From a8d6622b88bd4f54bc8e469d4096b0ec6009e7bf Mon Sep 17 00:00:00 2001
From: sbc1-code <207095575+sbc1-code@users.noreply.github.com>
Date: Wed, 21 Oct 2026 00:54:14 -0700
Subject: [PATCH 1/2] fix: tolerate browser storage failures and clean route
 navigation

---
 CHANGELOG.md                         |  31 +++++++
 DECISIONS.md                         |  15 ++++
 ROADMAP.md                           |  10 +++
 docs/REFRESH-OPERATIONS.md           |  26 ++++++
 package.json                         |   2 +-
 scripts/check-browser-resilience.mjs | 126 +++++++++++++++++++++++++++
 scripts/prerender.mjs                |   2 +-
 scripts/smoke-routes.mjs             |   2 +
 scripts/test-browser-state.mjs       |  54 ++++++++++++
 scripts/test-hreflang.mjs            |  15 ++++
 src/Layout.jsx                       |  32 +++----
 src/lib/browserStorage.js            |  23 +++++
 src/lib/seo.js                       |  11 +++
 src/lib/useLanguage.js               |  12 ++-
 src/pages/About.jsx                  |  12 +--
 src/pages/BestTime.jsx               |  16 ++--
 src/pages/BlogPost.jsx               |   8 +-
 src/pages/Compare.jsx                |   4 +-
 src/pages/CrossingDetail.jsx         |  18 ++--
 src/pages/Dashboard.jsx              |  66 ++++++--------
 src/pages/Methodology.jsx            |   8 +-
 21 files changed, 399 insertions(+), 94 deletions(-)
 create mode 100644 scripts/check-browser-resilience.mjs
 create mode 100644 scripts/test-browser-state.mjs
 create mode 100644 src/lib/browserStorage.js

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2183d30f0..c9c25fff7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,36 @@
 # CHANGELOG
 
+## 2026-10-21 — Browser resilience and navigation (prepared)
+
+- Keep the app usable when browser storage is blocked or contains malformed
+  preferences. Validate saved favorites and language/theme values; show an
+  EN/ES failure notice instead of claiming a favorite was saved. Language and
+  theme controls still work in the open document when persistence is denied.
+- Move skip-link focus into the main content, close mobile navigation with
+  Escape and return focus, and replace nested link/button back controls with
+  single links with 44px minimum height.
+- Update Twitter metadata with each page and remove a previous route's
+  generated schema after client navigation. Preserve same-route and shared
+  schema. Full runtime schema generation remains separate work.
+- Correct About's EN/ES description of existing locally saved rounded
+  coordinates. No new collection, transmission, dependency or service.
+- Validation: 118 unit tests, production build and full npm test passed,
+  including 416 desktop/mobile navigations and EN/ES storage-failure,
+  keyboard, metadata, sharing, feedback and freshness regressions. These are
+  bounded checks, not a security or accessibility certification.
+
+## 2026-10-21 — Compare and Vite production verification
+
+- PR #136 merged at `f55167b6994c7b3e6532529566507352a7ff478d`.
+  Actions run `39561576557` succeeded; Vercel deployment
+  `dpl_3fkPhCsCiPdpq62RhzNPfCU1b4yg` was READY with the same commit.
+  The public publication manifest and served app were verified on
+  borderpulse.com in EN/ES at desktop/mobile sizes, with synthetic fresh,
+  stale and future snapshots kept separate from the live feed readback.
+- The two October 20 local-review entries below are now published. Vite is
+  6.4.4; the audit gate reports zero high/critical and eight remaining moderate
+  package entries. No audit exception or security-setting change was made.
+
 ## 2026-10-20 — Vite audit unblock (local review)
 
 - Update the existing Vite development dependency from locked 6.4.3 to 6.4.4,
diff --git a/DECISIONS.md b/DECISIONS.md
index c84d4ed08..c2a32c1e4 100644
--- a/DECISIONS.md
+++ b/DECISIONS.md
@@ -1,5 +1,20 @@
 # DECISIONS
 
+## 2026-10-21 · Browser persistence is optional and saved preferences are untrusted
+
+A blocked localStorage accessor or a parsed non-array favorite value must not
+break crossing decisions. Normalize saved preferences, keep temporary language
+and theme choices usable, and report favorite-write failure without emitting
+a success event. Describe the existing rounded-coordinate storage accurately;
+do not add data collection or change consent, ads or security settings.
+
+## 2026-10-21 · Route transitions must not inherit another page's schema
+
+Mark generated route schema with its canonical URL and remove it when that
+canonical changes. Keep it during same-route data/language updates and retain
+shared schema. Synchronize Twitter and Open Graph previews. This bounded
+cleanup does not promise schema regeneration for every client-side route.
+
 ## 2026-10-13 · Camera coverage cannot substitute nearby roads for inspection queues
 
 Use an explicit camera-area picker and distinguish embedded crossing views,
diff --git a/ROADMAP.md b/ROADMAP.md
index d1bb53438..218c57434 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -21,6 +21,16 @@ cross-border experience; it is a product hypothesis, not a claim of demand.
 
 ### Now: earn trust in the free entry point
 
+- [x] Publish the pair-comparison retrieval guard and Vite 6.4.4 patch (PR #136).
+  Production commit `f55167b6`, Actions run `39561576557`, manifest and served
+  EN/ES desktop/mobile app were verified October 21. Eight moderate audit
+  package entries remain; no usage or conversion increase is established.
+- [~] Prepare bounded browser-storage, keyboard-navigation and route-metadata
+  corrections from the October 21 audit. Local build, 118 unit tests and full
+  npm test passed; review and release evidence belong to the follow-up PR.
+  Broader schema lifecycle, assistive-technology and cross-browser audits
+  remain separate work.
+
 - [~] QC the October 13 locality-first flow, shareable area URLs and familiar
   crossing names, with a visible inline camera entry on the homepage. Deliver
   useful visible homepage/crossing snapshots without
diff --git a/docs/REFRESH-OPERATIONS.md b/docs/REFRESH-OPERATIONS.md
index eb38e70e4..9e958479c 100644
--- a/docs/REFRESH-OPERATIONS.md
+++ b/docs/REFRESH-OPERATIONS.md
@@ -1,5 +1,31 @@
 # Public data refresh
 
