From a023f297339bb9a354bbd685528b648c202be0ab Mon Sep 17 00:00:00 2001
From: arpan <contact@arpanghoshal.com>
Date: Tue, 8 Sep 2026 17:30:23 +0530
Subject: [PATCH 1/2] Rebuild the execution boundary demo and give it its own
 page

The demo said what CTRLRun decided and never said what it was deciding
instead of. A reader arriving from an agent framework could not tell which
part of the picture was their model and which part was this library, so the
whole thing read as one more layer of the same kind. Three changes fix that.

The explorer opens with three lanes -- the LLM decides what to do, CTRLRun
decides whether it may run, the real system is where it becomes real -- and
every outcome now pairs what the model believed against what the kernel did.
Under the request sits the ladder of checks in order, marking which one
stopped the action, so a refusal is attributable to a check rather than
appearing as a verdict from nowhere. Each outcome carries the line the
caller's own code would see and a link to the concept page behind it.

Every scenario is now addressable. `?domain=&action=&situation=` is read on
mount, the share row hands over the link, and `/try` hosts the same explorer
as a page of its own -- the home page section stays where it is. The lost
response section links into the case it describes rather than only naming it.

A new home page section says where CTRLRun sits in plain English and hands
off to the architecture for the internals, and the medical affairs build map
opens rather than hiding behind a summary.

The link checker was reporting `/try?situation=uncertain` as a missing page:
a query string is not part of a path, and the strip is tested in both
directions so a genuinely missing page carrying a query still fails.
---
 docs/SEO.md                         |   1 +
 docs/docs.json                      |   1 +
 docs/docs/demos/index.mdx           |   1 +
 docs/docs/try-it.mdx                |   6 +
 docs/index.mdx                      |  16 +-
 docs/medical-workbench.js           |   2 +-
 docs/snippets/scenario-explorer.jsx | 270 +++++++++++++++++++++++++---
 docs/style.css                      |  71 ++++++++
 docs/try.mdx                        |  47 +++++
 tests/test_docs_audit.py            |  15 ++
 tools/docs_audit/links.py           |   6 +-
 11 files changed, 405 insertions(+), 31 deletions(-)
 create mode 100644 docs/try.mdx

diff --git a/docs/SEO.md b/docs/SEO.md
index 766e6c4..e141e8b 100644
--- a/docs/SEO.md
+++ b/docs/SEO.md
@@ -150,5 +150,6 @@ not needed; the assistants that do read `llms.txt` get Mintlify's.
 | Page | Search intent |
 |---|---|
 | `index` | Execution safety for AI agents |
+| `try` | try AI agent guardrails demo · what stops an agent action |
 | `risk-check` | AI agent execution risk assessment |
 | `protect-my-agent` | AI agent architecture review and integration help |
diff --git a/docs/docs.json b/docs/docs.json
index fc3d5b2..0fa16ed 100644
--- a/docs/docs.json
+++ b/docs/docs.json
@@ -37,6 +37,7 @@
         "tab": "CTRLRun",
         "pages": [
           "index",
+          "try",
           "risk-check",
           "protect-my-agent"
         ]
diff --git a/docs/docs/demos/index.mdx b/docs/docs/demos/index.mdx
index 6ea40db..ab26478 100644
--- a/docs/docs/demos/index.mdx
+++ b/docs/docs/demos/index.mdx
@@ -36,3 +36,4 @@ on the first press and cache after that; a laptop offline can run the same thing
 - [Why](/docs/why) — what these demos are demonstrating, in 700 words
 - [Get started](/docs/get-started/quickstart) — the same guarantees around your own function
 - [Cookbook](/docs/cookbook/index) — nineteen wirings you can copy
+- [The scenario demo](/try) — the same checks across 48 domains, drawn rather than run
diff --git a/docs/docs/try-it.mdx b/docs/docs/try-it.mdx
index 4c8e4f9..3fda2d0 100644
--- a/docs/docs/try-it.mdx
+++ b/docs/docs/try-it.mdx
@@ -8,6 +8,11 @@ One protected refund, under one policy, with a fake Stripe that commits before i
 missing. Change the amount, lose the reply, approve one amount and execute another, and read
 what refused you.
 
+<Note>
+  Coming from the [scenario demo](/try)? That page draws the decisions across 48 domains.
+  This one runs them: real Python, the released wheel, and every exception is the library's own.
+</Note>
+
 <div id="ctrlrun-playground">
   <div style={{ display: "flex", flexWrap: "wrap", gap: "12px", alignItems: "flex-end" }}>
     <label style={{ display: "flex", flexDirection: "column", fontSize: "13px" }}>
@@ -264,5 +269,6 @@ this page failing, not the library.
 ## Next
 
 - [Protect your first action](/docs/get-started/quickstart): the same thing, in your own process.
+- [The scenario demo](/try): the same checks, in your domain, with nothing running.
 - [Outcomes and AMBIGUOUS](/docs/concepts/outcomes-and-ambiguous): what scenario 1 means.
 - [Get started](/docs/get-started/install) · [Why](/docs/why).
diff --git a/docs/index.mdx b/docs/index.mdx
index 3d66a3e..1b4769e 100644
--- a/docs/index.mdx
+++ b/docs/index.mdx
@@ -35,14 +35,26 @@ import { ScenarioExplorer } from "/snippets/scenario-explorer.jsx";
 
   <section className="cr-section cr-failure" aria-labelledby="cr-failure-title">
     <div><p className="cr-eyebrow">ONE LOST RESPONSE. TWO REFUNDS.</p><h2 id="cr-failure-title">The refund succeeded. The agent thinks it failed.</h2><p>An agent refunds &#36;500. The provider processes it, but the response is lost. The agent sees an error and tries again.</p></div>
-    <div className="cr-comparison"><div><span className="cr-step">WITHOUT CTRLRUN</span><p>Retry <span aria-hidden="true">→</span> another &#36;500 may go out.</p></div><div className="cr-safe"><span className="cr-step">WITH CTRLRUN</span><p><strong>Outcome uncertain</strong> → pause → confirm what happened → only then continue.</p></div></div>
+    <div className="cr-comparison"><div><span className="cr-step">WITHOUT CTRLRUN</span><p>Retry <span aria-hidden="true">→</span> another &#36;500 may go out.</p></div><div className="cr-safe"><span className="cr-step">WITH CTRLRUN</span><p><strong>Outcome uncertain</strong> → pause → confirm what happened → only then continue.</p></div><p className="cr-caption"><a href="/try?domain=Payments&amp;action=Refund%20payment&amp;situation=uncertain">Walk through this exact case in the demo →</a></p></div>
   </section>
 
   <section className="cr-section" id="try-ctrlrun" aria-labelledby="cr-try-title">
-    <div className="cr-section-heading"><div><p className="cr-eyebrow">TRY THE EXECUTION BOUNDARY</p><h2 id="cr-try-title">Choose an action. See what CTRLRun stops.</h2></div><p className="cr-caption">No login. No API key. No setup.</p></div>
+    <div className="cr-section-heading"><div><p className="cr-eyebrow">TRY THE EXECUTION BOUNDARY</p><h2 id="cr-try-title">Choose an action. See what CTRLRun stops.</h2><p>Your model chooses the action. CTRLRun decides whether it may execute. Pick a domain, pick the moment it goes wrong, and read which check refused it.</p></div><p className="cr-caption">No login. No API key. No setup.<br />48 domains, 7 ways an action goes wrong.<br /><a href="/try" data-cr-event="try_clicked">Open the demo on its own page ↗</a></p></div>
     <ScenarioExplorer />
   </section>
 
