BLACKSWAN Enterprise Design Language · BEDL v0.1

Sponsor: Mamadou Ly, Founder, Managing Partner & CEO Status: SUPERSEDED by BEDL v0.2 (ARS-001) · preserved as historical record Posture: STANDBY · IN-MEMORY ONLY · HOLD · NO-GO Governance parent: BLACKSWAN Estate Canon Companion documents: BSRA (Reference Architecture) · BGXS v1.0 (Gateway Experience Standard) · Implementation Standards Repository target: BlackswanPartnership/blackswan-gateway/docs/bedl/

Historical document. v0.1 was the pre-ARS-001 proposal reviewed at Architecture Review Session 001. It is retained verbatim as the artifact of what was reviewed. New surfaces must consume BEDL v0.2. Downstream governance amendments (ADR-012 HSOS Governance Gold, 2026-07-25) are applied in v0.2, not here; where v0.1 sections carry values now superseded, a v0.2 pointer is inlined so a reader arriving via a cached link is redirected without the original proposal being rewritten.

§0 · Preamble

§0.1 Purpose

BEDL is the written specification of the enterprise design language for the BLACKSWAN estate. It defines the shared visual, motion, spatial, and interaction primitives that every plane (CMOS · PMOS · HSOS · AIOS · TREICHTEC) and the Gateway inherit from.

BEDL is what allows five planes to feel like one institution while retaining distinct identities.

§0.2 Scope

BEDL specifies:

Colour system, including institutional neutrals and the five plane accents
Typography scale and pairing rules
Elevation, spacing, grid, breakpoint contracts
Motion language: four principles, duration and easing tokens, choreography rules
Iconography posture
Component taxonomy (150+ components grouped into families)
Accessibility contract (WCAG 2.2 AA baseline)
Plane-accent extension rules
Governance discipline for BEDL itself

BEDL does not specify:

Individual component APIs or props (that is component library implementation)
Figma file structure (that is a design ops decision)
Brand copy, tone of voice, or messaging (that is BGXS territory)
Commissioned photography or 3D assets (that is brand production)

§0.3 Relationship to the estate

Estate Canon — constitutional; BEDL inherits sponsor line, postures, prohibitions, forbidden phrases
BSRA — technical architecture; BEDL feeds Layer 7 (Institutional Experience) and constrains Layers 5–6 UI surfaces
BGXS v1.0 — Gateway Experience Standard; BEDL provides the primitives BGXS references; BGXS defines the Gateway's specific application of BEDL
Implementation Standards — engineering discipline; BEDL provides the design tokens implementation standards consume

BEDL sits at Layer 1 (Constitutional Governance) as a companion to BSRA — it is design canon, not implementation.

§0.4 Non-goals

BEDL v0.1 does not:

Lock typefaces (Q-BEDL-01 pending sponsor decision)
Lock icon library licensing (Q-BEDL-05 pending sponsor decision)
Specify individual React component APIs (deferred to the component library implementation)
Define motion for the Gateway cinematic arrival (deferred to BGXS §11.2 and creative direction)

§0.5 Version discipline

BEDL versions independently of other governance documents. Version transitions:

v0.1 · this draft · ARS-001 reviewable
v0.2 · post-ARS-001 revision incorporating decisions
v1.0 · sponsor-locked · governance PR merged · canonical

Breaking changes to sponsor-locked tokens require ADR-level review.

§1 · Colour System

§1.1 Posture

BEDL is dark-first. Institutional gravitas requires deep, calm backgrounds. Light mode is a fully supported inverse but not the primary aesthetic.

Rationale: capital markets and sovereign finance workflows run long-session, often in low-light environments. Dark-first reduces fatigue and reinforces the "digital headquarters" experience philosophy from BGXS.

§1.2 Institutional neutrals

Neutrals are the estate baseline. Every plane inherits them unchanged.