+## Compare and Vite release — 2026-10-21 UTC
+
+- [PR #136](https://github.com/sbc1-code/borderpulse/pull/136) merged at
+  `f55167b6994c7b3e6532529566507352a7ff478d`. Its separate commits guard
+  untrusted pair-comparison snapshots and patch Vite 6.4.3 to 6.4.4.
+- Both CI runs passed. The existing production
+  [Actions run 39561576557](https://github.com/sbc1-code/borderpulse/actions/runs/39561576557)
+  succeeded. Vercel deployment `dpl_3fkPhCsCiPdpq62RhzNPfCU1b4yg`,
+  `borderpulse-1byel2036-sbc1-codes-projects.vercel.app`, was READY with that
+  commit and the existing borderpulse.com/www aliases. No hosting migration,
+  account, permission, security setting or paid-service change was needed.
+- Public `https://borderpulse.com/data/publication.json` matched the merge
+  commit, prepared at `2026-10-21T07:23:29.976Z`; its 42-crossing snapshot,
+  2,379-entry history and FX input matched their published timestamps.
+  Separate real-feed readback and synthetic fresh/stale/future tests against
+  the served app passed in EN/ES on desktop/mobile. This is a release receipt,
+  not a claim that the live feed failed or that future publications are healthy.
+- Fresh local build/full npm test passed with 416 route navigations. The
+  release had 114 unit tests; the subsequent bounded audit follow-up has 118.
+  Audit reports zero high/critical and eight moderate package entries outside
+  this patch. Limited browser/code checks do not establish complete security,
+  accessibility, provider playback, search performance or conversion lift.
+- Existing collector, Vercel publication path, Pages rollback, paused product
+  automation and advertising configuration remain as previously recorded.
+  Preserve the original operator checkout's 18 unrelated changed paths.
+
 ## AdSense preparation — 2026-10-17 UTC
 