+  <section className="cr-section cr-how" id="how-it-works" aria-labelledby="cr-how-title">
+    <div className="cr-section-heading"><div><p className="cr-eyebrow">HOW IT WORKS</p><h2 id="cr-how-title">Where CTRLRun sits,<br />in plain English.</h2></div><p className="cr-caption">A library inside your process.<br />Not a service in front of it.</p></div>
+    <p className="cr-intro">Your agent decides what to do. Somewhere after that, your code calls something that changes the real world: charges a card, deletes a user, sends the email. CTRLRun goes in that one gap, and only that gap. It never sees the prompt, the reasoning or the conversation.</p>
+    <div className="cr-how-steps">
+      <div><span className="cr-step">01 / YOU NAME THE ACTION</span><h3>Wrap the function that causes the effect</h3><p>You give it a name and an effect key: the identity of the business action, like <code>refund:txn_4821</code>. Two attempts at the same business action carry the same key, whether they come from a retry, a second worker, or a process that restarted.</p></div>
+      <div><span className="cr-step">02 / IT CHECKS BEFORE THE CALL</span><h3>Four questions, every time</h3><p>Is this agent entitled to act at all? Does policy allow these exact arguments, require a person, or deny them? If a human approved something, was it this exact action? Could this action already have happened? Anything unclear stops the call.</p></div>
+      <div><span className="cr-step">03 / IT RESERVES FIRST</span><h3>The claim is written before the effect</h3><p>The effect is reserved in a database before your function runs, not after it returns. That ordering is the whole trick: if the process dies mid-call, the reservation is still there, so the retry meets a claim instead of an empty table.</p></div>
+      <div><span className="cr-step">04 / IT RECORDS WHAT HAPPENED</span><h3>Including “we do not know”</h3><p>Committed, failed, or unknown. A timeout is not a failure, it is an unknown outcome, and CTRLRun holds it that way until something confirms it. A receipt records the action, the decision behind it, the approval and the result.</p></div>
+    </div>
+    <div className="cr-how-close"><p><strong>What it is not.</strong> It does not read prompts, choose models, rank tools, or judge whether the agent's reasoning was any good. It is not an LLM, and it does not call one. It checks the action, not the thinking.</p><a className="cr-text-link" href="/docs/ARCHITECTURE">Read the architecture: the modules, the store, the receipt chain →</a></div>
+  </section>
+
   <section className="cr-section cr-integration" aria-labelledby="cr-integrate-title">
     <div><p className="cr-eyebrow">FOR THE PEOPLE BUILDING IT</p><h2 id="cr-integrate-title">Start at the function<br />that takes action.</h2><p>Wrap the call that causes the real-world effect. Policy decides whether it can run, needs approval, or must stop. CTRLRun protects the effect and records what happened.</p><p className="cr-caption">Python, agent frameworks, or an MCP gateway.<br />The execution boundary stays the same.</p><p className="cr-caption">Execution state survives restarts, so an uncertain outcome still blocks a blind retry. <a href="/docs/production/recovery">How recovery works →</a></p><a className="cr-text-link" href="/docs/get-started/quickstart" data-cr-event="integration_clicked">Start integrating <span aria-hidden="true">→</span></a></div>
     <div className="cr-code"><div className="cr-install"><span aria-hidden="true">$ </span><code>pip install ctrlrun</code></div><pre aria-label="Python integration example"><code>{"import ctrlrun\n\n@ctrlrun.protect(\n    \"stripe.refund\",\n    effect=\"refund:{payment_id}\"\n)\ndef refund(payment_id, amount):\n    ..."}</code></pre><p>Illustrative wrapper. The quickstart adds your policy, identity, and approval flow.</p><ul className="cr-outcomes" aria-label="Execution outcomes"><li><code>allow</code> → execute</li><li><code>approve</code> → wait for exact approval</li><li><code>deny</code> → do not execute</li><li><code>unknown outcome</code> → do not retry blindly</li></ul></div>
diff --git a/docs/medical-workbench.js b/docs/medical-workbench.js
index ed36653..d2afa0d 100644
--- a/docs/medical-workbench.js
+++ b/docs/medical-workbench.js
@@ -1,7 +1,7 @@
 /* Medical evidence workflow. Synthetic fixtures; real CTRLRun release decisions. */
 (function(){
 "use strict";
-var TEMPLATE="<div id=\"cr-medical-workbench\" aria-label=\"CTRLRun Medical Affairs evidence workbench\">\n  \n  <header class=\"cr-top\">\n    <div class=\"cr-brand\"><span class=\"cr-logo\" aria-hidden=\"true\">\u2713</span><span>CTRLRun</span><span class=\"cr-sep\">/</span><span>Medical Affairs</span></div>\n    <span class=\"cr-badge\">Synthetic evidence \u00b7 real CTRLRun controls</span>\n  </header>\n  <div class=\"cr-body\">\n    <div class=\"cr-title\">\n      <div><div class=\"cr-small\">EVIDENCE WORKBENCH / DEMO-001</div><h2>From evidence to a reviewed brief</h2><div class=\"cr-small\">Compound X \u00b7 Condition Y \u00b7 Fictional products, studies and findings</div></div>\n      <div class=\"cr-actions\"><span class=\"cr-badge\" id=\"cr-doc-status\">Draft \u00b7 v1</span><button type=\"button\" class=\"cr-button\" data-action=\"restart\">Start a new case</button></div>\n    </div>\n    <nav class=\"cr-steps\" aria-label=\"Evidence workflow\">\n      <button class=\"cr-step\" type=\"button\" data-step=\"0\" aria-current=\"step\"><span class=\"cr-num\">01</span>Retrieve</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"1\"><span class=\"cr-num\">02</span>Reason</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"2\"><span class=\"cr-num\">03</span>Cite</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"3\"><span class=\"cr-num\">04</span>Validate</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"4\"><span class=\"cr-num\">05</span>Review</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"5\"><span class=\"cr-num\">06</span>Release</button>\n    </nav>\n    <main id=\"cr-stage\" aria-label=\"Selected workflow stage\"></main>\n    <div class=\"cr-next\"><span class=\"cr-small\" id=\"cr-stage-caption\"></span><button id=\"cr-next-button\" type=\"button\" class=\"cr-button primary\">Reason over evidence </button></div>\n    <div class=\"cr-actions\"><button type=\"button\" class=\"cr-button\" data-action=\"download-brief\">Download review brief</button><button type=\"button\" class=\"cr-button\" data-action=\"download-audit\">Download evidence &amp; audit record</button></div>\n<div id=\"cr-announcement\" class=\"cr-small\" aria-live=\"polite\" style=\"margin-top:10px\"></div>\n  </div>\n  <footer class=\"cr-footer\">\n    <details><summary>Build map \u00b7 what ctrlrun provides, and what you add</summary>\n      <div class=\"cr-map\">\n        <section><span class=\"cr-badge\">Build around CTRLRun</span><h4 style=\"margin-top:10px\">Biomedical evidence harness</h4><ul><li>PubMed / trial / licensed document connectors</li><li>Source snapshots and passage IDs</li><li>LLM extraction, synthesis and claim mapping</li><li>Independent checks and reviewer interface</li></ul></section>\n        <section><span class=\"cr-badge ok\">Existing ctrlrun primitives</span><h4 style=\"margin-top:10px\">Control the release action</h4><ul><li>Allow / approve / deny policy</li><li>Approval bound to exact action arguments</li><li>Effect reservation and duplicate blocking</li><li>Ambiguous outcomes and audit receipts</li></ul></section>\n        <section><span class=\"cr-badge\">Integration work</span><h4 style=\"margin-top:10px\">Trusted release service</h4><ul><li>Verify validation records on the server</li><li>Bind immutable content and evidence digests</li><li>Authenticate reviewers and restrict write access</li><li>Check destination status before retry</li></ul></section>\n      </div>\n    </details>\n  </footer>\n</div>";
+var TEMPLATE="<div id=\"cr-medical-workbench\" aria-label=\"CTRLRun Medical Affairs evidence workbench\">\n  \n  <header class=\"cr-top\">\n    <div class=\"cr-brand\"><span class=\"cr-logo\" aria-hidden=\"true\">\u2713</span><span>CTRLRun</span><span class=\"cr-sep\">/</span><span>Medical Affairs</span></div>\n    <span class=\"cr-badge\">Synthetic evidence \u00b7 real CTRLRun controls</span>\n  </header>\n  <div class=\"cr-body\">\n    <div class=\"cr-title\">\n      <div><div class=\"cr-small\">EVIDENCE WORKBENCH / DEMO-001</div><h2>From evidence to a reviewed brief</h2><div class=\"cr-small\">Compound X \u00b7 Condition Y \u00b7 Fictional products, studies and findings</div></div>\n      <div class=\"cr-actions\"><span class=\"cr-badge\" id=\"cr-doc-status\">Draft \u00b7 v1</span><button type=\"button\" class=\"cr-button\" data-action=\"restart\">Start a new case</button></div>\n    </div>\n    <nav class=\"cr-steps\" aria-label=\"Evidence workflow\">\n      <button class=\"cr-step\" type=\"button\" data-step=\"0\" aria-current=\"step\"><span class=\"cr-num\">01</span>Retrieve</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"1\"><span class=\"cr-num\">02</span>Reason</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"2\"><span class=\"cr-num\">03</span>Cite</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"3\"><span class=\"cr-num\">04</span>Validate</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"4\"><span class=\"cr-num\">05</span>Review</button>\n      <button class=\"cr-step\" type=\"button\" data-step=\"5\"><span class=\"cr-num\">06</span>Release</button>\n    </nav>\n    <main id=\"cr-stage\" aria-label=\"Selected workflow stage\"></main>\n    <div class=\"cr-next\"><span class=\"cr-small\" id=\"cr-stage-caption\"></span><button id=\"cr-next-button\" type=\"button\" class=\"cr-button primary\">Reason over evidence </button></div>\n    <div class=\"cr-actions\"><button type=\"button\" class=\"cr-button\" data-action=\"download-brief\">Download review brief</button><button type=\"button\" class=\"cr-button\" data-action=\"download-audit\">Download evidence &amp; audit record</button></div>\n<div id=\"cr-announcement\" class=\"cr-small\" aria-live=\"polite\" style=\"margin-top:10px\"></div>\n  </div>\n  <footer class=\"cr-footer\">\n    <details open><summary>Build map \u00b7 what ctrlrun provides, and what you add</summary>\n      <div class=\"cr-map\">\n        <section><span class=\"cr-badge\">Build around CTRLRun</span><h4 style=\"margin-top:10px\">Biomedical evidence harness</h4><ul><li>PubMed / trial / licensed document connectors</li><li>Source snapshots and passage IDs</li><li>LLM extraction, synthesis and claim mapping</li><li>Independent checks and reviewer interface</li></ul></section>\n        <section><span class=\"cr-badge ok\">Existing ctrlrun primitives</span><h4 style=\"margin-top:10px\">Control the release action</h4><ul><li>Allow / approve / deny policy</li><li>Approval bound to exact action arguments</li><li>Effect reservation and duplicate blocking</li><li>Ambiguous outcomes and audit receipts</li></ul></section>\n        <section><span class=\"cr-badge\">Integration work</span><h4 style=\"margin-top:10px\">Trusted release service</h4><ul><li>Verify validation records on the server</li><li>Bind immutable content and evidence digests</li><li>Authenticate reviewers and restrict write access</li><li>Check destination status before retry</li></ul></section>\n      </div>\n    </details>\n  </footer>\n</div>";
 var MODULE = [
   "\"\"\"Synthetic evidence workbench: real policy, approval, effects, and receipts.",
   "",
diff --git a/docs/snippets/scenario-explorer.jsx b/docs/snippets/scenario-explorer.jsx
index 910d4b2..41691d0 100644
--- a/docs/snippets/scenario-explorer.jsx
+++ b/docs/snippets/scenario-explorer.jsx
@@ -1,25 +1,59 @@
-export const ScenarioExplorer = () => {
+export const ScenarioExplorer = ({ standalone = false }) => {
   const domains = [{"name": "Finance", "actions": ["Refund customer", "Transfer funds", "Issue payout", "Approve withdrawal"]}, {"name": "Banking", "actions": ["Transfer funds", "Freeze account", "Change credit limit", "Release transaction"]}, {"name": "Payments", "actions": ["Charge customer", "Refund payment", "Issue payout", "Capture payment", "Retry payment"]}, {"name": "FinTech", "actions": ["Move funds", "Approve withdrawal", "Suspend account", "Release payment"]}, {"name": "Insurance", "actions": ["Issue claim payment", "Change policy", "Approve claim", "Cancel policy", "Escalate fraud review"]}, {"name": "E-commerce", "actions": ["Refund order", "Cancel order", "Modify shipment", "Issue store credit", "Change delivery address"]}, {"name": "Retail", "actions": ["Modify order", "Issue refund", "Apply discount", "Cancel fulfillment", "Replace order"]}, {"name": "Customer Support", "actions": ["Refund customer", "Cancel subscription", "Apply account credit", "Modify account", "Reset access"]}, {"name": "SaaS", "actions": ["Delete account", "Suspend account", "Change plan", "Change permissions", "Grant feature access"]}, {"name": "Enterprise Software", "actions": ["Update ERP record", "Modify CRM record", "Approve workflow", "Change master data", "Create vendor record"]}, {"name": "Sales", "actions": ["Approve discount", "Send proposal", "Create order", "Change opportunity stage", "Approve pricing"]}, {"name": "CRM and Revenue Operations", "actions": ["Modify customer record", "Reassign account", "Change lifecycle status", "Trigger outbound communication", "Create renewal"]}, {"name": "Marketing", "actions": ["Launch campaign", "Pause campaign", "Change ad budget", "Send bulk communication", "Modify audience"]}, {"name": "Advertising", "actions": ["Increase spend", "Pause ad set", "Change targeting", "Publish creative", "Change bidding configuration"]}, {"name": "HR", "actions": ["Send offer", "Withdraw offer", "Start onboarding", "Start offboarding", "Change employee status"]}, {"name": "Payroll", "actions": ["Issue bonus", "Adjust payroll", "Approve reimbursement", "Reverse payment", "Change deduction"]}, {"name": "Legal", "actions": ["Send contract", "Trigger signature", "Submit filing", "Send legal notice", "Change contract status"]}, {"name": "Compliance", "actions": ["Approve exception", "Block transaction", "Escalate review", "Release restricted workflow", "Change risk status"]}, {"name": "Cybersecurity", "actions": ["Disable account", "Revoke session", "Block IP", "Isolate endpoint", "Rotate credential"]}, {"name": "Identity and Access", "actions": ["Grant role", "Revoke role", "Elevate privilege", "Create privileged account", "Disable service account"]}, {"name": "IT Operations", "actions": ["Reset password", "Provision access", "Revoke access", "Restart service", "Execute remediation"]}, {"name": "DevOps", "actions": ["Deploy production", "Roll back deployment", "Delete infrastructure", "Restart production service", "Modify production configuration"]}, {"name": "Cloud Infrastructure", "actions": ["Terminate instance", "Modify firewall", "Scale infrastructure", "Rotate secret", "Change cloud resource"]}, {"name": "Software Engineering", "actions": ["Merge pull request", "Publish release", "Delete branch", "Modify repository settings", "Rotate secret"]}, {"name": "CI/CD", "actions": ["Deploy release", "Publish package", "Roll back release", "Modify pipeline", "Change protected branch settings"]}, {"name": "Data Engineering", "actions": ["Delete dataset", "Modify production table", "Execute migration", "Trigger production pipeline", "Grant database access"]}, {"name": "Machine Learning", "actions": ["Deploy model", "Roll back model", "Change serving configuration", "Promote model to production", "Trigger retraining"]}, {"name": "Healthcare Operations", "actions": ["Schedule appointment", "Cancel appointment", "Send patient communication", "Submit authorization workflow", "Update administrative workflow"]}, {"name": "Pharmaceuticals and Life Sciences", "actions": ["Release controlled workflow", "Update operational record", "Trigger regulatory process", "Update trial workflow status", "Escalate adverse-event workflow"]}, {"name": "Manufacturing", "actions": ["Stop production workflow", "Release batch", "Change machine configuration", "Trigger maintenance", "Change production order"]}, {"name": "Supply Chain", "actions": ["Reroute shipment", "Release inventory", "Modify supplier order", "Change warehouse allocation", "Cancel shipment"]}, {"name": "Logistics", "actions": ["Dispatch vehicle", "Cancel delivery", "Change destination", "Reroute shipment", "Release shipment"]}, {"name": "Travel", "actions": ["Cancel booking", "Issue refund", "Modify reservation", "Upgrade booking", "Issue travel credit"]}, {"name": "Airlines", "actions": ["Rebook passenger", "Refund ticket", "Modify itinerary", "Change seat", "Release compensation"]}, {"name": "Hospitality", "actions": ["Cancel reservation", "Issue credit", "Change booking", "Modify guest record", "Upgrade reservation"]}, {"name": "Telecom", "actions": ["Activate service", "Disable SIM", "Change customer plan", "Apply account credit", "Modify network configuration"]}, {"name": "Energy and Utilities", "actions": ["Restore service", "Disconnect service", "Trigger billing adjustment", "Dispatch field service", "Change customer tariff"]}, {"name": "Automotive", "actions": ["Unlock vehicle", "Change fleet assignment", "Trigger roadside workflow", "Approve repair", "Modify vehicle configuration"]}, {"name": "Robotics", "actions": ["Start machine", "Stop machine", "Unlock physical access", "Move robot", "Trigger physical process"]}, {"name": "Real Estate", "actions": ["Send lease", "Change listing status", "Release deposit workflow", "Modify tenant record", "Submit offer"]}, {"name": "Education", "actions": ["Enroll student", "Withdraw student", "Change registration", "Release certificate", "Modify administrative access"]}, {"name": "Public Sector", "actions": ["Approve application", "Change case status", "Release payment workflow", "Update citizen record", "Trigger permit workflow"]}, {"name": "Procurement", "actions": ["Create purchase order", "Approve purchase", "Change supplier", "Release payment workflow", "Cancel purchase order"]}, {"name": "Accounting", "actions": ["Approve invoice", "Issue payment", "Reverse journal entry", "Modify vendor details", "Approve reimbursement"]}, {"name": "Marketplace", "actions": ["Release seller payout", "Suspend seller", "Refund buyer", "Cancel transaction", "Change seller permissions"]}, {"name": "Fraud Operations", "actions": ["Freeze transaction", "Block account", "Release transaction", "Disable payment method", "Escalate investigation"]}, {"name": "Communication", "actions": ["Send email", "Send SMS", "Send Slack message", "Publish notification", "Send bulk communication"]}, {"name": "General Business Operations", "actions": ["Approve request", "Update business record", "Trigger payment", "Delete record", "Grant access", "Trigger downstream automation"]}];
-  const [domain, setDomain] = useState('Finance');
+  const quick = ['Payments', 'Customer Support', 'DevOps', 'Identity and Access', 'HR', 'Healthcare Operations'];