Token	Hex	Role
`--bedl-ink-950`	`#0A0B0D`	Deepest background · arrival screen · full-canvas ambient
`--bedl-ink-900`	`#0F1114`	Primary background
`--bedl-ink-850`	`#151820`	Elevated surface (cards, panels)
`--bedl-ink-800`	`#1C2028`	Secondary elevated surface
`--bedl-ink-700`	`#242935`	Tertiary elevated surface · hover states
`--bedl-ink-600`	`#333B4A`	Borders · dividers (subtle)
`--bedl-ink-500`	`#4A5468`	Borders · dividers (visible)
`--bedl-ink-400`	`#6B7891`	Tertiary text · disabled
`--bedl-ink-300`	`#8E9BB4`	Secondary text
`--bedl-ink-200`	`#B8C2D6`	Primary text on dark
`--bedl-ink-100`	`#DDE4F0`	High-emphasis text · headings on dark
`--bedl-ink-050`	`#F2F5FA`	Highest-emphasis text · display headings
`--bedl-ink-000`	`#FFFFFF`	Pure white · rarely used

Contrast contract: every neutral pairing used for text must meet WCAG 2.2 AA (4.5:1 body, 3:1 large text). See §7.

§1.3 Plane accents

Amendment pointer: HSOS row is superseded by ADR-012 (2026-07-25) · Governance Gold #C8A86B / #8F7743 / #E5C892. See BEDL v0.2 §1.3 (accent table) and §1.3.1 (chart-series accents). Original v0.1 proposal preserved below.

Each plane owns one accent. Accents complement, do not replace, the shared neutrals. Accents appear as: primary CTAs, active state indicators, plane identity chips, data-visualization primary series, hero moments.

Plane	Name	Base hex	Deep hex	Bright hex	Role
CMOS	Platinum	`#C7CDD6`	`#8A93A1`	`#E4E8EF`	Capital markets · precision · market depth
PMOS	Emerald	`#1F9A6E`	`#0F5D42`	`#3FCB98`	Private markets · long-term capital · portfolio insights
HSOS	Deep Sapphire	`#1E4FB8`	`#0F2E7A`	`#4A7FE8`	Hedge & sovereign · resilience · strategic reserves
AIOS	Electric Cyan	`#00C2D1`	`#007C86`	`#4FE0EC`	Intelligence · knowledge graphs
TREICHTEC	Violet	`#7B4FE0`	`#4A2E9A`	`#A688EC`	Digital trust · DLT · smart contracts

Naming preserves the ChatGPT-defined identity names verbatim. Hex values are v0.1 proposals subject to sponsor override at ARS-001 (Q-BEDL-02).

Platinum caveat: Platinum is chromatically closer to a neutral than to a saturated accent. This is intentional — CMOS is the flagship execution plane and its identity is quiet authority, not visual dominance. Platinum should render as a subtle metallic in contexts where other planes render as vivid accents.

§1.4 Semantic colour

Amendment pointer: --bedl-semantic-info retuned to #3B82F6 by ADR-012 (2026-07-25) after HSOS moved to Governance Gold. See BEDL v0.2 §1.4. Original v0.1 proposal preserved below.

Semantics are plane-agnostic. Every plane uses the same semantic tokens.

Token	Hex	Role
`--bedl-semantic-success`	`#1F9A6E`	Confirmations · completed states (aligns with Emerald)
`--bedl-semantic-warning`	`#D9A441`	Caution · pending states
`--bedl-semantic-danger`	`#D64545`	Errors · destructive actions
`--bedl-semantic-info`	`#1E4FB8`	Informational (aligns with Deep Sapphire)
`--bedl-semantic-focus`	Plane-accent base	Keyboard focus ring · borrows from active plane

§1.5 Gateway palette

Gateway is not one of the five planes. It uses institutional neutrals only, with no accent. Gateway's identity is "the institution itself" — the absence of a plane accent is a deliberate signal.

Exception: during Nexus session, the active plane's accent appears in the launcher card and on hover reveals of that plane's operating surfaces.

§1.6 Light mode

Light-mode counterparts derive by inversion of the neutral scale, with accent hex values remaining stable. Full light-mode token table deferred to BEDL v0.2 (Q-BEDL-06).

§1.7 Prohibitions

No gradients on institutional surfaces except: (a) the cinematic arrival, (b) hero data-visualisation backgrounds under explicit BGXS licence
No accent-on-accent combinations (e.g., Emerald text on Sapphire background)
No decorative accent use — accents carry meaning
No colour used as the sole channel for state (§7 accessibility contract)

§2 · Typography

§2.1 Posture

Typography carries most of BEDL's institutional weight. The Gateway is described as an environment where "everything communicates permanence" — that is done through type more than any other medium.

§2.2 Typeface roles

Three roles. Actual families are Q-BEDL-01, pending sponsor decision.

