diff --git a/.github/scripts/auto_extract.py b/.github/scripts/auto_extract.py
index 9ce1930..14d9855 100644
--- a/.github/scripts/auto_extract.py
+++ b/.github/scripts/auto_extract.py
@@ -261,57 +261,11 @@ def extract_with_openai(page_content, additional_notes=""):
         util.fail(f"OpenAI API error: {str(e)}")
 
 
-def parse_issue_body(body):
-    """Parse the issue body to get URL and notes."""
-    lines = body.strip().split("\n")
-    data = {}
-
-    current_field = None
-    current_value = []
-
-    for line in lines:
-        if line.startswith("### "):
-            if current_field and current_value:
-                data[current_field] = "\n".join(current_value).strip()
-            # Convert "Link to Hackathon" -> "link_to_hackathon"
-            current_field = line[4:].strip().lower().replace(" ", "_").replace("?", "").replace("(", "").replace(")", "")
-            current_value = []
-        elif current_field:
-            if line.strip() and line.strip() != "_No response_":
-                current_value.append(line)
-
-    if current_field and current_value:
-        data[current_field] = "\n".join(current_value).strip()
-
-    return data
-
-
-def parse_state(data):
-    """Map optional issue status field to listing state."""
-    status = (data.get("status", "") or "").strip().lower()
-    if "soon" in status:
-        return "opens_soon"
-    if "open" in status:
-        return "open"
-    # Sensible default for auto-extracted listings.
-    return "open"
-
-
-def parse_deadline(data):
-    """Parse optional deadline and normalize to ISO YYYY-MM-DD."""
-    raw = (data.get("deadline_optional", "") or data.get("deadline", "")).strip()
-    if not raw:
-        return None
-    try:
-        return util.parse_deadline_date(raw).isoformat()
-    except ValueError:
-        util.fail("Invalid deadline format. Please use YYYY-MM-DD or MM/DD/YYYY.")
-
-
 def extract_url_from_body(body):
     """Try multiple methods to extract URL from issue body."""
-    # Method 1: Parse structured fields
-    data = parse_issue_body(body)
+    # Method 1: Parse structured fields (strip_symbols matches the field keys
+    # this script looks up, e.g. deadline_optional).
+    data = util.parse_issue_body(body, strip_symbols=True)
 
     # Try various field names
     url_fields = [
@@ -365,8 +319,8 @@ def main():
     print(f"Extracted URL: {url}")
 
     notes = data.get("any_additional_context_optional", "") or data.get("notes", "")
-    state = parse_state(data)
-    deadline = parse_deadline(data)
+    state = util.parse_state(data)
+    deadline = util.parse_deadline(data, "deadline_optional", "deadline")
 
     print(f"Fetching content from: {url}")
 
diff --git a/.github/scripts/contribution_approved.py b/.github/scripts/contribution_approved.py
index 051e236..bd25039 100644
--- a/.github/scripts/contribution_approved.py
+++ b/.github/scripts/contribution_approved.py
@@ -26,64 +26,6 @@ def get_first(data, *keys):
     return ""
 
 
-def parse_state(data):
-    """Map issue fields to listing state."""
-    status = get_first(data, "status")
-    status_lc = status.lower()
-    if "soon" in status_lc:
-        return "opens_soon"
-    if "open" in status_lc:
-        return "open"
-
-    # Backward compatibility with older template field.
-    active_str = get_first(
-        data,
-        "is_this_hackathon_currently_open_for_registration?",
-        "is_this_hackathon_currently_open_for_registration",
-    ).lower()
-    if active_str == "no":
-        return "opens_soon"
-    return "open"
-
-
-def parse_deadline(data):
-    """Parse optional deadline and normalize to ISO YYYY-MM-DD."""
-    raw = get_first(data, "deadline", "deadline_(optional)")
-    if not raw:
-        return None
-    try:
-        return util.parse_deadline_date(raw).isoformat()
-    except ValueError:
-        util.fail("Invalid deadline format. Please use YYYY-MM-DD or MM/DD/YYYY.")
-
-
-def parse_issue_body(body, labels):
-    """Parse the issue body based on issue type."""
-    lines = body.strip().split("\n")
-    data = {}
-
-    current_field = None
-    current_value = []
-
-    for line in lines:
-        # Check for field headers (### Field Name)
-        if line.startswith("### "):
-            if current_field and current_value:
-                data[current_field] = "\n".join(current_value).strip()
-            current_field = line[4:].strip().lower().replace(" ", "_")
-            current_value = []
-        elif current_field:
-            # Skip "_No response_" placeholders
-            if line.strip() != "_No response_":
-                current_value.append(line)
-
-    # Don't forget the last field
-    if current_field and current_value:
-        data[current_field] = "\n".join(current_value).strip()
-
-    return data
-
-
 def handle_new_opportunity(data, username, is_quick_add=False):
     """Handle adding a new hackathon."""
     listings = util.get_listings_from_json()
@@ -125,8 +67,8 @@ def handle_new_opportunity(data, username, is_quick_add=False):
     # Get prize (optional)
     prize = get_first(data, "prize_pool_(optional)", "prize") or "—"
     # Map user-submitted status/deadline fields into canonical listing fields.
-    state = parse_state(data)
-    deadline = parse_deadline(data)
+    state = util.parse_state(data)
+    deadline = util.parse_deadline(data, "deadline", "deadline_(optional)")
 