 BorderPulse and DIGITO are separate site entries under the existing publisher
diff --git a/package.json b/package.json
index bea9c25e8..6c8106470 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
     "news:classify": "node scripts/build-curation-queue.mjs",
     "test:bundle": "node scripts/check-bundle-size.mjs",
     "test:audit": "node scripts/check-audit.mjs",
-    "test:trust": "node --test scripts/test-trust-state.mjs scripts/test-local-comparison.mjs",
+    "test:trust": "node --test scripts/test-trust-state.mjs scripts/test-local-comparison.mjs scripts/test-browser-state.mjs",
     "test:mdx": "node --test scripts/test-mdx-frontmatter.mjs",
     "test:writer": "node --test scripts/test-generated-writer.mjs",
     "test:refresh": "node --test scripts/test-data-refresh.mjs"
diff --git a/scripts/check-browser-resilience.mjs b/scripts/check-browser-resilience.mjs
new file mode 100644
index 000000000..f3bc2d67b
--- /dev/null
+++ b/scripts/check-browser-resilience.mjs
@@ -0,0 +1,126 @@
+import assert from 'node:assert/strict';
+import fs from 'node:fs';
+
+// Synthetic data only; reuse the route suite's external-request blocker.
+export async function checkBrowserResilience(owner, context, baseUrl) {
+  const snapshot = JSON.parse(fs.readFileSync(new URL('../public/data/crossings.json', import.meta.url)));
+  snapshot.fetched_at = new Date().toISOString();
+  const keys = ['borderPulse_language', 'borderPulse_theme', 'borderPulse_region', 'borderPulse_favorites'];
+  const saved = await owner.evaluate(keys => Object.fromEntries(keys.map(key => [key, localStorage.getItem(key)])), keys);
+  const feedMatch = url => ['/data/crossings.json', '/api/public/crossings'].includes(url.pathname);
+  const feedHandler = route => route.fulfill({ contentType: 'application/json', body: JSON.stringify(snapshot) });
+  const errors = [];
+  await context.route(feedMatch, feedHandler);
+  const newPage = async () => {
+    const page = await context.newPage();
+    page.setDefaultTimeout(8_000);
+    page.on('pageerror', error => errors.push(error.message));
+    page.on('console', message => {
+      if (message.type() === 'error' && /ErrorBoundary|Uncaught|ReferenceError|TypeError|SyntaxError/.test(message.text())) errors.push(message.text());
+    });
+    return page;
+  };
+  try {
+    for (const language of ['en', 'es']) {
+      const searchName = language === 'en' ? 'Search crossings by name or city' : 'Buscar cruces por nombre o ciudad';
+      const add = language === 'en' ? 'Add to favorites' : 'Agregar a favoritos';
+      const failedMessage = language === 'en'
+        ? 'Your browser could not save this change. Allow site storage and try again.'
+        : 'Tu navegador no pudo guardar este cambio. Permite el almacenamiento del sitio e inténtalo de nuevo.';
+      for (const failure of ['getter', 'quota']) {
+        const page = await newPage();
+        try {
+          await page.addInitScript(({ failure, language }) => {
+            localStorage.setItem('borderPulse_language', language);
+            localStorage.setItem('borderPulse_favorites', '[]');
+            window.resilienceEvents = [];
+            window.umami = { track: (event, data) => window.resilienceEvents.push({ event, data }) };
+            if (failure === 'getter') Object.defineProperty(window, 'localStorage', {
+              configurable: true, get() { throw new DOMException('Fixture blocked storage', 'SecurityError'); },
+            });
+            else Storage.prototype.setItem = () => { throw new DOMException('Fixture quota', 'QuotaExceededError'); };
+          }, { failure, language });
+          await page.goto(baseUrl.href);
+          if (language === 'es') await page.getByRole('button', { name: 'Cambiar a español', exact: true }).filter({ visible: true }).click();
+          await page.getByRole('searchbox', { name: searchName, exact: true }).waitFor();
+          assert.equal(await page.locator('html').getAttribute('lang'), language);
+          await page.getByRole('button', { name: 'Switch to dark mode', exact: true }).filter({ visible: true }).click();
+          assert.ok(await page.locator('html').evaluate(node => node.classList.contains('dark')));
+          await page.getByRole('searchbox', { name: searchName, exact: true }).fill('San Ysidro');
+          await page.getByRole('button', { name: add, exact: true }).first().click();
+          await page.getByText(failedMessage, { exact: true }).waitFor();
+          assert.equal(await page.evaluate(() => window.resilienceEvents.filter(event => event.event === 'favorite-toggle').length), 0, 'failed persistence must not emit success');
+          await page.locator('#root a[href="/crossing/san-ysidro/"]').first().click();
+          await page.locator('#root').getByRole('link', { name: language === 'en' ? 'All crossings' : 'Todos los cruces', exact: true }).waitFor();
+          assert.equal(await page.locator('html').getAttribute('lang'), language);
+          await page.locator('#root a[href="/compare/san-ysidro-vs-otay-mesa/"]').first().click();
+          await page.getByTestId('compare-summary').waitFor();
+          await page.getByTestId('compare-summary').getByText(language === 'en' ? 'Reported standard-passenger waits' : 'Esperas reportadas, auto estándar', { exact: true }).waitFor();
+          assert.ok(!/Something went wrong/.test(await page.locator('#root').innerText()));
+          assert.ok(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth + 1));
+        } finally { await page.close(); }
+      }
+
+      const page = await newPage();
+      try {
+        await page.addInitScript(() => {
+          if (sessionStorage.getItem('resilience-seeded')) return;
+          sessionStorage.setItem('resilience-seeded', 'true');
+          localStorage.setItem('borderPulse_favorites', '{}');
+          localStorage.setItem('borderPulse_language', 'invalid');
+          localStorage.setItem('borderPulse_theme', 'invalid');
+          localStorage.setItem('borderPulse_region', 'invalid');
+        });
+        await page.goto(baseUrl.href);
+        await page.getByRole('searchbox', { name: 'Search crossings by name or city', exact: true }).waitFor();
+        assert.equal(await page.locator('html').getAttribute('lang'), 'en');
+        assert.ok(!await page.locator('html').evaluate(node => node.classList.contains('dark')));
+        if (language === 'es') await page.getByRole('button', { name: 'Cambiar a español', exact: true }).filter({ visible: true }).click();
+        await page.getByRole('searchbox', { name: searchName, exact: true }).fill('San Ysidro');
+        await page.getByRole('button', { name: add, exact: true }).first().click();
+        assert.deepEqual(await page.evaluate(() => JSON.parse(localStorage.getItem('borderPulse_favorites'))), ['250401']);
+        await page.reload();
+        await page.getByRole('button', { name: language === 'en' ? 'Remove from favorites' : 'Quitar de favoritos', exact: true }).first().waitFor();
+
+        await page.goto(new URL('/crossing/san-ysidro/', baseUrl).href);
+        const crossingCanonical = 'https://borderpulse.com/crossing/san-ysidro/';
+        await page.waitForFunction(canonical => document.querySelector('link[rel="canonical"]')?.href === canonical, crossingCanonical);
+        assert.ok(await page.locator(`script[data-route-canonical="${crossingCanonical}"]`).count() > 0, 'direct entry retains its generated schema');
+        await page.locator('#root a[href="/compare/san-ysidro-vs-otay-mesa/"]').first().click();
+        await page.getByTestId('compare-summary').waitFor();
+        await page.waitForFunction(() => document.querySelector('link[rel="canonical"]')?.href.includes('/compare/'));
+        assert.equal(await page.locator(`script[data-route-canonical="${crossingCanonical}"]`).count(), 0, 'crossing schema must not leak into Compare');
+        for (const [twitter, og] of [['twitter:title', 'og:title'], ['twitter:description', 'og:description'], ['twitter:image', 'og:image']]) {
+          assert.equal(await page.locator(`meta[name="${twitter}"]`).getAttribute('content'), await page.locator(`meta[property="${og}"]`).getAttribute('content'));
+        }
+
+        await page.reload();
+        await page.getByTestId('compare-summary').waitFor();
+        await page.keyboard.press('Tab');
+        await page.keyboard.press('Enter');
+        assert.equal(await page.evaluate(() => document.activeElement.id), 'main-content', 'skip link moves keyboard focus into main');
+        if (page.viewportSize().width < 1024) {
+          const menu = page.getByRole('button', { name: 'Open menu', exact: true });
+          await menu.click();
+          assert.equal(await page.getByRole('button', { name: 'Close menu', exact: true }).getAttribute('aria-controls'), 'mobile-navigation');
+          await page.keyboard.press('Tab');
+          await page.keyboard.press('Escape');
+          assert.equal(await menu.getAttribute('aria-expanded'), 'false');
+          assert.ok(await menu.evaluate(node => node === document.activeElement));
+        }
+        for (const route of ['/compare/san-ysidro-vs-otay-mesa/', '/crossing/san-ysidro/', '/best-time/', '/best-time/san-ysidro/', '/blog/san-ysidro-vs-otay-mesa/', '/about/', '/methodology/', '/metodologia/']) {
+          await page.goto(new URL(route, baseUrl).href);
+          const back = page.locator('main').getByRole('link', { name: /^(All crossings|Todos los cruces|All posts|Todos los posts)$/ }).first();
+          await back.waitFor();
+          assert.equal(await page.locator('#root a button, #root button a').count(), 0, `${route}: navigation has one interactive element`);
+          assert.ok((await back.boundingBox()).height >= 44, `${route}: back link touch height`);
+        }
+      } finally { await page.close(); }
+    }
+    assert.deepEqual(errors, [], 'fixtures must not trigger an application error');
+  } finally {
+    await context.unroute(feedMatch, feedHandler);
+    await owner.evaluate(values => Object.entries(values).forEach(([key, value]) => value == null ? localStorage.removeItem(key) : localStorage.setItem(key, value)), saved);
+  }
+  console.log('[browser-resilience] PASS: EN/ES blocked reads/writes, malformed preferences, failed/successful favorites, in-page language, keyboard navigation and route metadata');
+}
diff --git a/scripts/prerender.mjs b/scripts/prerender.mjs
index 6babc2836..3cb93b35c 100644
--- a/scripts/prerender.mjs
+++ b/scripts/prerender.mjs
@@ -297,7 +297,7 @@ function rewriteIndex(indexHtml, head) {
   const jsonLdTags = head.jsonLd
     .map((obj) => {
       const body = JSON.stringify(obj).replace(/<\/script/gi, '<\\/script');
-      return `  <script type="application/ld+json">${body}</script>`;
+      return `  <script type="application/ld+json" data-route-canonical="${esc(head.canonical)}">${body}</script>`;
     })
     .join('\n');
   html = html.replace(/<\/head>/i, `${jsonLdTags}\n  </head>`);
diff --git a/scripts/smoke-routes.mjs b/scripts/smoke-routes.mjs
index f2549be6c..17d595982 100644
--- a/scripts/smoke-routes.mjs
+++ b/scripts/smoke-routes.mjs
@@ -4,6 +4,7 @@ import { spawn, spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { chromium } from 'playwright-core';
 import { checkGrowthInteractions } from './check-growth-interactions.mjs';
+import { checkBrowserResilience } from './check-browser-resilience.mjs';
 import { checkLocalCrossings } from './check-local-crossings.mjs';
 import { checkNoJsReports } from './check-nojs-reports.mjs';
 import { checkWalkDriveFreshness } from './check-walk-drive-freshness.mjs';
@@ -321,6 +322,7 @@ async function runProfile(browser, profile, manifest, expectedCrossingCount) {
 
