Plan 4: the Paper redesign — landing page, results at /sok, combobox, measured a11y and performance bar

.gitattributes

@@ -3,3 +3,8 @@
 # platform default (CRLF on Windows, per api/.editorconfig).
 * text=auto
 web/** text=auto eol=lf
+
+# The vendored fonts under web/public/fonts/ are the first binary files under web/. text=auto
+# is a heuristic that normally leaves woff2 alone, but a heuristic is the wrong guarantee for
+# files whose corruption would only surface at deploy, so I mark them binary explicitly.
+web/public/fonts/*.woff2 binary

README.md

@@ -33,11 +33,14 @@ The full audit trail is in [docs/verification/](docs/verification/). Phone numbe
 belonging to named individuals are never published, and shelters that withhold their
 address for safety are listed without one by design. Every row is re-verified against its
 source every six months, and the date shown as "Sist bekreftet" is the date of that check.
+The four numbers on the acute strip live in `web/src/services/emergency.ts` as constants
+(the landing page fetches nothing) and are re-verified in the same six-month pass as the
+rows; a test keeps them identical to seed rows 3 and 23–25.
 
 ## Stack
 
 - API: ASP.NET Core (.NET 10), EF Core, PostgreSQL 17
-- Web: React, TypeScript, Vite
+- Web: React 19, TypeScript, Vite, Tailwind v4, react-aria-components
 - Hosting (planned): Azure
 
 ## API
@@ -53,9 +56,13 @@ application logs record result counts, never search terms.
 
 ## Web
 
-Unified search across name, category and municipality, with suggestions and a national
-toggle. Details on the shift from fastlege to legevakt after hours, when a service's own
-opening hours are known. Bilingual throughout, built for keyboard access, and built mobile-first.
+The landing page is search-first: one box, nine category chips, and no data fetched until
+you act on it. Above every page sits an acute strip with the four emergency numbers as
+hardcoded constants, not a fetch, so it works even if the API is down. Unified search across
+name, category and municipality, with suggestions and a national toggle. Details on the
+shift from fastlege to legevakt after hours, when a service's own opening hours are known.
+Bilingual throughout, built for keyboard access, and built mobile-first. Lighthouse ≥ 95 on
+the simulated phone is part of the definition of done; the measured numbers are in each PR.
 
 ## Run locally
 
@@ -79,6 +86,11 @@ standard local development setup (`localhost`, `postgres`/`postgres`); override
 `VARDE_TEST_PG` environment variable. The web dev server expects the API at
 `http://localhost:5005` by default (`VITE_API_URL` to override).
 
+Fraunces and Figtree are vendored into `web/public/fonts/`, so `npm install` is enough for a
+normal checkout. Only run `npm run fonts` if you bump the `@fontsource/*` package versions —
+it re-copies the woff2 files from `node_modules` and a drift test catches a checkout that
+forgets to.
+
 ## Deployment
 
 Varde deploys automatically on merge to `main`: the frontend to **Azure Static Web Apps**