     # Create new listing
     new_listing = {
@@ -223,7 +165,7 @@ def main():
     username = issue.get("user", {}).get("login", "unknown")
 
     # Parse the issue body
-    data = parse_issue_body(body, labels)
+    data = util.parse_issue_body(body)
 
     # Check if this is a quick add
     is_quick_add = "quick_add" in labels
diff --git a/.github/scripts/generate_gallery.py b/.github/scripts/generate_gallery.py
index f812618..111ae83 100644
--- a/.github/scripts/generate_gallery.py
+++ b/.github/scripts/generate_gallery.py
@@ -51,12 +51,20 @@ def esc(text):
 
 def tile(photo):
     image = esc(photo["image"])
-    hackathon = esc(photo.get("hackathon", ""))
+    # Surface caption + credit so contributor attribution isn't dropped. In a
+    # justified image collage there's no room for a visible caption line, so the
+    # metadata rides along in the alt/title (hover tooltip + accessibility).
+    parts = [p for p in (photo.get("hackathon", ""), photo.get("caption", "")) if p]
+    credit = photo.get("credit", "")
+    credit_url = photo.get("credit_url", "")
+    if credit:
+        parts.append(f"Photo: {credit}" + (f" ({credit_url})" if credit_url else ""))
+    label = esc(" · ".join(parts)) if parts else esc(photo.get("hackathon", ""))
     # Fixed height + no width keeps each photo's aspect ratio, so they tile
     # together like a collage instead of sitting in separate boxes.
     return (
         f'<a href="{image}">'
-        f'<img src="{image}" height="{ROW_HEIGHT}" alt="{hackathon}"></a>'
+        f'<img src="{image}" height="{ROW_HEIGHT}" alt="{label}" title="{label}"></a>'
     )
 
 
diff --git a/.github/scripts/test_scripts.py b/.github/scripts/test_scripts.py
index 976b767..ac6ca1c 100644
--- a/.github/scripts/test_scripts.py
+++ b/.github/scripts/test_scripts.py
@@ -8,7 +8,6 @@
 from datetime import date
 
 import util
-import contribution_approved as ca
 import auto_extract as ax
 
 
@@ -55,24 +54,30 @@ def test_parses_field_sections(self):
             "### Hackathon Name\nHackMIT 2026\n\n"
             "### Link to Hackathon Page\nhttps://hackmit.org\n"
         )
-        data = ca.parse_issue_body(body, [])
+        data = util.parse_issue_body(body)
         self.assertEqual(data["hackathon_name"], "HackMIT 2026")
         self.assertEqual(data["link_to_hackathon_page"], "https://hackmit.org")
 
     def test_skips_no_response_placeholder(self):
-        data = ca.parse_issue_body("### Prize Pool (optional)\n_No response_\n", [])
+        data = util.parse_issue_body("### Prize Pool (optional)\n_No response_\n")
         self.assertFalse(data.get("prize_pool_(optional)"))
 
+    def test_strip_symbols_normalizes_keys(self):
+        data = util.parse_issue_body("### Deadline (optional)\n2026-07-04\n", strip_symbols=True)
+        self.assertEqual(data.get("deadline_optional"), "2026-07-04")
+
 
 class ParseStateAndDeadline(unittest.TestCase):
     def test_state(self):
-        self.assertEqual(ca.parse_state({"status": "Opens soon"}), "opens_soon")
-        self.assertEqual(ca.parse_state({"status": "Open now"}), "open")
-        self.assertEqual(ca.parse_state({}), "open")
+        self.assertEqual(util.parse_state({"status": "Opens soon"}), "opens_soon")
+        self.assertEqual(util.parse_state({"status": "Open now"}), "open")
+        self.assertEqual(util.parse_state({}), "open")
 
     def test_deadline(self):
-        self.assertEqual(ca.parse_deadline({"deadline": "2026-07-04"}), "2026-07-04")
-        self.assertIsNone(ca.parse_deadline({}))
+        self.assertEqual(
+            util.parse_deadline({"deadline": "2026-07-04"}, "deadline"), "2026-07-04"
+        )
+        self.assertIsNone(util.parse_deadline({}, "deadline"))
 
 
 class SsrfGuard(unittest.TestCase):
diff --git a/.github/scripts/util.py b/.github/scripts/util.py
index 3518177..e4186cf 100644
--- a/.github/scripts/util.py
+++ b/.github/scripts/util.py
@@ -258,6 +258,80 @@ def generate_uuid():
     return str(uuid.uuid4())
 
