docs: todo,ui,testing (18 files)

README.md

@@ -77,7 +77,7 @@ Captured from this machine to document the local development environment:
 
 ## Key Highlights
 
-- **6-Level Permission System**: Each user level from Public to SuperGod maps to documented routes, policies, and role inheritance so you can reason about features before touching code ([`docs/architecture/5-level-system.md`](./docs/architecture/5-level-system.md)).
+- **5-Level Permission System**: Each user level from Public to SuperGod maps to documented routes, policies, and role inheritance so you can reason about features before touching code ([`docs/architecture/5-level-system.md`](./docs/architecture/5-level-system.md)).
 - **Multi-tenant data platform**: Prisma, tenant-aware storage, and quota management patterns keep all queries scoped by `tenantId` while keeping schema evolution safe ([`docs/architecture/database.md`](./docs/architecture/database.md)).
 - **Declarative packages & Lua logic**: Modular `packages/*/seed` definitions let you ship UI/features via JSON/Lua, while the Lua sandbox protects the runtime ([`docs/architecture/packages.md`](./docs/architecture/packages.md), [`docs/lua/README.md`](./docs/lua/README.md)).
 - **Type-safe + CI-ready workflow**: TypeScript tooling, Act local workflows, and targeted scripts keep linting, testing, and deploy checks consistent with the documentation hub ([`docs/README.md`](./docs/README.md)).

docs/architecture/permissions-levels.md

@@ -1,16 +1,17 @@
 # Permission Levels Reference
 
-MetaBuilder runs on a five-tier permission stack that spans the public surface, authenticated experiences, moderation, system design, and governance.
+MetaBuilder runs on a six-tier permission stack that spans the public surface, authenticated experiences, moderation, governance, system design, and governance.
 
 ## Tier breakdown
 
 | Level | Name | Responsibilities |
 |-------|------|------------------|
-| 1 | Guest | Browse marketing content, view stories, consume public dashboards without any write access.
-| 2 | Regular User | Maintain a profile, tune personal settings, launch saved dashboards, and participate in public workflows.
-| 3 | Moderator | Keep the community healthy by resolving flags, reviewing reports, and adjusting shared spaces.
-| 4 | God | Author blueprints, edit the front page, seed packages, and design workflows for the multiverse.
-| 5 | Super God | Transfer front page ownership, promote gods, run audits, and override safety nets when necessary.
+| 1 | Public | Browse marketing content, view stories, and consume public dashboards without any write access. |
+| 2 | Regular User | Maintain a profile, tune personal settings, launch saved dashboards, and participate in community workflows. |
+| 3 | Moderator | Keep the community healthy by resolving flags, reviewing reports, and guiding shared spaces. |
+| 4 | Admin | Manage tenant policies, approve shared content, and coordinate escalation paths. |
+| 5 | God | Author blueprints, edit the front page, seed packages, and design workflows for the multiverse. |
+| 6 | Super God | Transfer front page ownership, promote gods, run audits, and override safety nets when necessary. |
 
 ## Interactive view