] text-ink-muted">
+          <span>↑↓ {L.navigate}</span>
+          <span>↵ {L.open}</span>
+          {can('risks:create') && (
+            <span>N {L.cmdNewRiskHint}</span>
+          )}
         </div>
       </div>
     </div>
diff --git a/frontend/src/components/layout/OrgPlanLabel.tsx b/frontend/src/components/layout/OrgPlanLabel.tsx
index 1c48fa8d..d486aded 100644
--- a/frontend/src/components/layout/OrgPlanLabel.tsx
+++ b/frontend/src/components/layout/OrgPlanLabel.tsx
@@ -43,7 +43,7 @@ export function OrgPlanLabel() {
   if (!name) return null;
 
   return (
-    <div className="text-[10.5px] text-ink-soft" data-testid="org-plan">
+    <div className="text-[11px] text-ink-muted" data-testid="org-plan">
       {t('common.planName', { plan: name })}
     </div>
   );
diff --git a/frontend/src/components/layout/OrgSwitcher.tsx b/frontend/src/components/layout/OrgSwitcher.tsx
index 3136206c..51646fe0 100644
--- a/frontend/src/components/layout/OrgSwitcher.tsx
+++ b/frontend/src/components/layout/OrgSwitcher.tsx
@@ -174,7 +174,7 @@ export function OrgSwitcher({
           doSwitch.reset();
           setOpen((v) => !v);
         }}
-        className="w-full flex items-center gap-2.5 px-2 py-1.5 rounded-[9px] hover:bg-hover focus-visible:bg-hover outline-none focus-visible:ring-2 focus-visible:ring-accent transition-colors"
+        className="w-full flex items-center gap-2.5 px-2 py-1.5 rounded-[10px] border border-border-default bg-surface-0 hover:border-border-strong outline-none focus-visible:ring-2 focus-visible:ring-accent transition-colors"
       >
         {badge ?? (
           <div
@@ -186,12 +186,12 @@ export function OrgSwitcher({
           </div>
         )}
         <div className="min-w-0 flex-1 text-left">
-          <div className="text-[12.5px] font-semibold leading-tight text-ink truncate">
+          <div className="text-[12.5px] font-semibold text-ink truncate">
             {orgName}
           </div>
           <OrgPlanLabel />
         </div>
-        <ChevronsUpDown size={13} className="text-ink-muted shrink-0" aria-hidden="true" />
+        <ChevronsUpDown size={14} className="text-ink-muted shrink-0" aria-hidden="true" />
       </button>
 
       {open && (
diff --git a/frontend/src/components/layout/Sidebar.tsx b/frontend/src/components/layout/Sidebar.tsx
index 4599c7a1..9fae703e 100644
--- a/frontend/src/components/layout/Sidebar.tsx
+++ b/frontend/src/components/layout/Sidebar.tsx
@@ -11,7 +11,6 @@ import {
   Plus,
   Settings,
   LogOut,
-  Star,
   UserRound,
 } from 'lucide-react';
 import { cn } from '../../shared/ds';
@@ -27,19 +26,25 @@ import {
   pinnedItems,
   ALL_NAV_ITEMS,
   type NavItem,
-  type NavCount,
+  type NavBadgeTone,
 } from '../../shared/navModel';
 import { useScore } from '../../hooks/useScore';
-import {
-  useOrganizationBranding,
-  useOrganizationCounts,
-} from '../../features/organization/useOrganization';
+import { useOrganizationBranding } from '../../features/organization/useOrganization';
+import { useNavCounts } from './useNavCounts';
 import { bandColor, bandLabel, bandTextColor } from '../../services/scoreService';
 import { UserAvatar } from '../../shared/UserAvatar';
 import { useMyProfile } from '../../features/profile/useProfile';
 import { OrgLogo } from '../../features/organization/OrgLogo';
 import { useNavGlide } from './useNavGlide';
 
+// Badge colours from the redesign: a count of work is neutral, exposure is
+// danger, something waiting on someone else is info.
+const BADGE_TONE: Record<NavBadgeTone, { bg: string; fg: string }> = {
+  neutral: { bg: 'var(--surface-3)', fg: 'var(--fg-secondary)' },
+  danger: { bg: 'var(--danger-surface)', fg: 'var(--danger-text)' },
+  info: { bg: 'var(--info-surface)', fg: 'var(--info-text)' },
+};
+
 interface SidebarProps {
   /** Off-canvas drawer open on mobile (< lg). Ignored on desktop, where the
    *  sidebar is always in the layout flow. */
@@ -140,10 +145,7 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
   // Live, tenant-scoped counters for the nav badges. A failed or refused read
   // leaves every count at zero, which renders no badge at all — the honest
   // outcome, since we do not know the number.
-  const { data: orgCounts } = useOrganizationCounts();
-  const navCounts: Record<NavCount, number> = {
-    pending_invitations: orgCounts?.pending_invitations ?? 0,
-  };
+  const navCounts = useNavCounts(can);
 
