From 869cc4f73e5ef4f1336cd8391621d846262b46da Mon Sep 17 00:00:00 2001
From: Makisuo <minetoaster12@gmail.com>
Date: Tue, 10 Nov 2026 12:55:17 +0100
Subject: [PATCH] fix(security): keep the estimated severity inside the open
 leads column
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The overview's open leads list gives the badge a fixed w-16 column, and
"High · unverified" overflowed it under the title. The column now shows
only the estimated severity (dashed outline), and the row ends with the
same Unverified chip the findings list uses.
---
 apps/web/src/page/security/kit/findings-view.ts  |  4 ++++
 apps/web/src/page/security/tabs/view-overview.ts | 12 +++++-------
 2 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/apps/web/src/page/security/kit/findings-view.ts b/apps/web/src/page/security/kit/findings-view.ts
index cbb3377db7..f3000a4fa6 100644
--- a/apps/web/src/page/security/kit/findings-view.ts
+++ b/apps/web/src/page/security/kit/findings-view.ts
@@ -87,6 +87,10 @@ export const findingBadge = <M>(h: HtmlBuilder<M>, finding: SecurityAuditFinding
 			])
 		: bucketBadge(h, bucketOf(finding))
 
+/** A compact estimated severity for narrow columns; pair it with `unverifiedChip`. */
+export const estimatedSeverityBadge = <M>(h: HtmlBuilder<M>, finding: SecurityAuditFinding): Html =>
+	badge(h, { variant: "outline", className: "border-dashed" }, [BUCKET_LABEL[bucketOf(finding)]])
+
 /** A scored lead's mark: its severity, quieter and labelled, until something proves it. */
 export const unverifiedChip = <M>(h: HtmlBuilder<M>): Html =>
 	h.span(
diff --git a/apps/web/src/page/security/tabs/view-overview.ts b/apps/web/src/page/security/tabs/view-overview.ts
index 5ba3f28887..222071bf3a 100644
--- a/apps/web/src/page/security/tabs/view-overview.ts
+++ b/apps/web/src/page/security/tabs/view-overview.ts
@@ -69,7 +69,7 @@ import {
 } from "./derive"
 import { canRunAudits, Message, type Model } from "./model"
 import { bucketOf, countByBucket, isUnverified } from "../kit/findings"
-import { findingBadge } from "../kit/findings-view"
+import { estimatedSeverityBadge, unverifiedChip } from "../kit/findings-view"
 import { auditSteps, emptyOnRamp } from "./view-empty"
 import { leadsLine, stopSummaryOf } from "../kit/outcome"
 import { emptyMessage } from "@maple/views/ui/empty"
@@ -281,10 +281,7 @@ const leadCounts = (h: H, findings: ReadonlyArray<SecurityAuditFinding>): Html =
 						h.Class(cn(hstackClass({ gap: "1.5", inline: true }), ROW_LINK_LIFT)),
 						h.Title(countTitle(counts[severity], severity, unverified)),
 					],
-					[
-						severityDot(h, severity),
-						String(counts[severity]),
-					],
+					[severityDot(h, severity), String(counts[severity])],
 				),
 			),
 			...(toValidate === 0
@@ -510,7 +507,7 @@ const findingItem = (h: H, finding: SecurityAuditFinding, repository: string): H
 				[h.Class("w-16 shrink-0")],
 				[
 					isUnverified(finding)
-						? findingBadge(h, finding)
+						? estimatedSeverityBadge(h, finding)
 						: finding.verdict === "needs_validation"
 							? h.span([h.Class("text-xs text-muted-foreground normal-case")], ["To validate"])
 							: finding.overallSeverity === null
@@ -518,7 +515,7 @@ const findingItem = (h: H, finding: SecurityAuditFinding, repository: string): H
 								: securitySeverityBadge(h, finding.overallSeverity),
 				],
 			),
-			vstack(h, { shrink: true, as: "span" }, [
+			vstack(h, { shrink: true, grow: true, as: "span" }, [
 				typography(h, { size: "sm", truncate: true }, [finding.record.title]),
 				typography(h, { size: "xs", tone: "muted", truncate: true }, [
 					Arr.join(
@@ -527,6 +524,7 @@ const findingItem = (h: H, finding: SecurityAuditFinding, repository: string): H
 					),
 				]),
 			]),
+			...(isUnverified(finding) ? [h.span([h.Class("shrink-0")], [unverifiedChip(h)])] : []),
 		],
 		`${finding.targetId}/${finding.fingerprint}`,
 	)