PROPOSED · 28 Oct 2026 · new recovery disclosure inside the existing native popover · English copy for owner review · not shipped. App frame below; commentary outside.
Checkout study
Checkout
“I thought I’d paid, but there was another confirmation step.”
p1 · 12:34
Read only
Changed on another Mac
This study changed on Cassio’s Mac Studio. You’re viewing an earlier report. Changes are blocked in this window.
Recovery text
Quote · p1 · 12:34
The extra confirmation step made me think the payment had failed.
Commentary — not product UI
Recovery is inspection, not replay
Proposed new disclosure uses the existing 360 pt / content-height / 320 pt ceiling. Header remains fixed; only the body scrolls. Recovery text is selectable with ordinary Select / Copy. There is no Apply, Unlock, Reopen, Duplicate or new action row. Nothing is pasted into the report automatically.
The ordinary header Copy remains diagnostic-only. It deliberately excludes participant text. A user who wants recovery text selects it explicitly; copying a status report into a support issue must not disclose it by accident.
The main report remains the last validated report. The illustrated locked-reader runtime and this disclosure are proposals, not implemented capabilities. Native symbols/materials are browser approximations; cartouche reuses the existing official Lucide asset. Field labels require trusted source metadata or a generic field label; do not guess a match in a changed report.
Proposed string plan — owner review, not shipped keys
Evidence
Proposed text
Journal acknowledged
Recovery text is stored on this Mac.
Current RAM buffer only
Your unsaved text is still in this window.
Journal unavailable
Recovery text could not be checked. Keep this window open if it contains unsaved text.
Storage unknown + known current buffer
Recovery text could not be checked. Your unsaved text is still in this window.
Disclosure
Recovery text
“Recovery text” does not assert every entry is unsaved: a confirmed save can leave a recovery record when its cleanup acknowledgement fails. Grouping duplicate active/save-intent records and recovery retention remain engineering/UX gates.
Recovery is inspection, not replay
Proposed new disclosure uses the existing 360 pt / content-height / 320 pt ceiling. Header remains fixed; only the body scrolls. Recovery text is selectable with ordinary Select / Copy. There is no Apply, Unlock, Reopen, Duplicate or new action row. Nothing is pasted into the report automatically.
The ordinary header Copy remains diagnostic-only. It deliberately excludes participant text. A user who wants recovery text selects it explicitly; copying a status report into a support issue must not disclose it by accident.
The main report remains the last validated report. The illustrated locked-reader runtime and this disclosure are proposals, not implemented capabilities. Native symbols/materials are browser approximations; cartouche reuses the existing official Lucide asset. Field labels require trusted source metadata or a generic field label; do not guess a match in a changed report.
Proposed string plan — owner review, not shipped keys
“Recovery text” does not assert every entry is unsaved: a confirmed save can leave a recovery record when its cleanup acknowledgement fails. Grouping duplicate active/save-intent records and recovery retention remain engineering/UX gates.