+  const situations = [
+    { value: 'approval', label: 'A person has to say yes first' },
+    { value: 'allowed', label: 'It is inside the agent’s limits' },
+    { value: 'blocked', label: 'The agent is not allowed to do it' },
+    { value: 'mismatch', label: 'The agent changed it after approval' },
+    { value: 'duplicate', label: 'It already happened once' },
+    { value: 'uncertain', label: 'The reply was lost' },
+    { value: 'reconcile', label: 'The agent retries without knowing' }
+  ];
+  const checks = [
+    { key: 'authority', label: 'Authority', asks: 'Is this agent entitled to act at all?' },
+    { key: 'policy', label: 'Policy', asks: 'For these exact arguments: allow, approve, or deny?' },
+    { key: 'approval', label: 'Approval binding', asks: 'Does a human decision match this exact action?' },
+    { key: 'effect', label: 'Effect reservation', asks: 'Could this action already have happened?' },
+    { key: 'outcome', label: 'Outcome', asks: 'Did the real system act, and do we know for certain?' }
+  ];
+  const [domain, setDomain] = useState('Payments');
   const [actionIndex, setActionIndex] = useState(0);
   const [query, setQuery] = useState('');
   const [pickerOpen, setPickerOpen] = useState(false);
   const [condition, setCondition] = useState('approval');
   const [stage, setStage] = useState('initial');
+  const [trail, setTrail] = useState([]);
+  const [copied, setCopied] = useState(false);
   const [activeOption, setActiveOption] = useState(0);
   const searchRef = useRef(null);
   const pickerRef = useRef(null);
   const buttonRef = useRef(null);
-  const selected = domains.find(item => item.name === domain);
+  const selected = domains.find(item => item.name === domain) || domains[0];
   const filtered = domains.filter(item => item.name.toLowerCase().includes(query.toLowerCase()));
-  const action = selected.actions[actionIndex];
+  const action = selected.actions[Math.min(actionIndex, selected.actions.length - 1)];
   const money = /refund|funds|payout|payment|charge|bonus|reimbursement|credit|withdrawal|invoice|discount|spend|budget/i.test(action);
   const physical = ['Robotics', 'Automotive', 'Manufacturing', 'Energy and Utilities'].includes(domain);
   const original = money ? '$500' : 'one approved target';
   const changed = money ? '$5,000' : 'all targets';
+  const reference = money ? 'txn_4821' : 'rec_4821';
+  const effectKey = action.toLowerCase().replace(/[^a-z0-9]+/g, '_') + ':' + reference;
   const track = (name, extra = {}) => {
     if (typeof window !== 'undefined') window.dispatchEvent(new CustomEvent('ctrlrun:conversion', { detail: { name, domain, action, ...extra } }));
   };
+  useEffect(() => {
+    if (typeof window === 'undefined') return;
+    const params = new URLSearchParams(window.location.search);
+    const wanted = (params.get('domain') || '').toLowerCase();
+    const match = domains.find(item => item.name.toLowerCase() === wanted);
+    if (match) {
+      setDomain(match.name);
+      const index = match.actions.findIndex(item => item.toLowerCase() === (params.get('action') || '').toLowerCase());
+      setActionIndex(index >= 0 ? index : 0);
+    }
+    const situation = params.get('situation');
+    if (situations.some(item => item.value === situation)) setCondition(situation);
+  }, []);
   useEffect(() => {
     if (pickerOpen && searchRef.current) searchRef.current.focus();
   }, [pickerOpen]);
@@ -33,28 +67,171 @@ export const ScenarioExplorer = () => {
     document.addEventListener('pointerdown', outside);
     return () => document.removeEventListener('pointerdown', outside);
   }, []);
+  const restart = () => { setStage('initial'); setTrail([]); };
   const chooseDomain = name => {
-    setDomain(name); setActionIndex(0); setStage('initial'); setQuery(''); setPickerOpen(false); setActiveOption(0);
+    setDomain(name); setActionIndex(0); setQuery(''); setPickerOpen(false); setActiveOption(0); restart();
     track('domain_selected', { domain: name, action: undefined });
     if (buttonRef.current) buttonRef.current.focus();
   };
+  const viaApproval = trail.some(item => item.indexOf('A person approved') === 0);
   const states = {
-    allowed: { title: 'Allowed', code: 'ALLOW', tone: 'green', reason: 'This action is within the autonomy you gave the agent.', rule: money ? 'Example rule: this agent may act autonomously up to $1,000.' : 'Example rule: this agent may perform this action on the selected target.' },
-    approval: { title: 'Human approval required', code: 'APPROVE', tone: 'amber', reason: 'This action is higher risk, so someone needs to approve it first.', rule: money ? 'Example rule: amounts above $250 require approval.' : 'Example rule: a person must approve this action and its exact target.' },
-    blocked: { title: 'Blocked', code: 'DENY', tone: 'red', reason: 'The agent does not have permission to perform this action.', rule: 'Example rule: this action is outside the permissions assigned to this agent.' },
-    mismatch: { title: 'Changed action blocked', code: 'ApprovalMismatch', tone: 'red', reason: 'Approval was for ' + original + ', not ' + changed + '.', rule: 'Changing the amount or target requires a new approval.' },
-    duplicate: { title: 'Duplicate blocked', code: 'DuplicateEffect', tone: 'green', reason: 'This action appears to have already happened, so CTRLRun will not execute it again.', rule: 'The same business action is recognized across retries and workers.' },
-    uncertain: { title: 'Outcome uncertain', code: 'AMBIGUOUS', tone: 'amber', reason: 'The external system may have completed the action. A missing response does not mean it failed.', rule: 'Confirm what happened at the provider before continuing.' },
-    reconcile: { title: 'Reconciliation required', code: 'AMBIGUOUS', tone: 'amber', reason: 'CTRLRun will not retry until the original outcome is confirmed.', rule: 'Ask the external system, or have an operator check the original action.' },
-    approved: { title: 'Exact action approved', code: 'ALLOW', tone: 'green', reason: 'A person approved ' + action.toLowerCase() + ' for ' + original + '. Only this exact request may continue.', rule: 'Approval does not grant permission to change the amount or target.' },
-    completed: { title: 'Action completed', code: 'COMMITTED', tone: 'green', reason: 'The external system confirmed the action. Its outcome is recorded.', rule: 'A retry of the same business action must not execute it again.' }
+    allowed: {
+      title: 'Allowed, and reserved before the call',
+      code: 'ALLOW',
+      tone: 'green',
+      reason: 'This action is inside the autonomy you gave the agent, so no person is asked.',
+      llm: 'This is within my limits, so I will call the tool.',
+      kernel: 'Agreed — and the effect is reserved first, so a second worker proposing the same thing now waits.',
+      rule: money ? 'Example rule: this agent may act autonomously up to $1,000.' : 'Example rule: this agent may perform this action on the selected target.',
+      sees: 'decision=allow → your function runs',
+      doc: { href: '/docs/concepts/decisions', label: 'Decisions' },
+      marks: ['pass', 'pass', 'skip', 'pass', 'wait'],
+      notes: ['The agent holds a grant covering this action.', 'Allowed at this size.', 'Not required at this size.', 'Reserved: ' + effectKey, 'Nothing has been executed yet.']
+    },
+    approval: {
+      title: 'A person has to answer first',
+      code: 'ApprovalRequired',
+      tone: 'amber',
+      reason: 'This action is higher risk than the agent may take on its own, so execution stops until a human answers.',
+      llm: 'I am confident this is right, so I will do it now.',
+      kernel: 'Confidence is not authorisation. Nothing is called until a person answers this exact request.',
+      rule: money ? 'Example rule: amounts above $250 require approval.' : 'Example rule: a person must approve this action and its exact target.',
+      sees: 'raise ApprovalRequired(request_id="apr_7f31…")',
+      doc: { href: '/docs/get-started/three-ways-in', label: 'Human in the loop' },
+      marks: ['pass', 'stop', 'wait', 'wait', 'wait'],
+      notes: ['The agent holds a grant covering this action.', 'Decision: approve. A request is created for a human.', 'Waiting for an answer.', 'Nothing is reserved.', 'Nothing is executed.']
+    },
+    blocked: {
+      title: 'Refused before anything ran',
+      code: 'ActionDenied',
+      tone: 'red',
+      reason: 'The agent does not have permission to perform this action, so nobody is asked and nothing is called.',
+      llm: 'The tool is in my list, so I am allowed to call it.',
+      kernel: 'A tool being callable is not permission. Policy denies this action, and no approval request is created.',
+      rule: 'Example rule: this action is outside the permissions assigned to this agent.',
+      sees: 'raise ActionDenied("policy: deny")',
+      doc: { href: '/docs/concepts/fail-closed', label: 'Fail closed' },
+      marks: ['pass', 'stop', 'wait', 'wait', 'wait'],
+      notes: ['The agent is a known principal.', 'Decision: deny.', 'No human is asked about an action policy refuses.', 'Nothing is reserved.', 'Nothing is executed.']
+    },
+    mismatch: {
+      title: 'The approval no longer matches',
+      code: 'ApprovalMismatch',
+      tone: 'red',
+      reason: 'A person approved ' + original + '. The agent is now presenting that same approval for ' + changed + '.',
