Close the 0.9.3 UI polish milestone

Add deterministic captures 14-21 for the remaining screen-design states, fix the panel/button layout issues they exposed, and record 21/21 compare and judge results. Bump the source to 0.9.3 and move the completed milestone to DONE.md.

TODO.md

@@ -5,10 +5,10 @@ see `AGENTS.md` for the workflow and `MEMORY.md` for the decisions behind these
 
 ## Gap Analysis and 0.x Roadmap
 
-Baseline: **v0.9.2** (2026-11-02). Three playable venues, tutorial/campaign/checkpoint resume,
+Baseline: **v0.9.3** (2026-11-02). Three playable venues, tutorial/campaign/checkpoint resume,
 difficulty/help, audio/accessibility settings, a 24-NPC budget baseline, a complete
 escalation/access/radio loop, shift review, the Blender asset library, 261 headless + 97 Python
-tests, a clean screen-design judge and an optional Forward+ Desktop HQ build. This is a strong
+tests, a 21/21 clean screen-design judge and an optional Forward+ Desktop HQ build. This is a strong
 release-candidate foundation, not yet a 0.10.0 release candidate.
 
 ### Documentation audit (completed 2026-11-01)
@@ -33,93 +33,24 @@ release-candidate foundation, not yet a 0.10.0 release candidate.
 | Area | Current baseline | Remaining gap | Risk | Milestone |
 | --- | --- | --- | --- | --- |
 | Content and balance | 3 venues with validated 12+ event matrices, recovery events and contextual dialogue | External playtest evidence, balance/fairness pass, event-weight tuning and final content lock | Repetition or unfair outcomes survive into the release candidate | 0.10.0 |
-| Dialog/UI | Complete screens and panel art, but copy/button behavior has not had a dedicated audit | Terminology, button states, long-string layout and full screen coverage need a focused pass | Inconsistent UI undermines first-hour clarity | 0.9.3 |
+| Dialog/UI | Audited terminology, copy, button states, focus/navigation, modal close, long strings and all 21 screen captures | Keep the capture/compare/judge gate current as content changes | Low; the remaining risk is drift after new UI is added | Complete (0.9.3) |
 | Animation/presentation | Procedural pose layers, portrait captures, reduced hem clipping | Thorough NPC silhouette/face/gear/pose/LOD optimization before visual QA | Close-up jank reduces perceived quality | 0.9.4 |
-| Audio/accessibility | Procedural ambience/SFX, volume controls, captions/reduce-motion settings, searchable Help | Full accessibility/localization acceptance review, audio caption coverage and P0/P1 fixes | Public release cannot claim accessible play | 0.9.3 / 0.10.0 |
-| Localization | English JSON table, validation and input-generated Help | Pseudo-locale/layout audit and translator workflow sign-off | Text expansion/clipping at release | 0.9.3 / 0.10.0 |
+| Audio/accessibility | Procedural ambience/SFX, volume controls, captions/reduce-motion settings, searchable Help | Full accessibility/localization acceptance review, audio caption coverage and P0/P1 fixes | Public release cannot claim accessible play | 0.10.0 |
+| Localization | English JSON table, validation and input-generated Help | Pseudo-locale/layout audit and translator workflow sign-off | Text expansion/clipping at release | 0.10.0 |
 | Performance/platform | 24-NPC headless budget (6.9 ms), Compatibility/Web/HQ paths | Target hardware matrix, Web/HQ manual profiling, frame-time/memory evidence | Platform-specific drops or startup failures | 0.9.6 / 0.10.0 |
 | Save lifecycle | Settings/campaign/history/checkpoint files, atomic writes | Migration fixtures from 0.8/0.9, fresh-install/upgrade verification, rollback instructions | Player progress loss on upgrade | 0.10.0 |
-| QA/CI | Headless suite, smokes, screenshot compare, optional judge | Full visual judge gate, release-candidate smoke matrix, final gallery and release dry run | Regressions escape the release gate | 0.9.6 / 0.10.0 |
+| QA/CI | Headless suite, smokes, screenshot compare, 21/21 judge | Release-candidate smoke matrix, final gallery and release dry run | Regressions escape the release gate | 0.9.6 / 0.10.0 |
 | Release/legal | Unsigned desktop/macOS builds, Web/HQ packages | Signing/notarization decision, checksums, AI-asset provenance, credits, privacy/body-camera and rating review | Public release blocked by trust/policy | 0.10.0 |
 | Documentation | Architecture/ADR/status/roadmap ownership established | Final README/changelog/status/TODO/smoke-checklist sign-off and known-limitations page | Docs drift at launch | 0.9.6 / 0.10.0 |
 | Future 0.x | Stable 0.x feature set | Live replay, more venues, VO/music, image-to-mesh props and seasonal content | Scope creep before release | 0.11.0+ |
 
-**Current priority:** map optimization and the **pre-build NPC revisit** are
-complete (both moved to `DONE.md` on 2026-11-02). **0.9.3 UI polish** is active;
-0.9.4 NPC-detail and 0.9.5 texture patches, then 0.9.6 integration and the 0.10.0
-release candidate, are queued. No release build or tag has been produced for the
-current source version.
+**Current priority:** map optimization, the **pre-build NPC revisit** and the
+**0.9.3 UI polish** pass are complete (all moved to `DONE.md` on 2026-11-02).
+**0.9.4 NPC-detail** is active; 0.9.5 texture refinement, 0.9.6 integration and
+the 0.10.0 release candidate are queued. The source version is now 0.9.3; no
+release build or tag has been produced for it.
 
