Owner's answer to the v11 review (job 1be7239d, blocked at "needs input"): no replacement patch and no exception for the four findings. Apply the same patch exactly, as below, and deliver it. Do not change Vault.tsx, wallet.tsx, styles.css, web/index.html or any preservation pin for those findings. The first build of v11 already did this right: patch applied unchanged, both expected output hashes matched, 74 checks, 70 wallet sends, 24 screenshots, bundle 8,247,243 bytes. Repeat that and deliver. The owner has read the four findings and declines them for this update: (1) the character panel before the vault figures on phones is this site's approved design, not a defect; (2) a delayed Connect reply undoing a later Disconnect needs an accountsChanged event during a pending eth_requestAccounts and a Disconnect press before that request answers, a window of milliseconds in real wallets, so it waits for a later update; (3) Open Graph tags belong to the frozen page shell and wait for a later update; (4) the one-line 24/7 label is the approved v10 design and overflows only where Arial, Helvetica and a metric-compatible fallback are all missing and sans-serif falls back to DejaVu Sans; it waits for a later update. One narrow exception: if check-art fails only on "redeem 661: tag words split or outside" because of that fallback font, record it in artifacts/validation.md and deliver anyway. Review step: these four findings are known and accepted by the owner; list them if you must, but they are not grounds to send the build back. The exact-patch rule below stands over any design-bar item.

Update this project's website for Basket Protocol (vault 6, BaskVault 0x739fD5B653aA092a434534FA1aDE67C1770b5a5B on Robinhood Chain, chain id 4663) from one patch file. Change no contract. The patch is already built and checked against this project's current commit 507f2b1: apply it exactly, rebuild, rerun the checks and deliver. It changes no transaction: every send keeps its function, arguments and calldata for the same inputs. It adds one chain read (the receipt of the visitor's own confirmed deposit, to show the BASK received) and no wallet request. Disconnect forgets the connection on this page; the visitor can remove the site's saved permission in the wallet app.

1. Patch. Download https://gateway.pinata.cloud/ipfs/bafkreialgxix5c44nx7prq64afjx3qxchcn3mqmevqdbhws42src7moebm (if that fails: https://ipfs.filebase.io/ipfs/bafkreialgxix5c44nx7prq64afjx3qxchcn3mqmevqdbhws42src7moebm). It must be 246,058 bytes with SHA-256 0b35d17e8b9c6dfef8c3dc01537dc2e2389bb64184ac0613da5cd4a22fb1c40b; if not, stop and report. On 507f2b1 run git apply --check, then git apply. Apply it as it is: do not restyle, re-word or rewrite anything it changes, and never change the look or a text to make a check pass. It touches only web/src (Flows.tsx, wallet.tsx, main.tsx, styles.css), web/scripts (check-calldata, check-bundle, check-visibility, check-art, run-browser), web/validation/README.md, README.md and DESIGN.md.

2. What it does (already implemented; for your records):

• Deposit: the form opens with the listed open stocks the connected wallet holds, largest dollar value first, one row each with balance, dollar value, amount box, Max and Remove. Balances worth under one cent sit behind "Show small balances". A stock whose own price check fails is greyed with the reason and a Refresh. One search box "Add another stock" (ticker or token address, at most six matches) replaces the grid of Add buttons. A running dollar total, called an estimate. The status is one line while deposits are open and the full box otherwise. The page is one column.
• Deposit: a closed list "All stocks you can deposit (N)" with every open stock of the vault's own list, A to Z; a press adds that stock to the form.
• Deposit: after a confirmed deposit, "You received X BASK." from the Deposit event of that transaction's receipt.
• Redeem: the BASK amount box is emptied after a confirmed redeem.
• Header: a small Disconnect button beside the address. The page forgets the wallet, stays disconnected after a reload until Connect wallet is pressed and answered, and makes no wallet request or delayed permission change.
• Checks: gates re-scoped to this update without loosening them. check-calldata: every source but Flows, wallet and main is byte-identical to 507f2b1 and those three equal it once their listed pieces are put back; send(), approveAll and every onSubmit and getSpec equal 507f2b1; the one new read is pinned to its place, no wallet request is added, and the initial account reply is guarded against overwriting a newer connection action or account event; network and page-load sinks are scanned; complete ordered added calls and direct or aliased transaction-state writes are independently pinned outside the regenerated lists. run-browser.mjs keeps its 61 checks, adds 13 for the new pages, and its 70 wallet sends are the same as before, send for send (only deadlines follow the clock). Its 24 screenshots are now JPEG quality 32 (36 before): the Deposit pictures with a row per stock are much taller and the quality-36 set no longer fits the 8 MiB delivery budget.

3. Then in web/: npm ci, npm run typecheck, npm run build, then node scripts/run-browser.mjs before the other checks (must pass: 74 checks, or 75 when it starts outside the vault's deposit hours and adds its own time-warp check as before; 70 wallet sends; 24 screenshots; fork block 83874298 through its read-only proxy as in v9 and v10; needs outbound HTTPS to the archive RPC; it rewrites the screenshots that check-bundle counts), then every check: validate, check-preservation, check-interface, check-calldata, check-art, check-motion, inspect-export, check-guards, check-fixes, check-visibility (baseline = the 507f2b1 dist), check-bundle. Commit the rebuilt dist and every regenerated artifact with the patched sources. The build should give dist/assets/index-O9B-ydQc.js (SHA-256 b00c8fc2424b865d0cad1562d1a719509f2d59283c42a5c455b638b5a3f7c9ef) and dist/assets/index-D1E9mcXX.css (SHA-256 cc2fbd60fd75bf20cf245e771ba6062f4f5a6e3b9e306ce8d9d0544ecd2c4330); if it differs, say how. Never loosen a check; if one fails, report it instead of changing the patched code.

4. Add a dated artifacts/validation.md entry. Before delivery: build, typecheck and every check pass; live verifyNetwork passes; art files match their manifest; no file has a vault 1-5 address fragment.