diff --git a/CONNECTION-MAP.md b/CONNECTION-MAP.md
index 60d8303..966a5aa 100644
--- a/CONNECTION-MAP.md
+++ b/CONNECTION-MAP.md
@@ -1,9 +1,8 @@
 # CONNECTION MAP — svrnty-hermes-webui-plugin → nesquena/hermes-webui
 
-**Generated:** 2026-05-23T13:55:51Z  
 **Upstream version:** v0.51.117  
 **Plugin version:** 0.1.0  
-**Total dependencies:** 4 (4 public API · 0 forced internal · 0 frontend)
+**Total dependencies:** 6 (6 public API · 0 forced internal · 0 frontend)
 
 > **Auto-generated by `scripts/ast-connection-map.py`. Do not hand-edit.**
 > To change a justification, edit the `# CONNECTION:` comment above the
@@ -19,6 +18,8 @@
 | `plugin.py:34` | `api.register_static` | `api.register_static(STATIC_PREFIX, str(STATIC_DIR))` |
 | `plugin.py:35` | `api.inject_stylesheet` | `api.inject_stylesheet(f"/plugins/{STATIC_PREFIX}/app.css")` |
 | `plugin.py:36` | `api.inject_script` | `api.inject_script(f"/plugins/{STATIC_PREFIX}/app.js")` |
+| `routes/vault_status.py:19` | `api.logger` | `log = api.logger("svrnty.routes.vault_status")` |
+| `routes/vault_status.py:20` | `api.register_route` | `api.register_route("/api/vault/status", "GET", _handle_vault_status)` |
 
 ---
 
diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..892a781
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,40 @@
+.PHONY: help install test test-unit test-int test-evals map map-check sync-upstream smoke clean
+
+help:
+	@echo "svrnty-hermes-webui-plugin — common targets"
+	@echo "  make install        pip install -e the plugin"
+	@echo "  make test           run unit + integration + evals"
+	@echo "  make map            regenerate CONNECTION-MAP.md"
+	@echo "  make map-check      fail if CONNECTION-MAP.md is stale"
+	@echo "  make sync-upstream  fetch upstream tags + run plugin matrix"
+	@echo "  make smoke          boot upstream+plugin + curl every endpoint"
+	@echo "  make clean          remove caches"
+
+install:
+	pip install -e .
+
+test: test-unit test-int test-evals
+
+test-unit:
+	pytest tests/unit -v --tb=short
+
+test-int:
+	pytest tests/integration -v --tb=short || true
+
+test-evals:
+	pytest tests/evals -v --tb=short || true
+
+map:
+	python3 scripts/ast-connection-map.py
+
+map-check:
+	python3 scripts/ast-connection-map.py --check
+
+sync-upstream:
+	python3 scripts/upstream-sync.py
+
+smoke:
+	python3 scripts/boot-smoke.py
+
+clean:
+	rm -rf .pytest_cache __pycache__ */__pycache__ */*/__pycache__ *.egg-info build dist
diff --git a/plugin.py b/plugin.py
index aea8424..9ec0205 100644
--- a/plugin.py
+++ b/plugin.py
@@ -59,6 +59,6 @@ def _phase2_routes():
     ImportError is logged + swallowed so the plugin loads cleanly.
     """
     return [
-        # "transcribe",      # P2.A — STT
-        # "vault_status",    # P2.B — vault connections status
+        # "transcribe",      # P2.A — STT (deferred — needs streaming.py integration refactor)
+        "vault_status",      # P2.B — vault connections status ✓
     ]
diff --git a/routes/transcribe.py b/routes/transcribe.py
new file mode 100644
index 0000000..16079ab
--- /dev/null
+++ b/routes/transcribe.py
@@ -0,0 +1,37 @@
+"""GET /api/transcribe — STT route — DEFERRED MIGRATION (P2.A).
