Four axes, four looks. A tag never borrows another axis' colour, and colour is never the only carrier of meaning — every tag is labelled.

gov-* is reserved for the governance lane axis. Severity uses signal-*, health uses the health token, and interaction uses brand/action. The design-system audit enforces this: any gov-* colour outside the lane-owning components fails the check.

Filled gov-* colour. Only lane components paint with governance colour.

Outlined signal tones from tone.ts. There is no informational tone: informational state is neutral.

Workflow position, not severity — neutral everywhere except Paused, which is a caution. One map, in badges.tsx.

A decision is a signal-toned tag; a call to action is a real button or plain text — never a tag that looks clickable but is not.

Exactly two sizes, identical padding across every badge. There is no md, and tags never carry a fixed width.

One map mount. Every map surface renders through ConsoleMap. Pages never call the Maps API directly, so a pin means the same thing everywhere: icons come from the shared marker vocabulary, detail bubbles are React (never HTML strings), pin size is constant, and records without usable coordinates are filtered out and counted in a visible note. Heights use sm | md | lg | fill.

One chart frame. Every recharts consumer renders through ChartFrame: series colors from the chart tokens above, a required accessible name, a stated unit, one legend implementation, and shared loading / error / empty / stale states. An empty series shows a no-data state, never blank axes — blank axes read as zero, which is a different claim.