 
+DEFAULT_REPO = "Jose-Gael-Cruz-Lopez/hackhq"
+
+
+def repo_slug():
+    """owner/repo — from GITHUB_REPOSITORY (set by Actions) or the default."""
+    return os.environ.get("GITHUB_REPOSITORY") or DEFAULT_REPO
+
+
+def repo_url():
+    """Base GitHub URL for this repository."""
+    return f"https://github.com/{repo_slug()}"
+
+
+def parse_issue_body(body, strip_symbols=False):
+    """Parse a GitHub issue body's '### Field' sections into a {field: value} dict.
+
+    Field names are lowercased with spaces -> underscores. Set strip_symbols=True
+    to also drop ? ( ) from keys (used where field lookups omit those chars).
+    Shared by contribution_approved.py and auto_extract.py.
+    """
+    data = {}
+    current_field = None
+    current_value = []
+    for line in body.strip().split("\n"):
+        if line.startswith("### "):
+            if current_field and current_value:
+                data[current_field] = "\n".join(current_value).strip()
+            name = line[4:].strip().lower().replace(" ", "_")
+            if strip_symbols:
+                name = name.replace("?", "").replace("(", "").replace(")", "")
+            current_field = name
+            current_value = []
+        elif current_field:
+            if line.strip() and line.strip() != "_No response_":
+                current_value.append(line)
+    if current_field and current_value:
+        data[current_field] = "\n".join(current_value).strip()
+    return data
+
+
+def parse_state(data):
+    """Map issue status fields to a listing state (open / opens_soon)."""
+    status = str(data.get("status") or "").strip().lower()
+    if "soon" in status:
+        return "opens_soon"
+    if "open" in status:
+        return "open"
+    # Backward compatibility with the older registration-open field.
+    active = str(
+        data.get("is_this_hackathon_currently_open_for_registration?")
+        or data.get("is_this_hackathon_currently_open_for_registration")
+        or ""
+    ).strip().lower()
+    if active == "no":
+        return "opens_soon"
+    return "open"
+
+
+def parse_deadline(data, *keys):
+    """Return an ISO deadline from the first present key, or None (fail on bad format)."""
+    raw = ""
+    for key in keys:
+        value = data.get(key)
+        if value and str(value).strip():
+            raw = str(value).strip()
+            break
+    if not raw:
+        return None
+    try:
+        return parse_deadline_date(raw).isoformat()
+    except ValueError:
+        fail("Invalid deadline format. Please use YYYY-MM-DD or MM/DD/YYYY.")
+
+
 def clean_url(url):
     """Clean and normalize a URL."""
     url = url.strip()
diff --git a/.github/scripts/weekly_digest.py b/.github/scripts/weekly_digest.py
index 95125bf..876349f 100644
--- a/.github/scripts/weekly_digest.py
+++ b/.github/scripts/weekly_digest.py
@@ -15,6 +15,8 @@
 from datetime import datetime, timedelta
 from zoneinfo import ZoneInfo
 
+import util
+
 PST = ZoneInfo("America/Los_Angeles")
 README = os.path.join(os.path.dirname(__file__), "..", "..", "README.md")
 DIGEST = os.path.join(os.path.dirname(__file__), "..", "..", "digest.md")
@@ -123,7 +125,7 @@ def main():
     out = []
     out.append(f"# 📬 Weekly Digest — {today.strftime('%B %d, %Y')}\n")
     out.append(
-        f"_Auto-generated. Source: [README.md](https://github.com/Jose-Gael-Cruz-Lopez/hackhq)._\n"
+        f"_Auto-generated. Source: [README.md]({util.repo_url()})._\n"
     )
 
     if closing_rows:
@@ -142,7 +144,7 @@ def main():
         out.append("\nNo new entries or closing-soon flags this week. Stay tuned 🌱\n")
 
     out.append(
-        f"\n---\n_Want to contribute? [Open an issue](https://github.com/Jose-Gael-Cruz-Lopez/hackhq/issues/new/choose)._"
+        f"\n---\n_Want to contribute? [Open an issue]({util.repo_url()}/issues/new/choose)._"
     )
 
     with open(DIGEST, "w") as f:
diff --git a/georgetown b/georgetown
deleted file mode 100644
index ff97e6d..0000000
--- a/georgetown
+++ /dev/null
@@ -1 +0,0 @@
-| ✅ [OPEN] | Georgetown University | Hoya Hacks 2027 — Jan 22–24, 2027 | In-Person | Washington, DC | 1 non-cash prize | <a href="https://hoya-hacks-2027.devpost.com/"><img src="https://img.shields.io/badge/Register-blue?style=for-the-badge" alt="Register"></a> | Jun 27, 2026 |
diff --git a/web/components/hq/deck.tsx b/web/components/hq/deck.tsx
index cc6957d..622c01d 100644
--- a/web/components/hq/deck.tsx
+++ b/web/components/hq/deck.tsx
@@ -4,7 +4,7 @@ import { useMemo, useState } from "react";
 import { motion, useReducedMotion } from "framer-motion";
 import type { Hackathon, HackState } from "@/lib/types-hq";
 import { STATE_META, countdown } from "@/lib/types-hq";
-import { useHQ } from "./store";
+import { useSelection, useTracker } from "./store";
 
 type StatusFilter = "all" | HackState;
 type FormatFilter = "all" | "In-Person" | "Virtual";
@@ -169,7 +169,7 @@ function FilterPill({
 }
 
 function SaveHeart({ h, dark }: { h: Hackathon; dark?: boolean }) {
-  const { isTracked, save, remove } = useHQ();
+  const { isTracked, save, remove } = useTracker();
   const tracked = isTracked(h.id);
   return (
     <button
@@ -225,7 +225,7 @@ const SPRING_SLOW = { type: "spring", bounce: 0.2, duration: 1.5 } as const;
  * lifts and tilts out of the folder on hover while the flap swings open.
  */
 function HackCard({ h }: { h: Hackathon }) {
-  const { setSelected } = useHQ();
+  const { setSelected } = useSelection();
   const reduceMotion = useReducedMotion();
   const meta = STATE_META[h.state];
   const cd = countdown(h);
@@ -340,7 +340,7 @@ function HackCard({ h }: { h: Hackathon }) {
 }
 
