Fix site overclaims: fidelity panel shipped, protocol count, hosted protocols

index.html

@@ -304,8 +304,8 @@ <h3 class="mt-4 text-lg font-semibold text-brand-dark">Latency &amp; fault injec
           <!-- Conformance / validation -->
           <article class="rounded-2xl p-7 bg-white ring-1 ring-black/5 shadow-soft">
             <i class="ph-duotone ph-seal-check text-3xl text-brand-orange"></i>
-            <h3 class="mt-4 text-lg font-semibold text-brand-dark">Reality: mock fidelity preview</h3>
-            <p class="mt-2 text-sm text-text-secondary leading-relaxed">Find changed fields, types and operations before an outdated mock gives you a passing test. Definition comparisons and the fidelity panel are in development.</p>
+            <h3 class="mt-4 text-lg font-semibold text-brand-dark">Reality: mock fidelity</h3>
+            <p class="mt-2 text-sm text-text-secondary leading-relaxed">Find changed fields, types and operations before an outdated mock gives you a passing test. Definition comparisons (<code>verify-mocks --mock-spec</code>) and the Admin UI Mock fidelity panel are available now.</p>
             <a href="/note-api-drift-detection-and-contract-alerting.html#mock-fidelity" class="mt-4 inline-flex text-sm font-medium text-brand-orange hover:opacity-80">Explore the fidelity preview</a>
           </article>
 
@@ -382,7 +382,7 @@ <h2 class="text-3xl md:text-4xl font-semibold tracking-tight text-brand-dark">Wh
         </div>
         <div class="grid grid-cols-2 gap-4 reveal">
           <div class="rounded-2xl p-6 bg-white ring-1 ring-black/5 shadow-soft">
-            <p class="font-mono text-3xl font-semibold text-brand-orange">10+</p>
+            <p class="font-mono text-3xl font-semibold text-brand-orange">10</p>
             <p class="mt-1 text-sm text-text-secondary">protocols mocked from one tool</p>
           </div>
           <div class="rounded-2xl p-6 bg-white ring-1 ring-black/5 shadow-soft">

pricing.html

@@ -208,7 +208,7 @@ <h2 class="text-lg font-semibold text-brand-dark">Free</h2>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>10,000 requests/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>BYOK AI (use your own provider key)</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Local mocks only (no cloud hosting)</span></li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>HTTP protocol</span></li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>HTTP, WebSocket and GraphQL protocols</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>1 collaborator</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Community support</span></li>
             </ul>
@@ -234,7 +234,7 @@ <h2 class="text-lg font-semibold text-brand-dark">Pro</h2>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>250,000 requests/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>100,000 platform AI tokens/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span><strong>3 hosted mocks</strong> (cloud-deployed)</span></li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>HTTP + gRPC protocols</span></li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Free protocols + gRPC</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>5 collaborators</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Custom subdomain</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Email support</span></li>
@@ -258,7 +258,7 @@ <h2 class="text-lg font-semibold text-brand-dark">Team</h2>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>1,000,000 requests/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>1,000,000 platform AI tokens/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span><strong>Unlimited hosted mocks</strong></span></li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>All 10+ protocols (HTTP, gRPC, GraphQL, WebSocket, Kafka, MQTT, AMQP, SMTP, FTP, TCP)</span></li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>All 9 hosted protocols (HTTP, gRPC, GraphQL, WebSocket, Kafka, MQTT, AMQP, SMTP, TCP); FTP when self-hosted</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>20 collaborators</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>SSO / RBAC</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Custom subdomain</span></li>
@@ -316,9 +316,9 @@ <h2 class="text-3xl md:text-4xl font-semibold tracking-tight text-brand-dark tex
               </tr>
               <tr class="border-b border-black/5">
                 <td class="py-3 pr-4">Protocols</td>
-                <td class="text-center py-3 px-4">HTTP</td>
-                <td class="text-center py-3 px-4">HTTP + gRPC</td>
-                <td class="text-center py-3 px-4">All 10+</td>
+                <td class="text-center py-3 px-4">HTTP, WebSocket, GraphQL</td>
+                <td class="text-center py-3 px-4">Free + gRPC</td>
+                <td class="text-center py-3 px-4">All 9 hosted</td>
               </tr>
               <tr class="border-b border-black/5">
                 <td class="py-3 pr-4">Collaborators</td>