Role	Placeholder	Purpose
Display	`[TYPEFACE_DISPLAY]`	Hero statements · screen 01 identity resolution · large numerics in data displays
Text	`[TYPEFACE_TEXT]`	Body copy · UI labels · navigation · form controls
Mono	`[TYPEFACE_MONO]`	Operational surfaces · code · identifiers · ledger displays · timestamps

Selection criteria for Q-BEDL-01:

Display: institutional sans with strong wide-set caps and controlled optical spacing; must scale to 96pt+ without becoming decorative
Text: neutral humanist or geometric sans with excellent screen legibility from 12pt to 24pt; must support tabular figures
Mono: engineering-grade monospace with clear character disambiguation (0/O, 1/l/I, 5/S)

Licensing posture: BLACKSWAN acquires enterprise licenses. No open-source-only stack for display. Reasoning: the estate's institutional counterparties will notice — and licensed foundry type is one of the cheapest ways to signal seriousness.

§2.3 Type scale

Base: 16px. Scale ratio: 1.25 (major third) for text, 1.333 (perfect fourth) for display.

Token	Size	Line-height	Weight	Role
`--bedl-type-display-hero`	96px / 6rem	1.05	300 (Light)	Cinematic arrival identity
`--bedl-type-display-1`	72px / 4.5rem	1.08	300	Screen hero statements
`--bedl-type-display-2`	56px / 3.5rem	1.1	400	Section leads
`--bedl-type-display-3`	40px / 2.5rem	1.15	400	Page titles
`--bedl-type-heading-1`	32px / 2rem	1.2	500	Major headings
`--bedl-type-heading-2`	24px / 1.5rem	1.25	500	Sub-headings
`--bedl-type-heading-3`	20px / 1.25rem	1.3	500	Section labels
`--bedl-type-body-lg`	18px / 1.125rem	1.55	400	Editorial body
`--bedl-type-body`	16px / 1rem	1.55	400	Default body
`--bedl-type-body-sm`	14px / 0.875rem	1.5	400	Dense UI · secondary content
`--bedl-type-caption`	12px / 0.75rem	1.4	400	Metadata · timestamps · labels
`--bedl-type-micro`	10px / 0.625rem	1.3	500	Legal footnotes · dense chips

Weights available: 300 (Light) · 400 (Regular) · 500 (Medium) · 600 (Semibold) · 700 (Bold). Italic reserved for citations and inline emphasis only.

§2.4 Tracking (letter-spacing)

Display 56px+: -0.02em (tighter, sculpted)
Heading 20–40px: -0.01em
Body: 0
Caption / micro: +0.02em (looser, more legible at small size)
All-caps labels: +0.08em (industry standard for legibility)

§2.5 Pairing rules

One display face per surface. No mixing display faces.
Text face runs across all body, UI, and secondary content.
Mono is contextual: identifiers, timestamps, ledger IDs, code, technical data. Never used for prose.
Numerics: tabular figures in all data displays and tables. Proportional figures acceptable in prose.

§2.6 Prohibitions

No decorative fonts anywhere
No script or handwriting faces
No stretching or compressing type
No coloured type on coloured backgrounds without contrast verification
No underline for emphasis (underline is reserved for links)

§3 · Elevation & Surface

§3.1 Depth model

BEDL uses a five-level elevation model. Elevation communicates hierarchy, not decoration.

Level	Token	Use
0	`--bedl-elev-0`	Canvas · page background
1	`--bedl-elev-1`	Card · panel · resting surface
2	`--bedl-elev-2`	Hover state on level 1 · sticky headers
3	`--bedl-elev-3`	Popover · tooltip · dropdown
4	`--bedl-elev-4`	Modal · dialog · command palette

§3.2 Shadow tokens

Dark-first shadow strategy: subtle luminance uplift rather than heavy drop shadows. Institutional surfaces do not "float" — they layer.

--bedl-shadow-0: none;
--bedl-shadow-1: 0 1px 0 0 rgba(255,255,255,0.04) inset,
                 0 1px 2px 0 rgba(0,0,0,0.24);
--bedl-shadow-2: 0 1px 0 0 rgba(255,255,255,0.06) inset,
                 0 4px 12px 0 rgba(0,0,0,0.32);
--bedl-shadow-3: 0 1px 0 0 rgba(255,255,255,0.08) inset,
                 0 12px 32px 0 rgba(0,0,0,0.4);
--bedl-shadow-4: 0 1px 0 0 rgba(255,255,255,0.1) inset,
                 0 24px 64px 0 rgba(0,0,0,0.48);

§3.3 Border discipline

Borders are the primary tool for defining edges on dark surfaces, not shadows.