   try {
     await checkGrowthInteractions(page, context, baseUrl);
+    await checkBrowserResilience(page, context, baseUrl);
     await checkLocalCrossings(page, context, baseUrl);
     await checkWalkDriveAvailability(page, context, baseUrl);
     await checkWalkDriveFreshness(context, baseUrl);
diff --git a/scripts/test-browser-state.mjs b/scripts/test-browser-state.mjs
new file mode 100644
index 000000000..70c74d016
--- /dev/null
+++ b/scripts/test-browser-state.mjs
@@ -0,0 +1,54 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readStorage, writeStorage, languageValue, themeValue, readFavorites } from '../src/lib/browserStorage.js';
+
+test('blocked storage getter does not prevent default preferences or empty favorites', () => {
+  const previous = Object.getOwnPropertyDescriptor(globalThis, 'localStorage');
+  Object.defineProperty(globalThis, 'localStorage', { configurable: true, get() { throw new Error('blocked storage'); } });
+  try {
+    assert.equal(readStorage('borderPulse_language', 'en'), 'en');
+    assert.deepEqual(readFavorites(), []);
+    assert.equal(writeStorage('borderPulse_theme', 'dark'), false);
+  } finally {
+    if (previous) Object.defineProperty(globalThis, 'localStorage', previous);
+    else delete globalThis.localStorage;
+  }
+});
+
+test('favorites accept only unique canonical port identifiers from a JSON array', () => {
+  const previous = globalThis.localStorage;
+  let value;
+  globalThis.localStorage = { getItem: () => value };
+  try {
+    for (value of ['{}', 'null', '42', '"250401"', 'invalid', null]) assert.deepEqual(readFavorites(), []);
+    value = '["250401",null,250601,{},"<script>","250401","250601"]';
+    assert.deepEqual(readFavorites(), ['250401', '250601']);
+  } finally {
+    if (previous) globalThis.localStorage = previous;
+    else delete globalThis.localStorage;
+  }
+});
+
+test('preference values stay in the supported language and theme sets', () => {
+  assert.equal(languageValue('es'), 'es');
+  assert.equal(themeValue('dark'), 'dark');
+  for (const value of [null, undefined, '', {}, 'invalid']) {
+    assert.equal(languageValue(value), 'en');
+    assert.equal(themeValue(value), 'light');
+  }
+});
+
+test('write success is distinguishable from a quota failure without throwing', () => {
+  const previous = globalThis.localStorage;
+  const writes = [];
+  globalThis.localStorage = { setItem: (...args) => writes.push(args) };
+  try {
+    assert.equal(writeStorage('borderPulse_theme', 'dark'), true);
+    assert.deepEqual(writes, [['borderPulse_theme', 'dark']]);
+    globalThis.localStorage.setItem = () => { throw new Error('quota'); };
+    assert.equal(writeStorage('borderPulse_theme', 'light'), false);
+  } finally {
+    if (previous) globalThis.localStorage = previous;
+    else delete globalThis.localStorage;
+  }
+});
diff --git a/scripts/test-hreflang.mjs b/scripts/test-hreflang.mjs
index 6d9ca8e1e..edea05b37 100644
--- a/scripts/test-hreflang.mjs
+++ b/scripts/test-hreflang.mjs
@@ -32,6 +32,7 @@ test('SPA metadata replaces stale/duplicate hreflangs and preserves other altern
     const node = {
       tag, attrs: { ...attrs },
       setAttribute(name, value) { this.attrs[name] = value; },
+      getAttribute(name) { return this.attrs[name]; },
       remove() { nodes.splice(nodes.indexOf(this), 1); },
     };
     return node;
@@ -52,18 +53,32 @@ test('SPA metadata replaces stale/duplicate hreflangs and preserves other altern
   const actual = () => nodes.filter((node) => 'hreflang' in node.attrs).map((node) => ({ lang: node.attrs.hreflang, href: node.attrs.href }));
   try {
     const canonical = base + '/crossing/san-ysidro/';
+    const currentSchema = create('script', { 'data-route-canonical': canonical });
+    const otherSchema = create('script', { 'data-route-canonical': base + '/blog/previous/' });
+    const sharedSchema = create('script', { type: 'application/ld+json' });
+    nodes.push(currentSchema, otherSchema, sharedSchema);
     updatePageMeta({ canonical });
+    assert.ok(nodes.includes(currentSchema), 'same-route data updates retain the direct-entry schema');
+    assert.ok(!nodes.includes(otherSchema), 'a previous route cannot keep its schema');
+    assert.ok(nodes.includes(sharedSchema), 'shared schema is outside the route cleanup');
     assert.deepEqual(actual(), pageHreflangs(canonical));
     assert.ok(nodes.includes(rss));
     updatePageMeta({ title: 'Partial update' });
     assert.deepEqual(actual(), pageHreflangs(canonical));
     updatePageMeta({ canonical: base + '/blog/example/', hreflangs: [] });
+    assert.ok(!nodes.includes(currentSchema), 'leaving the crossing removes its route schema');
     assert.deepEqual(actual(), []);
     document.documentElement.lang = 'es';
     resetPageMeta();
     assert.equal(document.documentElement.lang, 'es', 'metadata cleanup must preserve the language selected by its owner');
     assert.deepEqual(actual(), pageHreflangs(base + '/'));
     assert.ok(nodes.includes(rss));
+    updatePageMeta({ title: 'New page', description: 'New description', ogTitle: 'New preview', ogDescription: 'Preview description', ogImage: base + '/og/new.png' });
+    for (const [name, expected] of [['twitter:title', 'New preview'], ['twitter:description', 'Preview description'], ['twitter:image', base + '/og/new.png']]) {
+      assert.equal(document.querySelector(`meta[name="${name}"]`).getAttribute('content'), expected);
+    }
+    resetPageMeta();
+    assert.equal(document.querySelector('meta[name="twitter:image"]').getAttribute('content'), base + '/og-card.png');
     for (const lang of ['en', 'es']) {
       updatePageMeta({ canonical: `${base}/blog/content-${lang}/`, lang });
       assert.equal(document.documentElement.lang, lang, 'explicit content language must still take ownership');
diff --git a/src/Layout.jsx b/src/Layout.jsx
index 526617cd0..6476c459d 100644
--- a/src/Layout.jsx
+++ b/src/Layout.jsx
@@ -1,18 +1,17 @@
-import React, { useEffect, useState, useCallback } from 'react';
+import React, { useEffect, useState, useCallback, useRef } from 'react';
 import { Link, useLocation } from 'react-router-dom';
 import { BarChart3, BookOpen, Menu, X, Moon, Sun, Clock3 } from 'lucide-react';
 import { Button } from '@/components/ui/button';
 import BorderPulseLogo from '@/components/BorderPulseLogo';
+import { themeValue, readStorage, writeStorage } from '@/lib/browserStorage';
+import { usePersistentLanguage } from '@/lib/useLanguage';
 