   const navItem = (item: NavItem) => {
     const active = item.key === activeKey;
@@ -169,26 +171,29 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
         aria-current={active ? 'page' : undefined}
         title={L[item.labelKey]}
         className={cn(
-          'w-full flex items-center gap-[11px] px-[11px] py-2 rounded-[9px] relative mb-0.5 transition-colors',
-          // With the glide on, the shared backdrop is the hover; without it
-          // (touch, reduced motion) each entry keeps its own.
-          active ? 'bg-accent-soft' : !glide.enabled && 'hover:bg-hover',
+          'group/nav relative flex items-center gap-[11px] h-[34px] px-2.5 mb-px rounded-[8px] text-[13px] transition-colors',
+          active
+            ? 'bg-surface-3 text-fg-primary font-semibold'
+            : cn('text-fg-secondary font-medium hover:text-fg-primary', !glide.enabled && 'hover:bg-surface-3'),
+          collapsed && 'justify-center px-0',
         )}
       >
+        {/* Keyline on the active entry, flush with the nav's left edge. */}
         <span
-          className="flex shrink-0"
-          style={{ color: active ? 'var(--accent)' : 'var(--fg-secondary)' }}
-        >
-          <Icon size={19} strokeWidth={1.75} />
-        </span>
+          aria-hidden="true"
+          className="absolute -left-2.5 top-[7px] bottom-[7px] w-[2px] rounded-r-[2px]"
+          style={{ background: active ? 'var(--accent)' : 'transparent' }}
+        />
+        <Icon
+          size={17}
+          strokeWidth={1.75}
+          className={cn(
+            'shrink-0',
+            active ? 'text-accent' : 'text-fg-muted group-hover/nav:text-fg-primary',
+          )}
+        />
         {!collapsed && (
-          <span
-            className="text-[13px] whitespace-nowrap flex-1 text-left"
-            style={{
-              fontWeight: active ? 600 : 500,
-              color: active ? 'var(--fg-primary)' : 'var(--fg-secondary)',
-            }}
-          >
+          <span className="flex-1 min-w-0 whitespace-nowrap overflow-hidden text-ellipsis">
             {L[item.labelKey]}
           </span>
         )}
@@ -202,14 +207,21 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
           navCounts[item.badge.count] > 0 &&
           (collapsed ? (
             <span
-              className="absolute top-1.5 right-1.5 w-2 h-2 rounded-full"
-              style={{ background: item.badge.color ?? 'var(--critical)' }}
+              className="absolute top-[7px] left-[24px] w-[7px] h-[7px] rounded-full"
+              style={{
+                background: BADGE_TONE[item.badge.tone].fg,
+                boxShadow: '0 0 0 2px var(--surface-1)',
+              }}
               aria-label={`${navCounts[item.badge.count]}`}
             />
           ) : (
             <span
-              className="text-[10px] font-bold min-w-[17px] h-[17px] px-[5px] rounded-[9px] flex items-center justify-center text-fg-primary"
-              style={{ background: item.badge.color ?? 'var(--critical)' }}
+              className="mono text-[10.5px] font-semibold min-w-[18px] h-[18px] px-[5px] rounded-[9px] flex items-center justify-center"
+              style={{
+                background: BADGE_TONE[item.badge.tone].bg,
+                color: BADGE_TONE[item.badge.tone].fg,
+              }}
+              data-testid={`nav-badge-${item.key}`}
             >
               {navCounts[item.badge.count]}
             </span>
@@ -224,27 +236,28 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
       {mobileOpen && (
         <div
           onClick={onMobileClose}
-          className="lg:hidden fixed inset-0 bg-surface-overlay backdrop-blur-sm z-40"
+          className="lg:hidden fixed inset-0 bg-surface-overlay backdrop-blur-sm z-55"
           aria-hidden="true"
         />
       )}
 
       <aside
-        style={{ background: 'var(--bg-secondary)', transition: 'width .25s ease' }}
+        style={{ transition: 'width 260ms var(--ease-out)' }}
         className={cn(
-          'h-screen border-r border-border flex flex-col z-50',
+          // Above the sticky header (z-50) when it slides in as a drawer on mobile.
+          'h-screen bg-surface-1 border-r border-border-subtle flex flex-col z-60 overflow-hidden',
           'lg:static lg:shrink-0 lg:translate-x-0',
-          collapsed ? 'lg:w-[66px]' : 'lg:w-[248px]',
+          collapsed ? 'lg:w-[64px]' : 'lg:w-[248px]',
           'fixed inset-y-0 left-0 w-[248px] max-w-[82vw]',
           mobileOpen ? 'translate-x-0 shadow-card-lg' : '-translate-x-full lg:translate-x-0',
         )}
       >
         <div className="flex flex-col h-full">
           {/* Logo + org switcher */}
-          <div className="px-[14px] pt-4 pb-2.5">
+          <div className="px-[14px] pt-[14px] pb-2.5">
             <div
               className={cn(
-                'flex items-center gap-2.5 px-1.5 pb-3.5',
+                'flex items-center gap-2.5 px-[3px] pb-[14px]',
                 collapsed && 'justify-center px-0',
               )}
             >
@@ -257,7 +270,9 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                 <OpenRiskLogo size={18} />
               </div>
               {!collapsed && (
-                <span className="disp text-[17px] font-bold tracking-tight text-ink">OpenRisk</span>
+                <span className="disp text-[17px] font-bold tracking-[-0.01em] whitespace-nowrap text-ink">
+                  OpenRisk
+                </span>
               )}
             </div>
 
