profullstack · ralyodio · Sep 8, 2026 · Sep 8, 2026
diff --git a/.gitignore b/.gitignore
@@ -32,3 +32,11 @@ dist/hacking/
 # faces under public/cards/security/ are the committed record.
 #   node scripts/security-pros.mjs all
 dist/security/
+
+# Reference photographs the portraits are painted from. NOT committed: several are
+# ordinary all-rights-reserved bio photos used with permission as references, and
+# redistributing them in the repo is a different act from painting from them.
+# data/security-references.json records where each came from, and
+#   node scripts/security-refs.mjs fetch
+# re-downloads the lot.
+assets/references/
diff --git a/README.md b/README.md
@@ -87,8 +87,30 @@ pnpm security all 1 5 12       # ...only these card numbers
 pnpm security render           # re-render faces from the template, no API calls
 ```
 
-Same stages and the same resumability as Series Two, with one deliberate
-difference: **`all` does not run `enhance`.** On Series Two that image-to-image
+Portraits are painted **from a real photograph of the person**:
+
+```bash
+node scripts/security-refs.mjs resolve   # find + verify a reference photo per card
+node scripts/security-refs.mjs fetch     # download them (gitignored)
+node scripts/security-refs.mjs report    # who still has no face
+```
+
+The first art pass generated faces from text prompts alone and produced an
+invented stranger for every name. That art was withdrawn. Generation is now
+image-to-image off `assets/references/security-pros/`, and **a card with no
+verified reference photo gets no face** — the front renders a plate saying so.
+40 of 50 currently have one; `data/security-references.json` records the source,
+photographer and licence for each, and the card page prints the credit.
+
+Identity is verified, not assumed. A name search returns humans, not the right
+human: "Michael Howard" resolves to the British politician, "Robert M. Lee" to a
+Confederate general, "Mark Dowd" to a Liverpool councillor. The resolver requires
+a surname match, rejects pre-1950 photographs, requires a Commons filename to
+*open* with the person's full name, and carries an explicit reject list with
+reasons. Everything it accepts was still checked by eye.
+
+The same stages and resumability as Series Two, with one deliberate difference:
+**`all` does not run `enhance`.** On Series Two that image-to-image
 finish pass rewrote text on the card faces despite the prompt forbidding it — it
 fabricated quotes attributed to living people, invented stat panels that were not
 on the card, and misspelled a name. Nothing in the pipeline catches that, because

diff --git a/assets/portraits/security-pros/card_001.png b/assets/portraits/security-pros/card_001.png
diff --git a/assets/portraits/security-pros/card_002.png b/assets/portraits/security-pros/card_002.png
diff --git a/assets/portraits/security-pros/card_003.png b/assets/portraits/security-pros/card_003.png
diff --git a/assets/portraits/security-pros/card_004.png b/assets/portraits/security-pros/card_004.png
diff --git a/assets/portraits/security-pros/card_005.png b/assets/portraits/security-pros/card_005.png
diff --git a/assets/portraits/security-pros/card_006.png b/assets/portraits/security-pros/card_006.png
diff --git a/assets/portraits/security-pros/card_007.png b/assets/portraits/security-pros/card_007.png
diff --git a/assets/portraits/security-pros/card_008.png b/assets/portraits/security-pros/card_008.png
diff --git a/assets/portraits/security-pros/card_009.png b/assets/portraits/security-pros/card_009.png
diff --git a/assets/portraits/security-pros/card_010.png b/assets/portraits/security-pros/card_010.png
diff --git a/assets/portraits/security-pros/card_011.png b/assets/portraits/security-pros/card_011.png
diff --git a/assets/portraits/security-pros/card_012.png b/assets/portraits/security-pros/card_012.png