--bedl-border-subtle: 1px solid var(--bedl-ink-600)
--bedl-border-default: 1px solid var(--bedl-ink-500)
--bedl-border-strong: 1px solid var(--bedl-ink-400)

Radii: --bedl-radius-sm: 4px · --bedl-radius-md: 8px · --bedl-radius-lg: 12px · --bedl-radius-xl: 16px · --bedl-radius-round: 9999px. Default UI radius: md. Cards default: lg. Pills and avatars: round.

§4 · Spacing & Grid

§4.1 Base unit

4px base. Every spacing value is a multiple of 4.

§4.2 Spatial scale

Token	Value
`--bedl-space-0`	0
`--bedl-space-1`	4px
`--bedl-space-2`	8px
`--bedl-space-3`	12px
`--bedl-space-4`	16px
`--bedl-space-5`	24px
`--bedl-space-6`	32px
`--bedl-space-7`	48px
`--bedl-space-8`	64px
`--bedl-space-9`	96px
`--bedl-space-10`	128px
`--bedl-space-11`	192px

§4.3 Container grid

12-column grid. Gutter: --bedl-space-5 (24px). Margin: adaptive by breakpoint.

Max content width: 1440px. Editorial content max width: 720px (for line-length legibility, approximately 66 characters at body size).

§4.4 Breakpoints

Token	Min-width	Use
`--bedl-bp-xs`	0	Small phones
`--bedl-bp-sm`	640px	Large phones · small tablets portrait
`--bedl-bp-md`	900px	Tablets · small laptops
`--bedl-bp-lg`	1280px	Laptops · desktops
`--bedl-bp-xl`	1600px	Large desktops
`--bedl-bp-2xl`	1920px	Ultrawide · institutional trading environments

§4.5 Density

Two density modes:

Institutional (default) — generous spacing, editorial pace, public-facing surfaces (Gateway, Nexus)
Operational — compact spacing for data-dense workflows (CMOS trading surfaces, HSOS command centres). Reduces --bedl-space-* scale by ~30% via a density multiplier applied at the plane level.

§5 · Motion Language

§5.1 Four principles (from BGXS v1.0 · elevated to BEDL canon)

Calm — motion never demands attention it hasn't earned
Intentional — every animation has a functional purpose (state change, spatial continuity, feedback)
Contextual — motion adapts to what the user is doing, not what the designer wants to show off
Informative — motion communicates hierarchy, causality, or system state

Motion is never decorative.

§5.2 Duration tokens

Token	Value	Use
`--bedl-motion-instant`	0ms	State changes that should feel immediate (checkbox toggle)
`--bedl-motion-fast`	120ms	Micro-interactions · hover · focus
`--bedl-motion-standard`	240ms	Default UI transitions · panel reveal · tab switch
`--bedl-motion-slow`	400ms	Section transitions · modal enter/exit
`--bedl-motion-deliberate`	640ms	Editorial reveals · large surface transitions
`--bedl-motion-cinematic`	1200ms+	Reserved for Gateway arrival and hero moments (BGXS-licensed)

§5.3 Easing curves

Token	Curve	Use
`--bedl-ease-standard`	`cubic-bezier(0.4, 0, 0.2, 1)`	Default · most UI
`--bedl-ease-emphasized`	`cubic-bezier(0.2, 0, 0, 1)`	Elements entering · gaining focus
`--bedl-ease-exit`	`cubic-bezier(0.4, 0, 1, 1)`	Elements leaving
`--bedl-ease-institutional`	`cubic-bezier(0.65, 0, 0.35, 1)`	Editorial reveals · deliberate reveals

No bounce, no elastic, no overshoot. BEDL rejects playful easing curves as inappropriate for the estate's institutional posture.

§5.4 Choreography rules

One animated property change per element per moment. Do not simultaneously animate scale, position, and opacity of the same element unless choreographed as a single cinematic reveal.
Stagger group animations at 40–80ms intervals — enough to read hierarchy, fast enough to feel synchronized.
Enter animations use --bedl-ease-emphasized. Exit animations use --bedl-ease-exit.
Layout shifts on scroll are forbidden. Reveal via opacity and small translate only.