 function HackRow({ h }: { h: Hackathon }) {
-  const { setSelected } = useHQ();
+  const { setSelected } = useSelection();
   const meta = STATE_META[h.state];
   const cd = countdown(h);
 
diff --git a/web/components/hq/detail-modal.tsx b/web/components/hq/detail-modal.tsx
index c204cf6..845593f 100644
--- a/web/components/hq/detail-modal.tsx
+++ b/web/components/hq/detail-modal.tsx
@@ -2,19 +2,21 @@
 
 import { useEffect } from "react";
 import { STATE_META, countdown, deadlineDisplay } from "@/lib/types-hq";
-import { useHQ } from "./store";
+import { lockScroll } from "@/lib/scroll-lock";
+import { useSelection, useTracker } from "./store";
 
 export function DetailModal() {
-  const { selected, setSelected, isTracked, save, remove } = useHQ();
+  const { selected, setSelected } = useSelection();
+  const { isTracked, save, remove } = useTracker();
 
   useEffect(() => {
     if (!selected) return;
     const onKey = (e: KeyboardEvent) => e.key === "Escape" && setSelected(null);
     window.addEventListener("keydown", onKey);
-    document.body.style.overflow = "hidden";
+    const release = lockScroll();
     return () => {
       window.removeEventListener("keydown", onKey);
-      document.body.style.overflow = "";
+      release();
     };
   }, [selected, setSelected]);
 
diff --git a/web/components/hq/disc-player.tsx b/web/components/hq/disc-player.tsx
index 74414db..ea77e37 100644
--- a/web/components/hq/disc-player.tsx
+++ b/web/components/hq/disc-player.tsx
@@ -29,21 +29,23 @@ import FramerDiscPlayer from "@/components/vendor/DiscPlayer";
 const FRAMER_DEMO_MP3 =
   "https://framerusercontent.com/assets/8w3IUatLX9a5JVJ6XPCVuHi94.mp3";
 
-declare global {
-  interface Window {
-    __hqAudioPatched?: boolean;
-  }
-}
+// Intercept only `new Audio(FRAMER_DEMO_MP3)` so the vendored component's demo
+// track is silenced (the only sound is the user's Spotify). Runs lazily from
+// the component below rather than as a top-level import side effect, and is
+// idempotent, so it only takes effect when the disc player is actually used and
+// is safe under React's double render.
+let demoAudioMuted = false;
 
-if (typeof window !== "undefined" && !window.__hqAudioPatched) {
-  window.__hqAudioPatched = true;
+function muteFramerDemoAudio() {
+  if (demoAudioMuted || typeof window === "undefined") return;
+  demoAudioMuted = true;
   const RealAudio = window.Audio;
   const PatchedAudio = function (this: unknown, src?: string) {
     const a = new RealAudio(src);
     if (src === FRAMER_DEMO_MP3) {
       // The demo track must NEVER be heard: silence the element for real
-      // and make play() a no-op, so the only sound is the user's Spotify.
-      // ('ended' also never fires, so the needle never lifts mid-session.)
+      // and make play() a no-op. ('ended' also never fires, so the needle
+      // never lifts mid-session.)
       a.muted = true;
       a.volume = 0;
       a.play = () => Promise.resolve();
@@ -98,6 +100,10 @@ function parseSpotifyUri(input: string): string | null {
 }
 
 export function DiscPlayer() {
+  // Scope the demo-audio muting to the disc player: patch only when this
+  // component is actually rendered, not at module import time.
+  muteFramerDemoAudio();
+
   const [panelOpen, setPanelOpen] = useState(false);
   const [playing, setPlaying] = useState(false);
   const [hasMusic, setHasMusic] = useState(false);
diff --git a/web/components/hq/globe-map.tsx b/web/components/hq/globe-map.tsx
index 10d7c4e..54a4b20 100644
--- a/web/components/hq/globe-map.tsx
+++ b/web/components/hq/globe-map.tsx
@@ -5,7 +5,7 @@ import mapboxgl from "mapbox-gl";
 import "mapbox-gl/dist/mapbox-gl.css";
 import type { Hackathon } from "@/lib/types-hq";
 import { STATE_META, countdown } from "@/lib/types-hq";
-import { useHQ } from "./store";
+import { useSelection } from "./store";
 
 mapboxgl.accessToken = process.env.NEXT_PUBLIC_MAPBOX_TOKEN ?? "";
 
@@ -21,7 +21,7 @@ const SECONDS_PER_REVOLUTION = 110;
 export function GlobeMap({ hackathons }: { hackathons: Hackathon[] }) {
   const containerRef = useRef<HTMLDivElement>(null);
   const mapRef = useRef<mapboxgl.Map | null>(null);
-  const { setSelected } = useHQ();
+  const { setSelected } = useSelection();
   const [zoomedIn, setZoomedIn] = useState(false);
   const hasToken = Boolean(mapboxgl.accessToken);
 
diff --git a/web/components/hq/preloader.tsx b/web/components/hq/preloader.tsx
index 9d79c68..7364d38 100644
--- a/web/components/hq/preloader.tsx
+++ b/web/components/hq/preloader.tsx
@@ -1,6 +1,7 @@
 "use client";
 
 import { useEffect, useState } from "react";
+import { lockScroll } from "@/lib/scroll-lock";
 
