Core Principle
"Absence of Alert is not Evidence of Safety." Treat silence as ambiguous by default.
Section 1: The Truth Map (Shadow Zones)
Requirement. The UI shall render Shadow Zones / Gray Zones wherever verification is absent.
Prohibited Symbol Rule. No "Green Ticks" shall be displayed in a Shadow Zone.
Section 2: Degraded Mode Signaling
NOMINAL (Green): Data current, system verified.
DEGRADED (Amber): Partial trust (Low battery, Stale data >15mins).
OFFLINE (Strikethrough): No current verification path.
Staleness Rule: Data older than 15 minutes must be explicitly labeled as 'STALE'.
Section 3: The Ghost Protocol
Nodes that stop reporting shall not be hidden. They must be shown as Ghosted (faded, desaturated) to indicate they are visible but untrustworthy.
Compliance Test: The interface passes NFS-01 only if a user can answer at a glance: "Is this safe because verified, or is it simply unknown?"