+      llm: 'Same action, same approval, only the number changed.',
+      kernel: 'The approval was bound to the arguments the human read. Change one and it authorises nothing.',
+      rule: 'Changing the amount or the target requires a new approval.',
+      sees: 'raise ApprovalMismatch("approved hash ≠ requested hash")',
+      doc: { href: '/docs/concepts/approval-binding', label: 'Approval binding' },
+      marks: ['pass', 'pass', 'stop', 'wait', 'wait'],
+      notes: ['The agent holds a grant covering this action.', 'Decision: approve, and one was obtained.', 'The approved action hash does not match the requested one.', 'Nothing is reserved.', 'Nothing is executed.']
+    },
+    duplicate: {
+      title: 'The second attempt is refused',
+      code: 'DuplicateEffect',
+      tone: 'green',
+      reason: 'This is the same business action as one already committed, so CTRLRun will not let it run twice.',
+      llm: 'I did not see a confirmation, so I will run it again.',
+      kernel: 'The effect key is already committed. The retry is refused, and the original receipt is returned.',
+      rule: 'One business action, one effect key, across retries, workers and restarts.',
+      sees: 'raise DuplicateEffect("' + effectKey + ' already committed")',
+      doc: { href: '/docs/concepts/effect-keys', label: 'Effect keys' },
+      marks: ['pass', 'pass', 'skip', 'stop', 'wait'],
+      notes: ['The agent holds a grant covering this action.', 'Decision unchanged.', 'Not the check that stopped this.', effectKey + ' is already committed.', 'The first outcome stands. Nothing runs again.']
+    },
+    uncertain: {
+      title: 'The outcome is not known',
+      code: 'AMBIGUOUS',
+      tone: 'amber',
+      reason: 'The call left your process and the reply never came back. The real system may have done it.',
+      llm: 'The call raised an error, so it failed. I will try again.',
+      kernel: 'An error is not evidence of failure. Unless the executor proves nothing happened, the effect is AMBIGUOUS and stays reserved.',
+      rule: 'Only a definite “it did not happen” allows a retry. Everything else is unknown.',
+      sees: 'effect ' + effectKey + ' → AMBIGUOUS (held, not failed)',
+      doc: { href: '/docs/concepts/outcomes-and-ambiguous', label: 'Outcomes and AMBIGUOUS' },
+      marks: ['pass', 'pass', 'skip', 'pass', 'stop'],
+      notes: ['The agent holds a grant covering this action.', 'Decision: allow.', 'Not the check that stopped this.', 'Reserved before the call, which is why the retry can be caught.', 'No reply. The outcome is unknown, so it is recorded as unknown.']
+    },
+    reconcile: {
+      title: 'The blind retry is refused',
+      code: 'AmbiguousEffect',
+      tone: 'amber',
+      reason: 'The first attempt may already have succeeded. CTRLRun will not run it again until that is settled.',
+      llm: 'Retrying is harmless. It probably failed.',
+      kernel: 'Probably is not good enough for an action that moves something real. Confirm at the provider, or have a person resolve it.',
+      rule: 'Reconciliation retries the observation, never the effect.',
+      sees: 'raise AmbiguousEffect("outcome unknown; blind retry refused")',
+      doc: { href: '/docs/guides/resolve-an-ambiguous-effect', label: 'Resolve an ambiguous effect' },
+      marks: ['pass', 'pass', 'skip', 'stop', 'wait'],
+      notes: ['The agent holds a grant covering this action.', 'Decision unchanged.', 'Not the check that stopped this.', effectKey + ' is held in an unknown state.', 'Settled by asking the provider, or by an operator.']
+    },
+    approved: {
+      title: 'This exact action is approved',
+      code: 'ALLOW',
+      tone: 'green',
+      reason: 'A person approved ' + action.toLowerCase() + ' for ' + original + '. Only this exact request may continue.',
+      llm: 'I have an approval, so I can proceed.',
+      kernel: 'With these arguments, yes. The approval is single-use and bound to them.',
+      rule: 'Approval does not grant permission to change the amount or the target.',
+      sees: 'approval apr_7f31… matches → your function runs',
+      doc: { href: '/docs/concepts/approval-binding', label: 'Approval binding' },
+      marks: ['pass', 'pass', 'pass', 'pass', 'wait'],
+      notes: ['The agent holds a grant covering this action.', 'Decision: approve.', 'The approved hash matches the requested one.', 'Reserved: ' + effectKey, 'Not executed yet.']
+    },
+    completed: {
+      title: 'Done once, and recorded',
+      code: 'COMMITTED',
+      tone: 'green',
+      reason: 'The real system confirmed the action. The outcome and the decision behind it are written to a receipt.',
+      llm: 'Done. I will report success.',
+      kernel: 'Committed. Any later attempt at the same business action now has something to be refused against.',
+      rule: 'A receipt records the action, the decision and the outcome — including who approved it.',
+      sees: 'outcome=committed · receipt rcp_4c2a…',
+      doc: { href: '/docs/concepts/receipts-and-evidence', label: 'Receipts and evidence' },
+      marks: ['pass', 'pass', viaApproval ? 'pass' : 'skip', 'pass', 'pass'],
+      notes: ['The agent holds a grant covering this action.', 'Decision recorded.', viaApproval ? 'Approval consumed. It cannot be replayed.' : 'Not required at this size, so none was consumed.', effectKey + ' committed.', 'Confirmed by the real system.']
+    }
   };
   const stateKey = stage === 'initial' ? condition : stage;
   const result = states[stateKey];
-  const advance = next => { setStage(next); track('scenario_completed', { outcome: next }); };
+  const advance = (next, note) => { setStage(next); setTrail(trail.concat(note)); track('scenario_completed', { outcome: next }); };
+  const symbols = { pass: '✓', stop: '✕', wait: '·', skip: '–' };
+  const shareUrl = () => {
+    const origin = typeof window !== 'undefined' ? window.location.origin : 'https://ctrlrun.dev';
+    return origin + '/try?domain=' + encodeURIComponent(domain) + '&action=' + encodeURIComponent(action) + '&situation=' + encodeURIComponent(condition);
+  };
+  const copyLink = () => {
+    track('share_copied', { situation: condition });
+    if (typeof navigator === 'undefined' || !navigator.clipboard) { setCopied(false); return; }
+    navigator.clipboard.writeText(shareUrl()).then(() => {
+      setCopied(true);
+      setTimeout(() => setCopied(false), 2500);
+    }, () => setCopied(false));
+  };
   const reviewQuestion = money ? 'Letting agents move or refund money?' : domain === 'DevOps' || domain === 'Cloud Infrastructure' || domain === 'CI/CD' ? 'Letting agents change production infrastructure?' : domain === 'Customer Support' ? 'Letting agents refund, cancel, or change customer accounts?' : domain === 'HR' || domain === 'Payroll' ? 'Letting agents change employee records or payroll workflows?' : domain === 'SaaS' || domain === 'Identity and Access' ? 'Letting agents modify accounts, permissions, or customer data?' : 'Letting agents take action in ' + domain.toLowerCase() + '?';
   return (
     <div className="cr-explorer">
+      <div className="cr-lanes">
+        <div className="cr-lane">
+          <span className="cr-step">YOUR AGENT · THE LLM</span>
+          <strong>Decides what to do</strong>
+          <p>Reads the ticket, picks the tool, chooses the arguments, and decides to try again when a call errors. This is the part you built, and CTRLRun never touches it.</p>
+        </div>
+        <span className="cr-flow-arrow" aria-hidden="true">→</span>
+        <div className="cr-lane cr-lane-control">
+          <span className="cr-step">CTRLRUN · THIS TOOL</span>
+          <strong>Decides whether it may run</strong>
+          <p>Sees no prompt, no reasoning, no chat. It sees one thing: the action about to leave your process, with its exact arguments. It answers whether that may execute now, and records what happened.</p>
+        </div>
+        <span className="cr-flow-arrow" aria-hidden="true">→</span>
+        <div className="cr-lane">
+          <span className="cr-step">THE REAL SYSTEM</span>
+          <strong>Where it becomes real</strong>
+          <p>Stripe, your database, the Kubernetes API, an email server. None of them can tell a first attempt from a retry, and a lost reply looks exactly like a failure.</p>
+        </div>
+      </div>
+      <p className="cr-lane-note">CTRLRun is not a model, a prompt layer, or a guardrail on what the agent <em>says</em>. It is the check on what the agent <em>does</em>, in the last moment before the effect is real.</p>
       <div className="cr-demo-toolbar">
         <div className="cr-field cr-domain-picker" ref={pickerRef}>
           <span id="cr-domain-label">Choose your domain</span>
@@ -74,25 +251,64 @@ export const ScenarioExplorer = () => {
             </div>
           </div>}
         </div>
-        <label className="cr-field">Choose an action<select value={actionIndex} onChange={event => { const index = Number(event.target.value); setActionIndex(index); setStage('initial'); track('use_case_selected', { action: selected.actions[index] }); }}>{selected.actions.map((item, index) => <option key={item} value={index}>{item}</option>)}</select></label>