 /**
  * Curtain-reveal load screen - native rebuild of the Framer
@@ -28,16 +29,16 @@ export function Preloader() {
       setGone(true);
       return;
     }
-    document.body.style.overflow = "hidden";
+    const release = lockScroll();
     const t1 = setTimeout(() => setCollapsed(true), HOLD_MS);
     const t2 = setTimeout(() => {
       setGone(true);
-      document.body.style.overflow = "";
+      release();
     }, TOTAL_MS);
     return () => {
       clearTimeout(t1);
       clearTimeout(t2);
-      document.body.style.overflow = "";
+      release();
     };
   }, []);
 
diff --git a/web/components/hq/store.tsx b/web/components/hq/store.tsx
index 570d5e3..6bd3b0e 100644
--- a/web/components/hq/store.tsx
+++ b/web/components/hq/store.tsx
@@ -21,17 +21,41 @@ export const STAGES: { id: Stage; label: string; color: string }[] = [
 
 type TrackerMap = Record<string, Stage>;
 
-type HQContext = {
+const STAGE_IDS = new Set<string>(STAGES.map((s) => s.id));
+
+/**
+ * Coerce an untrusted parsed localStorage value into a clean TrackerMap:
+ * keep only string ids mapped to a known Stage, drop everything else. Guards
+ * against a valid-JSON-but-wrong-shape payload being cast blindly.
+ */
+function sanitizeTrackerMap(value: unknown): TrackerMap {
+  if (!value || typeof value !== "object") return {};
+  const out: TrackerMap = {};
+  for (const [id, stage] of Object.entries(value as Record<string, unknown>)) {
+    if (typeof stage === "string" && STAGE_IDS.has(stage)) {
+      out[id] = stage as Stage;
+    }
+  }
+  return out;
+}
+
+type TrackerContextValue = {
   tracked: TrackerMap;
   save: (id: string) => void;
   move: (id: string, stage: Stage) => void;
   remove: (id: string) => void;
   isTracked: (id: string) => boolean;
+};
+
+type SelectionContextValue = {
   selected: Hackathon | null;
   setSelected: (h: Hackathon | null) => void;
 };
 
-const Ctx = createContext<HQContext | null>(null);
+// Two contexts so a selection change (opening/closing the detail modal) doesn't
+// re-render every tracker consumer (all the deck cards), and vice versa.
+const TrackerCtx = createContext<TrackerContextValue | null>(null);
+const SelectionCtx = createContext<SelectionContextValue | null>(null);
 
 const LS_KEY = "hackhq-tracker-v1";
 
@@ -43,10 +67,10 @@ export function HQProvider({ children }: { children: React.ReactNode }) {
   useEffect(() => {
     try {
       const raw = localStorage.getItem(LS_KEY);
-      // Deliberate post-mount hydration: localStorage is unavailable during SSR,
-      // and doing this in a lazy initializer would cause a hydration mismatch.
+      // Deliberate post-mount hydration (localStorage is unavailable during
+      // SSR); validate the shape rather than trusting any valid JSON.
       // eslint-disable-next-line react-hooks/set-state-in-effect
-      if (raw) setTracked(JSON.parse(raw));
+      if (raw) setTracked(sanitizeTrackerMap(JSON.parse(raw)));
     } catch {
       /* first visit / corrupted - start fresh */
     }
@@ -82,16 +106,32 @@ export function HQProvider({ children }: { children: React.ReactNode }) {
   );
   const isTracked = useCallback((id: string) => id in tracked, [tracked]);
 
-  const value = useMemo(
-    () => ({ tracked, save, move, remove, isTracked, selected, setSelected }),
-    [tracked, save, move, remove, isTracked, selected],
+  const trackerValue = useMemo(
+    () => ({ tracked, save, move, remove, isTracked }),
+    [tracked, save, move, remove, isTracked],
+  );
+  const selectionValue = useMemo(
+    () => ({ selected, setSelected }),
+    [selected],
   );
 
-  return <Ctx.Provider value={value}>{children}</Ctx.Provider>;
+  return (
+    <TrackerCtx.Provider value={trackerValue}>
+      <SelectionCtx.Provider value={selectionValue}>
+        {children}
+      </SelectionCtx.Provider>
+    </TrackerCtx.Provider>
+  );
+}
+
+export function useTracker(): TrackerContextValue {
+  const ctx = useContext(TrackerCtx);
+  if (!ctx) throw new Error("useTracker must be used inside <HQProvider>");
+  return ctx;
 }
 
-export function useHQ(): HQContext {
-  const ctx = useContext(Ctx);
-  if (!ctx) throw new Error("useHQ must be used inside <HQProvider>");
+export function useSelection(): SelectionContextValue {
+  const ctx = useContext(SelectionCtx);
+  if (!ctx) throw new Error("useSelection must be used inside <HQProvider>");
   return ctx;
 }
diff --git a/web/components/hq/tracker.tsx b/web/components/hq/tracker.tsx
index 834ddc4..5d3b0ba 100644
--- a/web/components/hq/tracker.tsx
+++ b/web/components/hq/tracker.tsx
@@ -3,10 +3,11 @@
 import { useMemo, useState } from "react";
 import type { Hackathon } from "@/lib/types-hq";
 import { STATE_META, countdown } from "@/lib/types-hq";
-import { STAGES, useHQ, type Stage } from "./store";
+import { STAGES, useSelection, useTracker, type Stage } from "./store";
 
 export function Tracker({ hackathons }: { hackathons: Hackathon[] }) {
-  const { tracked, move, remove, setSelected } = useHQ();
+  const { tracked, move, remove } = useTracker();
+  const { setSelected } = useSelection();
   const [dragId, setDragId] = useState<string | null>(null);
   const [overStage, setOverStage] = useState<Stage | null>(null);
 