@@ -270,6 +285,7 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                     hasLogo={branding?.has_logo ?? false}
                     size={26}
                     radius={7}
+                    neutral
                   />
                 }
               />
@@ -285,12 +301,12 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                   window.dispatchEvent(new CustomEvent('openrisk:new-risk'));
                   onMobileClose?.();
                 }}
-                className="w-full h-[38px] rounded-[10px] flex items-center justify-center gap-2 text-[13px] font-semibold text-fg-primary transition-[filter] hover:brightness-110"
+                className="w-full h-9 rounded-[10px] flex items-center justify-center gap-2 text-[13px] font-semibold transition-[filter,transform] hover:brightness-[1.08] active:translate-y-px"
                 style={{
                   background: 'var(--accent-solid)',
                   color: 'var(--fg-on-solid)',
                 }}
-                title={L.newRisk}
+                title={`${L.newRisk} (N)`}
               >
                 <Plus size={16} strokeWidth={2.2} />
                 {!collapsed && <span>{L.newRisk}</span>}
@@ -299,7 +315,11 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
           )}
 
           {/* Navigation */}
-          <nav className="relative flex-1 overflow-y-auto px-2.5 pt-1.5 pb-2.5" {...glide.navProps}>
+          <nav
+            aria-label={tr('Navigation principale', 'Main navigation')}
+            className="relative flex-1 overflow-y-auto overflow-x-hidden px-2.5 pt-1 pb-2.5"
+            {...glide.navProps}
+          >
             {/* First child, so every entry paints above it. Glides on
                 --motion-hover, fades out on --motion-exit, never scales. */}
             {glide.enabled && (
@@ -309,7 +329,7 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                 data-testid="nav-glide"
                 data-visible="false"
                 className={cn(
-                  'pointer-events-none absolute top-0 left-0 rounded-[9px] bg-hover opacity-0',
+                  'pointer-events-none absolute top-0 left-0 rounded-[8px] bg-surface-3 opacity-0',
                   'transition-opacity duration-fast ease-in',
                   'data-[visible=true]:opacity-100 data-[visible=true]:ease-out',
                   'data-[visible=true]:transition-[transform,height,opacity] data-[visible=true]:duration-fast',
@@ -318,22 +338,18 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
             )}
             {/* Pinned entries (Dashboard) hoisted above the intention groups. */}
             {pinned.length > 0 && (
-              <div className="mb-3 pb-3 border-b border-border">{pinned.map(navItem)}</div>
+              <>
+                {pinned.map(navItem)}
+                <div aria-hidden="true" className="h-px bg-border-subtle mt-2 mx-[2px] mb-[14px]" />
+              </>
             )}
             {navGroups.map((group) => {
               const items = group.items.filter((i) => !i.pinned);
               if (items.length === 0) return null;
               return (
-                <div key={group.groupKey} className="mb-4">
+                <div key={group.groupKey} className="mb-[14px]">
                   {!collapsed && (
-                    <div
-                      className={cn(
-                        'text-[10px] tracking-[0.09em] uppercase font-semibold px-3 pb-[7px] flex items-center gap-1.5',
-                        !group.core && 'text-ink-muted',
-                      )}
-                      style={group.core ? { color: 'var(--accent-500)' } : undefined}
-                    >
-                      {group.core && <Star size={10} strokeWidth={2.5} fill="var(--accent)" />}
+                    <div className="text-[10px] tracking-[0.09em] uppercase font-semibold text-ink-muted px-2.5 pb-1.5">
                       {L[group.groupKey]}
                     </div>
                   )}
@@ -346,13 +362,13 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
           {/* Security score footer — the canonical tenant score; hidden until
               it has loaded, "not measured" when the tenant has nothing to score. */}
           {!collapsed && tenantScore !== undefined && (
-            <button
-              onClick={() => navigate('/?view=executive')}
-              className="w-full text-left px-[14px] py-3 border-t border-border hover:bg-hover transition-colors"
-              title={tr('Voir le tableau exécutif', 'Open the executive dashboard')}
+            <Link
+              to="/?view=executive"
+              className="block w-full text-left px-4 py-3 border-t border-border-subtle hover:bg-surface-2 transition-colors"
+              title={L.openExecutive}
             >
-              <div className="flex items-center justify-between mb-[7px]">
-                <span className="text-[10.5px] text-ink-soft font-medium">
+              <div className="flex items-baseline justify-between mb-[7px]">
+                <span className="text-[11px] text-ink-soft font-medium whitespace-nowrap">
                   {L.globalScore} · {bandLabel(measuredScore?.band, lang)}
                 </span>
                 <span
@@ -363,12 +379,9 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                   {score === undefined ? '—' : `${score}/100`}
                 </span>
               </div>
-              <div
-                className="h-[5px] rounded-[5px] overflow-hidden"
-                style={{ background: 'var(--bg-hover)' }}
-              >
+              <div className="h-1 rounded overflow-hidden bg-surface-3">
                 <div
-                  className="h-full rounded-[5px]"
+                  className="h-full rounded"
                   style={{
                     width: `${score ?? 0}%`,
                     background: scoreColor,
@@ -376,11 +389,11 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                   }}
                 />
               </div>
-            </button>
+            </Link>
           )}
 
           {/* User menu (account · settings · logout) + collapse */}
-          <div className="relative px-[14px] py-3 border-t border-border">
+          <div className="relative px-3 py-2.5 border-t border-border-subtle">
             {menuOpen && (
               <>
                 <div
@@ -410,7 +423,7 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                     }}
                     className="w-full flex items-center gap-2.5 px-3 py-2.5 text-[13px] font-medium text-ink hover:bg-hover transition-colors"
                   >
-                    <UserRound size={16} strokeWidth={1.8} /> {tr('Mon profil', 'My profile')}
+                    <UserRound size={16} strokeWidth={1.8} /> {L.myProfile}
                   </button>
                   <button
                     onClick={() => {
@@ -432,14 +445,15 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
               </>
             )}
 