-        <label className="cr-field">Explore a situation<select value={condition} onChange={event => { setCondition(event.target.value); setStage('initial'); track('scenario_completed', { outcome: event.target.value }); }}><option value="approval">Needs human approval</option><option value="allowed">Within the agent’s limits</option><option value="blocked">Outside its permissions</option><option value="mismatch">Changed after approval</option><option value="duplicate">Already completed</option><option value="uncertain">Provider response lost</option><option value="reconcile">Retry before confirmation</option></select></label>
+        <label className="cr-field">Choose an action<select value={Math.min(actionIndex, selected.actions.length - 1)} onChange={event => { const index = Number(event.target.value); setActionIndex(index); restart(); track('use_case_selected', { action: selected.actions[index] }); }}>{selected.actions.map((item, index) => <option key={item} value={index}>{item}</option>)}</select></label>
+        <label className="cr-field">Choose what goes wrong<select value={condition} onChange={event => { setCondition(event.target.value); restart(); track('scenario_completed', { outcome: event.target.value }); }}>{situations.map(item => <option key={item.value} value={item.value}>{item.label}</option>)}</select></label>
+      </div>
+      <div className="cr-chips">
+        <span className="cr-step">48 DOMAINS. START WITH ONE</span>
+        {quick.map(name => <button type="button" key={name} className={'cr-chip' + (domain === name ? ' cr-chip-on' : '')} aria-pressed={domain === name} onClick={() => chooseDomain(name)}>{name}</button>)}
+        <button type="button" className="cr-chip cr-chip-more" onClick={() => { setPickerOpen(true); setActiveOption(0); }}>Browse all 48 →</button>
       </div>
       <div className="cr-demo-stage">
-        <div className="cr-request"><p className="cr-step">AGENT REQUESTS</p><h3>{action}</h3><p className="cr-request-value">{stateKey === 'mismatch' ? changed : original}</p><p className="cr-caption">{stateKey === 'mismatch' ? 'A person approved: ' + original : 'One consequential action. Checked before execution.'}</p><div className="cr-request-line" aria-hidden="true">↓</div><span className="cr-wordmark">CTRLRun<span className="cr-dot">_</span></span></div>
+        <div className="cr-request">
+          <p className="cr-step">THE AGENT ASKS TO</p>
+          <h3>{action}</h3>
+          <p className="cr-request-value">{stateKey === 'mismatch' ? changed : original}</p>
+          <p className="cr-caption">{stateKey === 'mismatch' ? 'A person approved: ' + original : 'One consequential action, in ' + domain.toLowerCase() + '.'}</p>
+          <p className="cr-effect-key"><span className="cr-step">EFFECT KEY</span><code>{effectKey}</code></p>
+          <div className="cr-request-line" aria-hidden="true">↓</div>
+          <span className="cr-wordmark">CTRLRun<span className="cr-dot">_</span></span>
+          <ol className="cr-checks" aria-label="What CTRLRun checks, in order">
+            {checks.map((item, index) => <li key={item.key} className={'cr-check-' + result.marks[index]}>
+              <span className="cr-check-mark" aria-hidden="true">{symbols[result.marks[index]]}</span>
+              <span><strong>{item.label}</strong><span className="cr-sr-only">: {result.marks[index] === 'stop' ? 'stopped here' : result.marks[index] === 'pass' ? 'passed' : result.marks[index] === 'skip' ? 'not applicable' : 'not reached'}. </span><em>{item.asks}</em><span>{result.notes[index]}</span></span>
+            </li>)}
+          </ol>
+        </div>
         <div className={'cr-result cr-result-' + result.tone} aria-live="polite" aria-atomic="true">
-          <p className="cr-check">✓ Action recognized</p><h3>{result.title}</h3><p>{result.reason}</p><p className="cr-rule">{result.rule}</p><span className="cr-code-label">{result.code}</span>
+          <p className="cr-check">✓ Action recognized</p>
+          <h3>{result.title}</h3>
+          <p>{result.reason}</p>
+          <div className="cr-split">
+            <div><span className="cr-step">WHAT THE LLM BELIEVED</span><p>{result.llm}</p></div>
+            <div className="cr-safe"><span className="cr-step">WHAT CTRLRUN DID</span><p>{result.kernel}</p></div>
+          </div>
+          <p className="cr-rule">{result.rule}</p>
+          <p className="cr-sees"><span className="cr-step">WHAT YOUR CODE SEES</span><code>{result.sees}</code></p>
+          <p className="cr-code-label"><span>{result.code}</span> <a className="cr-text-link" href={result.doc.href}>{result.doc.label} →</a></p>
+          {trail.length > 0 && <div className="cr-trail"><span className="cr-step">WHAT HAPPENED SO FAR</span><ol>{trail.map((item, index) => <li key={index}>{item}</li>)}</ol></div>}
           <div className="cr-demo-actions">
-            {stateKey === 'approval' && <button type="button" className="cr-button" onClick={() => advance('approved')}>Approve this exact action →</button>}
-            {(stateKey === 'allowed' || stateKey === 'approved') && <button type="button" className="cr-button" onClick={() => advance('completed')}>Execute action →</button>}
-            {stateKey === 'approved' && <button type="button" className="cr-text-link" onClick={() => advance('mismatch')}>Change {money ? 'to $5,000' : 'to all targets'}</button>}
-            {stateKey === 'completed' && <button type="button" className="cr-button" onClick={() => advance('duplicate')}>Retry the same action →</button>}
-            {stateKey === 'uncertain' && <button type="button" className="cr-button" onClick={() => advance('reconcile')}>Try again →</button>}
-            {stateKey === 'reconcile' && <button type="button" className="cr-button" onClick={() => advance('completed')}>Simulate provider confirming success →</button>}
-            {stage !== 'initial' && <button type="button" className="cr-text-link" onClick={() => setStage('initial')}>Reset scenario</button>}
+            {stateKey === 'approval' && <button type="button" className="cr-button" onClick={() => advance('approved', 'A person approved ' + action.toLowerCase() + ' for ' + original + '.')}>Approve this exact action →</button>}
+            {(stateKey === 'allowed' || stateKey === 'approved') && <button type="button" className="cr-button" onClick={() => advance('completed', 'The action executed once and the real system confirmed it.')}>Execute action →</button>}
+            {stateKey === 'approved' && <button type="button" className="cr-text-link" onClick={() => advance('mismatch', 'The agent changed the request to ' + changed + ' and presented the same approval.')}>Change {money ? 'to $5,000' : 'to all targets'}</button>}
+            {stateKey === 'completed' && <button type="button" className="cr-button" onClick={() => advance('duplicate', 'The agent retried the same business action.')}>Retry the same action →</button>}
+            {stateKey === 'uncertain' && <button type="button" className="cr-button" onClick={() => advance('reconcile', 'The agent tried again without confirming the first outcome.')}>Try again →</button>}
+            {stateKey === 'reconcile' && <button type="button" className="cr-button" onClick={() => advance('completed', 'The provider was asked. The first attempt had succeeded, so the effect is resolved, not repeated.')}>Ask the provider what happened →</button>}
+            {stage !== 'initial' && <button type="button" className="cr-text-link" onClick={restart}>Reset scenario</button>}
           </div>
         </div>
       </div>
-      <p className="cr-demo-note">Interactive simulation · Example rules, not industry defaults. No real actions are taken.{physical ? ' CTRLRun governs the software authorization and execution workflow; physical safety controls remain separate.' : ''}{domain === 'Healthcare Operations' ? ' Administrative workflows only; no diagnosis or clinical decisions.' : ''}</p>
+      <div className="cr-demo-share">
+        <div>
+          <span className="cr-step">SHARE THIS SCENARIO</span>
+          <input type="text" readOnly value={shareUrl()} aria-label="Link to this scenario" onFocus={event => event.target.select()} />
+        </div>
+        <div className="cr-share-actions">
+          <button type="button" className="cr-button cr-secondary" onClick={copyLink}>{copied ? 'Copied ✓' : 'Copy link'}</button>
+          {!standalone && <a className="cr-text-link" href={shareUrl()}>Open on its own page ↗</a>}
+        </div>
+      </div>
+      <p className="cr-demo-note">Nothing here executes: this is an illustration of the decisions, with example rules that are not industry defaults. To watch the real library refuse a real call, <a href="/docs/try-it">run the released wheel in your browser</a> — Python and CTRLRun load into the tab and every refusal there is the library's own.{physical ? ' CTRLRun governs the software authorization and execution workflow; physical safety controls remain separate.' : ''}{domain === 'Healthcare Operations' ? ' Administrative workflows only; no diagnosis or clinical decisions.' : ''}</p>
       <div className="cr-domain-cta"><div><strong>{reviewQuestion}</strong><p>Review where execution controls belong in your architecture.</p></div><a className="cr-text-link" href={'/protect-my-agent?domain=' + encodeURIComponent(domain)} onClick={() => track('protect_clicked')}>Get a safety review ↗</a></div>
     </div>
   );
diff --git a/docs/style.css b/docs/style.css
index b1fd611..51097af 100644
--- a/docs/style.css
+++ b/docs/style.css
@@ -271,3 +271,74 @@ body:has(.cr-site) { --topbar-tabs-height:0px; }
     @media(pointer:coarse){#cr-medical-workbench button{min-height:44px}#cr-medical-workbench .cr-label{min-height:44px}}
 