@@ -22,7 +23,7 @@ export function Tracker({ hackathons }: { hackathons: Hackathon[] }) {
         items: Object.entries(tracked)
           .filter(([, stage]) => stage === s.id)
           .map(([id]) => byId[id])
-          .filter(Boolean)
+          .filter((h): h is Hackathon => Boolean(h))
           .sort((a, b) => (a.daysLeft ?? 9999) - (b.daysLeft ?? 9999)),
       })),
     [tracked, byId],
diff --git a/web/components/legacy/count-up.tsx b/web/components/legacy/count-up.tsx
index 2a65360..18ee5fb 100644
--- a/web/components/legacy/count-up.tsx
+++ b/web/components/legacy/count-up.tsx
@@ -14,7 +14,7 @@ export function CountUp({ end }: { end: number }) {
     let raf = 0;
     const io = new IntersectionObserver(
       ([entry]) => {
-        if (!entry.isIntersecting) return;
+        if (!entry?.isIntersecting) return;
         io.disconnect();
 
         const start = performance.now();
diff --git a/web/components/legacy/featured-work.tsx b/web/components/legacy/featured-work.tsx
index 1a72ac6..be20810 100644
--- a/web/components/legacy/featured-work.tsx
+++ b/web/components/legacy/featured-work.tsx
@@ -46,7 +46,7 @@ export function FeaturedWork({
               className={SIZES[i] === "large" ? "tile-lg" : "tile-sm"}
               delay={i * 60}
             >
-              <ProjectTile opp={opp} size={SIZES[i]} index={i} />
+              <ProjectTile opp={opp} size={SIZES[i] ?? "small"} index={i} />
             </Reveal>
           ))}
         </div>
diff --git a/web/components/legacy/formats-card.tsx b/web/components/legacy/formats-card.tsx
index dff3dd4..d2912f9 100644
--- a/web/components/legacy/formats-card.tsx
+++ b/web/components/legacy/formats-card.tsx
@@ -79,7 +79,7 @@ export function FormatsCard({ formats }: { formats: FormatStat[] }) {
             0{active + 1}
           </span>
           <span className="text-sm font-medium">
-            {formats[active].label}
+            {formats[active]?.label}
           </span>
         </div>
 
diff --git a/web/components/legacy/reveal.tsx b/web/components/legacy/reveal.tsx
index 9c64ab2..6d5e1cb 100644
--- a/web/components/legacy/reveal.tsx
+++ b/web/components/legacy/reveal.tsx
@@ -20,7 +20,7 @@ export function Reveal({
 
     const io = new IntersectionObserver(
       ([entry]) => {
-        if (entry.isIntersecting) {
+        if (entry?.isIntersecting) {
           setVisible(true);
           io.disconnect();
         }
diff --git a/web/components/legacy/scroll-gallery.tsx b/web/components/legacy/scroll-gallery.tsx
index e028533..141a117 100644
--- a/web/components/legacy/scroll-gallery.tsx
+++ b/web/components/legacy/scroll-gallery.tsx
@@ -150,8 +150,8 @@ export function ScrollGallery({
               aria-hidden
               className="gallery-backdrop absolute inset-0"
               style={{
-                backgroundImage: flyers[active].src
-                  ? `url(${flyers[active].src})`
+                backgroundImage: flyers[active]?.src
+                  ? `url(${flyers[active]?.src})`
                   : undefined,
               }}
             />
diff --git a/web/lib/listings.ts b/web/lib/listings.ts
index 23b53af..249c1ab 100644
--- a/web/lib/listings.ts
+++ b/web/lib/listings.ts
@@ -72,7 +72,7 @@ export function parsePrizeValue(prize: string | undefined): number {
   if (!prize) return 0;
   const m = prize.replace(/,/g, "").match(/\$\s*([\d.]+)\s*([kKmM])?/);
   if (!m) return 0;
-  const n = parseFloat(m[1]);
+  const n = parseFloat(m[1] ?? "");
   if (Number.isNaN(n)) return 0;
   const mult = m[2]?.toLowerCase() === "m" ? 1_000_000 : m[2] ? 1_000 : 1;
   return n * mult;
@@ -95,7 +95,9 @@ function noEmDash(s: string): string {
 
 export function splitTitle(title: string): { title: string; tagline: string | null } {
   const m = title.match(/^(.*?)\s*\(([^)]+)\)\s*$/);
-  if (m && m[1].length >= 6) return { title: m[1].trim(), tagline: m[2].trim() };
+  if (m && (m[1] ?? "").length >= 6) {
+    return { title: (m[1] ?? "").trim(), tagline: (m[2] ?? "").trim() };
+  }
   return { title: title.trim(), tagline: null };
 }
 