-            <div className={cn('flex items-center gap-2.5', collapsed && 'justify-center')}>
+            <div className={cn('flex items-center gap-2', collapsed && 'justify-center')}>
               <button
                 onClick={() => setMenuOpen((v) => !v)}
                 title={tr('Compte', 'Account')}
                 aria-label={tr('Menu du compte', 'Account menu')}
+                aria-expanded={menuOpen}
                 className={cn(
-                  'flex items-center gap-2.5 min-w-0 rounded-[9px] py-1 pr-1.5 hover:bg-hover transition-colors',
-                  collapsed ? 'px-1' : 'flex-1 pl-1',
+                  'flex items-center gap-2.5 min-w-0 rounded-[9px] p-1 hover:bg-surface-3 transition-colors',
+                  !collapsed && 'flex-1',
                 )}
               >
                 <UserAvatar
@@ -451,7 +465,7 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
                 />
                 {!collapsed && (
                   <div className="flex-1 min-w-0 text-left">
-                    <div className="text-[12px] font-semibold leading-tight text-ink truncate">
+                    <div className="text-[12px] font-semibold text-ink truncate">
                       {user?.full_name || user?.username || 'Admin'}
                     </div>
                     <SidebarRoleLabel />
@@ -461,8 +475,9 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
               {!collapsed && (
                 <button
                   onClick={toggleCollapse}
-                  className="w-[26px] h-[26px] rounded-[7px] flex items-center justify-center text-ink-muted hover:bg-hover hover:text-ink transition-colors shrink-0"
-                  aria-label="Collapse sidebar"
+                  className="hidden lg:flex w-7 h-7 rounded-[7px] items-center justify-center text-ink-muted hover:bg-surface-3 hover:text-ink transition-colors shrink-0"
+                  aria-label={L.collapseSidebar}
+                  title={L.collapseSidebar}
                 >
                   <PanelLeftClose size={16} strokeWidth={1.7} />
                 </button>
@@ -474,8 +489,9 @@ export const Sidebar = ({ mobileOpen = false, onMobileClose }: SidebarProps) =>
           {collapsed && (
             <button
               onClick={toggleCollapse}
-              className="hidden lg:flex mx-auto mb-3 w-[26px] h-[26px] rounded-[7px] items-center justify-center text-ink-muted hover:bg-hover hover:text-ink transition-colors"
-              aria-label="Expand sidebar"
+              className="hidden lg:flex mx-auto mb-3 w-7 h-7 rounded-[7px] items-center justify-center text-ink-muted hover:bg-surface-3 hover:text-ink transition-colors"
+              aria-label={L.expandSidebar}
+              title={L.expandSidebar}
             >
               <PanelLeftOpen size={16} strokeWidth={1.7} />
             </button>
diff --git a/frontend/src/components/layout/useNavCounts.ts b/frontend/src/components/layout/useNavCounts.ts
new file mode 100644
index 00000000..c4e944b2
--- /dev/null
+++ b/frontend/src/components/layout/useNavCounts.ts
@@ -0,0 +1,54 @@
+// Copyright (c) 2026 OpenDefender Contributors
+// SPDX-License-Identifier: AGPL-3.0-only
+//
+// Live counters behind the sidebar badges (#900). Each one reads a real,
+// tenant-scoped endpoint, and only when the member may open the screen the
+// badge sits on: a badge on an entry the member cannot see would be a request
+// the API refuses, retried every minute for nothing.
+//
+// A count that is loading, failed or refused stays at zero, which renders no
+// badge. Zero is the honest answer when we do not know the number.
+
+import { useQuery } from '@tanstack/react-query';
+import type { NavCount } from '../../shared/navModel';
+import { useOrganizationCounts } from '../../features/organization/useOrganization';
+import { actionCenterService } from '../../features/action-center/actionCenterService';
+import { vulnerabilityService } from '../../features/vulnerabilities/vulnerabilityService';
+import { incidentService } from '../../features/incidents/incidentService';
+import { useAuthStore } from '../../hooks/useAuthStore';
+
+const REFRESH_MS = 60_000;
+
+export function useNavCounts(can: (perm: string) => boolean): Record<NavCount, number> {
+  const tenant = useAuthStore((s) => s.user?.tenant_id) ?? 'anonymous';
+  const { data: orgCounts } = useOrganizationCounts();
+
+  // limit=1: only the total is wanted, the rows are not.
+  const actions = useQuery({
+    queryKey: ['nav-counts', tenant, 'action-items'],
+    queryFn: () => actionCenterService.list({ limit: 1, offset: 0 }),
+    refetchInterval: REFRESH_MS,
+    retry: 1,
+  });
+  const vulns = useQuery({
+    queryKey: ['vulnerabilities', 'stats'],
+    queryFn: vulnerabilityService.stats,
+    enabled: can('vulnerabilities:read'),
+    refetchInterval: REFRESH_MS,
+    retry: 1,
+  });
+  const incidents = useQuery({
+    queryKey: ['incidents', 'stats'],
+    queryFn: () => incidentService.stats(),
+    enabled: can('incidents:read'),
+    refetchInterval: REFRESH_MS,
+    retry: 1,
+  });
+
+  return {
+    pending_invitations: orgCounts?.pending_invitations ?? 0,
+    action_items: actions.data?.total ?? 0,
+    kev_open: vulns.data?.kev_open ?? 0,
+    open_incidents: incidents.data?.open_incidents ?? 0,
+  };
+}
diff --git a/frontend/src/features/organization/OrgLogo.tsx b/frontend/src/features/organization/OrgLogo.tsx
index f286785a..0c1eea49 100644
--- a/frontend/src/features/organization/OrgLogo.tsx
+++ b/frontend/src/features/organization/OrgLogo.tsx
@@ -18,19 +18,28 @@ interface OrgLogoProps {
   size: number;
   radius: number;
   className?: string;
+  /** Neutral initials tile (sidebar switcher) instead of the accent tint. */
+  neutral?: boolean;
 }
 
