Add design/ contract extracted from the as-built UI

Inventory the as-built recaps.cc look and distill it into a durable,
vendor-neutral design contract: design/DESIGN.md (nine-section brand
brief) + design/tokens.tokens.json (W3C DTCG tokens), plus brand icon
and provenance notes. Canonical calls reconciled with the owner:
indigo #818cf8 as the single interactive accent, purple #a855f7 for
premium only, the #0a0e1a->#111827->#0f172a surface ladder, and a
normalized type scale. Wire the AGENTS.md Design line and record the
contract-vs-code drift as a cleanup backlog in ROADMAP.md.

ROADMAP.md

@@ -13,6 +13,44 @@ Longer-term backlog for Recaps. Near-term in-flight work and known issues live i
 - **Decide the Max tier-quota default.** The relay code default is `max.monthly: null` (unlimited) → cards render "Unlimited" on a fresh install. The operator set `max.monthly: 120` on their box via the Adjust-Tier-Quotas action (so cards show 120 there). Decide whether a metered number (e.g. 120) should be the shipped default in `recap-relay/server/config.js` — note it also enforces the ceiling, not just the card label.
 - **Add Gemini 3.5 to model selection.** First have a research agent confirm which stable Gemini model versions are actually available and the correct model id/name before wiring anything. The model list is duplicated server + client (provider config under `server/providers/` + the model picker in `public/index.html`) — add the option in lockstep, like the URL-parser convention. Coordinate with the matching relay-side capture (the relay routes Gemini, so its model list must agree). — captured 2026-06-16
 
+## Design-contract conformance cleanup (from the 2026-06-16 `/design` extract)
+
+The `design/` contract (`design/DESIGN.md` + `design/tokens.tokens.json`) was extracted
+from the as-built UI and reconciled with Grant on 2026-06-16. The code is **structurally
+aligned** (right surface ladder, accent system, premium-purple, components) but a set of
+legacy values survived the reconciliation and now read as off-contract drift. None are
+release-blocking; all are mechanical token migrations. `design-checker` found seven
+categories (counts approximate, from grep) across the three styling surfaces — the main
+`public/index.html` `<style>` block, its `SHARE_PAGE_CSS` string, and `public/auth.html`.
+**Edit all three in lockstep** (the SHARE_PAGE_CSS string carries its own copies that a
+main-stylesheet grep won't catch). Do NOT do this in the same pass as the contract itself.
+
+- **Legacy accent indigo → `#818cf8`** (~12 hard + ~16 tint). `#6366f1`/`#4f46e5`/`#4338ca`
+  fills/borders/hovers and `rgba(99,102,241,…)` tints → `#818cf8`/`#a5b4fc` + `rgba(129,140,248,…)`.
+  Biggest cluster is the activation screen (`index.html:1213-1216`, `:1565,1576,1579`) which
+  uses all three demoted values in one component; also inline buttons `:6496,7776,8183`,
+  `.license-block` `:1593,1601`.
+- **Blue `#3b82f6` as a primary interactive color → indigo** (auth ×4 + index ×8). `auth.html`
+  is the worst offender — its primary button + input focus are blue (`auth.html:99,105-117`);
+  also wallet/sign-up/grant/password buttons (`index.html:5228,5763,8151,8163,7609,12384`).
+  Blue stays only for info/status + speaker chips.
+- **Legacy dark backgrounds → ladder** (~10). `#0a0e17`→`#0a0e1a` (`:1156,1243,8662`);
+  `#0b1120`→`#0a0e1a` (`:1191` + SHARE_PAGE_CSS `:11111`); `#020617`→`#0f172a` (`:1562`);
+  and the auth sub-palette `#121828`→`#111827`, `#1f2942`→`#1e293b` (`auth.html:47-48,83`,
+  `index.html:400-401`).
+- **Stray heading near-white `#f5f9ff` → `#f1f5f9`** (×9; 5 in `auth.html:59,63,87,94,96`,
+  4 in index `:418,660,6335,6343`).
+- **Off-scale font sizes → nearest step** (~23). `15→16`, `24→22`, `9→10`, `12.5/11.5→12`,
+  `10.5→10` (e.g. `index.html:84,899,907`, `auth.html:86,110`).
+- **Off-scale weights** (×3): `650→600` (`:1008`, SHARE_PAGE_CSS `:11133`), `680→700`
+  (SHARE_PAGE_CSS `:11113`).
+- **Off-scale radii → snap** (~18). `3→4`, `5→6`, `7→6|8`, `9→8|10`, `11→10|12` (scrollbars,
+  history/queue action buttons, mobile submit/menu, buy inputs).
+- **(stretch) Consolidate inline styles behind CSS custom properties.** ~447 inline `style=`
+  attrs + duplicated values are why this drift accumulates; a `:root` token block (or
+  `design/brand/palette.css` generated from the tokens) would make the contract enforceable
+  instead of advisory. Big diff — schedule deliberately.
+
 ## Known debt (P2, from the 2026-06-14 full-eval — `EVALUATION.md`)
 
 Real but not release-blocking for self-host. The P0/P1 findings from the same eval were fixed 2026-06-15 (see git log + `EVALUATION.md`).