Changelog

The aescolab showcase gets its backend. Global catalogs (61 Biomarkers, three packages, 58 fictional Partner Practices and German postcode centroids) are readable signed out. Patient health data lives in the personal Organization: Result Sets stay invisible until the lab releases them, enforced by row-level security. Practice search works by postcode and radius, availability is computed in Europe/Berlin across the daylight-saving switch, and two patients racing for one slot get one booking and one conflict. The admin pipeline moves a Lab Order one step at a time and, at results_ready, releases the results, writes the plan and a Result Notice; admins see metadata only.

The seed loads everything fictional, idempotently and relative to the run, with exactly two sign-in accounts. DEMO_MODE enables the demo controls.

• aescolab demo backend
• ADR-0014: health data tenancy and global catalogs

The aescolab showcase gets its web screens. Patients see their Energy Score as an A–E gauge with the change since the last test, every value with its reference and optimal range, a trend per Biomarker, a retest comparison and a plan whose summary names the engine that wrote it. Signed out, anyone can search the 58 fictional partner practices by postcode and radius, open a page per practice and book a real slot; the login sends them back to the booking. A lab PDF is turned into text in the browser and parsed by the configured model (default gpt-6-luna for OpenAI) or the deterministic rules parser; each row is reviewed before it becomes a Result Set. Ops staff move orders through a five-lane board with buttons and can reset the demo. Details: aescolab demo, lab report import.

A design pass then matched the screens to aescolab.de: white pages with moss and apricot bands, Satoshi medium headings, pill buttons in apricot or gray instead of dark ones, moss labels, a light footer, and glass panels (header, score, packages) over soft brand light that turn solid when transparency is reduced; the hero entrance and hover lift stop with reduced motion. Token mapping: docs/design-tokens.md.

Matt Pocock's skills and pstack are installed again from their sources with the official skills installer, so skills-lock.json matches what upstream ships. pr is new from Matt Pocock. design-an-interface and resolving-merge-conflicts are gone because upstream deleted them, and writing-great-skills is gone because upstream renamed it to writing-for-agents, which the repo already had. domain-modeling keeps this repo's ADR header rules and was not reinstalled.

pstack adds correct, in-your-own-words, ketchup, principle-attack-the-premise, principle-explain-the-number and principle-test-behavior-not-implementation, and seven pstack skills follow upstream edits. pstack's teach and tdd stay out, so the names keep pointing at Matt Pocock's skills.

A new pull request opens with the /pr sections: Summary (a diff sketch, file tree or pseudocode, no Mermaid), Evidence (before and after) and Merge Danger (one-way or two-way door, blast radius). The checks list below them is unchanged. The template says that a merge to main deploys to production and that migrations, RLS changes, secret or env changes and feature removals are one-way doors. Skills that name GLOSSARY.md read this repo's CONTEXT.md.

• Review checklist
• Pull request template
• Domain docs for agents

Sources: Matt Pocock skills, pstack skills.