-export function OrgLogo({ name, hasLogo, size, radius, className = '' }: OrgLogoProps) {
+export function OrgLogo({
+  name,
+  hasLogo,
+  size,
+  radius,
+  className = '',
+  neutral = false,
+}: OrgLogoProps) {
   const src = useOrganizationLogoUrl(hasLogo);
   return (
     <div
-      className={`flex items-center justify-center font-bold shrink-0 overflow-hidden text-accent-strong ${className}`}
+      className={`flex items-center justify-center font-bold shrink-0 overflow-hidden ${neutral ? 'text-fg-secondary' : 'text-accent-strong'} ${className}`}
       style={{
         width: size,
         height: size,
         borderRadius: radius,
         fontSize: Math.round(size * 0.38),
-        background: src ? 'var(--bg-elevated)' : 'var(--accent-soft)',
+        background: src ? 'var(--bg-elevated)' : neutral ? 'var(--surface-3)' : 'var(--accent-soft)',
       }}
       aria-hidden="true"
       data-testid="org-logo"
diff --git a/frontend/src/features/vulnerabilities/vulnerabilityService.ts b/frontend/src/features/vulnerabilities/vulnerabilityService.ts
index 0440a1b2..4cd95bd2 100644
--- a/frontend/src/features/vulnerabilities/vulnerabilityService.ts
+++ b/frontend/src/features/vulnerabilities/vulnerabilityService.ts
@@ -73,6 +73,8 @@ export interface VulnStats {
   by_source: Record<string, number>;
   by_tier: Record<string, number>;
   kev_count: number;
+  /** KEV flaws still waiting for a fix (open, triaged, in remediation). */
+  kev_open: number;
   exploit_count: number;
 }
 
diff --git a/frontend/src/shared/Breadcrumbs.tsx b/frontend/src/shared/Breadcrumbs.tsx
index b1e66e77..c2c17eb3 100644
--- a/frontend/src/shared/Breadcrumbs.tsx
+++ b/frontend/src/shared/Breadcrumbs.tsx
@@ -21,31 +21,43 @@ import { useUIStrings } from './uiStrings';
 import { useUIStore } from '../store/uiStore';
 import { useCrumbLabels } from './crumbLabels';
 import { pickLocalized } from '../i18n/locales';
+import { navGroupFor, navItemFor } from './navModel';
 
 export function Breadcrumbs() {
-  const { pathname } = useLocation();
+  const { pathname, search } = useLocation();
   const L = useUIStrings();
   const lang = useUIStore((s) => s.lang);
-  const trail = routeTrail(pathname);
+  const view = new URLSearchParams(search).get('view');
+  // The dashboard is the parent of a few top-level pages (the Action Center)
+  // so they have a "back" target; the redesign's trail starts at the
+  // intention group instead, so the dashboard step is dropped unless it is
+  // the page itself.
+  const trail = routeTrail(pathname).filter(
+    (step, i, all) => step.node.path !== '/' || i === all.length - 1,
+  );
   // Instance names ("ISO/IEC 27001" rather than "Framework") registered by the
   // page currently rendering. Resolves after the page's own fetch, so the crumb
   // shows the generic label first and sharpens rather than flickering empty.
   const labels = useCrumbLabels();
-
-  if (trail.length === 0) {
-    return (
-      <div className="flex items-center gap-2 text-[13px] min-w-0">
-        <span className="text-ink-muted hidden sm:inline">{L.brandShort}</span>
-      </div>
-    );
-  }
+  const group = navGroupFor(pathname, view);
+  // The executive view lives on "/" behind ?view=executive.
+  const current = navItemFor(pathname, view);
+  const groupLabel = group
+    ? group.groupKey === 'g_admin'
+      ? L.crumbAdmin
+      : L[group.groupKey]
+    : L.brandShort;
 
