OG wordmark fix, LinkedIn Page assets, mobile comparison table

.gitignore

@@ -19,3 +19,7 @@ dist-ssr/
 # OG image render font — a TTF from the Satoshi kit, used only by
 # scripts/og-image.py because Pillow cannot read WOFF2. Not shipped.
 scripts/.og-font/
+
+# Python bytecode from the brand-asset generators
+__pycache__/
+*.pyc

CONTEXT.md

@@ -6,7 +6,7 @@ Vocabulary for the Execil landing-page effort. Glossary only; decisions live in
 
 - **Execil** — the brand. A medical billing and revenue cycle management service for independent US practices. The `name` prop in the design canvas.
 - **RCM (Revenue Cycle Management)** — the full billing lifecycle a practice runs to get paid: eligibility, credentialing, coding, claim submission, payment posting, AR follow-up, denials, patient statements, reporting.
-- **Practice** — the customer. An independent medical practice with 1–20 providers.
+- **Practice** — the customer. An independent medical practice with 20+ providers.
 - **Provider** — a clinician in a Practice who bills payers. Providers must be credentialed and enrolled before payers will pay for them.
 - **Payer** — an insurer or program that pays claims.
 - **Specialty** — a medical field (Primary Care, Behavioral Health, …). Execil assigns coders by Specialty.

public/_headers

@@ -10,3 +10,23 @@
 
 /fonts/*
   Cache-Control: public, max-age=31536000, immutable
+
+# Keep every non-canonical hostname out of the index. The Worker's own
+# `workers.dev` subdomain stays enabled by choice (issue #34) and preview
+# aliases from non-production branch builds live on the same domain, so both
+# serve the whole site. The prerendered canonical already points at execil.net;
+# this is the stronger signal that costs nothing.
+#
+# Absolute-URL rules are matched host-first, and `:name` is a placeholder for
+# one label — so this covers `execil.<subdomain>.workers.dev` and every
+# `<alias>-execil.<subdomain>.workers.dev` preview alike. Ports and protocols
+# are ignored during matching.
+https://:worker.:subdomain.workers.dev/*
+  X-Robots-Tag: noindex, nofollow
+
+# Applies to asset responses only, which is every prerendered page. Deliberately
+# not HSTS: that one is a lasting commitment for the apex and every subdomain,
+# so it belongs to a decision rather than a commit.
+/*
+  X-Content-Type-Options: nosniff
+  Referrer-Policy: strict-origin-when-cross-origin

public/brand/README.md

@@ -0,0 +1,69 @@
+# Brand assets
+
+Two directions were drawn from client-supplied reference images. **`cross-dot/`
+is the chosen one** and is what the site ships; `plus-split/` is kept for
+reference and is not referenced by any code.
+
+Every file is real vector outlines — Satoshi Variable instanced at the weight
+below and converted to paths. There is no font dependency at render time and no
+`<text>` element, so the marks render identically wherever they land.
+
+## cross-dot — in use
+
+"Execil" at wght 900, with the tittle of the "i" replaced by the cross badge.
+
+| file                           | use                                                     |
+| ------------------------------ | ------------------------------------------------------- |
+| `execil-wordmark.svg`          | primary, with the MEDICAL BILLING tagline               |
+| `execil-wordmark-reversed.svg` | on `ink900` — white letters, `teal600` badge            |
+| `execil-wordmark-mono.svg`     | `currentColor` throughout, one-colour contexts          |
+| `execil-wordmark-notag.svg`    | no tagline — small sizes, where it cannot be read       |
+| `execil-mark.svg`              | badge alone. Shorter, heavier cross so it survives 16px |
+
+`src/base/Wordmark.tsx` carries the same geometry inline, so the letterforms can
+take `currentColor` and the badge can take theme tokens. It is the component
+that renders in the header and footer; these files are for anything outside the
+app — email signatures, decks, the client's own use. **They are two copies of
+one drawing: change one and change the other.**
+
+`public/favicon.svg` is `execil-mark.svg` fitted to a 32×32 box, with a heavier
+cross so it survives 16px.
+
+### Clearance
+
+The badge replaces the tittle of the "i", so it sits against the letterforms
+rather than against the page — and at `teal700` it separates from `ink900` by
+only 2.74:1, which at header size reads as one dark mass rather than as a mark.
+
+It is separated by space instead. A ring 20% of the badge radius wide is cut
+out of the letter paths themselves, so the ground shows through around the
+badge on any surface. It used to be an SVG mask; Chrome rasterises masked
+content through an intermediate surface and the header wordmark came out
+soft. Narrower than about 15% stops registering at
+28px; wider than about 25% starts eating the stem of the "i".
+
+## social/ — LinkedIn Page
+
+`scripts/social-images.py` writes these. Sizes are LinkedIn's own
+recommendations, not the 300x300 and 1128x191 figures that are all over the web
+and out of date.
+
+| file                 | size     | use                                    |
+| -------------------- | -------- | -------------------------------------- |
+| `linkedin-logo.png`  | 400x400  | Page logo. 268x268 is LinkedIn's floor |
+| `linkedin-cover.jpg` | 1512x256 | Page cover                             |
+
+The logo is the badge, not the wordmark: LinkedIn shows it at roughly 60px in
+the feed, where "Execil" set across 400px would be about 50px wide. It is
+opaque white behind the mark rather than transparent, because LinkedIn renders
+the logo over both light and dark surfaces.
+
+## plus-split — not in use
+
+"+ execil" lowercase at wght 900, cut by a diagonal two-tone split through the
+"c", with the name stacked alongside. Kept at the client's request.
+
+Note the reversed variant is compromised: the palette's brightest teal is
+`teal600`, which lands about 3.3:1 on `ink900`, so the accent falls back to
+`teal100` and reads as pale mint rather than teal. Adding a brighter teal to the
+ramp would fix it.