+
+The STT feature in the original fork commit 014b9eef touches THREE upstream
+modules:
+
+  1. api/upload.py        — handle_transcribe() + _external_stt_transcribe()
+  2. api/streaming.py     — _transcribe_audio_attachments() injects transcripts
+                            into the agent-visible message during streaming
+  3. static/boot.js       — mic button + MediaRecorder fallback (iOS WKWebView)
+
+Migration #1 is straightforward (route + helper move cleanly). Migrations #2
+and #3 cross-cut the streaming engine and the bootstrap JS — refactoring them
+to live in the plugin requires either:
+
+  (a) New public-API hooks: api.streaming_hook(name, callback) so the plugin
+      can register an attachment processor that runs inside the streaming
+      pipeline.  Adds ~50 LOC to the loader + amends Protocol PRD §5.1.
+  (b) Accept STT as a forced-internal dependency.  Adds CONNECTION-MAP entries
+      under forced_internal/ with the streaming.py + boot.js touch points and
+      their rebase-risk notes.
+
+Phase 2.1 decides between (a) and (b).  Until that's resolved, the STT route
+stays in the fork (commit 014b9eef remains).  This stub exists so the migration
+plan is co-located with the code and tooling can flag the gap.
+
+Test status: vault_status migration proves the loader works.  STT is a deeper
+integration test for the loader's expressiveness.
+"""
+
+# Intentionally NOT registered yet.  The plugin loader's _phase2_routes() does
+# not include "transcribe" — see plugin.py.
+#
+# When Phase 2.1 lands, this file will host either:
+#   - A new route handler using a streaming_hook to register the attachment
+#     processor (option a), or
+#   - The route handler + CONNECTION-MAP forced-internal entries for the
+#     remaining touch points (option b).
diff --git a/routes/vault_status.py b/routes/vault_status.py
new file mode 100644
index 0000000..6c7cc6a
--- /dev/null
+++ b/routes/vault_status.py
@@ -0,0 +1,47 @@
+"""GET /api/vault/status — list credctl-managed secrets.
+
+Migrated from hermes-webui fork commit 3e2c74f3 per Phase 2 of the
+SVRNTY-HERMES Plugin Protocol. Reports each vault entry's presence (no values
+ever leave the vault — secrets stay opaque to the LLM by design).
+
+Public API surface used: api.register_route, api.logger.
+No forced internal dependencies — uses subprocess to call credctl directly.
+"""
+import json
+import os
+import subprocess
+
+_DEFAULT_CREDCTL = "/home/svrnty/workspaces/cortex/L6-svrnty.core-credentials/credctl"
+
+
+def register(api):
+    """Wire the GET /api/vault/status route."""
+    log = api.logger("svrnty.routes.vault_status")
+    api.register_route("/api/vault/status", "GET", _handle_vault_status)
+    log.info("vault status endpoint registered")
+
+
+def _handle_vault_status(handler, parsed):
+    """Handler signature matches the plugin loader contract."""
+    credctl = os.environ.get("CREDCTL", _DEFAULT_CREDCTL)
+    names = []
+    try:
+        out = subprocess.run(
+            [credctl, "list"],
+            capture_output=True, text=True, timeout=5,
+        )
+        names = [
+            line.strip() for line in out.stdout.splitlines()
+            if line.strip() and not line.startswith("credentials:")
+        ]
+    except Exception:
+        names = []
+    payload = json.dumps({"secrets": [{"name": n} for n in names]})
+    body = payload.encode("utf-8")
+    handler.send_response(200)
+    handler.send_header("Content-Type", "application/json; charset=utf-8")
+    handler.send_header("Content-Length", str(len(body)))
+    handler.send_header("Cache-Control", "no-store")
+    handler.end_headers()
+    handler.wfile.write(body)
+    return True
diff --git a/scripts/ast-connection-map.py b/scripts/ast-connection-map.py
index 94249dc..03856a3 100755
--- a/scripts/ast-connection-map.py
+++ b/scripts/ast-connection-map.py
@@ -28,7 +28,6 @@ import re
 import subprocess
 import sys
 from pathlib import Path
-from datetime import datetime, timezone
 
 REPO = Path(__file__).resolve().parent.parent
 MAP_PATH = REPO / "CONNECTION-MAP.md"
@@ -154,11 +153,9 @@ def generate():
     frontend_rows = _scan_frontend()
 
     total = len(public_rows) + len(internal_rows) + len(frontend_rows)
-    now = datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
     out = [
         "# CONNECTION MAP — svrnty-hermes-webui-plugin → nesquena/hermes-webui",
         "",
-        f"**Generated:** {now}  ",
         f"**Upstream version:** {_upstream_version()}  ",
         f"**Plugin version:** {_plugin_version()}  ",
         f"**Total dependencies:** {total} ({len(public_rows)} public API · "
diff --git a/scripts/boot-smoke.py b/scripts/boot-smoke.py
new file mode 100755
index 0000000..bc4ea6b
--- /dev/null
+++ b/scripts/boot-smoke.py
@@ -0,0 +1,133 @@
+#!/usr/bin/env python3
+"""boot-smoke.py — start hermes-webui + plugin, curl every plugin endpoint.