 export default function Layout({ children }) {
   const location = useLocation();
-  const [language, setLanguage] = useState(
-    typeof window !== 'undefined' ? localStorage.getItem('borderPulse_language') || 'en' : 'en'
-  );
-  const [theme, setTheme] = useState(
-    typeof window !== 'undefined' ? localStorage.getItem('borderPulse_theme') || 'light' : 'light'
-  );
+  const language = usePersistentLanguage();
+  const [theme, setTheme] = useState(() => themeValue(readStorage('borderPulse_theme')));
   const [mobileOpen, setMobileOpen] = useState(false);
+  const menuButton = useRef(null);
 
   const applyTheme = useCallback((t) => {
     if (typeof document === 'undefined') return;
@@ -23,8 +22,7 @@ export default function Layout({ children }) {
 
   useEffect(() => {
     const onStorage = (e) => {
-      if (e.key === 'borderPulse_language') setLanguage(e.newValue || 'en');
-      if (e.key === 'borderPulse_theme') setTheme(e.newValue || 'light');
+      if (e.key === 'borderPulse_theme') setTheme(themeValue(e.newValue));
     };
     window.addEventListener('storage', onStorage);
     return () => window.removeEventListener('storage', onStorage);
@@ -41,12 +39,11 @@ export default function Layout({ children }) {
   const toggleTheme = () => {
     const next = theme === 'dark' ? 'light' : 'dark';
     setTheme(next);
-    localStorage.setItem('borderPulse_theme', next);
+    writeStorage('borderPulse_theme', next);
   };
 
   const changeLanguage = (lang) => {
-    setLanguage(lang);
-    localStorage.setItem('borderPulse_language', lang);
+    writeStorage('borderPulse_language', lang);
     window.dispatchEvent(new StorageEvent('storage', { key: 'borderPulse_language', newValue: lang }));
   };
 
@@ -88,7 +85,12 @@ export default function Layout({ children }) {
         {language === 'en' ? 'Skip to content' : 'Ir al contenido'}
       </a>
       {/* Mobile header */}
-      <header className={`lg:hidden w-screen max-w-full ${isDark ? 'bg-gray-900/80 border-gray-800' : 'bg-white/80 border-slate-200'} backdrop-blur-md border-b sticky top-0 z-40`}>
+      <header onKeyDown={event => {
+        if (event.key === 'Escape' && mobileOpen) {
+          setMobileOpen(false);
+          menuButton.current?.focus();
+        }
+      }} className={`lg:hidden w-screen max-w-full ${isDark ? 'bg-gray-900/80 border-gray-800' : 'bg-white/80 border-slate-200'} backdrop-blur-md border-b sticky top-0 z-40`}>
         <div className="flex items-center justify-between px-4 py-3">
           <Link to="/" aria-label="Border Pulse home" className="flex min-h-11 min-w-11 items-center gap-2 rounded-md">
             <BorderPulseLogo size={32} />
@@ -104,7 +106,7 @@ export default function Layout({ children }) {
             <Button variant="ghost" size="icon" onClick={toggleTheme} className="min-h-11 min-w-11 rounded-full" aria-label={isDark ? 'Switch to light mode' : 'Switch to dark mode'}>
               {isDark ? <Sun className="w-4 h-4" /> : <Moon className="w-4 h-4" />}
             </Button>
-            <Button variant="ghost" size="icon" onClick={() => setMobileOpen((v) => !v)} className="min-h-11 min-w-11 rounded-full" aria-label={mobileOpen ? 'Close menu' : 'Open menu'} aria-expanded={mobileOpen}>
+            <Button ref={menuButton} variant="ghost" size="icon" onClick={() => setMobileOpen((v) => !v)} className="min-h-11 min-w-11 rounded-full" aria-label={mobileOpen ? 'Close menu' : 'Open menu'} aria-expanded={mobileOpen} aria-controls={mobileOpen ? 'mobile-navigation' : undefined}>
               {mobileOpen ? <X className="w-5 h-5" /> : <Menu className="w-5 h-5" />}
             </Button>
           </div>
@@ -175,7 +177,7 @@ export default function Layout({ children }) {
             ))}
           </nav>
         </aside>
-        <main id="main-content" className="flex-1 overflow-auto">{children}</main>
+        <main id="main-content" tabIndex={-1} className="flex-1 overflow-auto">{children}</main>
       </div>
 