 #cr-medical-workbench [hidden]{display:none!important}
+
+/* Scenario explorer: the three lanes, the check ladder, the share row. */
+.cr-lanes { display:grid; grid-template-columns:1fr 26px 1.25fr 26px 1fr; gap:12px; align-items:stretch; padding:22px; background:var(--cr-panel); border-bottom:1px solid var(--cr-line); border-radius:8px 8px 0 0; }
+.cr-lane { display:flex; flex-direction:column; gap:6px; padding:14px 16px; background:var(--cr-paper); border:1px solid var(--cr-line); border-radius:6px; }
+.cr-lane strong { font-size:16px; font-weight:550; letter-spacing:-.02em; color:var(--cr-ink); }
+.cr-site .cr-lane p { font-size:12px; line-height:1.65; }
+.cr-lane-control { border-color:var(--cr-accent); border-left-width:2px; }
+.cr-lanes .cr-flow-arrow { align-self:center; font-size:20px; }
+.cr-site .cr-lane-note { padding:14px 22px; font-size:12.5px; line-height:1.7; border-bottom:1px solid var(--cr-line); color:var(--cr-muted); }
+.cr-lane-note em { color:var(--cr-ink); font-style:normal; font-weight:600; }
+.cr-chips { display:flex; flex-wrap:wrap; align-items:center; gap:8px; padding:0 22px 18px; border-bottom:1px solid var(--cr-line); }
+.cr-chips .cr-step { width:100%; margin-bottom:2px; }
+.cr-site .cr-chip { min-height:34px; padding:6px 13px; border:1px solid var(--cr-line); border-radius:999px; background:transparent; color:var(--cr-ink); font-size:12px; font-weight:550; }
+.cr-site .cr-chip:hover { border-color:var(--cr-accent); }
+.cr-site .cr-chip-on { background:var(--cr-ink); color:var(--cr-paper); border-color:var(--cr-ink); }
+.cr-site .cr-chip-more { border-style:dashed; color:var(--cr-muted); }
+.cr-effect-key { display:flex; flex-direction:column; gap:4px; margin-top:16px; }
+.cr-effect-key code { font-size:12px; color:var(--cr-accent); }
+.cr-checks { list-style:none; margin:22px 0 0; padding:18px 0 0; border-top:1px solid var(--cr-line); display:grid; gap:13px; }
+.cr-checks li { display:grid; grid-template-columns:18px 1fr; gap:10px; align-items:start; }
+.cr-check-mark { font-family:ui-monospace,SFMono-Regular,Consolas,monospace; font-size:12px; line-height:1.5; color:var(--cr-muted); }
+.cr-checks strong { display:block; font-size:12.5px; font-weight:550; color:var(--cr-ink); }
+.cr-checks em { display:block; font-style:normal; font-size:11.5px; line-height:1.6; color:var(--cr-muted); }
+.cr-checks li>span>span:not(.cr-sr-only) { display:block; margin-top:3px; font-size:11.5px; line-height:1.6; color:var(--cr-ink); }
+.cr-check-pass .cr-check-mark { color:#3c7041; }
+.cr-check-stop .cr-check-mark { color:#a13d32; font-weight:700; }
+.cr-check-stop strong { color:#a13d32; }
+.dark .cr-check-pass .cr-check-mark { color:#9ec793; }
+.dark .cr-check-stop .cr-check-mark,.dark .cr-check-stop strong { color:#f5a198; }
+.cr-check-wait,.cr-check-skip { opacity:.5; }
+.cr-split { display:grid; grid-template-columns:1fr 1fr; gap:20px; margin-top:20px; padding-top:18px; border-top:1px solid var(--cr-line); }
+.cr-split>div { padding-left:14px; border-left:2px solid var(--cr-line); }
+.cr-split .cr-safe { border-color:var(--cr-accent); }
+.cr-site .cr-split p { margin-top:6px; font-size:12.5px; line-height:1.65; }
+.cr-site .cr-split .cr-safe p { color:var(--cr-ink); }
+.cr-sees { display:flex; flex-direction:column; gap:6px; margin-top:18px; }
+.cr-sees code { display:block; padding:10px 12px; border:1px solid var(--cr-line); border-radius:4px; background:var(--cr-panel); color:var(--cr-ink); font-size:11.5px; line-height:1.6; overflow-x:auto; }
+.cr-result .cr-code-label { display:flex; flex-wrap:wrap; align-items:center; gap:6px 16px; margin-top:14px; }
+.cr-code-label>span { font-family:ui-monospace,SFMono-Regular,Consolas,monospace; font-size:10px; color:var(--cr-muted); }
+.cr-code-label a { text-decoration:underline; text-underline-offset:3px; font-size:12px; }
+.cr-trail { margin:18px 0 0; padding:14px 0 0; border-top:1px dashed var(--cr-line); }
+.cr-trail ol { margin:8px 0 0; padding-left:20px; display:grid; gap:6px; font-size:11.5px; line-height:1.6; color:var(--cr-muted); }
+.cr-trail li { list-style:decimal; }
+.cr-trail li::marker { color:var(--cr-accent); font-family:ui-monospace,SFMono-Regular,Consolas,monospace; font-size:10px; }
+.cr-demo-share { display:flex; flex-wrap:wrap; justify-content:space-between; align-items:flex-end; gap:14px 20px; padding:16px 22px; border-top:1px solid var(--cr-line); }
+.cr-demo-share>div:first-child { flex:1 1 340px; display:flex; flex-direction:column; gap:6px; }
+.cr-site .cr-demo-share input { font-family:ui-monospace,SFMono-Regular,Consolas,monospace; font-size:11.5px; min-height:40px; }
+.cr-share-actions { display:flex; flex-wrap:wrap; align-items:center; gap:16px; }
+.cr-share-actions .cr-button { min-height:40px; font-size:12px; }
+.cr-demo-note a { text-decoration:underline; text-underline-offset:3px; }
+.cr-how { border-bottom:1px solid var(--cr-line); }
+.cr-how-steps { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:26px 44px; margin-top:30px; }
+.cr-how-steps>div { padding-top:16px; border-top:1px solid var(--cr-line); }
+.cr-how-steps h3 { font-size:17px; margin:8px 0 8px; }
+.cr-site .cr-how-steps p { font-size:13.5px; line-height:1.7; }
+.cr-how-close { display:flex; flex-wrap:wrap; align-items:center; gap:12px 26px; margin-top:34px; padding-top:22px; border-top:1px solid var(--cr-line); }
+.cr-site .cr-how-close p { flex:1 1 420px; font-size:13.5px; }
+.cr-how-close a { text-decoration:underline; text-underline-offset:4px; }
+@media (max-width:900px) {
+  .cr-lanes { grid-template-columns:1fr; }
+  .cr-lanes .cr-flow-arrow { transform:rotate(90deg); line-height:1; }
+  .cr-how-steps { grid-template-columns:1fr; gap:22px; }
+}
+@media (max-width:600px) {
+  .cr-lanes { padding:16px; }
+  .cr-chips { padding:0 18px 16px; }
+  .cr-split { grid-template-columns:1fr; gap:16px; }
+  .cr-demo-share { padding:16px 18px; }
+  .cr-checks { gap:11px; }
+}
+.cr-site .cr-demo-note { padding:14px 22px; font-size:11.5px; line-height:1.7; }
diff --git a/docs/try.mdx b/docs/try.mdx
new file mode 100644
index 0000000..e6d38a6
--- /dev/null
+++ b/docs/try.mdx
@@ -0,0 +1,47 @@
+---
+title: "Try the execution boundary"
+description: "Pick an agent action in your own domain and watch which check refuses it: policy, approval binding, effect reservation, or an unknown outcome."
+canonical: "https://ctrlrun.dev/try"
+"og:url": "https://ctrlrun.dev/try"
+"og:title": "Try the execution boundary — CTRLRun"
+"twitter:title": "Try the execution boundary — CTRLRun"
+mode: "custom"
+---
+
+import { ScenarioExplorer } from "/snippets/scenario-explorer.jsx";
+
+<div className="cr-site">
+  <section className="cr-hero" aria-labelledby="cr-try-page-title">
+    <a className="cr-text-link" href="/">← CTRLRun</a>
+    <p className="cr-eyebrow" style={{ marginTop: "34px" }}>TRY THE EXECUTION BOUNDARY</p>
+    <h1 id="cr-try-page-title">Choose an action.<br />See what CTRLRun stops<span className="cr-dot">.</span></h1>
+    <p className="cr-lede">Your model chooses the action. CTRLRun decides whether it may execute.</p>
+    <p className="cr-intro">Pick your domain — there are 48 — then pick the moment it goes wrong: a lost reply, an approval the agent edited, a retry of something that already happened. You get the decision, the check that produced it, and the line your own code would see.</p>
+    <p className="cr-caption">No login. No API key. No setup. Nothing here executes.<br />Every scenario has its own link, so you can send someone straight to the one that matters.</p>
+  </section>
+
+  <section className="cr-section" aria-label="Execution boundary scenario explorer">
+    <ScenarioExplorer standalone={true} />
+  </section>
+
+  <section className="cr-section cr-failure" aria-labelledby="cr-try-real-title">
+    <div><p className="cr-eyebrow">THIS PAGE IS AN ILLUSTRATION</p><h2 id="cr-try-real-title">Then go and break the real thing.</h2><p>Nothing on this page runs CTRLRun. It draws the decisions so you can see where they land in a domain you recognise. One page further, real Python and the released wheel load into your tab, and every refusal you read there is the library's own.</p></div>
+    <div className="cr-comparison">
+      <div><span className="cr-step">HERE</span><p>An illustration of the checks, with example rules that are not industry defaults. No code runs, no request is sent.</p></div>
+      <div className="cr-safe"><span className="cr-step">ONE PAGE FURTHER</span><p><strong>Real Python, the released <code>ctrlrun</code> wheel, in your browser.</strong> Change a refund after approving it and read the exception the library raises. <a href="/docs/try-it">Run it in your browser →</a></p></div>
+    </div>
+  </section>
+
+  <section className="cr-section" aria-labelledby="cr-try-next-title">
+    <div className="cr-section-heading"><div><p className="cr-eyebrow">WHERE TO GO NEXT</p><h2 id="cr-try-next-title">From the demo to your own code.</h2></div><p className="cr-caption">Apache-2.0 · Runs in your environment</p></div>
+    <div className="cr-how-steps">
+      <div><span className="cr-step">UNDERSTAND IT</span><h3>How it works</h3><p>Where CTRLRun sits, what it checks, and what it deliberately does not do. <a href="/#how-it-works">The plain-English version</a>, then <a href="/docs/ARCHITECTURE">the architecture</a>.</p></div>
+      <div><span className="cr-step">RUN IT</span><h3>Protect your first action</h3><p><code>pip install ctrlrun</code>, then wrap the function that causes the effect. <a href="/docs/get-started/quickstart">The quickstart</a> adds your policy, identity and approval flow.</p></div>
+      <div><span className="cr-step">READ THE CASES</span><h3>Concepts behind each refusal</h3><p><a href="/docs/concepts/approval-binding">Approval binding</a>, <a href="/docs/concepts/effect-keys">effect keys</a>, and <a href="/docs/concepts/outcomes-and-ambiguous">outcomes and AMBIGUOUS</a> — the three the demo leans on hardest.</p></div>
+      <div><span className="cr-step">SEE IT IN A DOMAIN</span><h3>A worked application</h3><p>The <a href="/docs/demos/medical-affairs">medical affairs workbench</a> puts the same kernel under a document release instead of a payment.</p></div>
+    </div>
+    <div className="cr-how-close"><p><strong>Not sure where the controls belong in your architecture?</strong> A focused review maps which of your agent's actions can run automatically, which need a person, and which must stop until the outcome is known.</p><a className="cr-button" href="/protect-my-agent" data-cr-event="protect_clicked">Get an execution-safety review →</a></div>
+  </section>
+
+  <div className="cr-footer" role="contentinfo"><span>Give agents autonomy.<br /><strong>Keep control of their actions.</strong></span><div><a href="/">CTRLRun ↗</a><a href="/docs" data-cr-event="documentation_clicked">Read the docs →</a><a href="https://github.com/CTRLRun/ctrlrun" data-cr-event="github_clicked">GitHub ↗</a></div></div>
+</div>
diff --git a/tests/test_docs_audit.py b/tests/test_docs_audit.py
index 1682b33..3e8e62b 100644
--- a/tests/test_docs_audit.py
+++ b/tests/test_docs_audit.py
@@ -383,6 +383,21 @@ def test_a_root_relative_docs_path_resolves_under_docs(tmp_path, monkeypatch):
     assert [b.target for b in broken] == ["/concepts/missing"]
 