diff --git a/web/lib/parse-readme.test.ts b/web/lib/parse-readme.test.ts
index fdc0c2c..befbf0f 100644
--- a/web/lib/parse-readme.test.ts
+++ b/web/lib/parse-readme.test.ts
@@ -30,10 +30,10 @@ describe("parseOpportunities", () => {
   it("parses a well-formed hackathons table", () => {
     const ops = parseOpportunities(md);
     expect(ops).toHaveLength(1);
-    expect(ops[0].organization).toBe("MIT");
-    expect(ops[0].title).toBe("HackMIT 2026");
-    expect(ops[0].status).toBe("OPEN");
-    expect(ops[0].url).toBe("https://hackmit.org/");
+    expect(ops[0]?.organization).toBe("MIT");
+    expect(ops[0]?.title).toBe("HackMIT 2026");
+    expect(ops[0]?.status).toBe("OPEN");
+    expect(ops[0]?.url).toBe("https://hackmit.org/");
   });
 
   it("returns [] when there is no table", () => {
diff --git a/web/lib/parse-readme.ts b/web/lib/parse-readme.ts
index fda50a6..a860f70 100644
--- a/web/lib/parse-readme.ts
+++ b/web/lib/parse-readme.ts
@@ -8,6 +8,7 @@ import {
   Status,
   SECTION_LABELS,
 } from "./types";
+import { REPO_RAW_BASE } from "./repo";
 
 const README_PATH = path.join(process.cwd(), "..", "README.md");
 const REPO_ROOT = path.join(process.cwd(), "..");
@@ -17,8 +18,6 @@ const LISTINGS_PATH = path.join(
   "scripts",
   "listings.json",
 );
-const REPO_RAW_BASE =
-  "https://raw.githubusercontent.com/Hack-HQ/hackhq/main/";
 
 const TABLE_RE = /<!-- (\w+)_TABLE_START -->([\s\S]*?)<!-- \1_TABLE_END -->/g;
 
@@ -45,7 +44,7 @@ function parseStatus(cell: string): Status {
 
 function extractUrl(cell: string): string {
   const m = cell.match(/href="([^"]+)"/);
-  return m ? m[1] : "";
+  return m ? (m[1] ?? "") : "";
 }
 
 function earliestUpcomingDate(text: string, today: Date): Date | null {
@@ -53,10 +52,10 @@ function earliestUpcomingDate(text: string, today: Date): Date | null {
   const re = new RegExp(DATE_RE.source, "g");
   let m: RegExpExecArray | null;
   while ((m = re.exec(text)) !== null) {
-    const monthIdx = MONTH_MAP[m[1].toLowerCase().replace(".", "")];
+    const monthIdx = MONTH_MAP[(m[1] ?? "").toLowerCase().replace(".", "")];
     if (monthIdx === undefined) continue;
-    const day = parseInt(m[2], 10);
-    const year = parseInt(m[3], 10);
+    const day = parseInt(m[2] ?? "", 10);
+    const year = parseInt(m[3] ?? "", 10);
     const d = new Date(year, monthIdx, day);
     if (d >= today && (!earliest || d < earliest)) earliest = d;
   }
@@ -95,7 +94,7 @@ function loadFeaturedUrls(): Set<string> {
 
 function inlineDeadline(text: string): string {
   const m = text.match(/Deadline:\s*([^|]+?)(?:\s*\(Event:|$)/i);
-  return m ? m[1].trim() : "";
+  return m ? (m[1] ?? "").trim() : "";
 }
 
 function stableId(...parts: string[]): string {
@@ -119,7 +118,7 @@ function extractStatsBannerSrc(markdown: string): string | null {
   const tag = markdown.match(/<img\s+[^>]*alt="Hackathon stats"[^>]*>/i);
   if (!tag) return null;
   const src = tag[0].match(/src="([^"]+)"/i);
-  return src ? resolveAssetSrc(src[1]) : null;
+  return src ? resolveAssetSrc(src[1] ?? "") : null;
 }
 
 function extractGallery(markdown: string): GalleryPhoto[] {
@@ -129,9 +128,9 @@ function extractGallery(markdown: string): GalleryPhoto[] {
   const photos: GalleryPhoto[] = [];
   let m: RegExpExecArray | null;
   const re = new RegExp(IMG_RE.source, "g");
-  while ((m = re.exec(block[1])) !== null) {
+  while ((m = re.exec(block[1] ?? "")) !== null) {
     photos.push({
-      src: resolveAssetSrc(m[1]),
+      src: resolveAssetSrc(m[1] ?? ""),
       alt: m[2] || "Hackathon photo",
     });
   }
@@ -150,7 +149,7 @@ function parseTableRows(
     .filter((l) => l.startsWith("|"));
   if (lines.length < 3) return [];
 
