phase G: data minimisation + passwordless auth + DeepSeek-first LLM

Server no longer holds portfolios. Holdings live in the browser
(localStorage); the server publishes an anonymous ticker_universe and a
gzipped /api/universe payload identical for every authenticated user, so
access patterns can't betray which tickers a user holds. AI commentary
is generated ephemerally from the browser-supplied pie and the cost
ledger row records no positions. Migrations 0009-0011 added the
universe table and dropped positions / portfolio_snapshots /
portfolios.

Authentication is now e-mail OTP only. Migration 0010 dropped
password_hash and email_verified (every active session is by
construction proof of email control). The /signup endpoint is gone;
signup and login share a single email-entry page. Email rendering is
HTML+plain-text multipart with a shared brand palette (app/branding.py)
asserted in sync with the CSS by a drift-detection test.

LLM provider defaults to DeepSeek-direct (cheaper, api.deepseek.com)
with OpenRouter as automatic fallback if DeepSeek fails. ai_log_job and
indicator_summary_job now iterate the two tones (NOVICE, INTERMEDIATE)
per cycle so the dashboard's tone toggle is instant; PROMPT_VERSION
bumped to 6 with an educational anti-TA / anti-gambling stance baked
into _CORE. NOVICE mode renders a curated glossary inline (CBOE VIX,
yield curve, HY OAS, etc.) with JS-positioned tooltips that survive
viewport edges and sticky bars. Model name and tokens hidden from the
user UI; still recorded in StrategicLog.model and AICall for admin.

Layout adds a sticky top nav, a sticky bottom markets bar (one chip per
exchange with status LED + headline index + 1d change), and
Phase H feedback reporting is queued in tasks/todo.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

app/templates/partials/dashboard_header.html

@@ -1,17 +1,5 @@
 <div class="dash-header">
-  <div class="dash-header__markets">
-    {% for m in markets %}
-      <div class="mkt {% if m.open %}mkt--open{% else %}mkt--closed{% endif %}">
-        <span class="mkt__dot"></span>
-        <span class="mkt__name">{{ m.name }}</span>
-        <span class="mkt__state">{{ m.label }}</span>
-        <span class="mkt__when">
-          <span class="mkt__when-label">{% if m.open %}closes{% else %}opens{% endif %}</span>
-          <time datetime="{{ m.until.isoformat() }}" title="{{ m.until.isoformat() }}">{{ m.until.strftime("%H:%MZ") }}</time>
-        </span>
-      </div>
-    {% endfor %}
-  </div>
+  {# Markets row moved to the sticky bottom bar (partials/markets_bar.html). #}
 
   {% if summary %}
   <div class="dash-header__read">
@@ -21,7 +9,7 @@
         {{ summary.generated_at.strftime("%H:%M UTC") }}
       </span>
     </div>
-    <p class="dash-header__read-body">{{ summary.content }}</p>
+    <p class="dash-header__read-body">{{ summary.content | glossary(tone) }}</p>
   </div>
   {% else %}
   <div class="dash-header__read dash-header__read--pending">

app/templates/partials/indicators.html

@@ -6,7 +6,7 @@
       {{ summary.generated_at.strftime("%H:%M UTC") }}
     </span>
   </div>
-  <p class="ind-summary__body">{{ summary.content }}</p>
+  <p class="ind-summary__body">{{ summary.content | glossary(tone) }}</p>
 </div>
 {% else %}
 <div class="ind-summary ind-summary--pending">

app/templates/partials/log.html

@@ -1,18 +1,12 @@
 {% if not log %}
 <div class="empty">awaiting first generated log</div>
 {% else %}
-<div class="log-content">{{ log.content_html | safe }}</div>
-<div class="log-meta">
-  <div class="log-meta__row">
-    {% if log.tone %}<span class="badge badge--tone-{{ log.tone | lower }}">tone {{ log.tone | lower }}</span>{% endif %}
-    {% if log.analysis %}<span class="badge badge--analysis-{{ log.analysis | lower }}">analysis {{ log.analysis | lower }}</span>{% endif %}
-    {% if log.prompt_version %}<span class="badge badge--ver">prompt v{{ log.prompt_version }}</span>{% endif %}
-  </div>
-  <div class="log-meta__row log-meta__row--dim">
-    generated {{ log.generated_at.strftime("%Y-%m-%d %H:%M UTC") }}
-    &nbsp;·&nbsp; model <span class="neu">{{ log.model }}</span>
-    {% if log.prompt_tokens %} &nbsp;·&nbsp; {{ log.prompt_tokens }}↑/{{ log.completion_tokens }}↓ tokens{% endif %}
-    {% if log.cost_usd is not none %} &nbsp;·&nbsp; ${{ "%.4f"|format(log.cost_usd) }}{% endif %}
-  </div>
+{# tone / analysis / prompt_version / model / tokens / cost / generated_at
+   are admin metadata. Hidden from the user-facing UI; available via the
+   JSON API and the AICall ledger. The panel header's "generated hourly @
+   :20 UTC" cadence message communicates freshness. #}
+<div class="log-content"
+     title="Last generated {{ log.generated_at.strftime('%Y-%m-%d %H:%M UTC') }}">
+  {{ log.content_html | safe | glossary(tone) }}
 </div>
 {% endif %}

app/templates/partials/markets_bar.html

@@ -0,0 +1,29 @@
+{# Sticky bottom bar — same .mkt chip styling as the old dashboard
+   header, extended with the market's headline index price + 1d change.
+   Refreshed every 60s via HTMX. #}
+<div class="markets-bar__inner">
+  {% for m in markets %}
+  <div class="mkt {% if m.open %}mkt--open{% else %}mkt--closed{% endif %}"
+       title="{{ m.label }} — {% if m.open %}closes{% else %}opens{% endif %} {{ m.until_iso }}">
+    <span class="mkt__dot"></span>
+    <span class="mkt__name">{{ m.code }}</span>
+    <span class="mkt__state">{{ m.label }}</span>
+    {% if m.index %}
+    <span class="mkt__index">
+      <span class="mkt__index-label">{{ m.index.label }}</span>
+      <span class="mkt__index-price">{{ m.index.price_fmt }}</span>
+      <span class="mkt__index-change {% if m.index.change_1d_pct is not none and m.index.change_1d_pct >= 0 %}pos{% elif m.index.change_1d_pct is not none %}neg{% else %}neu{% endif %}">
+        {%- if m.index.change_1d_pct is not none -%}
+          {{ "%+.2f"|format(m.index.change_1d_pct) }}%
+        {%- else -%}
+          —
+        {%- endif -%}
+      </span>
+    </span>
+    {% else %}
+    <span class="mkt__index mkt__index--empty">—</span>
+    {% endif %}
+    <time class="mkt__when" datetime="{{ m.until_iso }}">{{ m.until_hhmm }}Z</time>
+  </div>
+  {% endfor %}
+</div>