src/pages/index.html

@@ -214,8 +214,8 @@ <h3 class="mt-4 text-lg font-semibold text-brand-dark">Latency &amp; fault injec
           <!-- Conformance / validation -->
           <article class="rounded-2xl p-7 bg-white ring-1 ring-black/5 shadow-soft">
             <i class="ph-duotone ph-seal-check text-3xl text-brand-orange"></i>
-            <h3 class="mt-4 text-lg font-semibold text-brand-dark">Reality: mock fidelity preview</h3>
-            <p class="mt-2 text-sm text-text-secondary leading-relaxed">Find changed fields, types and operations before an outdated mock gives you a passing test. Definition comparisons and the fidelity panel are in development.</p>
+            <h3 class="mt-4 text-lg font-semibold text-brand-dark">Reality: mock fidelity</h3>
+            <p class="mt-2 text-sm text-text-secondary leading-relaxed">Find changed fields, types and operations before an outdated mock gives you a passing test. Definition comparisons (<code>verify-mocks --mock-spec</code>) and the Admin UI Mock fidelity panel are available now.</p>
             <a href="/note-api-drift-detection-and-contract-alerting.html#mock-fidelity" class="mt-4 inline-flex text-sm font-medium text-brand-orange hover:opacity-80">Explore the fidelity preview</a>
           </article>
 
@@ -292,7 +292,7 @@ <h2 class="text-3xl md:text-4xl font-semibold tracking-tight text-brand-dark">Wh
         </div>
         <div class="grid grid-cols-2 gap-4 reveal">
           <div class="rounded-2xl p-6 bg-white ring-1 ring-black/5 shadow-soft">
-            <p class="font-mono text-3xl font-semibold text-brand-orange">10+</p>
+            <p class="font-mono text-3xl font-semibold text-brand-orange">10</p>
             <p class="mt-1 text-sm text-text-secondary">protocols mocked from one tool</p>
           </div>
           <div class="rounded-2xl p-6 bg-white ring-1 ring-black/5 shadow-soft">

src/pages/pricing.html

@@ -69,7 +69,7 @@ <h2 class="text-lg font-semibold text-brand-dark">Free</h2>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>10,000 requests/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>BYOK AI (use your own provider key)</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Local mocks only (no cloud hosting)</span></li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>HTTP protocol</span></li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>HTTP, WebSocket and GraphQL protocols</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>1 collaborator</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Community support</span></li>
             </ul>
@@ -95,7 +95,7 @@ <h2 class="text-lg font-semibold text-brand-dark">Pro</h2>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>250,000 requests/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>100,000 platform AI tokens/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span><strong>3 hosted mocks</strong> (cloud-deployed)</span></li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>HTTP + gRPC protocols</span></li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Free protocols + gRPC</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>5 collaborators</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Custom subdomain</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Email support</span></li>
@@ -119,7 +119,7 @@ <h2 class="text-lg font-semibold text-brand-dark">Team</h2>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>1,000,000 requests/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>1,000,000 platform AI tokens/month</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span><strong>Unlimited hosted mocks</strong></span></li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>All 10+ protocols (HTTP, gRPC, GraphQL, WebSocket, Kafka, MQTT, AMQP, SMTP, FTP, TCP)</span></li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>All 9 hosted protocols (HTTP, gRPC, GraphQL, WebSocket, Kafka, MQTT, AMQP, SMTP, TCP); FTP when self-hosted</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>20 collaborators</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>SSO / RBAC</span></li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-brand-orange mt-0.5"></i><span>Custom subdomain</span></li>
@@ -177,9 +177,9 @@ <h2 class="text-3xl md:text-4xl font-semibold tracking-tight text-brand-dark tex
               </tr>
               <tr class="border-b border-black/5">
                 <td class="py-3 pr-4">Protocols</td>
-                <td class="text-center py-3 px-4">HTTP</td>
-                <td class="text-center py-3 px-4">HTTP + gRPC</td>
-                <td class="text-center py-3 px-4">All 10+</td>
+                <td class="text-center py-3 px-4">HTTP, WebSocket, GraphQL</td>
+                <td class="text-center py-3 px-4">Free + gRPC</td>
+                <td class="text-center py-3 px-4">All 9 hosted</td>
               </tr>
               <tr class="border-b border-black/5">
                 <td class="py-3 pr-4">Collaborators</td>

