# Premium Atlas workbench pass — 2026-07-26

## Outcome

The authenticated GeoIntel workbench now follows a more deliberate geospatial command-center hierarchy. The pass preserves all existing workflows and data contracts while improving visual hierarchy, scanability, responsive behavior, and operational state presentation.

## Changes

- dark Atlas navigation rail with clearer brand and active-workspace states;
- elevated context bar for project, area, platform health, and operator identity;
- stronger workspace titles, controls, shared panels, and form hierarchy;
- composed status overview with a derived readiness ring and richer status cards;
- improved source cards and three-plane source workspace composition;
- elevated map canvas, side panels, theme controls, and floating tools;
- one calm, accessible workspace warning instead of a loose inline error;
- compact, desktop, and ultrawide responsive refinements;
- reduced-motion support retained.

## Design decision

The new layer lives in `frontend/src/styles/atlas-premium-v2.css` and loads after the established stylesheets. This makes the direction independently reviewable and limits behavior regression risk. Consolidation should happen only after production acceptance.

## Verification record

- frontend unit tests: 36 passed;
- frontend TypeScript check: passed;
- frontend production build: passed;
- frontend dependency audit: 0 vulnerabilities;
- backend suite after removal of the accidental DockDeck overlay: 1,102 non-Bash/runtime tests pass; five script checks remain incompatible with the local Windows Bash shim;
- immutable Tower image build: passed, including frontend production build and zero-vulnerability npm audit;
- Tower readiness: passed for database, PostGIS, Alembic migration, storage, and build revision;
- production landing smoke: passed with no console errors or horizontal overflow;
- authenticated RC9 automation remains unavailable because production operator authentication is enabled and the audit runner intentionally has no credential bypass.

## Repository correction

Commit `d5ea270` accidentally overlaid DockDeck root/runtime files onto GeoIntel. This pass restores every path touched by that overlay to the last clean GeoIntel revision (`9db6cca`) while retaining the intended GeoIntel frontend work. The authoritative remote remains `git@gitea.itworx.tech:Jens/geointel.git`.

The Tower deployment key default is now `$HOME/.ssh/itworx_unraid_deploy`, the repository default is `Jens/geointel`, and PowerShell-to-Bash script transfer normalizes line endings to LF.