Dialog

A long form at phone width — without a tone, and with one

The body scrolls and the buttons stay, whether or not the dialog carries a tone. The dialog is a column: the band, the title and the actions keep their size, and only the body gives way. It used to count the tone band as a grid row, so without one a long form pushed its own buttons off the bottom.

Alerts

Control set updated

NIST SP 800-53 moved to Rev. 5. Eleven controls changed.

Eleven controls unanswered

They will be recorded as unknowns rather than assumed compliant.

All controls evidenced

Toast

Scope saved

Version 4 · 14:06Z

Toast with an action

Moved to the archive

3 reports

One action, for taking back what just happened — never a decision, which belongs in a dialog. toast({ title, action: { label: 'Undo', onAction } }) stays until it is dismissed, pauses while hovered or focused, and its button is announced with it and reached by Tab.

Tooltip and callout

Recorded as an unknown, not as compliant.

On an absence

A picture the document names and the record does not hold. The same five tones the alert speaks, at prose scale — a rule, not a box.

On unknowns

An unanswered control is evidence of a gap in the assessment, not evidence of compliance. The distinction is the whole point of the audit trail.

Hover card

AU-6 Audit review

Reviewed weekly by the security lead. 2 open findings, last evidence 14 Oct.

The popover's surface, opened by pointing or by keyboard focus after a short dwell, and closed by Escape. A preview, never the only place a fact or an action lives.

Tone is one vocabulary across .alert, .toast, .state and .callout. Danger and warning alerts take role="alert" and announce assertively; everything else is polite. The callout is a rule rather than a filled box — a box here would compete with the cards around it.