diff --git a/assets/portraits/security-pros/card_013.png b/assets/portraits/security-pros/card_013.png
diff --git a/assets/portraits/security-pros/card_014.png b/assets/portraits/security-pros/card_014.png
diff --git a/assets/portraits/security-pros/card_015.png b/assets/portraits/security-pros/card_015.png
diff --git a/assets/portraits/security-pros/card_016.png b/assets/portraits/security-pros/card_016.png
diff --git a/assets/portraits/security-pros/card_017.png b/assets/portraits/security-pros/card_017.png
diff --git a/assets/portraits/security-pros/card_018.png b/assets/portraits/security-pros/card_018.png
diff --git a/assets/portraits/security-pros/card_019.png b/assets/portraits/security-pros/card_019.png
diff --git a/assets/portraits/security-pros/card_020.png b/assets/portraits/security-pros/card_020.png
diff --git a/assets/portraits/security-pros/card_021.png b/assets/portraits/security-pros/card_021.png
diff --git a/assets/portraits/security-pros/card_022.png b/assets/portraits/security-pros/card_022.png
diff --git a/assets/portraits/security-pros/card_023.png b/assets/portraits/security-pros/card_023.png
diff --git a/assets/portraits/security-pros/card_024.png b/assets/portraits/security-pros/card_024.png
diff --git a/assets/portraits/security-pros/card_025.png b/assets/portraits/security-pros/card_025.png
diff --git a/assets/portraits/security-pros/card_026.png b/assets/portraits/security-pros/card_026.png
diff --git a/assets/portraits/security-pros/card_027.png b/assets/portraits/security-pros/card_027.png
diff --git a/assets/portraits/security-pros/card_028.png b/assets/portraits/security-pros/card_028.png
diff --git a/assets/portraits/security-pros/card_029.png b/assets/portraits/security-pros/card_029.png
diff --git a/assets/portraits/security-pros/card_030.png b/assets/portraits/security-pros/card_030.png
diff --git a/assets/portraits/security-pros/card_031.png b/assets/portraits/security-pros/card_031.png
diff --git a/assets/portraits/security-pros/card_032.png b/assets/portraits/security-pros/card_032.png
diff --git a/assets/portraits/security-pros/card_033.png b/assets/portraits/security-pros/card_033.png
diff --git a/assets/portraits/security-pros/card_034.png b/assets/portraits/security-pros/card_034.png
diff --git a/assets/portraits/security-pros/card_035.png b/assets/portraits/security-pros/card_035.png
diff --git a/assets/portraits/security-pros/card_036.png b/assets/portraits/security-pros/card_036.png
diff --git a/assets/portraits/security-pros/card_037.png b/assets/portraits/security-pros/card_037.png
diff --git a/assets/portraits/security-pros/card_038.png b/assets/portraits/security-pros/card_038.png
diff --git a/assets/portraits/security-pros/card_039.png b/assets/portraits/security-pros/card_039.png
diff --git a/assets/portraits/security-pros/card_040.png b/assets/portraits/security-pros/card_040.png
diff --git a/assets/portraits/security-pros/card_041.png b/assets/portraits/security-pros/card_041.png
diff --git a/assets/portraits/security-pros/card_042.png b/assets/portraits/security-pros/card_042.png
diff --git a/assets/portraits/security-pros/card_043.png b/assets/portraits/security-pros/card_043.png
diff --git a/assets/portraits/security-pros/card_044.png b/assets/portraits/security-pros/card_044.png
diff --git a/assets/portraits/security-pros/card_045.png b/assets/portraits/security-pros/card_045.png
diff --git a/assets/portraits/security-pros/card_046.png b/assets/portraits/security-pros/card_046.png
diff --git a/assets/portraits/security-pros/card_047.png b/assets/portraits/security-pros/card_047.png
diff --git a/assets/portraits/security-pros/card_048.png b/assets/portraits/security-pros/card_048.png
diff --git a/assets/portraits/security-pros/card_049.png b/assets/portraits/security-pros/card_049.png
diff --git a/assets/portraits/security-pros/card_050.png b/assets/portraits/security-pros/card_050.png