§5.5 Reduced-motion posture

prefers-reduced-motion: reduce must disable:

All --bedl-motion-cinematic sequences (replace with instant reveal)
All parallax
All auto-playing background motion
All decorative animation

prefers-reduced-motion: reduce preserves:

Focus indicators
State-change feedback under 240ms
Functional transitions that convey causality

§6 · Iconography

§6.1 Style

Line weight: 1.5px stroke at 24px canvas · scaled proportionally
Corner radius: 2px (subtle · engineered, not friendly)
Fill: Line-only default · solid variants for active/selected state · duotone reserved for hero moments only
Grid: 24px × 24px canvas · 20px live area · 2px padding

§6.2 Sizing

Token	Size	Use
`--bedl-icon-xs`	12px	Inline with caption text
`--bedl-icon-sm`	16px	Inline with body text · dense UI
`--bedl-icon-md`	20px	Default UI · buttons · nav
`--bedl-icon-lg`	24px	Headings · primary navigation
`--bedl-icon-xl`	32px	Feature callouts
`--bedl-icon-hero`	48px+	Empty states · educational moments

§6.3 Library posture (Q-BEDL-05 pending)

Two options for sponsor decision:

A · Open-source base + bespoke exceptions. Adopt Phosphor Icons or Lucide as base library (both permissively licensed, both have institutional-appropriate line quality); commission bespoke icons for plane emblems, TREICHTEC ledger primitives, and Gateway hero moments.
B · Fully bespoke. Commission a complete institutional icon library from a design studio. ~200 icons, 6–10 week commission, five-figure budget.

BEDL v0.1 recommendation: A. Institutional counterparties will not distinguish Phosphor from a bespoke library at typical UI scales. Reserve bespoke budget for the swan asset and plane emblems where it matters.

§6.4 Prohibitions

No emoji in institutional UI
No 3D isometric icons
No coloured icons (except plane emblems and semantic status icons where colour IS the meaning)
No hand-drawn or sketch aesthetics

§7 · Accessibility Contract

§7.1 Baseline

WCAG 2.2 AA across every BEDL surface. Non-negotiable. Not aspirational.

Rationale: institutional counterparties include governments, DFIs, universities, and central banks. Many operate under legal accessibility mandates (EN 301 549, Section 508, EAA). Non-compliance would be a procurement blocker before it is a moral failure.

§7.2 Contract terms

Every component in the BEDL taxonomy (§8) must satisfy:

Contrast — text meets 4.5:1 (body) / 3:1 (large text ≥18px or ≥14px bold) against its background
Keyboard — every interactive element is reachable, operable, and visible via keyboard alone; focus order is logical
Focus indicator — 2px focus ring using --bedl-semantic-focus, offset 2px from element edge, never disabled
Screen reader — semantic HTML first; ARIA only where semantics are insufficient; every interactive element has an accessible name
Motion — respects prefers-reduced-motion (§5.5)
Colour independence — no information conveyed by colour alone; every colour signal has a text or icon companion
Touch target — 44 × 44 CSS pixels minimum for touch surfaces
High contrast — respects prefers-contrast: more where the browser supports it
Language — lang attribute set on every page; language changes marked inline

§7.3 Testing posture

Every component ships with automated axe-core tests. Manual keyboard walkthrough required for every new pattern. Screen-reader smoke test (VoiceOver + NVDA) required before any component reaches v1.0 status.

§7.4 Exceptions

The cinematic arrival sequence (BGXS §11.1) has a documented accessibility exception: users with prefers-reduced-motion: reduce skip the arrival and land directly on the identity resolution. This is not a compromise — it is an accessible alternative path.

§8 · Component Taxonomy

BEDL v0.1 defines families, not individual component APIs. Individual components spec-out during library implementation.

Total: ~150 components across 13 families.

§8.1 Navigation family (12)

Global nav · Local nav · Breadcrumbs · Tabs · Pagination · Stepper · Side navigation · Nexus launcher · Command palette · Skip link · Anchor link list · Plane switcher

§8.2 Button family (10)

Primary · Secondary · Tertiary · Destructive · Icon-only · Split button · Toggle · Button group · FAB (operational only) · Link button

§8.3 Card family (14)

Content card · Metric card · KPI card · Portfolio card · Ticker card · Entity card · Institution card · Plane card · Application card · Activity card · Notification card · Insight card · Empty-state card · Action card

§8.4 Table family (10)

Data table · Editable table · Sortable table · Filterable table · Paginated table · Virtualized table · Grouped table · Pivot table · Tree table · Density-adaptive table

§8.5 Chart family (16)

Line · Area · Stacked area · Bar · Grouped bar · Stacked bar · Column · Candlestick · OHLC · Sparkline · Donut · Pie · Radial · Heatmap · Choropleth · Sankey

Charts inherit plane accent for primary series; secondary series draw from a plane-agnostic categorical palette (Q-BEDL-03 pending).