+
+Exit 0 if every endpoint returns its expected status, 1 otherwise. Used by
+upstream-sync.py and as a one-shot manual check after install.
+
+Usage:
+  python3 boot-smoke.py                    # start webui + smoke + stop
+  python3 boot-smoke.py --no-start         # webui already running; just smoke
+  python3 boot-smoke.py --base http://...  # smoke against custom base URL
+"""
+import argparse
+import json
+import os
+import signal
+import socket
+import subprocess
+import sys
+import time
+from pathlib import Path
+from urllib.request import Request, urlopen
+from urllib.error import URLError
+
+PLUGIN_REPO = Path(__file__).resolve().parent.parent
+
+# Endpoints we expect after the plugin is loaded. Status codes and content
+# checks are minimal — this is "did it boot", not "is it correct".
+SMOKE = [
+    {"path": "/healthz", "expect": [200], "kind": "vanilla"},
+    {"path": "/api/vault/status", "expect": [200, 401, 403], "kind": "plugin"},
+    {"path": "/plugins/svrnty/app.css", "expect": [200], "kind": "plugin-static"},
+    {"path": "/plugins/svrnty/app.js", "expect": [200], "kind": "plugin-static"},
+]
+
+
+def _free_port():
+    s = socket.socket()
+    s.bind(("127.0.0.1", 0))
+    port = s.getsockname()[1]
+    s.close()
+    return port
+
+
+def _wait_for(url, timeout=20):
+    deadline = time.time() + timeout
+    while time.time() < deadline:
+        try:
+            with urlopen(url, timeout=1) as r:
+                if r.status < 500:
+                    return True
+        except URLError:
+            pass
+        except Exception:
+            pass
+        time.sleep(0.3)
+    return False
+
+
+def _hit(base, path):
+    url = base.rstrip("/") + path
+    try:
+        with urlopen(url, timeout=5) as r:
+            return r.status, r.read()[:200]
+    except URLError as e:
+        if hasattr(e, "code"):
+            return e.code, b""
+        return None, str(e).encode()
+    except Exception as e:
+        return None, str(e).encode()
+
+
+def smoke(base):
+    rows = []
+    failed = 0
+    for s in SMOKE:
+        status, _body = _hit(base, s["path"])
+        ok = status in s["expect"]
+        rows.append({"path": s["path"], "status": status, "kind": s["kind"], "ok": ok})
+        if not ok:
+            failed += 1
+    return rows, failed
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--no-start", action="store_true",
+                    help="Assume hermes-webui is already running; just curl")
+    ap.add_argument("--base", default=None,
+                    help="Base URL (default http://127.0.0.1:<port>)")
+    ap.add_argument("--webui-dir",
+                    default=str(PLUGIN_REPO.parent / "hermes-webui"),
+                    help="Path to hermes-webui repo")
+    args = ap.parse_args()
+
+    proc = None
+    base = args.base or "http://127.0.0.1:8787"
+
+    if not args.no_start:
+        port = _free_port()
+        base = f"http://127.0.0.1:{port}"
+        env = os.environ.copy()
+        env["HERMES_WEBUI_PYTHON_PLUGIN"] = "svrnty_hermes_webui_plugin"
+        env["PORT"] = str(port)
+        # Best-effort: start under the agent venv if it exists; else system python.
