[GTrunSec]

The static renderer previously limited diagram kinds to seven names, embedded the Case's linear workflow contract, ignored downstream variant resources, and checked Question markup with a regex. This refactor makes kinds open, keeps domain schemas/composers in the consumer, and resolves D2-selected themes and icon packs without a global registry.

• Keep Questions, content, observations, model/source links and output selection in D2/SysML declarations. Architecture and Workflow remain separate.
• Reuse native D2 layout/options, parse5 HTML parsing, Rough.js Options/primitives, XYFlow connector paths and Playwright export. Remove the fixed card compositor, unused wrapper and HTML string replacement. No editor or React runtime.
• Add real Library/Profile/Scenario variants with project-only responsibility-map / capture-handoff kinds, a downstream theme and glyph pack. Preserve the current blocked capture and empty evidence.
• Record the findings and retained defaults in Org 10.142; update D2, ten full image candidates, comparison sheets and a native responsibility view.

Validation: package and consumer typechecks; 35 unit/native-D2/saved-SDK tests; 10 native browser controls; two real consumer domain tests; ten exports and comparison/native view commands. Linux/macOS run these standard commands with the existing two-worker and job bounds. No CI artifact upload is added. No SysML publication, C/Q/R issuance or review submission occurs.

This supersedes the prototype in #2. The package remains @deterministic-engineering/render, version 1.0.0 read from package.json.

Audit · Architecture comparison · Workflow comparison