v0.4.0 — frontend rehaul phases A through D shipped Phase A (Sprint 0): immediate cleanups — dead duplicates removed, sandbox APP_BASE typo fixed, POA&P→POA&M, RulePreview window shadowing, Next.js dev indicator suppressed, TS strict restored on web + marketing. Phase B (Sprint 1): cookie-only OIDC + p99 latency probe + /entities listing route + per-route metadata via server-component shells + ComplianceDashboard render-time download fix + AuthErrorBridge for 401 routing + --font-sans token bridge. Phase C1 (Sprint 3): canonical primitives — Button, ChipButton, DataTable, Icon, StatusDot, StatusPill — plus six dedup migrations, lucide-react adoption, strict AppRouter typing end-to-end through shared-types. Phase C2 (Sprint 5): seven trust-center artifact endpoints (OSCAL SSP / component-definition / POA&M, KSI catalog, audit integrity, STRIDE matrix, OAuth contact form), /architecture and /posture marketing pages, sitemap + robots correctness, marketing copy fixes, login + sandbox polish. Phase D (Sprint 4): Toast / Dialog / Tooltip / FormField primitives, global keyboard shortcut router with help overlay + search palette, ThemeProvider with FOUC-safe boot script + ThemeToggle, role=log on live event stream with throttled SR announcer, mutation feedback wiring.