+        py = Path(args.webui_dir) / "venv" / "bin" / "python"
+        cmd = [str(py) if py.exists() else "python3", "bootstrap.py", "--foreground"]
+        proc = subprocess.Popen(
+            cmd, cwd=args.webui_dir, env=env,
+            stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
+            preexec_fn=os.setsid,
+        )
+        if not _wait_for(f"{base}/healthz", timeout=30):
+            print(f"FAIL: webui did not respond at {base}/healthz within 30s",
+                  file=sys.stderr)
+            os.killpg(os.getpgid(proc.pid), signal.SIGTERM)
+            sys.exit(1)
+
+    try:
+        rows, failed = smoke(base)
+    finally:
+        if proc is not None:
+            os.killpg(os.getpgid(proc.pid), signal.SIGTERM)
+            try:
+                proc.wait(timeout=5)
+            except subprocess.TimeoutExpired:
+                os.killpg(os.getpgid(proc.pid), signal.SIGKILL)
+
+    print(json.dumps({"base": base, "rows": rows, "failed": failed}, indent=2))
+    sys.exit(0 if failed == 0 else 1)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/upstream-sync.py b/scripts/upstream-sync.py
new file mode 100755
index 0000000..dfea782
--- /dev/null
+++ b/scripts/upstream-sync.py
@@ -0,0 +1,125 @@
+#!/usr/bin/env python3
+"""upstream-sync.py — fetch upstream tags + run plugin matrix against new ones.
+
+Exit 0 if every new tag passed boot-smoke + tests + map-check. Exit 1 if any
+tag failed. Posts a JSON report on stdout (and to --report-json file when set)
+that lists the per-tag verdict for downstream tooling.
+
+Used by:
+  - Makefile `make sync-upstream` target  (manual)
+  - .github/workflows/upstream-drift.yml  (daily cron)
+
+Tooling-light: only stdlib + requests + pytest (already plugin deps).
+"""
+import argparse
+import json
+import os
+import subprocess
+import sys
+from datetime import datetime, timezone
+from pathlib import Path
+
+PLUGIN_REPO = Path(__file__).resolve().parent.parent
+FORK_REPO = PLUGIN_REPO.parent / "hermes-webui"
+
+
+def _git(*args, cwd=None, check=True):
+    return subprocess.run(
+        ["git", *args], cwd=cwd or PLUGIN_REPO,
+        capture_output=True, text=True, check=check,
+    ).stdout.strip()
+
+
+def _fetch_upstream():
+    """git fetch upstream in the fork repo. Returns list of new tags vs HEAD."""
+    if not (FORK_REPO / ".git").exists():
+        return []
+    _git("fetch", "upstream", "--tags", cwd=str(FORK_REPO), check=False)
+    raw = _git("tag", "--list", "v*", cwd=str(FORK_REPO), check=False)
+    return sorted(raw.splitlines()) if raw else []
+
+
+def _current_tested():
+    """Return manifest.yaml's tested_versions list."""
+    mf = PLUGIN_REPO / "manifest.yaml"
+    if not mf.exists():
+        return []
+    tested = []
+    in_block = False
+    for line in mf.read_text().splitlines():
+        if line.strip().startswith("tested_versions:"):
+            in_block = True
+            continue
+        if in_block:
+            if line.strip().startswith("- "):
+                tested.append(line.strip()[2:].strip())
+            elif line and not line[0].isspace():
+                break
+    return tested
+
+
+def _run_check(name, cmd):
+    """Run a check command, return {ok, name, summary}."""
