design: de-slop public pages, Hindi typography, survivor flow clarity

[saquibreja7-hash]

Summary

• Replace emoji tier icons with stroked SVGs; de-card privacy list and escalation timeline; full-bleed teal closing band; redacted notice preview artifact on home page
• Load Noto Serif Devanagari for Hindi headings; zero letter-spacing and taller line-height under lang=hi
• Translate Emergency/Privacy in hi.json; route FAQ/Menu/Resources nav links through i18n
• New 4-step FlowProgress indicator on eligibility, register, submit, review-sign
• On-device fingerprinting reassurance copy; plain-language rewrite of the Rule 3(2)(b) confirmation line (flag for legal pass)

Testing

• type-check, lint clean (pre-existing warnings only)
• 293 vitest tests pass

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
meri-asmita	Ready	Preview, Comment	Jul 11, 2026 8:44pm

[claude]

Review summary (safety-critical review focus)

Reviewed the diff against 700650108d09ee1fab32323ce30aa234c7adb5eb. This PR is a pure design/copy PR: font loading (@fontsource/noto-serif-devanagari), Devanagari typography CSS tweaks, a new FlowProgress step-indicator component, decorative SVG icons and a static/mock "redacted notice preview" card on the homepage, i18n copy additions/translations (en.json/hi.json), and a <p> status note in SubmitForm.tsx.

Checked against the priority list:

1. Safety invariants — No changes touch URL/media handling, hash computation (pdq.ts), Aadhaar/PII storage, or the ENABLE_HASH_UPLOAD/ENABLE_PLATFORM_API gates. The new copy in SubmitForm.tsx ("processingNote"/"doneNote") and the homepage mock notice card ("PDQ fingerprint only. No image attached.") are static, hardcoded strings — they reinforce the no-media-leaves-device invariant rather than weaken it. The mock notice preview on the homepage is aria-hidden decorative markup with no real case data.
2. Security — No new routes, API calls, auth/permission logic, CSRF, or encryption code touched. FlowProgress only receives step/locale props.
3. Business logic — No changes to case lifecycle, notice/hash dispatch, or escalation logic. The updated confirm.next.t1.detail copy ("platforms must remove content within 24 hours … Asmita follows up if they don't") is consistent with Rule 3(2)(b) IT Rules 2021 and is user-facing status copy on the confirmation page, not the signed notice/PDF content — no notice-integrity concern.
4. Data integrity — No DB/query/transaction/audit-log changes.

No CRITICAL or WARNING findings within the requested review scope. (Not commenting on styling/CSS choices, icon design, or translation wording quality per the review's ignore list.)