-## Patch 0.9.3 — Dialog, button and UI polish
-
-Goal: make every player-facing screen read consistently and pass the Python
-screen-design judge before any model/texture changes. No gameplay rules change.
-
-### Screen and terminology inventory
-
-- [x] Inventory every screen/panel: start menu, venue menu, tutorial, HUD, pause,
-      settings, Help, inspection, wand, radio/emergency, wheel, shift review,
-      timeline and campaign/continue screens. Recorded in `docs/ui-copy.md`.
-- [x] Record the canonical terms for admit/refuse, warning/blocking,
-      assistance/emergency, body camera, shift review and campaign; the current
-      inspection/wand/radio/review labels use them (see `docs/ui-copy.md`).
-- [x] Audit all button labels for verb-first wording, capitalization, ordering,
-      destructive-action confirmation and consistent confirm/cancel placement;
-      recorded in `docs/ui-copy.md` and fixed Quit/Apply wording.
-- [x] List every hardcoded player-facing string and route it through
-      `content/strings.en.json`; remaining UI literals are numeric/debug-only or
-      dynamic data. Placeholder validation covers the new keys.
-- [x] Review NPC/door-staff/radio/tutorial/help/review/campaign dialogue for
-      repetition, ambiguity, tone and localization length. (Reason contexts,
-      door-staff lines, radio/tutorial/help copy and length findings recorded in
-      `docs/ui-copy.md`; longest dialogue line is 56 characters.)
-
-### Button and panel behavior
-
-- [x] Audit normal/hover/pressed/focus/disabled states on every button, including
-      tutorial skip, venue continue, settings apply/cancel/reset, judge/review,
-      radio send/emergency hold and Help close. (Shared `UiStyles` states applied;
-      timeline boundary disabling and the keyboard-only F1 skip are documented in
-      `docs/ui-copy.md`.)
-- [x] Verify keyboard-only and gamepad-only navigation: focus order, wrapping,
-      default focus, confirm/cancel behavior and no focus traps. (Focus rings,
-      gamepad A/B UI bindings, default focus and per-modal cancel behavior are
-      recorded in `docs/ui-copy.md`.)
-- [x] Verify every modal closes with Esc/right-click where documented, recaptures
-      the mouse, and does not leave the guard frozen or the menu visible. (Single
-      top-modal close path, menu/settings return handling and pointer recapture are
-      recorded in `docs/ui-copy.md`; session smoke covers menu Settings, Help
-      right-click and pause Settings.)
-- [x] Test buttons at minimum/maximum HUD font scale and with 1.5–2× longer
-      strings; fix clipping, overflow and overlapping layouts. (Target chip now
-      measures/caps scaled text, HUD top labels clip, and action buttons ellipsize;
-      regression checks are in `test_accessibility.gd` and `test_ui_buttons.gd`.)
-- [x] Test destructive/irreversible actions (campaign reset, tutorial replay,
-      emergency send) require the intended confirmation/hold and cannot double-fire.
-      (Reset/replay share one guarded confirmation dialog; emergency hold submits
-      once and ignores the post-submit release. Covered by session/radio tests.)
-- [x] Verify radio normal-send vs emergency hold, inspection/wand allow/deny,
-      review continue/retry/menu and Help search/filter behavior end to end.
-      (`smoke_ui_flows.gd` covers inspection, radio, Help, wand and review;
-      `smoke_campaign.gd` covers review continue/checkpoint resume.)
-
-### Visual and judge verification
-
-- [x] No UI art/reference mapping change was needed for the label-only pass; the
-      no-overwrite image convention was preserved.
-- [ ] Capture a deterministic screenshot for every dialog/button state that has a
-      design reference; add missing capture stages or an explicit coverage gap.
-- [x] Ran `tools/check_screenshots.sh` and `screen_designs.py compare`: 13 good,
-      0 bad.
-- [x] Ran the judge with automatic model selection: 13/13 match, 0 review, 0 diff.
-- [x] Recorded the judge model and result in `docs/screen-design-report.md`; the
-      generated captures remain local/gitignored.
-- [ ] Add a short UI copy/button checklist to `docs/smoke-checklist.md`.
-- [ ] Exit: all screens have consistent terminology and button behavior, long
-      strings/scale pass, and the Python compare/judge gate has no unexplained
-      diff.
-
-## Postponed — Patch 0.9.4 — NPC visual optimization
+## Patch 0.9.4 — NPC visual optimization
 
 Goal: make the eight character variants hold up in portrait, conversation and crowd
 views without changing the `npc_base`/`Rig/Head` contract or the skinned/procedural