feat(design): establish MailStack UI design intake baseline

Author: victorsteele

.github/pull_request_template.md

@@ -10,11 +10,15 @@ Describe the change and the operational problem it solves.
 
 ## Documentation baseline
 
+- [ ] UI/design changes preserve original references and pass the design manifest and contract tests
+- [ ] Planned or future-review controls remain inactive unless this PR contains the approved feature architecture
 - [ ] A `documents/phases/PHASE-NNN-*.md` record was added or updated
 - [ ] User-facing changes update `USER_MANUAL.md`, `HOW_TO_USE.md`, or `ADMIN_GUIDE.md`
 - [ ] `CHANGELOG.md` was updated
 - [ ] `python scripts/manage_documents.py check`
 - [ ] `python scripts/test_documents.py`
+- [ ] `python scripts/manage_designs.py --root . check`
+- [ ] `python scripts/test_designs.py`
 - [ ] `python scripts/check_documentation_policy.py --base HEAD^ --head HEAD`
 
 ## Verification

.github/workflows/ci.yml

@@ -53,6 +53,12 @@ jobs:
       - name: Documentation system tests
         run: python scripts/test_documents.py
 
+      - name: UI design intake integrity
+        run: python scripts/manage_designs.py --root . check
+
+      - name: UI design system tests
+        run: python scripts/test_designs.py
+
       - name: Feature documentation policy
         env:
           DOCUMENTATION_BASE_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}

CHANGELOG.md

@@ -6,6 +6,10 @@ All notable repository-level changes are recorded here. Application history befo
 
 ### Changed
 
+- Imported and verified the complete 25-image MailStack UI and logo reference archive as `MAILSTACK-UI-DESIGN-INTAKE-001`.
+- Frozen `MAILSTACK-UI-FOUNDATION-001` with screen classification, component, responsive, accessibility, future-roadmap, and implementation-status specifications.
+- Added immutable design-asset hashing, PNG integrity validation, deterministic manifest synchronization, contract tests, CI gates, and forensic-audit integration.
+- Optimized deterministic source packaging by storing already-compressed media without redundant DEFLATE work.
 - Adopted **MailStack** as the public open-source project name.
 - Set `https://github.com/vibtools/MailStack` as the canonical repository.
 - Rebuilt the root README with SEO-oriented positioning for a self-hosted mail server and shared team inbox.

CONTRIBUTING.md

@@ -49,11 +49,16 @@ The full gate runs tests, coverage, Ruff, Bandit, Django checks, contact-service
 
 ## Documentation-first phase workflow
 
+UI work must begin from the frozen design intake and shared foundation. Preserve original PNGs,
+update `design/DESIGN_MANIFEST.json` only through the maintained workflow, implement one page per
+reviewed patch, and do not activate planned controls without an approved backend/security phase.
+Run `python scripts/manage_designs.py --root . check` and `python scripts/test_designs.py`.
+
 Start a maintained phase before implementation:
 
 ```bash
 python scripts/manage_documents.py new-phase \
-  --phase-id PHASE-001 \
+  --phase-id PHASE-002 \
   --title "Feature title" \
   --summary "What the phase changes for users"
 ```

README.md

@@ -200,6 +200,8 @@ python scripts/check_documentation_policy.py --base HEAD^ --head HEAD
 Run the complete repository gate from the project root:
 
 ```bash
+python scripts/manage_designs.py --root . check
+python scripts/test_designs.py
 python scripts/forensic_audit.py --root . --full
 ```
 
@@ -262,6 +264,9 @@ See [docs/SCREENSHOTS.md](docs/SCREENSHOTS.md) for the approved screenshot set a
 | Bootstrap audit | [docs/MAILSTACK_BOOTSTRAP_AUDIT.md](docs/MAILSTACK_BOOTSTRAP_AUDIT.md) |
 | GitHub metadata | [docs/GITHUB_REPOSITORY_METADATA.md](docs/GITHUB_REPOSITORY_METADATA.md) |
 | First commit from Windows | [docs/FIRST_COMMIT_WINDOWS.md](docs/FIRST_COMMIT_WINDOWS.md) |
+| UI design intake | [design/README.md](design/README.md) |
+| UI foundation | [documents/design/UI_FOUNDATION.md](documents/design/UI_FOUNDATION.md) |
+| UI screen catalog | [documents/design/SCREEN_CATALOG.md](documents/design/SCREEN_CATALOG.md) |
 
 ## Roadmap
 

ROADMAP.md

@@ -18,6 +18,13 @@ This roadmap is directional. Security, data integrity and backward compatibility
 - Require a phase record, changelog update and affected user-guide update with maintained feature changes
 - Keep the generated user-document index and manifest deterministic and CI-enforced
 
+## UI design baseline
+
+- Preserve `MAILSTACK-UI-DESIGN-INTAKE-001` and `MAILSTACK-UI-FOUNDATION-001` as the approved visual reference baseline
+- Implement one existing page per reviewed patch after shared foundation work
+- Keep planned and future-review screens inactive until architecture and security phases approve them
+- Require responsive, accessibility, security, regression, documentation and CI evidence for each page
+
 ## 1.3 stable
 
 - Promote the verified release candidate without feature removal