       {/* Footer (all viewports) */}
diff --git a/src/lib/browserStorage.js b/src/lib/browserStorage.js
new file mode 100644
index 000000000..c8911c654
--- /dev/null
+++ b/src/lib/browserStorage.js
@@ -0,0 +1,23 @@
+// Browser persistence is optional. Reads may throw before getItem is reached
+// (blocked storage), and saved JSON is untrusted even when it parses.
+export function readStorage(key, fallback = null) {
+  try { return globalThis.localStorage.getItem(key) ?? fallback; }
+  catch { return fallback; }
+}
+
+export function writeStorage(key, value) {
+  try { globalThis.localStorage.setItem(key, value); return true; }
+  catch { return false; }
+}
+
+export const languageValue = value => value === 'es' ? 'es' : 'en';
+export const themeValue = value => value === 'dark' ? 'dark' : 'light';
+
+export function readFavorites() {
+  try {
+    const value = JSON.parse(readStorage('borderPulse_favorites', '[]'));
+    return Array.isArray(value)
+      ? [...new Set(value.filter(port => typeof port === 'string' && /^\d{6}$/.test(port)))]
+      : [];
+  } catch { return []; }
+}
diff --git a/src/lib/seo.js b/src/lib/seo.js
index 3f7b4063d..3050e16a1 100644
--- a/src/lib/seo.js
+++ b/src/lib/seo.js
@@ -38,8 +38,16 @@ export function updatePageMeta({ title, description, ogTitle, ogDescription, ogI
   if (ogTitle) setMeta('og:title', ogTitle, 'property');
   if (ogDescription) setMeta('og:description', ogDescription, 'property');
   if (ogImage) setMeta('og:image', ogImage, 'property');
+  if (ogTitle || title) setMeta('twitter:title', ogTitle || title);
+  if (ogDescription || description) setMeta('twitter:description', ogDescription || description);
+  if (ogImage) setMeta('twitter:image', ogImage);
   if (ogUrl) setMeta('og:url', ogUrl, 'property');
   if (canonical) {
+    // Keep the correct direct-entry schema through data/language updates, but
+    // never carry a previous route's FAQ, Place or Article into another page.
+    document.querySelectorAll('script[data-route-canonical]').forEach(script => {
+      if (script.getAttribute('data-route-canonical') !== canonical) script.remove();
+    });
     let link = document.querySelector('link[rel="canonical"]');
     if (!link) {
       link = document.createElement('link');
@@ -64,6 +72,9 @@ export function resetPageMeta() {
   setMeta('og:description', 'Live wait times at US-Mexico border crossings. Official CBP data, refreshed regularly. Bilingual EN/ES.', 'property');
   setMeta('og:image', 'https://borderpulse.com/og-card.png', 'property');
   setMeta('og:url', 'https://borderpulse.com/', 'property');
+  setMeta('twitter:title', 'Border Pulse | Real-Time US-Mexico Border Crossing Wait Times');
+  setMeta('twitter:description', 'Live wait times at US-Mexico border crossings. Official CBP data, refreshed regularly. Bilingual EN/ES.');
+  setMeta('twitter:image', 'https://borderpulse.com/og-card.png');
   const link = document.querySelector('link[rel="canonical"]');
   if (link) link.setAttribute('href', 'https://borderpulse.com/');
 }
diff --git a/src/lib/useLanguage.js b/src/lib/useLanguage.js
index 1a5199683..23e9b28d5 100644
--- a/src/lib/useLanguage.js
+++ b/src/lib/useLanguage.js
@@ -1,4 +1,8 @@
 import { useEffect, useState } from 'react';
+import { languageValue, readStorage } from './browserStorage.js';
+
+// Retain a choice for this open document even when persistence is blocked.
+let currentLanguage;
 
 // Persistent language hook used by every page-level component. Reads the
 // initial language from localStorage, then subscribes to storage events so
@@ -8,11 +12,15 @@ import { useEffect, useState } from 'react';
 export function usePersistentLanguage() {
   const [lang, setLang] = useState(() => {
     if (typeof window === 'undefined') return 'en';
-    return localStorage.getItem('borderPulse_language') || 'en';
+    currentLanguage ??= languageValue(readStorage('borderPulse_language'));
+    return currentLanguage;
   });
   useEffect(() => {
     const onStorage = (e) => {
-      if (e.key === 'borderPulse_language' && e.newValue) setLang(e.newValue);
+      if (e.key === 'borderPulse_language') {
+        currentLanguage = languageValue(e.newValue);
+        setLang(currentLanguage);
+      }
     };
     window.addEventListener('storage', onStorage);
     return () => window.removeEventListener('storage', onStorage);
diff --git a/src/pages/About.jsx b/src/pages/About.jsx
index 1406b5038..5ed872a37 100644
--- a/src/pages/About.jsx
+++ b/src/pages/About.jsx
@@ -78,12 +78,12 @@ export default function About() {
   return (
     <div className="p-3 sm:p-4 lg:p-6 max-w-[900px] mx-auto">
       <div className="mb-3">
-        <Link to="/">
-          <Button variant="ghost" size="sm" className="gap-1 h-8 -ml-2">
+        <Button asChild variant="ghost" size="sm" className="gap-1 min-h-11 -ml-2">
+          <Link to="/">
             <ArrowLeft className="w-3.5 h-3.5" />
             <span className="text-xs">{language === 'en' ? 'All crossings' : 'Todos los cruces'}</span>
-          </Button>
-        </Link>
+          </Link>
+        </Button>
       </div>
 
       <header className="mb-6">
@@ -168,8 +168,8 @@ export default function About() {
           </li>
           <li>
             {language === 'en'
-              ? 'Geolocation runs in the browser; only the resulting state filter (e.g., "California") is saved to localStorage.'
-              : 'La geolocalización corre en el navegador; solo se guarda el filtro de estado resultante (p.ej., "California") en localStorage.'}
+              ? 'If you choose nearby crossings, this browser saves the selected state and coordinates rounded to two decimal places to order nearby crossings.'
+              : 'Si eliges cruces cercanos, este navegador guarda el estado seleccionado y las coordenadas redondeadas a dos decimales para ordenar los cruces cercanos.'}
           </li>
         </ul>
       </section>
diff --git a/src/pages/BestTime.jsx b/src/pages/BestTime.jsx
index fbc950993..8464fc36f 100644
--- a/src/pages/BestTime.jsx
+++ b/src/pages/BestTime.jsx
@@ -160,12 +160,12 @@ export function BestTimeIndex() {
   return (
     <div className="p-3 sm:p-4 lg:p-6 max-w-[1100px] mx-auto">
       <div className="mb-3">
-        <Link to="/">
-          <Button variant="ghost" size="sm" className="gap-1 h-8 -ml-2">
+        <Button asChild variant="ghost" size="sm" className="gap-1 min-h-11 -ml-2">
+          <Link to="/">
             <ArrowLeft className="w-3.5 h-3.5" />
             <span className="text-xs">{language === 'en' ? 'All crossings' : 'Todos los cruces'}</span>
-          </Button>
-        </Link>
+          </Link>
+        </Button>
       </div>
 
       <header className="mb-5">
@@ -369,12 +369,12 @@ export default function BestTime() {
   return (
     <div className="p-3 sm:p-4 lg:p-6 max-w-[900px] mx-auto">
       <div className="mb-3">
-        <Link to="/">
-          <Button variant="ghost" size="sm" className="gap-1 h-8 -ml-2">
+        <Button asChild variant="ghost" size="sm" className="gap-1 min-h-11 -ml-2">
+          <Link to="/">
             <ArrowLeft className="w-3.5 h-3.5" />
             <span className="text-xs">{language === 'en' ? 'All crossings' : 'Todos los cruces'}</span>
-          </Button>
-        </Link>
+          </Link>
+        </Button>
       </div>
 