   return (
-    <nav aria-label="Breadcrumb" className="flex items-center gap-1.5 text-[13px] min-w-0">
-      <span className="text-ink-muted hidden sm:inline shrink-0">{L.brandShort}</span>
+    <nav
+      aria-label={L.crumbAria}
+      className="flex items-center gap-1.5 text-[13px] min-w-0 whitespace-nowrap overflow-hidden"
+    >
+      <span className="text-ink-muted font-medium hidden sm:inline shrink-0">{groupLabel}</span>
       {trail.map((step, i) => {
         const isLast = i === trail.length - 1;
         const label =
+          (isLast && view && current?.view === view ? L[current.labelKey] : undefined) ??
           (step.node.dynamic ? labels[step.href] : undefined) ??
           (step.node.labelKey ? L[step.node.labelKey] : pickLocalized(lang, step.node.label)) ??
           '';
@@ -53,7 +65,10 @@ export function Breadcrumbs() {
           <span key={step.href} className="flex items-center gap-1.5 min-w-0">
             <ChevronRight size={13} className="text-ink-muted shrink-0 hidden sm:inline" />
             {isLast ? (
-              <span aria-current="page" className="text-ink font-medium whitespace-nowrap truncate">
+              <span
+                aria-current="page"
+                className="text-ink font-semibold whitespace-nowrap overflow-hidden text-ellipsis"
+              >
                 {label}
               </span>
             ) : (
diff --git a/frontend/src/shared/UserAvatar.tsx b/frontend/src/shared/UserAvatar.tsx
index 482ee6cf..655502e0 100644
--- a/frontend/src/shared/UserAvatar.tsx
+++ b/frontend/src/shared/UserAvatar.tsx
@@ -33,12 +33,13 @@ export function UserAvatar({
   const src = useAvatarUrl(userId, hasAvatar);
   return (
     <div
-      className={`rounded-full flex items-center justify-center font-bold text-accent-strong shrink-0 overflow-hidden ${className}`}
+      // Neutral initials disc from the October 2026 redesign: surface-3 with a
+      // hairline, so a column of avatars reads as people, not as accent badges.
+      className={`rounded-full flex items-center justify-center font-semibold text-fg-secondary bg-surface-3 border border-border-default shrink-0 overflow-hidden ${className}`}
       style={{
         width: size,
         height: size,
         fontSize: Math.round(size * 0.37),
-        background: 'var(--accent-soft)',
       }}
       aria-hidden="true"
     >
diff --git a/frontend/src/shared/navModel.ts b/frontend/src/shared/navModel.ts
index d941775f..b8d86263 100644
--- a/frontend/src/shared/navModel.ts
+++ b/frontend/src/shared/navModel.ts
@@ -24,7 +24,8 @@ import {
   Database,
   Atom,
   FileText,
-  Sparkles,
+  Lightbulb,
+  Radar,
   Settings,
   Bug,
   Coins,
@@ -41,7 +42,11 @@ import type { UIStrings } from './uiStrings';
 /** The named live counters a nav item may display. Each maps to a real
  *  tenant-scoped field the Sidebar resolves; there is no free-text option, so
  *  a badge cannot be invented. */
-export type NavCount = 'pending_invitations';
+export type NavCount = 'pending_invitations' | 'action_items' | 'kev_open' | 'open_incidents';
+
+/** Badge colour family. `neutral` is a count of work, `danger` is exposure that
+ *  needs attention, `info` is something waiting on someone else. */
+export type NavBadgeTone = 'neutral' | 'danger' | 'info';
 
 export interface NavItem {
   key: string;
@@ -73,7 +78,7 @@ export interface NavItem {
    * A counter is a claim about the user's data; there is no honest way to write
    * one as a constant.
    */
-  badge?: { count: NavCount; color?: string };
+  badge?: { count: NavCount; tone: NavBadgeTone };
   /** Placeholder screen (no backend yet). */
   soon?: boolean;
   /** Required permission to see this item. Mirrors the route guard on the
@@ -122,6 +127,7 @@ export const NAV_GROUPS: NavGroup[] = [
         labelKey: 'n_actionCenter',
         icon: ListChecks,
         path: '/action-center',
+        badge: { count: 'action_items', tone: 'neutral' },
       },
       {
         key: 'analytics',
@@ -169,6 +175,7 @@ export const NAV_GROUPS: NavGroup[] = [
         icon: Bug,
         path: '/vulnerabilities',
         perm: 'vulnerabilities:read',
+        badge: { count: 'kev_open', tone: 'danger' },
       },
       { key: 'cti', labelKey: 'n_cti', icon: Globe, path: '/threat-map', perm: 'risks:read' },
       {
@@ -204,6 +211,7 @@ export const NAV_GROUPS: NavGroup[] = [
         icon: Siren,
         path: '/incidents',
         perm: 'incidents:read',
+        badge: { count: 'open_incidents', tone: 'danger' },
       },
       {
         key: 'automation',
@@ -242,11 +250,11 @@ export const NAV_GROUPS: NavGroup[] = [
         path: '/reports',
         perm: 'reports:board:read',
       },
-      { key: 'ai', labelKey: 'n_ai', icon: Sparkles, path: '/recommendations', perm: 'risks:read' },
+      { key: 'ai', labelKey: 'n_ai', icon: Lightbulb, path: '/recommendations', perm: 'risks:read' },
       {
         key: 'emerging',
         labelKey: 'n_emerging',
-        icon: Sparkles,
+        icon: Radar,
         path: '/ai/emerging-risks',
         perm: 'risks:read',
       },
@@ -272,7 +280,7 @@ export const NAV_GROUPS: NavGroup[] = [
         icon: Users,
         path: '/settings/members',
         adminOnly: true,
-        badge: { count: 'pending_invitations', color: 'var(--info)' },
+        badge: { count: 'pending_invitations', tone: 'info' },
       },
       { key: 'settings', labelKey: 'n_settings', icon: Settings, path: '/settings' },
     ],
@@ -329,3 +337,29 @@ export function landingForBusinessRole(businessRole?: string): string {
   if (!businessRole) return '/';
   return BUSINESS_ROLE_LANDING[businessRole] ?? '/';
 }
+
+/**
+ * The nav item a location belongs to: longest path prefix wins, so
+ * /assets/topology resolves to Topology and not Inventory. Items sharing a
+ * pathname are told apart by `?view=` exactly as the sidebar does.
+ */
+export function navItemFor(pathname: string, view: string | null): NavItem | undefined {
+  let best: NavItem | undefined;
+  let bestLen = -1;
+  for (const it of ALL_NAV_ITEMS) {
+    if ((it.view ?? null) !== (view || null)) continue;
+    const p = it.path;
+    const match = p === '/' ? pathname === '/' : pathname === p || pathname.startsWith(p + '/');
+    if (match && p.length > bestLen) {
+      best = it;
+      bestLen = p.length;
+    }
+  }
+  return best;
+}
+
+/** The intention group a location sits in, for the breadcrumb's first step. */
+export function navGroupFor(pathname: string, view: string | null): NavGroup | undefined {
+  const item = navItemFor(pathname, view);
+  return item ? NAV_GROUPS.find((g) => g.items.includes(item)) : undefined;
+}
diff --git a/frontend/src/shared/ui.tsx b/frontend/src/shared/ui.tsx
index 0b9cfdff..e6c6b173 100644
--- a/frontend/src/shared/ui.tsx
+++ b/frontend/src/shared/ui.tsx
@@ -41,41 +41,74 @@ export const Card = ({
   </div>
 );
 