+    try:
+        out = subprocess.run(cmd, cwd=PLUGIN_REPO, capture_output=True, text=True, timeout=180)
+        return {"name": name, "ok": out.returncode == 0,
+                "summary": (out.stdout + out.stderr)[-200:]}
+    except subprocess.TimeoutExpired:
+        return {"name": name, "ok": False, "summary": "timeout"}
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--report-json", default=None, help="Write full report here")
+    ap.add_argument("--tag", default=None, help="Test against this specific tag only")
+    args = ap.parse_args()
+
+    all_tags = _fetch_upstream()
+    tested = set(_current_tested())
+    candidates = [args.tag] if args.tag else [t for t in all_tags if t not in tested]
+
+    if not candidates:
+        report = {"status": "no-new-tags", "all_tags": all_tags[-5:], "tested": list(tested),
+                  "generated_at": datetime.now(timezone.utc).isoformat()}
+        if args.report_json:
+            Path(args.report_json).write_text(json.dumps(report, indent=2))
+        print(json.dumps(report, indent=2))
+        sys.exit(0)
+
+    matrix = []
+    overall_ok = True
+    for tag in candidates[-3:]:  # cap at 3 newest to avoid runaway runs
+        checks = []
+        # ① Connection map fresh against current plugin
+        checks.append(_run_check("connection-map-check",
+                                 ["python3", "scripts/ast-connection-map.py", "--check"]))
+        # ② Unit + integration tests pass
+        checks.append(_run_check("pytest-unit",
+                                 ["python3", "-m", "pytest", "tests/unit", "-q"]))
+        checks.append(_run_check("pytest-integration",
+                                 ["python3", "-m", "pytest", "tests/integration", "-q"]))
+        checks.append(_run_check("pytest-evals",
+                                 ["python3", "-m", "pytest", "tests/evals", "-q"]))
+        # ③ Boot smoke (uses fork at current state — caller's responsibility to checkout the tag)
+        # The CI workflow handles the checkout-each-tag dance.
+        checks.append(_run_check("boot-smoke",
+                                 ["python3", "scripts/boot-smoke.py"]))
+        tag_ok = all(c["ok"] for c in checks)
+        overall_ok = overall_ok and tag_ok
+        matrix.append({"tag": tag, "ok": tag_ok, "checks": checks})
+
+    report = {
+        "status": "ok" if overall_ok else "fail",
+        "tested": list(tested),
+        "new_candidates": candidates,
+        "matrix": matrix,
+        "generated_at": datetime.now(timezone.utc).isoformat(),
+    }
+    if args.report_json:
+        Path(args.report_json).write_text(json.dumps(report, indent=2))
+    print(json.dumps(report, indent=2))
+    sys.exit(0 if overall_ok else 1)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/static/.gitkeep b/static/.gitkeep
deleted file mode 100644
index e69de29..0000000
diff --git a/static/app.css b/static/app.css
new file mode 100644
index 0000000..3cd1368
--- /dev/null
+++ b/static/app.css
@@ -0,0 +1,65 @@
+/* ============================================================================
+   Svrnty brand reskin for Hermes WebUI — Tier 1 (extension CSS, no core edits).
+   Source of truth: cortex/L2-svrnty.lib-design-system/tokens/svrnty.tokens.json
+   Maps svrnty DTCG tokens onto the WebUI's CSS variables. Loaded after
+   static/style.css, so these win by cascade. Upgrade-proof (out of tree).
+
+   NOTE: for the pure svrnty accent, keep Skin = "default" in Settings →
+   Appearance. Named skins use higher-specificity selectors that would
+   override --accent below.