-  const headers = lines[0]
+  const headers = (lines[0] ?? "")
     .split("|")
     .slice(1, -1)
     .map((s) => s.trim());
@@ -257,9 +256,9 @@ export function parseOpportunities(markdown: string): Opportunity[] {
   let m: RegExpExecArray | null;
   const re = new RegExp(TABLE_RE.source, "g");
   while ((m = re.exec(markdown)) !== null) {
-    const key = SECTION_ALIAS[m[1]];
+    const key = SECTION_ALIAS[m[1] ?? ""];
     if (!key) continue;
-    all.push(...parseTableRows(key, m[2], today, featuredUrls));
+    all.push(...parseTableRows(key, m[2] ?? "", today, featuredUrls));
   }
   return all;
 }
diff --git a/web/lib/repo.ts b/web/lib/repo.ts
new file mode 100644
index 0000000..585826d
--- /dev/null
+++ b/web/lib/repo.ts
@@ -0,0 +1,7 @@
+// Single source of truth for the repository identity. Override via
+// NEXT_PUBLIC_REPO_SLUG (e.g. on a fork) so URLs don't silently break.
+export const REPO_SLUG =
+  process.env.NEXT_PUBLIC_REPO_SLUG ?? "Hack-HQ/hackhq";
+
+export const REPO_URL = `https://github.com/${REPO_SLUG}`;
+export const REPO_RAW_BASE = `https://raw.githubusercontent.com/${REPO_SLUG}/main/`;
diff --git a/web/lib/scroll-lock.ts b/web/lib/scroll-lock.ts
new file mode 100644
index 0000000..065ba67
--- /dev/null
+++ b/web/lib/scroll-lock.ts
@@ -0,0 +1,27 @@
+// Shared body scroll-lock with reference counting. Multiple overlays (the
+// preloader curtain, the detail modal) can request a lock at once; the body
+// only scrolls again once every holder has released. This avoids the race
+// where one overlay's cleanup re-enables scrolling while another still needs
+// it locked.
+let locks = 0;
+let previousOverflow = "";
+
+export function lockScroll(): () => void {
+  if (typeof document === "undefined") return () => {};
+
+  if (locks === 0) {
+    previousOverflow = document.body.style.overflow;
+    document.body.style.overflow = "hidden";
+  }
+  locks += 1;
+
+  let released = false;
+  return () => {
+    if (released) return;
+    released = true;
+    locks = Math.max(0, locks - 1);
+    if (locks === 0) {
+      document.body.style.overflow = previousOverflow;
+    }
+  };
+}
diff --git a/web/lib/types-hq.ts b/web/lib/types-hq.ts
index 1792b17..c8cfabb 100644
--- a/web/lib/types-hq.ts
+++ b/web/lib/types-hq.ts
@@ -1,5 +1,7 @@
 /** Client-safe types + display helpers shared across HackHQ components. */
 
+import { REPO_URL } from "./repo";
+
 export type HackState = "open" | "opens_soon" | "closing_soon" | "closed";
 
 export type Hackathon = {
@@ -66,7 +68,7 @@ export function submitIssueUrl(name = "", url = ""): string {
   const body = encodeURIComponent(
     `**Hackathon name:** ${name || "…"}\n**URL:** ${url || "…"}\n**Location (City, ST or Online):** …\n**Deadline:** …\n**Prize pool:** …\n\n_Submitted via hackhq.dev - the pipeline will extract the rest._`,
   );
-  return `https://github.com/Jose-Gael-Cruz-Lopez/hackhq/issues/new?title=${title}&body=${body}`;
+  return `${REPO_URL}/issues/new?title=${title}&body=${body}`;
 }
 
-export const REPO_URL = "https://github.com/Jose-Gael-Cruz-Lopez/hackhq";
+export { REPO_URL };
diff --git a/web/next.config.ts b/web/next.config.ts
index afc1db5..ea8d333 100644
--- a/web/next.config.ts
+++ b/web/next.config.ts
@@ -1,6 +1,11 @@
 import path from "node:path";
 import type { NextConfig } from "next";
 
+// Single source of repo identity (mirrors lib/repo.ts; kept inline so the
+// config file has no local-module import). Override via NEXT_PUBLIC_REPO_SLUG.
+const REPO_SLUG =
+  process.env.NEXT_PUBLIC_REPO_SLUG ?? "Hack-HQ/hackhq";
+
 const nextConfig: NextConfig = {
   // The data pages read the repo-root README.md and .github/scripts/listings.json
   // at request time (hourly ISR revalidation). Those files live outside web/, so
@@ -20,7 +25,7 @@ const nextConfig: NextConfig = {
       {
         protocol: "https",
         hostname: "raw.githubusercontent.com",
-        pathname: "/Hack-HQ/hackhq/**",
+        pathname: `/${REPO_SLUG}/**`,
       },
     ],
     dangerouslyAllowSVG: true,
diff --git a/web/proxy.ts b/web/proxy.ts
index 83d22d3..4c06d1f 100644
--- a/web/proxy.ts
+++ b/web/proxy.ts
@@ -3,6 +3,13 @@ import { NextResponse } from "next/server";
 
 // Clerk only takes over once its keys exist in .env.local — until then the
 // site runs exactly as before (the /my hub shows setup instructions instead).
+//
+// NOTE (intentional, for now): clerkMiddleware() here only wires up Clerk's
+// session context — it does NOT protect any route (no createRouteMatcher /
+// auth.protect()). The /my sign-in gate is enforced on the client only
+// (my-client.tsx). That's acceptable today because nothing is persisted
+// server-side, but a route matcher + auth.protect() MUST be added here before
+// any real server-side persistence is introduced. See web/README.md.
 const clerkConfigured =
   Boolean(process.env.NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY) &&
   Boolean(process.env.CLERK_SECRET_KEY);
diff --git a/web/tsconfig.json b/web/tsconfig.json
index 3a13f90..4e289c9 100644
--- a/web/tsconfig.json
+++ b/web/tsconfig.json
@@ -5,6 +5,7 @@
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
+    "noUncheckedIndexedAccess": true,
     "noEmit": true,
     "esModuleInterop": true,
     "module": "esnext",