The identity system — the mark, the grades as the palette, and the rule that governs both
A chevron, a charcoal field, and two hot colors that are never allowed in the same component. The rule is the part worth copying; the mark is the part that identifies.
01The rule that governs everything below
Most identity systems have one hot color and spend it on the logo. This one runs two, and the word Untested owns the second outright.
The claims this thesis leans on hardest have never been measured. If the design made those look as settled as the measured ones, the design would be lying on the argument's behalf. So the palette is split, and the split is enforced: vermilion marks structure, amber marks doubt, and they never appear in the same component.
The test is mechanical. If a choice makes an unproven claim look certain, the choice is wrong. That rule is why the month strip fills its eight build squares in soft white rather than amber, and why no amount of brand color is allowed to reach a graded claim.
02The mark
A single flat silhouette — no outline, no gradient, no second color. It carries the name and nothing else, which is why it survives being small.
Proportion
200 × 87.31 grid
~2.3 : 1 landscape
never redrawn,
never stretched
Clear space
the upper bar’s
depth on all sides
nothing sits inside it
Minimum size
12px tall
below that, the
favicon form instead
Color
one flat fill
taken from currentColor
inherited, never
hand-picked
The artwork of record is a single flat silhouette, vectorised to
site/assets/lintel-mark.svg and inlined in the markup rather than loaded as an image, so
it paints in currentColor and takes the accent from the stylesheet. That is not tidiness
— it is the fix for a specific failure. When the accent moved from vermilion to amber, the mark
did not move with it, and the identity shipped with a logo in one color and a system in another. A
mark that holds no color of its own cannot drift from one again.
03Lockup and ground
Two grounds, and the mark deepens between them. Nothing else changes.
The mark deepens between grounds and nothing else changes. On charcoal it carries vermilion at
5.4:1; on a light plate it takes the deeper #A8321F at 6.2:1, because the lighter
vermilion does not hold 4.5:1 against soft white. Neither is a second file: both boxes above are the
same inlined silhouette, painting in currentColor.
04Color
The palette is not a mood. Six colors carry the system, and a seventh is held back for the register alone. Every pair below is measured against its ground; nothing that carries type sits below 4.5:1.
Charcoal — the field
#0C0D0E
12 / 13 / 14
every page sits on it
Vermilion — structure
#F04C3A
240 / 76 / 58
5.4:1 on charcoal
the one accent
Soft white — type and plates
#F7F7F7
247 / 247 / 247
18.2:1 on charcoal
Slate grey — Confirmed
#798788
121 / 135 / 136
5.2:1 on charcoal
outlined, never a fill
Warm stone — Contested
#C0BA9A
192 / 186 / 154
9.9:1 on charcoal
Foundation black — panels
#202928
32 / 41 / 40
a surface, never type
13.9:1 holds soft white
Signal amber — Untested
#F5A524
245 / 165 / 36
9.5:1 on charcoal
reserved, not a brand color
Amber on a plate
#7A4E08
122 / 78 / 8
6.7:1 on soft white
the light-ground amber
The thesis borrows its engineering discipline from avionics rather than from web development — the sheet on donor discipline argues that at length. Safety-critical practice separates two states that ordinary design collapses into one color: red is failure, amber is unverified.
Every gap in this register is unverified, not failed. Nobody has measured the objective share of an American ordinance; nobody has run the Arizona records request. Those are open questions, and marking them in the color of failure would overstate them in exactly the direction the whole project exists to avoid. Amber is the accurate signal, and it carries 9.5:1 against the ground.
It is also why vermilion can be the brand color without collision. Vermilion marks structure — where you are, what opens a section, what a link will do — and it is barred from any component that carries a grade. The two never share a box, so a red on this site never means failure.
Untested solid amber, the only filled chip in the set —
nobody has measured it.
Confirmed outlined slate — a source exists and has been checked.
Supported outlined warm stone — evidence points this way, short of proof.
Contested dashed soft white — the literature disagrees with itself, visibly unsettled.
05Typography
One family for everything a person reads, one for everything a machine produced. The split is the argument again: prose is what humans compile by hand, monospace is what a computer can check.
AaBbCcDdEeFfGgHh
0123456789
Geist Mono — E-039 · UNTESTED · E-107 · 8 OF 32 · ±4.5:1
Display
Geist 640
clamp(3.2rem, 8.5vw, 7.5rem)
−0.04em · uppercase
Body
Geist 400
1.0625rem / 1.68
72ch measure
Label · data
Geist Mono 600
0.6875rem
+0.16em · uppercase
Scale
huge display against
tiny mono —
little in between
Both are self-hosted as variable woff2 in /fonts. The site makes no external
requests of any kind, because a policymaker reading it from inside a government network is a target
reader rather than an edge case.
06In use
Three tests, all of which this identity has failed at least once and now passes.
The deck and the narrative
both print. Reveal states
and sticky panels are
overridden, not hidden.
No JavaScript
Every layer of the
architecture renders in
markup. Scripts only
move selection.
Offline · file://
No CDN, no analytics,
no font service.
Fonts and marks are
vendored.
Both themes
Carbon and plate.
Every pair re-measured
on the ground it
actually sits on.
Stated for the record. Lintel is a working name and no trademark or domain
clearance has been run — which is not the same as no conflict. The identity above is versioned
with the site and will change if clearance requires it. The reasoning behind every choice on this
page, including what it replaced, is recorded internally rather than argued here.
More on the name and the declared interest →
An alternative identity has been proposed and not adopted —
the datum mark, as a sketch.