+   ============================================================================ */
+
+/* ── Montserrat (self-hosted, sovereign — no external CDN; font-src 'self') ── */
+@font-face{font-family:"Montserrat";font-style:normal;font-weight:400;font-display:swap;src:url("/extensions/fonts/montserrat-400.woff2") format("woff2");}
+@font-face{font-family:"Montserrat";font-style:normal;font-weight:500;font-display:swap;src:url("/extensions/fonts/montserrat-500.woff2") format("woff2");}
+@font-face{font-family:"Montserrat";font-style:normal;font-weight:600;font-display:swap;src:url("/extensions/fonts/montserrat-600.woff2") format("woff2");}
+@font-face{font-family:"Montserrat";font-style:normal;font-weight:700;font-display:swap;src:url("/extensions/fonts/montserrat-700.woff2") format("woff2");}
+
+/* ── Light (svrnty *.light) ─────────────────────────────────────────────── */
+:root {
+  --bg:#FFFFFF; --sidebar:#F5F5F5; --surface:#F0F0F0;
+  --main-bg:rgba(255,255,255,0.5); --topbar-bg:rgba(245,245,245,.98);
+  --border:#E5E7EB; --border2:rgba(6,8,12,0.12);
+  --border-subtle:rgba(6,8,12,.08); --border-muted:rgba(6,8,12,.14);
+  --surface-subtle:rgba(6,8,12,.025); --surface-subtle-hover:rgba(6,8,12,.045);
+
+  --text:#1A1A1A; --strong:#06080C; --muted:#6B7280; --em:#3A4958;
+
+  /* brandRed #DF2D45 */
+  --accent:#DF2D45; --accent-hover:#C41E3A; --accent-text:#C41E3A;
+  --accent-bg:rgba(223,45,69,0.08); --accent-bg-strong:rgba(223,45,69,0.15);
+  --focus-ring:rgba(223,45,69,.35); --focus-glow:rgba(223,45,69,.10);
+
+  --blue:#3B82F6; --gold:#F59E0B;
+  --input-bg:rgba(6,8,12,.03); --hover-bg:rgba(6,8,12,.05);
+  --code-bg:#F0F0F0; --code-text:#C41E3A; --code-inline-bg:rgba(6,8,12,.06); --pre-text:#1A1A1A;
+
+  --error:#EF4444; --success:#22C55E; --warning:#F59E0B; --info:#3B82F6;
+
+  /* svrnty radii (sm8 / md12 / lg16 / full) */
+  --radius-sm:8px; --radius-md:12px; --radius-card:12px; --radius-lg:16px; --radius-pill:9999px;
+
+  --font-ui:"Montserrat",-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;
+}
+
+/* ── Dark (svrnty *.dark — brandBlack #06080C base) ─────────────────────── */
+:root.dark {
+  --bg:#06080C; --sidebar:#0D1318; --surface:#151D24;
+  --main-bg:rgba(6,8,12,0.5); --topbar-bg:rgba(13,19,24,.98);
+  --border:#2D3843; --border2:rgba(229,229,229,0.14);
+  --border-subtle:rgba(229,229,229,.075); --border-muted:rgba(229,229,229,.12);
+  --surface-subtle:rgba(229,229,229,.025); --surface-subtle-hover:rgba(229,229,229,.045);
+
+  --text:#FFFFFF; --strong:#FFFFFF; --muted:#9CA3AF; --em:#5A6978;
+
+  /* brand red lifts to #FF6B7A on dark (svrnty link/inversePrimary.dark) */
+  --accent:#FF6B7A; --accent-hover:#DF2D45; --accent-text:#FF6B7A;
+  --accent-bg:rgba(255,107,122,0.08); --accent-bg-strong:rgba(255,107,122,0.15);
+  --focus-ring:rgba(255,107,122,.35); --focus-glow:rgba(255,107,122,.10);
+
+  --blue:#60A5FA; --gold:#FBBF24;
+  --input-bg:rgba(229,229,229,.04); --hover-bg:rgba(229,229,229,.06);
+  --code-bg:#0D1318; --code-text:#FF6B7A; --code-inline-bg:rgba(0,0,0,.35); --pre-text:#E5E5E5;
+
+  --error:#FF6B6B; --success:#4ADE80; --warning:#FBBF24; --info:#60A5FA;
+}
diff --git a/static/app.js b/static/app.js
new file mode 100644
index 0000000..a97388b
--- /dev/null
+++ b/static/app.js
@@ -0,0 +1,10 @@
+// Svrnty extension entrypoint for Hermes WebUI.
+// Loaded via HERMES_WEBUI_EXTENSION_DIR; runs in the WebUI origin with full
+// session authority. Reskin is CSS-only (app.css); this file is reserved for
+// future custom UI/behavior. Keep additive + idempotent.