§8.6 Tree family (5)

Estate topology tree · Portfolio hierarchy tree · Organisation tree · File tree · Taxonomy tree

§8.7 Search family (6)

Global search · Contextual search · Faceted search · Search suggestions · Recent searches · Saved searches

§8.8 Form family (18)

Text input · Textarea · Number input · Currency input · Date picker · Date-range picker · Time picker · Select · Multi-select · Combobox · Autocomplete · Checkbox · Radio · Switch · Slider · File upload · Rich text editor · Signature capture

§8.9 Wizard family (5)

Multi-step form · Onboarding wizard · Institutional onboarding wizard · KYC wizard · Application wizard

§8.10 Dashboard family (12)

Grid dashboard · Freeform dashboard · Command centre dashboard · Executive dashboard · Operational dashboard · Portfolio dashboard · Metric grid · Widget · Widget frame · Dashboard header · Dashboard toolbar · Widget library

§8.11 Notification family (10)

Toast · Snackbar · Banner · Inline alert · System banner · Notification panel · Notification item · Notification badge · Announcement · Modal alert

§8.12 Timeline family (8)

Activity timeline · Audit timeline · Release timeline · Governance timeline · Vertical timeline · Horizontal timeline · Gantt · Roadmap

§8.13 AI-interaction family (16)

Prompt input · Chat surface · Chat message · Chat citation · Tool-invocation card · Thinking indicator · Suggestion chip · Draft editor · Confidence bar · Provenance chip · Human-review request · Model-selection surface · Session log · Ephemeral action · Feedback thumbs · Escalate-to-human

AI-interaction components carry mandatory provenance affordances: every AI output surface shows model identity, confidence signal where meaningful, and provenance path back to source data.

§8.14 Family expansion posture

The taxonomy is designed to expand. New components enter their appropriate family through a governance PR that includes: purpose, accessibility contract, motion behaviour, token consumption, plane-accent variants. Components are not scattered outside families.

§9 · Plane-accent System

§9.1 Extension rules

Each of the five planes extends BEDL — never breaks it. Plane extensions may:

Set the plane's accent as the primary colour token in that plane's scope
Adjust the density multiplier (§4.5) for operational surfaces
Add plane-specific components in their own package under packages/design-system/planes/<plane>/
Ship plane-specific icons for domain concepts (e.g., PMOS capital-call icon, HSOS reserve-tier icon)

Plane extensions may not:

Override BEDL primitives (spacing, radii, motion durations, type scale)
Change accessibility contract terms
Introduce new global tokens
Redefine plane accents of other planes

§9.2 Worked example · HSOS Deep Sapphire

Amendment pointer: superseded by ADR-012 (2026-07-25). Current worked example is BEDL v0.2 §9.2 (HSOS Governance Gold). Original v0.1 worked example preserved below for cross-reference into pre-2026-07-25 artifacts.

HSOS is the mature plane and gets the fully worked extension example. Other four planes will fill in during their respective Wave-1 implementations.

--bedl-plane-accent-base:    #1E4FB8  /* Deep Sapphire base */
--bedl-plane-accent-deep:    #0F2E7A  /* Deep Sapphire deep */
--bedl-plane-accent-bright:  #4A7FE8  /* Deep Sapphire bright */
--bedl-plane-density:        0.85     /* operational density */
--bedl-plane-chip-bg:        rgba(30, 79, 184, 0.12)
--bedl-plane-chip-fg:        #4A7FE8
--bedl-plane-focus-ring:     #4A7FE8
--bedl-plane-chart-primary:  #1E4FB8
--bedl-plane-cta-bg:         #1E4FB8
--bedl-plane-cta-hover:      #2D5FCC
--bedl-plane-cta-active:     #0F2E7A

Deep Sapphire pairs with the neutral scale unchanged. Sovereign command centres use Deep Sapphire as primary chart series, Emerald and Platinum as secondary series where multi-plane views are permitted.

