mirror second-pass close-out: retention diagram precision, evidence taxonomy, sourced Talos reboot claim, qualified failure matrix, Hub pull terminology, referrer completeness split, storage semantics, secret-rotation truth, table captions + scope + keyboard regions, all-lazy plates, en-AU, editorial reduction, extended gates

pilot/index.tpl.html

@@ -61,13 +61,13 @@ footer a{color:var(--cyan)}
   </a>
 
   <a class="card" href="/mirror">
-    <span class="thumb"><img src="__THUMB_MIRROR__" alt="" width="1600" height="873" loading="eager" decoding="async"></span>
+    <span class="thumb"><img src="__THUMB_MIRROR__" alt="" width="1600" height="872" loading="eager" decoding="async"></span>
     <span class="meta">
       <span class="k">Chapter 02 &middot; Dossier 005</span>
       <h2>The Mirror <span class="arrow">&rarr;</span></h2>
-      <p class="outcome"><b>Outcome</b> &mdash; a pull-through container registry taken apart: why a
-      lab runs its own mirror, the four chicken-and-egg loops hiding inside it, and the scars that
-      taught each rule - told with the receipts.</p>
+      <p class="outcome"><b>Outcome</b> &mdash; how a zot pull-through registry behaves under Talos and
+      containerd: upstream routing, digest preservation, garbage collection, authentication
+      rollout and failure modes, with the lab evidence behind each decision.</p>
     </span>
   </a>