diff --git a/index.html b/index.html
index 0f99bd8..0819839 100644
--- a/index.html
+++ b/index.html
@@ -180,19 +180,6 @@
           </li>
         </ol>
 
-        <div class="deployment-status">
-          <span>CI/CD WORKFLOW</span>
-          <strong>WOODPECKER</strong>
-          <p>Git-based build, verification, and deployment pipeline</p>
-          <div><i></i><i></i><i></i><i></i></div>
-        </div>
-
-        <div class="terminal-mini" aria-label="Operational stack summary">
-          <p><span>$</span> observability stack</p>
-          <p class="terminal-output">prometheus · loki · grafana · alloy</p>
-          <p><span>$</span> delivery stack</p>
-          <p class="terminal-output">gitea · woodpecker<span class="cursor">_</span></p>
-        </div>
       </aside>
     </section>
 
@@ -248,7 +235,7 @@
           <h2>Monitoring stack</h2>
         </div>
         <p>Host metrics, container telemetry, centralized logs, and independent uptime checks.</p>
-        <div class="module-state"><i></i> STACK DOCUMENTED</div>
+        <div class="module-state"><i></i> LIVE + EVIDENCE</div>
       </header>
 
       <div class="evidence-grid">
@@ -289,7 +276,7 @@
           <h2>Service inventory</h2>
         </div>
         <p>Core applications represented in the internal service portal configuration.</p>
-        <div class="module-state"><i></i> LAST VERIFIED OCT 2026</div>
+        <div class="module-state"><i></i> LIVE HEALTH / CONFIG SNAPSHOT</div>
       </header>
 
       <div class="service-layout">
@@ -329,7 +316,7 @@
           <h2>Delivery pipeline</h2>
         </div>
         <p>Git-based workflows from repository change to automated deployment.</p>
-        <div class="module-state"><i></i> PIPELINE EVIDENCE</div>
+        <div class="module-state"><i></i> LIVE DELIVERY</div>
       </header>
 
       <div class="pipeline">
@@ -383,22 +370,11 @@
       </header>
 
       <div class="security-layout">
-        <figure class="auth-shot">
-          <figcaption>
-            <span>AUTHENTIK</span>
-            <small>Protected applications / OIDC / 2FA policy</small>
-          </figcaption>
-          <a href="assets/images/portfolio-authentik-applications.png" target="_blank">
-            <img src="assets/images/portfolio-authentik-applications.png" alt="Authentik protected applications configuration snapshot" />
-          </a>
-          <p class="evidence-note">CAPTURED OCT 2026 · IDENTITY CONFIGURATION EVIDENCE</p>
-        </figure>
-
         <div class="security-data">
           <div class="security-score">
-            <span>ACCESS POSTURE</span>
+            <span>IDENTITY / ACCESS POSTURE</span>
             <strong>HARDENED</strong>
-            <small>KEY-ONLY SSH / SSO / TLS</small>
+            <small>AUTHENTIK / KEY-ONLY SSH / SSO / TLS</small>
           </div>
           <ul>
             <li><span>OIDC providers</span><strong>CONFIGURED</strong></li>
@@ -410,8 +386,8 @@
 
         <figure class="crowdsec-shot">
           <figcaption>
-            <span>CROWDSEC / SECURITY EVIDENCE</span>
-            <small>Threat detection and firewall-decision history</small>
+            <span>CROWDSEC / DECISION HISTORY</span>
+            <small>Captured evidence of hostile-source decisions</small>
           </figcaption>
           <a href="assets/images/portfolio-crowdsec-decisions.png" target="_blank">
             <img src="assets/images/portfolio-crowdsec-decisions.png" alt="CrowdSec firewall decision evidence snapshot" />
diff --git a/style.css b/style.css
index 3da7a9e..0ad2a65 100644
--- a/style.css
+++ b/style.css
@@ -966,7 +966,7 @@ h1 {
 
 .security-layout {
   display: grid;
-  grid-template-columns: minmax(0, 1.5fr) 320px;
+  grid-template-columns: 320px minmax(0, 1fr);
 }
 
 .auth-shot,
@@ -1023,8 +1023,9 @@ h1 {
 }
 
 .crowdsec-shot {
-  grid-column: 1 / -1;
-  border-top: 1px solid var(--line);
+  grid-column: auto;
+  border-top: 0;
+  border-left: 1px solid var(--line);
 }
 
 .crowdsec-shot img {