 
+def test_a_query_string_is_not_part_of_the_page_path(tmp_path, monkeypatch):
+    """`/try?situation=uncertain` is the `/try` page. The checker looked for a file named after
+    the whole string and called a working link broken -- and the strip must not swallow a
+    genuinely missing page that happens to carry a query."""
+    monkeypatch.setattr(links, "REPO_ROOT", tmp_path)
+    (tmp_path / "docs").mkdir()
+    (tmp_path / "docs" / "try.mdx").write_text("---\ntitle: Try\n---\n")
+    page = tmp_path / "docs" / "index.mdx"
+    page.write_text('[a](/try?situation=uncertain) [b](/nope?situation=uncertain)\n')
+
+    broken = links.check_text(page.read_text(), page)
+
+    assert [b.target for b in broken] == ["/nope?situation=uncertain"]
+
+
 @checkout_only
 def test_a_link_to_a_page_the_ia_plans_is_planned_not_broken(tmp_path, monkeypatch):
     monkeypatch.setattr(links, "REPO_ROOT", tmp_path)
diff --git a/tools/docs_audit/links.py b/tools/docs_audit/links.py
index 492cf5d..4dd6c5f 100644
--- a/tools/docs_audit/links.py
+++ b/tools/docs_audit/links.py
@@ -119,6 +119,10 @@ def _resolve(target: str, source: Path) -> tuple[Path | None, str | None] | None
         return None
     path_part, _, anchor = target.partition("#")
     anchor = unquote(anchor) or None
+    # A query string is not part of the path. `/try?situation=uncertain` is the same page as
+    # `/try`, and the site serves it that way; a checker that kept the query looked for a file
+    # named after the whole string and reported a working link as broken.
+    path_part = path_part.partition("?")[0]
     if path_part.startswith(("http://", "https://")):
         matched = _GITHUB.match(path_part)
         if matched is None:
@@ -157,7 +161,7 @@ def check_text(text: str, source: Path) -> list[Broken]:
         if path is None:
             continue
         if not path.exists():
-            site_path = target.partition("#")[0].lstrip("/")
+            site_path = target.partition("#")[0].partition("?")[0].lstrip("/")
             if target.startswith("/") and site_path in planned_pages():
                 planned.append(
                     Broken(name, number, target, "planned in docs/IA.md, not written yet")

From 6543faafd96a0a32f46d5cdd95629c1f62deed2d Mon Sep 17 00:00:00 2001
From: arpan <contact@arpanghoshal.com>
Date: Tue, 8 Sep 2026 17:43:58 +0530
Subject: [PATCH 2/2] Format the query-string link test to ruff's quote style

---
 tests/test_docs_audit.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/test_docs_audit.py b/tests/test_docs_audit.py
index 3e8e62b..4c3cbd5 100644
--- a/tests/test_docs_audit.py
+++ b/tests/test_docs_audit.py
@@ -391,7 +391,7 @@ def test_a_query_string_is_not_part_of_the_page_path(tmp_path, monkeypatch):
     (tmp_path / "docs").mkdir()
     (tmp_path / "docs" / "try.mdx").write_text("---\ntitle: Try\n---\n")
     page = tmp_path / "docs" / "index.mdx"
-    page.write_text('[a](/try?situation=uncertain) [b](/nope?situation=uncertain)\n')
+    page.write_text("[a](/try?situation=uncertain) [b](/nope?situation=uncertain)\n")
 
     broken = links.check_text(page.read_text(), page)