src/pages/trust.html

@@ -65,7 +65,7 @@ <h1 class="mt-5 text-4xl md:text-5xl font-semibold tracking-tight text-brand-dar
             <ul class="mt-4 space-y-3 text-slate-300">
               <li class="flex items-start gap-3"><i class="ph-bold ph-lock-key text-brand-orange mt-0.5"></i><span>Encrypted in transit (TLS 1.2+) and at rest: database, backups and uploads.</span></li>
               <li class="flex items-start gap-3"><i class="ph-bold ph-buildings text-brand-orange mt-0.5"></i><span>Per-organization tenant isolation on every request, backed by database row-level security.</span></li>
-              <li class="flex items-start gap-3"><i class="ph-bold ph-fingerprint text-brand-orange mt-0.5"></i><span>SSO (SAML &amp; OIDC) with DNS-verified domains, plus MFA.</span></li>
+              <li class="flex items-start gap-3"><i class="ph-bold ph-fingerprint text-brand-orange mt-0.5"></i><span>SSO (SAML &amp; OIDC) with DNS-verified domains, plus authenticator-app (TOTP) MFA with backup codes.</span></li>
               <li class="flex items-start gap-3"><i class="ph-bold ph-seal-check text-brand-orange mt-0.5"></i><span>Tamper-evident, append-only audit log.</span></li>
               <li class="flex items-start gap-3"><i class="ph-bold ph-git-branch text-brand-orange mt-0.5"></i><span>Open-source core you can read and self-host.</span></li>
             </ul>
@@ -169,7 +169,7 @@ <h3 class="text-lg font-semibold text-brand-dark flex items-center gap-2"><i cla
             <ul class="mt-4 space-y-2.5 text-text-secondary">
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Tenant isolation and access control, enforced in the application and by database row-level security</li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Encryption in transit; database, backups and object storage encrypted at rest</li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>SSO, MFA, and role-based authorization</li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>SSO, authenticator-app MFA, and role-based authorization</li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Tamper-evident, append-only audit logging of authentication, configuration, billing, and data-export events</li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Coordinated vulnerability disclosure process</li>
             </ul>

trust.html

@@ -204,7 +204,7 @@ <h1 class="mt-5 text-4xl md:text-5xl font-semibold tracking-tight text-brand-dar
             <ul class="mt-4 space-y-3 text-slate-300">
               <li class="flex items-start gap-3"><i class="ph-bold ph-lock-key text-brand-orange mt-0.5"></i><span>Encrypted in transit (TLS 1.2+) and at rest: database, backups and uploads.</span></li>
               <li class="flex items-start gap-3"><i class="ph-bold ph-buildings text-brand-orange mt-0.5"></i><span>Per-organization tenant isolation on every request, backed by database row-level security.</span></li>
-              <li class="flex items-start gap-3"><i class="ph-bold ph-fingerprint text-brand-orange mt-0.5"></i><span>SSO (SAML &amp; OIDC) with DNS-verified domains, plus MFA.</span></li>
+              <li class="flex items-start gap-3"><i class="ph-bold ph-fingerprint text-brand-orange mt-0.5"></i><span>SSO (SAML &amp; OIDC) with DNS-verified domains, plus authenticator-app (TOTP) MFA with backup codes.</span></li>
               <li class="flex items-start gap-3"><i class="ph-bold ph-seal-check text-brand-orange mt-0.5"></i><span>Tamper-evident, append-only audit log.</span></li>
               <li class="flex items-start gap-3"><i class="ph-bold ph-git-branch text-brand-orange mt-0.5"></i><span>Open-source core you can read and self-host.</span></li>
             </ul>
@@ -308,7 +308,7 @@ <h3 class="text-lg font-semibold text-brand-dark flex items-center gap-2"><i cla
             <ul class="mt-4 space-y-2.5 text-text-secondary">
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Tenant isolation and access control, enforced in the application and by database row-level security</li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Encryption in transit; database, backups and object storage encrypted at rest</li>
-              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>SSO, MFA, and role-based authorization</li>
+              <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>SSO, authenticator-app MFA, and role-based authorization</li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Tamper-evident, append-only audit logging of authentication, configuration, billing, and data-export events</li>
               <li class="flex items-start gap-2.5"><i class="ph-bold ph-check text-emerald-500 mt-1"></i>Coordinated vulnerability disclosure process</li>
             </ul>