§9.3 Cross-plane surfaces

Where a surface aggregates multiple planes (e.g., Gateway estate topology, executive command centre), no single plane accent dominates. The surface uses institutional neutrals and renders each plane in its own accent only for that plane's discrete elements.

§10 · Governance

§10.1 Versioning

BEDL versions independently. Semver-adjacent:

Major (v1 → v2) — breaking token removal or rename
Minor (v1.0 → v1.1) — additive tokens, new families, non-breaking clarifications
Patch (v1.0.0 → v1.0.1) — documentation-only

§10.2 Change discipline

Every BEDL change lands via governance PR against BlackswanPartnership/blackswan-gateway/docs/bedl/ with:

ADR reference explaining why
Impact assessment naming affected planes
Sponsor sign-off in PR body

Breaking changes require an ADR at Estate Canon level.

§10.3 Prohibitions (Canon §9 inheritance)

All 16 Estate Canon §9 prohibitions apply to BEDL surfaces and BEDL-produced components. Notable inheritances:

Never phrase gate/pack state as "approved", "certified", "licensed", or "authorized" (except inside prohibition-context comments)
Never use "landed" — use "SHIPPED"
Forbidden phrases outside chain-only scope: landed, cryptographic, blockchain, chain of custody, hash chain
Curly quotes U+201C/U+201D on taglines and Copilot questions
Middle-dot · (U+00B7) in ticket ids
All-planes posture visible in status surfaces: STANDBY · IN-MEMORY ONLY · HOLD · NO-GO
Sponsor line preserved verbatim in About/Executive Centre: "Mamadou Ly, Founder, Managing Partner & CEO"
TREICHTEC spelling — no h before final c

§10.4 Deprecation

No token is removed without a v0.x deprecation cycle. Removed tokens are marked deprecated for one minor version before removal.

§10.5 Relationship to BGXS

Where BGXS and BEDL appear to conflict, BGXS wins for Gateway-specific surfaces; BEDL wins for cross-estate primitives. When in doubt, file an ADR.

§11 · Open Questions

Tracked as Q-BEDL-NN. All flagged for ARS-001 or sponsor decision.

Id	Question	Owner	Blocking
Q-BEDL-01	Typefaces for Display / Text / Mono roles	Sponsor	Component library implementation · not v0.2 draft
Q-BEDL-02	Plane accent hex values — accept v0.1 proposals or override	Sponsor · ARS-001	v1.0 lock
Q-BEDL-03	Categorical palette for chart secondary series	Design lead · ARS-001	Chart component v1.0
Q-BEDL-04	Density-multiplier value per plane (0.85 proposed for HSOS)	Plane leads	Operational surface implementation
Q-BEDL-05	Icon library posture — open-source base + bespoke exceptions vs. fully bespoke	Sponsor	Icon rollout · not v0.2 draft
Q-BEDL-06	Full light-mode token table	Design lead	v0.2
Q-BEDL-07	Cinematic-arrival motion licence — where does BGXS §11 authority end and BEDL constraint begin	ARS-001	Gateway arrival implementation
Q-BEDL-08	Sonic identity — subtle atmospheric sound on arrival (BGXS mentions but doesn't spec) — inside or outside BEDL	ARS-001	Arrival implementation
Q-BEDL-09	Third-party embed surfaces — does BEDL constrain, e.g., Mapbox styling	Design lead	Geographic surfaces implementation
Q-BEDL-10	AI-interaction provenance affordances — minimum viable spec	Design lead + AIOS lead	AI surface v1.0

§12 · Change log

Version	Date	Author	Summary
v0.1	2026-07-12	Mamadou Ly (drafted via Perplexity Computer)	Initial draft. ARS-001 reviewable. Not sponsor-locked.

§13 · Sign-off

BEDL v0.1 is a draft. It is not sponsor-locked, not canonical, and not authoritative until:

ARS-001 reviews it against the four perspectives (Strategic · Architectural · Operational · Commercial)
Q-BEDL-01, Q-BEDL-02, Q-BEDL-05 are decided
v0.2 draft incorporates decisions
Sponsor signs off on v1.0 via governance PR merge

Until then: STANDBY · IN-MEMORY ONLY · HOLD · NO-GO.

Mamadou Ly, Founder, Managing Partner & CEO