File 25 — Sabri Unified Global Visual Experience and Design System

Subtitle: Complete Public UI, Profile Timeline, Responsive Refinement and Visual Consistency

WordPress module for the Sabri Social Homeopathy Platform. This is the existing File 25; no duplicate File 26 is created.

Current corrective candidate

• Runtime: 0.14.0
• Schema: 2
• Branch: feature/25a-25b-foundation
• Pull request: Draft PR #1
• Governing product plan: Master Plan v3.0
• Governing shell plan: File 20 v4.1
• Source implementation status: Complete
• Known unresolved source defects: 0
• Hostinger staging accepted: No
• Production approved: No
• Live deployment authorized: No

Version 0.14.0 corrects authoritative-contract drift, binds the File 25 staging candidate to the reviewed File 08 0.2.1 public clinic projection, and now carries machine-verifiable three-plan traceability for Master Plan v3.0, All-Chats v2.1, and File 25 Specification 2.0.

Source implementation completion

The governed File 25 source scope is complete against the Sabri Social Homeopathy Platform Definitive Master Plan v3.0, the All-Chats Recovered Directive Register v2.1, and File 25 Final Harmonized Specification 2.0.

Machine-readable traceability:

config/source-completion-matrix.json
config/all-chats-directive-matrix.json

Executable verification:

php tools/verify-source-completion.php

Human-readable declaration:

docs/SOURCE-IMPLEMENTATION-COMPLETION-DECLARATION-2026-08-04.md

“Source implementation complete” means the governed File 25 source-owned capabilities are implemented, delegated ownership boundaries are enforced, Reviews 20–93 remain executable, and no known unresolved source defect is open. It does not mean Hostinger staging, Founder acceptance, production approval, live deployment or operational acceptance.

Corrected ownership boundaries

• File 00 1.2.4, contract 1.1.2: identity, membership state, Founder identity, suspension, eligibility, guardian policy, professional eligibility, and public-profile authorization.
• File 03 0.2.0: profile master data, same-origin profile media, and explicit public-contact consent.
• File 08 0.2.1, public clinic contract 1.0.0: clinic, availability, appointment truth, authoritative practitioner gating, and owner-executed public clinic projection. File 25 consumes only the public DTO and performs no File 08 table reads.
• File 09 1.1.0: Doctor verification decision and immutable approved professional snapshot.
• File 18 1.2.0-RC1: seller, listing, moderation, contact, offer, metric, and direct-deal truth. File 25 consumes owner-executed public DTOs only.
• File 20 1.2.0: sole global shell, route, navigation, sidebar, drawer, and structural layout owner.
• File 21: publication, Home/News, interaction, moderation, and timeline truth.
• File 24 >=0.25.3 <0.26.0: security, privacy, compliance, incident, audit-evidence, and resilience governance.
• File 25: visual tokens, public visual projection, profiles, federated timelines, reusable components, responsive refinement, accessibility, SEO presentation, visual acceptance, and deterministic staging packaging.

File 08 exact reviewed input

File 25's deterministic staging matrix is bound to:

File 08 runtime: 0.2.1
Public clinic contract: 1.0.0
Source commit: bd6a10b693991fc518788ef8e3cba49531454821
Candidate SHA-256: 36ce0c78aa51396b02bd0705021e66782bfc45b74636ac65b0826bd372103578
Source CI: Corrective Quality #64 / 30744250320
Hostinger staging status: pending

Required owner symbols:

SWC_VERSION
SWC_PUBLIC_CLINIC_CONTRACT_VERSION
swc_get_public_clinic_projection()
swc_public_clinic_projection_contract()

The DTO allow list is name, dedicated clinic address, country, city, hours, and timezone. File 25 discards contact fields and native identifiers even if a malformed provider attempts to include them. Phone and WhatsApp remain governed separately by File 03 value ownership and contact consent.