       <header className="mb-5">
diff --git a/src/pages/BlogPost.jsx b/src/pages/BlogPost.jsx
index 41e5e4453..0a91cd994 100644
--- a/src/pages/BlogPost.jsx
+++ b/src/pages/BlogPost.jsx
@@ -112,12 +112,12 @@ export default function BlogPost() {
   return (
     <article className="p-3 sm:p-4 lg:p-6 max-w-[760px] mx-auto" lang={lang}>
       <div className="mb-4">
-        <Link to="/blog/">
-          <Button variant="ghost" size="sm" className="gap-1 h-8 -ml-2">
+        <Button asChild variant="ghost" size="sm" className="gap-1 min-h-11 -ml-2">
+          <Link to="/blog/">
             <ArrowLeft className="w-3.5 h-3.5" />
             <span className="text-xs">{t.allPosts}</span>
-          </Button>
-        </Link>
+          </Link>
+        </Button>
       </div>
 
       <header className="mb-6">
diff --git a/src/pages/Compare.jsx b/src/pages/Compare.jsx
index 042df624d..1af3a2447 100644
--- a/src/pages/Compare.jsx
+++ b/src/pages/Compare.jsx
@@ -290,11 +290,9 @@ export default function Compare() {
   return (
     <div className="p-3 sm:p-4 lg:p-6 max-w-[1100px] mx-auto">
       <div className="mb-3">
-        <Link to="/">
-          <button className="inline-flex items-center gap-1 text-xs text-slate-600 hover:text-slate-900 dark:text-slate-300 dark:hover:text-white">
+        <Link to="/" className="inline-flex min-h-11 items-center gap-1 rounded-md text-xs text-slate-600 hover:text-slate-900 focus-visible:outline-2 focus-visible:outline-offset-2 dark:text-slate-300 dark:hover:text-white">
             <ArrowLeft className="w-3.5 h-3.5" />
             {language === 'en' ? 'All crossings' : 'Todos los cruces'}
-          </button>
         </Link>
       </div>
 
diff --git a/src/pages/CrossingDetail.jsx b/src/pages/CrossingDetail.jsx
index a47cb21d1..27467b051 100644
--- a/src/pages/CrossingDetail.jsx
+++ b/src/pages/CrossingDetail.jsx
@@ -19,6 +19,7 @@ import { updatePageMeta, resetPageMeta } from '@/lib/seo';
 import { nearestCrossings, kmToMiles } from '@/lib/geo';
 import { comparePairsFor } from '@/lib/comparePairs';
 import { usePersistentLanguage } from '@/lib/useLanguage';
+import { readFavorites } from '@/lib/browserStorage';
 import { isSparseCell } from '@/lib/aggregates';
 import { hasPedestrianLane } from '@/lib/crossingAvailability';
 import { pickLightestHour } from '@/lib/recommendations';
@@ -221,14 +222,7 @@ export default function CrossingDetail() {
   const [anomalies, setAnomalies] = useState(null);
   const language = usePersistentLanguage();
   const [favoriteError, setFavoriteError] = useState(false);
-  const [favorites, setFavorites] = useState(() => {
-    try {
-      const stored = JSON.parse(localStorage.getItem('borderPulse_favorites') || '[]');
-      return Array.isArray(stored) ? stored : [];
-    } catch {
-      return [];
-    }
-  });
+  const [favorites, setFavorites] = useState(readFavorites);
 
   const toggleFavorite = (portNumber) => {
     const adding = !favorites.includes(portNumber);
@@ -454,14 +448,14 @@ export default function CrossingDetail() {
   return (
     <div className="p-3 sm:p-4 lg:p-6 max-w-[1100px] mx-auto">
       <div className="mb-3 flex items-center justify-between gap-2">
-        <Link to="/">
-          <Button variant="ghost" size="sm" className="gap-1 h-8 -ml-2">
+        <Button asChild variant="ghost" size="sm" className="gap-1 min-h-11 -ml-2">
+          <Link to="/">
             <ArrowLeft className="w-3.5 h-3.5" />
             <span className="text-xs">
               {language === 'en' ? 'All crossings' : 'Todos los cruces'}
             </span>
-          </Button>
-        </Link>
+          </Link>
+        </Button>
         <Button
           variant="outline"
           size="sm"
diff --git a/src/pages/Dashboard.jsx b/src/pages/Dashboard.jsx
index 498409d40..4d0394634 100644
--- a/src/pages/Dashboard.jsx
+++ b/src/pages/Dashboard.jsx
@@ -30,6 +30,7 @@ import { buildSlugMap } from '@/lib/slugs';
 import { track } from '@/lib/analytics';
 import { findNearestCrossing, nearestCrossings } from '@/lib/geo';
 import { usePersistentLanguage } from '@/lib/useLanguage';
+import { readFavorites, readStorage, writeStorage } from '@/lib/browserStorage';
 
 const REGIONS = [
   { code: 'ALL', label: { en: 'All', es: 'Todos' } },
@@ -77,11 +78,9 @@ export default function Dashboard() {
   const [region, setRegion] = useState(() => {
     if (corridorFor(searchParams.get('area'))) return 'ALL';
     // Stored region preference takes precedence; otherwise check the geolocation default.
-    const stored = localStorage.getItem('borderPulse_region');
-    if (stored) return stored;
-    const geoDefault = localStorage.getItem('borderPulse_defaultRegion');
-    if (geoDefault) return geoDefault;
-    return 'ALL';
+    const stored = readStorage('borderPulse_region');
+    const geoDefault = readStorage('borderPulse_defaultRegion');
+    return [stored, geoDefault].find(code => REGIONS.some(region => region.code === code)) || 'ALL';
   });
   const [search, setSearch] = useState('');
   const [corridor, setCorridor] = useState(() => {
@@ -107,37 +106,22 @@ export default function Dashboard() {
   const [shareOpen, setShareOpen] = useState(false);
   const [showGeoPrompt, setShowGeoPrompt] = useState(false);
   const [geoLocating, setGeoLocating] = useState(false);
-  const [favorites, setFavorites] = useState(() => {
-    try {
-      const stored = localStorage.getItem('borderPulse_favorites');
-      return stored ? JSON.parse(stored) : [];
-    } catch {
-      return [];
-    }
-  });
-
-  const toggleFavorite = useCallback((portNumber) => {
-    setFavorites((prev) => {
-      const next = prev.includes(portNumber)
-        ? prev.filter((p) => p !== portNumber)
-        : [...prev, portNumber];
-      localStorage.setItem('borderPulse_favorites', JSON.stringify(next));
-      // Analytics deliberately does NOT live in here. A state updater must be
-      // safe to call more than once (StrictMode, concurrent re-render), and a
-      // double-invoked updater would double-count the event.
-      return next;
-    });
-  }, []);
+  const [favorites, setFavorites] = useState(readFavorites);
+  const [favoriteError, setFavoriteError] = useState(false);
 