-/** Standard scrollable page frame (fade-up in, max width, padding). */
-export const PageFrame = ({ children, wide }: { children: React.ReactNode; wide?: boolean }) => (
+/**
+ * Standard scrollable page frame (October 2026 redesign, #900): 24 px top,
+ * 32 px sides, 64 px bottom, centred at 1320 px. `narrow` is the 1180 px
+ * column the admin screens use; `wide` the 1400 px one of the treatment board.
+ */
+export const PageFrame = ({
+  children,
+  wide,
+  narrow,
+}: {
+  children: React.ReactNode;
+  wide?: boolean;
+  narrow?: boolean;
+}) => (
   <div className="flex-1 overflow-y-auto">
     <div
-      className="mx-auto px-5 sm:px-7 pt-6 pb-10 motion-safe:animate-or-fadeup"
-      style={{ maxWidth: wide ? 'var(--content-max-wide)' : 'var(--content-max)' }}
+      className="mx-auto px-5 sm:px-8 pt-6 pb-16 motion-safe:animate-or-fadeup"
+      style={{
+        maxWidth: wide ? 1400 : narrow ? 'var(--content-max)' : 'var(--content-max-wide)',
+      }}
     >
       {children}
     </div>
   </div>
 );
 
+/**
+ * Page title block: optional eyebrow (date, scope), the H1 in the display
+ * face, a one-line factual subtitle, and right-aligned actions sitting on the
+ * title's baseline.
+ */
 export function PageHeader({
   title,
   count,
   actions,
   badge,
+  eyebrow,
+  subtitle,
+  className = '',
 }: {
   title: string;
   count?: string | null;
   actions?: React.ReactNode;
   badge?: React.ReactNode;
+  eyebrow?: React.ReactNode;
+  subtitle?: React.ReactNode;
+  className?: string;
 }) {
   return (
-    <div className="flex items-center justify-between flex-wrap gap-3 mb-[18px]">
-      <div className="flex items-center gap-3">
-        <h1 className="disp text-2xl font-bold tracking-display text-ink">{title}</h1>
-        {count != null && (
-          <span className="text-xs font-semibold text-ink-soft px-2.5 py-1 rounded-full bg-surface-3">
-            {count}
-          </span>
+    <div className={`flex items-end justify-between flex-wrap gap-4 mb-[18px] ${className}`}>
+      <div className="min-w-0">
+        {eyebrow != null && (
+          <div className="text-[12.5px] text-ink-muted whitespace-nowrap mb-0.5">{eyebrow}</div>
         )}
-        {badge}
+        <div className="flex items-center gap-3">
+          <h1 className="disp text-[28px] leading-[1.15] font-semibold tracking-display text-ink m-0">
+            {title}
+          </h1>
+          {count != null && (
+            <span className="text-xs font-semibold text-ink-soft px-2.5 py-1 rounded-full bg-surface-3">
+              {count}
+            </span>
+          )}
+          {badge}
+        </div>
+        {subtitle != null && <p className="mt-1 mb-0 text-[13px] text-ink-soft">{subtitle}</p>}
       </div>
-      {actions && <div className="flex items-center gap-2.5 flex-wrap">{actions}</div>}
+      {actions && <div className="flex items-center gap-2 flex-wrap">{actions}</div>}
     </div>
   );
 }
diff --git a/frontend/src/shared/uiStrings.ts b/frontend/src/shared/uiStrings.ts
index 6542cf06..3b5e7450 100644
--- a/frontend/src/shared/uiStrings.ts
+++ b/frontend/src/shared/uiStrings.ts
@@ -13,17 +13,17 @@ const fr = {
   ciso: 'RSSI',
   newRisk: 'Nouveau risque',
   search: 'Rechercher…',
-  globalScore: 'Score de sécurité',
+  globalScore: "Score d'exposition",
   navigate: 'naviguer',
   open: 'ouvrir',
   close: 'fermer',
-  cmdkPlaceholder: 'Rechercher risques, actifs, actions…',
+  cmdkPlaceholder: 'Rechercher ou lancer une commande…',
   g_overview: 'Aperçu',
   g_security: 'Sécurité',
   g_intel: 'Conformité & Intel',
   g_assets: 'Actifs',
   g_report: 'Reporting & IA',
-  g_admin: 'Admin',
+  g_admin: 'Administration',
   g_pilot: 'Piloter',
   g_identify: 'Identifier',
   g_evaluate: 'Évaluer',
@@ -43,7 +43,7 @@ const fr = {
   n_assetSchemas: 'Attributs par catégorie',
   n_evidence: 'Preuves',
   n_reports: 'Rapports',
-  n_ai: 'IA Advisor',
+  n_ai: 'Recommandations',
   n_emerging: 'Risques émergents',
   n_settings: 'Paramètres',
   n_superadmin: 'Super Admin',
@@ -55,7 +55,7 @@ const fr = {
   n_governance: 'Gouvernance',
   n_activity: 'Activité',
   n_actionCenter: "Centre d'actions",
-  n_roles: 'Rôles & accès',
+  n_roles: 'Rôles et accès',
   notifTitle: 'Notifications',
   notifAll: 'Tout marquer comme lu',
   notifEmpty: 'Vous êtes à jour',
@@ -231,6 +231,26 @@ const fr = {
   // result of pressing it rather than a static "toggle theme" ---
   themeToLight: 'Passer au thème clair',
   themeToDark: 'Passer au thème sombre',
+  // --- #900 console shell (October 2026 redesign) ---
+  searchHint: 'Rechercher un risque, un actif, une CVE…',
+  crumbAdmin: 'Admin',
+  helpShortcuts: 'Aide et raccourcis',
+  helpShortcutsTitle: 'Raccourcis : ⌘K rechercher · N nouveau risque · Échap fermer',
+  collapseSidebar: 'Réduire la barre latérale',
+  expandSidebar: 'Déplier la barre latérale',
+  openExecutive: 'Ouvrir le tableau exécutif',
+  myProfile: 'Mon profil',
+  notifSeeAll: "Voir toute l'activité",
+  cmdActions: 'Actions',
+  cmdPages: 'Pages',
+  cmdGoTo: 'Aller à',
+  cmdResults: 'Résultats',
+  cmdPalette: 'Palette de commandes',
+  cmdEsc: 'Échap',
+  cmdSearching: 'Recherche…',
+  cmdNoResults: 'Aucun résultat pour',
+  cmdNewRiskHint: 'nouveau risque',
+  crumbAria: "Fil d'Ariane",
 };
 