Version 0.14.0 corrections

• Corrected the canonical-contact filter so consented File 03 phone/WhatsApp values survive the default filter while substitutions remain denied.
• Changed high-risk rebuild/migration authorization to fail closed unless an authoritative provider explicitly returns true.
• Added CHAT-UX-001 welcome visual presentation with File 20 retained as the exclusive first-visit/session/30-day frequency owner.
• Added All-Chats v2.1 directive traceability and corrected the File 24 source-integration status wording in SECURITY.md.
• Replaced stale File 00 assumptions with exact SMC_Contracts::assertions() contract 1.1.2.
• Removed File 25 reads from foreign File 00 professional-credential and clinic tables.
• Removed locally derived Doctor verification, qualification-role inference, and license-expiry authority.
• Required both File 00 eligibility/can-practice assertions and File 09 current verification decision.
• Projected professional presentation only from File 09's immutable approved snapshot.
• Removed File 25 age calculation; explicit File 00 minor/guardian assertions govern, while unknown ordinary contact state fails closed.
• Replaced the File 08 placeholder with the exact reviewed 0.2.1 owner contract and pending-Hostinger staging evidence.
• Replaced File 18 direct SQL with owner APIs: future smp_get_public_profile_listings() or the bounded SMP_Utils::current_seller() + SMP_REST::products() transitional path.
• Updated the File 00/03/08/09/18/20/21/24/25 dependency matrix and Hostinger staging scenarios.
• Added the dual-plan source-completion matrix and executable verifier without changing the external acceptance boundary.

Existing visual and public contracts retained

• File 20 remains the only structural shell owner.
• File 03 contact consent cannot be widened by File 25 filters.
• Founder spelling is immutable: Dr. Allamah Majid Hussain Sabri Muhaddith Mursheed.
• Profile, cover, card, and OpenGraph media use strict same-origin validation.
• External avatar-service fallback is disabled; privacy-safe initials are used.
• Public profiles default to two columns; three columns require real owner-declared sidebar content.
• Visible/structured breadcrumbs, safe og:image:alt, and governed 404/410 handling remain active.
• Knowledge, Media, Reviews, Research, and Marketplace sections remain bounded, optional, read-only projections.
• Public REST and HTML share one public card allow list and do not disclose provider/native identifiers.
• Profile HTML and REST remain no-store until a versioned cache-partition contract is reviewed.

Public integration API

sabri_visual_experience_contract(): array
sabri_visual_experience_acceptance_contract(): array
sabri_visual_experience_render_state(array $args = []): string
sabri_visual_experience_render_notice(array $args = []): string
sabri_visual_experience_render_card(array $args = []): string
sabri_visual_experience_render_welcome(array $args = []): string

Public read routes include:

GET /wp-json/sabri-public/v1/founder
GET /wp-json/sabri-public/v1/founder/timeline
GET /wp-json/sabri-public/v1/founder/knowledge
GET /wp-json/sabri-public/v1/founder/media
GET /wp-json/sabri-public/v1/profiles/{public-slug}
GET /wp-json/sabri-public/v1/profiles/{public-slug}/timeline
GET /wp-json/sabri-public/v1/profiles/{public-slug}/knowledge
GET /wp-json/sabri-public/v1/profiles/{public-slug}/media
GET /wp-json/sabri-public/v1/providers/health

Quality commands

composer validate --strict --no-check-publish
composer test
node --check assets/js/public.js
php tools/verify-structure.php
php tools/verify-source-completion.php

Deterministic staging package:

php tools/build-staging-package.php \
  --output-dir=build/staging-package \
  --commit=<40-character-commit-sha> \
  --source-date-epoch=<commit-unix-timestamp>

Installed staging preflight:

wp sabri file25 staging-probe --expected-commit=<40-character-candidate-commit>

A passing source suite, package verifier, or installed preflight authorizes manual staging evaluation only. It is not merge, staging acceptance, production approval, or live-deployment evidence.

Remaining mandatory gates

• Exact Files 00/03/06/08/09/10/11/12/18/20/21/24/25 installation on canonical Hostinger staging.
• Real File 08 0.2.1 public/private/eligible/ineligible/suspended/revoked/empty clinic projections and File 25 rendering behavior.
• Real Founder, Doctor, Member, Patient, Student, minor, suspended, rejected, private, and wrong-author workflows.
• File 03 consent-on/consent-off, File 09 expiry/revocation, and File 18 owner-DTO tests.
• Urdu RTL, keyboard, screen reader, 200%/400% zoom, forced colors, reduced motion, target viewports, and visual regression evidence.
• Fresh install, upgrade, rollback, backup restore, performance, logs, monitoring, and Founder acceptance.
• PR review, controlled merge, release, live deployment, and post-deployment observation.