   const handleToggleFavorite = useCallback((portNumber) => {
-    const adding = !favoritesSetRef.current.has(portNumber);
-    toggleFavorite(portNumber);
+    const adding = !favorites.includes(portNumber);
+    const next = adding ? [...favorites, portNumber] : favorites.filter(port => port !== portNumber);
+    if (!writeStorage('borderPulse_favorites', JSON.stringify(next))) {
+      setFavoriteError(true);
+      return;
+    }
+    setFavorites(next);
+    setFavoriteError(false);
     track('favorite-toggle', { action: adding ? 'add' : 'remove' });
-  }, [toggleFavorite]);
+  }, [favorites]);
 
   const favoritesSet = useMemo(() => new Set(favorites), [favorites]);
-  const favoritesSetRef = useRef(favoritesSet);
-  useEffect(() => { favoritesSetRef.current = favoritesSet; }, [favoritesSet]);
 
   // 30-day medians for the ghost "typical" tick. One 8.6 KB request for all
   // ranked crossings, deliberately not 42 per-crossing aggregate fetches.
@@ -190,16 +174,16 @@ export default function Dashboard() {
   // explicit click (one-tap consent), not silently.
   useEffect(() => {
     if (typeof window === 'undefined') return;
-    const denied = localStorage.getItem('borderPulse_geoConsent') === 'denied';
-    const defaultRegion = localStorage.getItem('borderPulse_defaultRegion');
-    const savedRegion = localStorage.getItem('borderPulse_region');
+    const denied = readStorage('borderPulse_geoConsent') === 'denied';
+    const defaultRegion = readStorage('borderPulse_defaultRegion');
+    const savedRegion = readStorage('borderPulse_region');
     if (denied || defaultRegion || savedRegion) return;
     if (!('geolocation' in navigator)) return;
     setShowGeoPrompt(true);
   }, []);
 
   const dismissGeoPrompt = useCallback(() => {
-    localStorage.setItem('borderPulse_geoConsent', 'denied');
+    writeStorage('borderPulse_geoConsent', 'denied');
     setShowGeoPrompt(false);
   }, []);
 
@@ -222,8 +206,8 @@ export default function Dashboard() {
         } catch { /* storage may be unavailable */ }
         const nearest = findNearestCrossing(state.crossings, latitude, longitude);
         if (nearest && nearest.state) {
-          localStorage.setItem('borderPulse_defaultRegion', nearest.state);
-          localStorage.setItem('borderPulse_region', nearest.state);
+          writeStorage('borderPulse_defaultRegion', nearest.state);
+          writeStorage('borderPulse_region', nearest.state);
           setRegion(nearest.state);
         }
         setGeoLocating(false);
@@ -231,7 +215,7 @@ export default function Dashboard() {
       },
       () => {
         // Treat geolocation errors / user cancellation as a denial so we don't re-prompt.
-        localStorage.setItem('borderPulse_geoConsent', 'denied');
+        writeStorage('borderPulse_geoConsent', 'denied');
         setGeoLocating(false);
         setShowGeoPrompt(false);
       },
@@ -445,6 +429,12 @@ export default function Dashboard() {
       {/* Offline / stale data warning */}
       <StaleDataBanner fetchedAt={state.fetchedAt} language={language} />
 
+      {favoriteError && <p role="status" className="mb-3 text-sm text-amber-800 dark:text-amber-300">
+        {language === 'en'
+          ? 'Your browser could not save this change. Allow site storage and try again.'
+          : 'Tu navegador no pudo guardar este cambio. Permite el almacenamiento del sitio e inténtalo de nuevo.'}
+      </p>}
+
       {view === 'analytics' ? (
         <Suspense
           fallback={
diff --git a/src/pages/Methodology.jsx b/src/pages/Methodology.jsx
index c674d20f3..73e8d6f8d 100644
--- a/src/pages/Methodology.jsx
+++ b/src/pages/Methodology.jsx
@@ -394,12 +394,12 @@ export default function Methodology({ lang = 'en' }) {
   return (
     <div className="p-3 sm:p-4 lg:p-6 max-w-[900px] mx-auto" lang={lang}>
       <div className="mb-3">
-        <Link to="/">
-          <Button variant="ghost" size="sm" className="gap-1 h-8 -ml-2">
+        <Button asChild variant="ghost" size="sm" className="gap-1 min-h-11 -ml-2">
+          <Link to="/">
             <ArrowLeft className="w-3.5 h-3.5" />
             <span className="text-xs">{t.backLabel}</span>
-          </Button>
-        </Link>
+          </Link>
+        </Button>
       </div>
 
       <header className="mb-8">

From 2c9c8bde2ac75f03926da7c16b63a92745597fe8 Mon Sep 17 00:00:00 2001
From: sbc1-code <207095575+sbc1-code@users.noreply.github.com>
Date: Wed, 21 Oct 2026 00:55:11 -0700
Subject: [PATCH 2/2] docs: mark audit follow-up as local review pending
 publication

---
 ROADMAP.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ROADMAP.md b/ROADMAP.md
index 218c57434..c40390924 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -27,7 +27,8 @@ cross-border experience; it is a product hypothesis, not a claim of demand.
   package entries remain; no usage or conversion increase is established.
 - [~] Prepare bounded browser-storage, keyboard-navigation and route-metadata
   corrections from the October 21 audit. Local build, 118 unit tests and full
-  npm test passed; review and release evidence belong to the follow-up PR.
+  npm test passed. The isolated local commit and patch are ready for review;
+  publishing this follow-up needs separate owner approval.
   Broader schema lifecycle, assistive-technology and cross-browser audits
   remain separate work.