 const en: typeof fr = {
@@ -238,17 +258,17 @@ const en: typeof fr = {
   ciso: 'CISO',
   newRisk: 'New risk',
   search: 'Search…',
-  globalScore: 'Security score',
+  globalScore: 'Exposure score',
   navigate: 'navigate',
   open: 'open',
   close: 'close',
-  cmdkPlaceholder: 'Search risks, assets, actions…',
+  cmdkPlaceholder: 'Search or run a command…',
   g_overview: 'Overview',
   g_security: 'Security',
   g_intel: 'Compliance & Intel',
   g_assets: 'Assets',
   g_report: 'Reporting & AI',
-  g_admin: 'Admin',
+  g_admin: 'Administration',
   g_pilot: 'Pilot',
   g_identify: 'Identify',
   g_evaluate: 'Evaluate',
@@ -268,7 +288,7 @@ const en: typeof fr = {
   n_assetSchemas: 'Attributes by category',
   n_evidence: 'Evidence',
   n_reports: 'Reports',
-  n_ai: 'AI Advisor',
+  n_ai: 'Recommendations',
   n_emerging: 'Emerging risks',
   n_settings: 'Settings',
   n_superadmin: 'Super Admin',
@@ -280,7 +300,7 @@ const en: typeof fr = {
   n_governance: 'Governance',
   n_activity: 'Activity',
   n_actionCenter: 'Action Center',
-  n_roles: 'Roles & access',
+  n_roles: 'Roles and access',
   notifTitle: 'Notifications',
   notifAll: 'Mark all as read',
   notifEmpty: 'You are all caught up',
@@ -451,6 +471,26 @@ const en: typeof fr = {
   act_clearFilter: 'Clear filter',
   themeToLight: 'Switch to light theme',
   themeToDark: 'Switch to dark theme',
+  // --- #900 console shell (October 2026 redesign) ---
+  searchHint: 'Search a risk, an asset, a CVE…',
+  crumbAdmin: 'Admin',
+  helpShortcuts: 'Help and shortcuts',
+  helpShortcutsTitle: 'Shortcuts: ⌘K search · N new risk · Esc close',
+  collapseSidebar: 'Collapse sidebar',
+  expandSidebar: 'Expand sidebar',
+  openExecutive: 'Open the executive view',
+  myProfile: 'My profile',
+  notifSeeAll: 'See all activity',
+  cmdActions: 'Actions',
+  cmdPages: 'Pages',
+  cmdGoTo: 'Go to',
+  cmdResults: 'Results',
+  cmdPalette: 'Command palette',
+  cmdEsc: 'Esc',
+  cmdSearching: 'Searching…',
+  cmdNoResults: 'No results for',
+  cmdNewRiskHint: 'new risk',
+  crumbAria: 'Breadcrumb',
 };
 
 export type UIStrings = typeof fr;