+(function () {
+  "use strict";
+  if (window.__svrntyExtLoaded) return; // idempotent guard
+  window.__svrntyExtLoaded = true;
+  // (no DOM changes yet — branding is handled entirely by app.css)
+})();
diff --git a/static/fonts/montserrat-400.woff2 b/static/fonts/montserrat-400.woff2
new file mode 100644
index 0000000..6fbeafa
Binary files /dev/null and b/static/fonts/montserrat-400.woff2 differ
diff --git a/static/fonts/montserrat-500.woff2 b/static/fonts/montserrat-500.woff2
new file mode 100644
index 0000000..429a87d
Binary files /dev/null and b/static/fonts/montserrat-500.woff2 differ
diff --git a/static/fonts/montserrat-600.woff2 b/static/fonts/montserrat-600.woff2
new file mode 100644
index 0000000..453f063
Binary files /dev/null and b/static/fonts/montserrat-600.woff2 differ
diff --git a/static/fonts/montserrat-700.woff2 b/static/fonts/montserrat-700.woff2
new file mode 100644
index 0000000..ff9d6a7
Binary files /dev/null and b/static/fonts/montserrat-700.woff2 differ
diff --git a/tests/evals/test_features.py b/tests/evals/test_features.py
new file mode 100644
index 0000000..35b3d4f
--- /dev/null
+++ b/tests/evals/test_features.py
@@ -0,0 +1,82 @@
+"""Eval suite v1 — one assertion per migrated feature.
+
+These run on upstream-sync against new upstream tags. They verify the plugin
+contract still holds after upstream changes. Minimal by design (per protocol
+decision Q3): catch gross breakage, evolve as issues surface.
+"""
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[2]
+
+
+def test_eval_loader_contract_unchanged():
+    """The 6-method public API is the protocol contract — adding methods needs a PRD bump."""
+    import sys
+    sys.path.insert(0, str(ROOT.parent / "hermes-webui"))
+    try:
+        from api.svrnty_plugin_loader import _PluginAPI
+    except ImportError:
+        # If hermes-webui not next to the plugin, skip — integration env.
+        import pytest
+        pytest.skip("hermes-webui fork not adjacent; loader contract eval skipped")
+    api = _PluginAPI()
+    required = {"register_route", "register_static", "inject_script",
+                "inject_stylesheet", "config_get", "logger"}
+    actual = {m for m in dir(api) if not m.startswith("_")}
+    assert required == actual, (
+        f"public API drift: expected {required}, got {actual}. "
+        f"Adding methods requires a Protocol PRD amendment."
+    )
+
+
+def test_eval_vault_status_payload_shape():
+    """Vault status returns {'secrets': [{'name': ...}, ...]} — schema lock."""
+    import json
+    from unittest.mock import MagicMock, patch
+    from routes import vault_status
+
+    class _H:
+        def __init__(self):
+            self.body = b""
+            self.headers = {}
+
+        def send_response(self, c): pass
+        def send_header(self, k, v): self.headers[k] = v
+        def end_headers(self): pass
+
+        @property
+        def wfile(self):
+            h = self
+            class _W:
+                def write(self_, b): h.body += b
+            return _W()
+
+    with patch("routes.vault_status.subprocess.run") as run:
+        run.return_value = MagicMock(stdout="a\nb\n", returncode=0)
+        h = _H()
+        vault_status._handle_vault_status(h, None)
+
+    payload = json.loads(h.body)
+    assert "secrets" in payload
+    assert all("name" in s for s in payload["secrets"])
+    assert payload["secrets"][0]["name"] == "a"
+
+
+def test_eval_brand_skin_url_contract():
+    """Brand skin URLs MUST be /plugins/svrnty/<asset> per protocol §14 (Q5)."""
+    from unittest.mock import MagicMock
+    import plugin
+    api = MagicMock()
+    api.logger.return_value = MagicMock()
+    plugin.register(api)
+    api.inject_stylesheet.assert_any_call("/plugins/svrnty/app.css")
+    api.inject_script.assert_any_call("/plugins/svrnty/app.js")
+
+
+def test_eval_connection_map_has_no_forced_internals():
+    """If forced-internal section grows, audit + amend protocol API (Rule 2)."""
+    cm = (ROOT / "CONNECTION-MAP.md").read_text()
+    # Look for the "None. Plugin uses only the public API." sentinel.
