fix: replace the traced infinity mark with the real artwork; add §4 Offerings

Q32 — the traced mark was a WRONG SHAPE and had shipped. Pouya compared
it against the master and rejected it. Two grounds reproduce from the
path and are verified here: all four cubic branches meet the origin at
exactly 90 degrees, so the loops are tangent rather than crossing and at
stroke-width 28 render as two kissing circles (signed crossing number 0;
the strokes fuse across 61% of the mark's height at 2rem); and the
master's ink bbox is 2668x1704 = 1.5657:1. The path is deleted, not kept
as a fallback.

Pouya's 1.23:1 figure is reconciled rather than left dangling: it is the
bounding box of the path's COORDINATES, not the curve. Control points sit
at y +/-160 where the curve reaches +/-120, so the hull is 400x320 and
with stroke 428x348 = 1.2299. A trap rather than a slip — x is monotone,
so the control points give the right width and a 33% inflated height, and
the "does the width look right" check passes.

The real artwork is now in the repo: master, tight crop (the render
source, so the file's aspect ratio IS the mark's), full lockup, and the
SVG. InfinityMark renders AVIF/WebP; a Retina device takes 3,063 B.
Favicons regenerated; favicon.svg deleted.

Q33/Q36 — Pouya accepts arbitration appointments now. §4 gains an
Offerings category: competence for an offering, permission for a
credential, with an explicit boundary so it cannot become a route around
D13. The masthead tagline is restored, and the footer designation strip
now carries "Q.Arb — commenced August 2026" so §4's paired-disclosure
condition is actually met on every page rather than only asserted.

Two conventions added to CLAUDE.md, both earned this session: anything a
spec makes a claim about must be reachable from the repo (R14 — the
traced mark survived two review passes because the artwork was not here
to compare against); and a command that did not run is not evidence of
absence (`timeout` is not installed on macOS, so four Drive reads never
executed and were reported as an empty directory).

Reviews: claims-auditor FAIL/13 and adversarial-reviewer 2 blocking, all
resolved. The severe one was self-inflicted — `flex: none` landed on the
<img> while <Picture>'s <picture> wrapper is the flex item, so the logo
compressed to 28.5x32 at 1024px with seven nav items. The page-level
overflow check passed throughout because the brand block absorbed the
deficit by crushing the mark. Harness now asserts rendered aspect ratio.

Opened: Q38, Q39. Closed: Q32, Q33, Q36. Narrowed: Q35. Added: R13, R14.
AGENTS.md entry (v) carries a RESUME HERE section.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012XquaEq4BgWMCwUqLEyNkF

CLAUDE.md

@@ -152,6 +152,30 @@ interactive elements reachable by keyboard, `prefers-reduced-motion` honoured on
 every animation. Gold `#c9a876` never sits on cream — it fails contrast at
 2.10:1. See `docs/02-design-system.md`.
 
+**Anything a spec makes a claim about must be reachable from the repository.**
+If the artefact lives only in Drive, in a console, or on someone's laptop, no
+reviewer can compare the claim against it and the claim is **unverifiable by
+construction** — not merely unverified. Commit the artefact, or commit a faithful
+extract with its provenance and the command that produced it.
+
+This has cost twice. `AGENTS.md` Q24 was the AWS hosting guide, the only record
+of how the infrastructure was hand-built, living outside the repo. Q32 was the
+infinity mark: it was traced from the old site's *loading placeholder*, the
+source comment said so in as many words — and **two adversarial review passes
+still could not catch that the shape was wrong**, because the real artwork was
+not in the repo to compare against. Stating a doubt is not enough when the thing
+that would resolve it is unreachable. Tracked as R14.
+
+**A command that did not run is not evidence of absence.** Check that a tool
+exists before trusting its silence, and read exit status, not just stdout. This
+project ran `timeout 60 ls "$DRIVE"` four times, got empty output each time, and
+reported the brand assets unreachable — `timeout` is not installed on macOS, so
+the command had never executed and the directory was fully readable all along.
+Empty output from a command that failed to start looks exactly like empty output
+from a command that found nothing. Same family as *a sweep is a command, not a
+claim*: the claim must rest on output you actually read, from a command that
+actually ran.
+
 **A parent cannot style a child component's root element.** Astro does not pass
 a parent's scope attribute down, so `<Button class="header-cta" />` compiles the
 parent's rule to `.header-cta[data-astro-cid-<parent>]` while the rendered `<a>`