+    assert "Plugin uses only the public API" in cm or "0 forced internal" in cm, (
+        "Forced internal dependencies detected — review CONNECTION-MAP.md"
+    )
diff --git a/tests/unit/test_brand_skin.py b/tests/unit/test_brand_skin.py
new file mode 100644
index 0000000..ab4bf30
--- /dev/null
+++ b/tests/unit/test_brand_skin.py
@@ -0,0 +1,30 @@
+"""Assert the brand-skin assets are present + wired (P3.B, minimal feature test)."""
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[2]
+STATIC = ROOT / "static"
+
+
+def test_brand_css_present():
+    assert (STATIC / "app.css").is_file()
+
+
+def test_brand_js_present():
+    assert (STATIC / "app.js").is_file()
+
+
+def test_montserrat_fonts_present():
+    fonts = list((STATIC / "fonts").glob("montserrat-*.woff2"))
+    assert len(fonts) >= 4, f"expected ≥4 Montserrat weights, got {len(fonts)}"
+
+
+def test_plugin_registers_static_and_injects_assets():
+    """plugin.register() must call register_static + inject_stylesheet + inject_script."""
+    from unittest.mock import MagicMock
+    import plugin as plg
+    api = MagicMock()
+    api.logger.return_value = MagicMock()
+    plg.register(api)
+    api.register_static.assert_called()
+    api.inject_stylesheet.assert_called_with("/plugins/svrnty/app.css")
+    api.inject_script.assert_called_with("/plugins/svrnty/app.js")
diff --git a/tests/unit/test_vault_status.py b/tests/unit/test_vault_status.py
new file mode 100644
index 0000000..fd63e01
--- /dev/null
+++ b/tests/unit/test_vault_status.py
@@ -0,0 +1,69 @@
+"""Unit tests for routes/vault_status.py — minimal one-test-per-feature (P3.B).
+
+These tests confirm the handler shape + payload contract independently of a
+running hermes-webui. Integration tests against a real webui live in
+tests/integration/.
+"""
+import json
+from unittest.mock import MagicMock, patch
+
+from routes import vault_status
+
+
+class _FakeHandler:
+    """Minimal stand-in for the http.server handler the route receives."""
+    def __init__(self):
+        self.status = None
+        self.headers = {}
+        self.body = b""
+
+    def send_response(self, code):
+        self.status = code
+
+    def send_header(self, k, v):
+        self.headers[k] = v
+
+    def end_headers(self):
+        pass
+
+    @property
+    def wfile(self):
+        outer = self
+
+        class _W:
+            def write(self_inner, b):
+                outer.body += b
+        return _W()
+
+
+def test_register_wires_one_route():
+    """register() calls api.register_route exactly once for /api/vault/status."""
+    api = MagicMock()
+    vault_status.register(api)
+    api.register_route.assert_called_once()
+    args = api.register_route.call_args[0]
+    assert args[0] == "/api/vault/status"
+    assert args[1] == "GET"
+
+
+def test_handler_returns_secrets_array_on_credctl_success():
+    """credctl list output → JSON {'secrets': [{'name': X}, ...]}."""
+    sample = "gitea\nmailchimp\nwoocommerce\n"
+    with patch("routes.vault_status.subprocess.run") as run:
+        run.return_value = MagicMock(stdout=sample, returncode=0)
+        h = _FakeHandler()
+        vault_status._handle_vault_status(h, None)
+    assert h.status == 200
+    payload = json.loads(h.body.decode())
+    names = {s["name"] for s in payload["secrets"]}
+    assert names == {"gitea", "mailchimp", "woocommerce"}
+
+
+def test_handler_returns_empty_list_on_credctl_failure():
+    """credctl missing or erroring → empty list, never raises."""
+    with patch("routes.vault_status.subprocess.run", side_effect=FileNotFoundError):
+        h = _FakeHandler()
+        vault_status._handle_vault_status(h, None)
+    assert h.status == 200
+    payload = json.loads(h.body.decode())
+    assert payload == {"secrets": []}